Aggregator

The Taxman’s Shadow: How Silver Fox Weaponized Tax Audits to Hijack Networks Across Asia

Penetration Testing Tools - Metepreter.org

3 weeks 2 days ago

The cybercriminal syndicate known as Silver Fox astutely cloaks its bombardments beneath the guise of tax audits, relentlessly

The post The Taxman’s Shadow: How Silver Fox Weaponized Tax Audits to Hijack Networks Across Asia appeared first on Penetration Testing Tools.

ddos

Claude Code Router远程命令执行漏洞

明天的乌云

3 weeks 2 days ago

错误的CORS配置导致任意命令执行

已在v1.0.34版本中修复

https://github.com/musistudio/claude-code-router/security/advisories/GHSA-8hmm-4crw-vm2c

透明人

英国科学家首次在实验室培养出功能完整的食管，并移植到猪体内，成功恢复了其正常吞咽功能。这项成果被视为器官替代工程领域的重要进步，为未来 5 年内启动人类临床试验奠定了坚实基础，有望彻底改变食管闭锁患儿的命运。食管闭锁是一种严重的先天缺陷，患儿出生时食管与胃部未能连接。全球每年约有 180 名新生儿受此困扰。当前标准治疗方案是通过复杂手术进行重建，但医生常需截取患儿肠道或上提胃部来替代食管。这不仅创伤大，还可能导致终生呼吸、消化问题及远期并发症风险。为应对这一难题，英国大奥蒙德街医院与伦敦大学学院研究团队取得了突破。他们开发了一套创新的生物工程工艺：首先以猪食管为“支架”，经过去细胞化处理，剥离其所有原始细胞，仅保留纯净的天然微观结构框架；随后，团队从受体猪身上获取微小肌肉活检样本，提取肌肉前体细胞，在实验室中大量扩增后，将其注入支架内部。整个结构在生物反应器中培养约两个月，其间持续灌注营养液，模拟体内环境，促使细胞定居、增殖，最终形成一段活的、由受体自身细胞构成的新食管。团队将实验室培育的 8 个食管移植到猪体内，所有受体猪在术后关键 30 天均存活。

Ghosts in the Shell: Kali Linux 2026.1 Resurrects the Legendary BackTrack 5 for its 20th Anniversary

Penetration Testing Tools - Metepreter.org

3 weeks 2 days ago

Kali Linux 2026.1 has arrived, bearing not merely a novel array of software packages, but an unexpected, nostalgic

The post Ghosts in the Shell: Kali Linux 2026.1 Resurrects the Legendary BackTrack 5 for its 20th Anniversary appeared first on Penetration Testing Tools.

ddos

TikTok for Business accounts targeted in new phishing campaign

Bleeping Computer.

3 weeks 2 days ago

Threat actors are targeting TikTok for Business accounts in a phishing campaign that prevents security bots from analyzing malicious pages. [...]

Bill Toulas

Second RedLine infostealer operator ends up in US custody

Help Net Security

3 weeks 2 days ago

Hambardzum Minasyan, an Armenian man extradited to the United States, is accused of conspiring with others to develop and operate the RedLine infostealer malware used to steal sensitive data, including login credentials, from victims’ computers. Minasyan is charged with conspiracy to commit access device fraud, conspiracy to violate the Computer Fraud and Abuse Act, and conspiracy to commit money laundering. If convicted, he faces up to 10 years in prison on the access device fraud … More →

The post Second RedLine infostealer operator ends up in US custody appeared first on Help Net Security.

Sinisa Markovic

WhatsApp rolls out more AI features, iOS multi-account support

Bleeping Computer.

3 weeks 2 days ago

WhatsApp is rolling out multiple features designed to make the app easier to use, including AI-powered message replies and photo retouching, support for two accounts on iOS, and chat history transfer between iOS and Android devices. [...]

Sergiu Gatlan

New PXA Stealer Malware Targets Banks, Uses Telegram to Exfiltrate Data

Hack Read

3 weeks 2 days ago

CyberProof researchers have detected a 10% surge in PXA Stealer attacks targeting financial institutions in Q1 2026. Learn…

Deeba Ahmed

Open source был халявой 30 лет, мейнтейнеры голодали — бизнес дал $12,5 млн на всех. Ну наконец-то, спасибо за щедрость

Securitylab.ru

3 weeks 2 days ago

Код бесплатный, труд бесплатный, прибыль триллионная — что-то не сходится.

Inside a Modern Fraud Attack: From Bot Signups to Account Takeovers

Bleeping Computer.

3 weeks 2 days ago

Multi-stage fraud attacks chain bots, proxies, and stolen credentials from signup to takeover. IPQS shows why correlating IP, device, identity, and behavior is critical to stop it. [...]

微软将默认收集 GitHub Copilot 交互数据训练 AI

Solidot

3 weeks 2 days ago

微软旗下的代码托管平台 GitHub 宣布更新 GitHub Copilot 交互数据使用政策。从 4 月 24 日起，除非用户主动选择退出，否则微软/GitHub 将使用 GitHub Copilot 交互数据训练 AI 模型。微软默认启用了数据收集，此举被认为违反了欧盟的通用数据保护法规 GDPR，GDPR 强制要求默认选择退出。