Posts of last few hours
Please support the site operations by clicking ads.
原域名已变更且将在2024年彻底废弃，请访问 https://govuln.com/news/ 查看新的RSS订阅
https://govuln.com/news/url/x8dB
Name: StealthCup 2026 (an Stealth-Cup event.)
Date: Oct. 31, 2026, 1 p.m. — 31 Oct. 2026, 21:00 UTC [add to calendar]
Format: Hack quest
On-site
Location: On-site, Quebec City, Canada (Hackfest, Quebec City Convention Centre). Remote participation only on request.
Offical URL: https://stealth.ait.ac.at/
Rating weight: 0.00
Event organizers: 0x01DA
Date: Oct. 31, 2026, 1 p.m. — 31 Oct. 2026, 21:00 UTC [add to calendar]
Format: Hack quest
On-site
Location: On-site, Quebec City, Canada (Hackfest, Quebec City Convention Centre). Remote participation only on request.
Offical URL: https://stealth.ait.ac.at/
Rating weight: 0.00
Event organizers: 0x01DA
https://ctftime.org/event/3482
Cloud application hosting platform Northflank is warning customers to rotate all credentials and secrets stored on its platform after a security breach led to unauthorized use of customers' AI API keys. [...]
https://www.bleepingcomputer.com/news/security/northflank-security-breach-leads-to-abuse-of-customers-ai-api-keys/
Неудобная правда о популярных сервисах анонимизации трафика.
https://www.securitylab.ru/analytics/560832.php
Выручка Alphabet выросла на 25%, но Уолл-стрит испугалась масштабов будущих вложений.
https://www.securitylab.ru/news/579537.php
https://bestwing.me/zeromdash-agent-native-vulnerability-mining.html
Учёные нашли идеальный размер светодиода для передачи данных.
https://www.securitylab.ru/news/579515.php
13 возможных мест на Марсе, откуда прилетел этот камень. Учёные пока не знают, какое из них настоящее.
https://www.securitylab.ru/news/579442.php
A security researcher has released a proof-of-concept exploit for a recently patched Android vulnerability, dubbed "SMS of Death" and tracked as CVE-2026-58882, that lets attackers remotely disrupt cellular service or crash phones by sending a specially crafted text message. [...]
https://www.bleepingcomputer.com/news/security/new-android-sms-of-death-exploit-can-remotely-crash-unpatched-phones/
以前偷密码类恶意软件，干的是搬运工的活：把浏览器里存的账号、信用卡、cookie一股脑打包发走，剩下的让买家自
https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451189628&idx=1&sn=b49456e51d703ba1b3c56860d9a0fb87
Подписанные библиотеки и многоступенчатое шифрование помогли спрятать опасный код от защиты.
https://www.securitylab.ru/news/579466.php
Компания открыла доступ к весам модели, одновременно усиливая ограничения на потенциально опасные действия.
https://www.securitylab.ru/news/579490.php
Polymarket confirms $2.7 million stolen through the compromised third-party script and pledges $3.9 million in refunds, including compensation for pause losses.
https://hackread.com/polymarket-users-lose-2-7m-third-party-script-hack/
Reddit announced in a post by co-founder Steve Huffman that the site will gradually become a "logged-in service," offering limited access to visitors without accounts. [...]
https://www.bleepingcomputer.com/news/security/reddit-to-lock-content-behind-logins-to-fight-scrapers/
Разработчики обнаружили неприятную особенность патча GitLab только после нескольких дней атак.
https://www.securitylab.ru/news/579488.php
AI-generated vulnerability reports are overwhelming some bug bounty programs, making it harder for aspiring security researchers to know where to start. TryHackMe explains how beginners can build practical cybersecurity skills, use AI responsibly, and produce reproducible findings that stand up to scrutiny. [...]
https://www.bleepingcomputer.com/news/security/from-beginner-to-bug-hunter-learning-cybersecurity-in-the-ai-era/
思科总裁兼首席产品官 Jeetu Patel 在接受《财富》杂志采访时称，该公司给予一名 27 岁工程师无限 tokens 去重写遗留代码（legacy code）。27 岁的 Padmanabhan Krishnamurthy 在 2023 年联合创办了实时翻译初创公司 EzDubs，2025 年该公司被思科收购，他随后加入了思科。两人曾在旧金山办公室有过谈话，Krishnamurthy 许诺只需一个两人团队就能重写思科的遗留代码。他给自己争取了四周时间来证明这一想法，最终目标是在 24 个月内重构思科 98% 的遗留代码。
https://www.solidot.org/story?sid=85764
Одна из самых популярных подделок вообще не содержала нейросети и работала исключительно на злоумышленника.
https://www.securitylab.ru/news/579486.php
一个 xn-- 前缀加一个尾 -，黑名单里的域名就能原样通过校验；ToUnicode("xn--example-.com") 解码出 example.com 却不带错误。
https://xz.aliyun.com/news/92916
【升级通知】2026 年 11 月 1 日 00:00 至 06:00 先知社区新版本迭代升级，期间社区暂停访问。
https://xz.aliyun.com/news/93072
Latest Blog Posts
- 2 days 5 hours ago
- 2 days 5 hours ago
- 2 days 5 hours ago
- 2 days 5 hours ago
- 2 days 5 hours ago
- 2 days 5 hours ago
- 2 days 5 hours ago
- 2 days 5 hours ago
- 2 days 5 hours ago
- 2 days 5 hours ago