Posts of last few hours

Вебинар “Как готовить SOC к сложным атакам, которые случаются редко. Реальный опыт клиентской команды”
Состоится 22 сентября в 11:00
https://www.securitylab.ru/news/577513.php
【安全圈】密钥竟写在源码里！开源 PBX 曝 9.8 分高危：伪造 Token 一键拿 Shell
关键词漏洞🚨 全球企业通信领域广泛采用的开源电话程控交换系统 Issabel 框架曝出严重代码漏洞（CVE-
https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652078986&idx=3&sn=5e90e432f468cc918fbb15404cc06926
【安全圈】零信任大脑沦陷！思科 ISE 曝 10 分满分 0-day：免密直接拿 Root
https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652078986&idx=2&sn=77c9de6c085da5bb32eeacf45a81ce12
【安全圈】截屏里的密码全露了！知名图床 Gyazo 被端：2362 万账号遭全量拖库
关键词密码泄露🚨 全球开发者与数字工作者广泛使用的知名云截图与图床服务 Gyazo（母公司 Helpfeel
https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652078986&idx=1&sn=d56ba07ad446ae56b5deaf5f352e9ba3
CISO's Expert Guide to Agentic Pentesting for Websites
Attackers now weaponize new vulnerabilities in about five days (Mandiant, part of Google Cloud). The median organization takes 43 days to patch one (Verizon DBIR 2026). A new free guide explains how autonomous AI agents are closing that gap, and what security leaders must demand before pointing one at production. TL;DR Exploitation is now the front door. It starts 31% of breaches (Verizon DBIR
https://thehackernews.com/2026/09/cisos-expert-guide-to-agentic.html
Kubernetes Attack Lets Hackers Steal SPIFFE Workload Identities and Impersonate Applications

A post-exploitation technique that lets attackers with root-level access to a Kubernetes node steal workload identities issued through SPIFFE/SPIRE and impersonate legitimate applications running on the same host. The technique undermines the node-trust assumption behind cloud-native machine identity systems, potentially enabling attackers to access services protected by mutual TLS and identity-based authorization. Palo Alto Networks […]

The post Kubernetes Attack Lets Hackers Steal SPIFFE Workload Identities and Impersonate Applications appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

https://gbhackers.com/kubernetes-identity-attack/
12 Best DSPM Tools Compared (2026): Features & Pricing

Quick Answer: DSPM has the scariest pricing curve in security bills track data volume, and data only grows. Microsoft Purview publishes pay-as-you-go rates (the anchor); Cyera leads the independents; BigID and Varonis bring privacy and on-prem lineage; CrowdStrike (Flow) and Tenable (Eureka-lineage) mark the consolidation wave. Negotiate volume caps before your data does the negotiating. […]

The post 12 Best DSPM Tools Compared (2026): Features & Pricing appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

https://gbhackers.com/best-dspm-compared/
今年上线的微短剧逾九成是 AI 剧
陈奕龙有 20 年出演影视剧的经验，由于工作机会日益稀少，他在 8 月与一家 AI 工作室签约，授权对方使用其面部肖像。陈奕龙的工作就是坐在摄像机前，根据导演的指令做出不同面部表情——如无表情凝视、怒视或惊讶。这家工作室将利用 AI 技术，以陈奕龙的面部图像为基础生成虚拟数字人，让其主演一部由 AI 生成的电影。现年 38 岁陈奕龙说道，“如果你无法战胜它，那就加入它。”雇佣陈奕龙的是总部位于深圳的 Feixiang Universe 工作室，创始人 Sun Wei 表示，之所以为一部唐朝背景的 AI 电影项目获取真人肖像授权主要是担心无意中窃取他人肖像。她指出，受 AI 训练数据偏差的影响，AI 生成的演员通常面部特征相似，长相千篇一律。这促使她和其他中国 AI 电影制作人去搜寻和购买新面孔，将演员的真实表情数字化。根据广电总局的数据，今年首八个月，中国上线微短剧共 43 万部，是去年全年的 13 倍，其中 AI 剧占比超过九成。Sun Wei 的团队则计划以 50 万美元的预算制作一部 90 分钟的 AI 长片。

https://www.solidot.org/story?sid=85408
Хакеры физически вскрыли камеру Flock и достали ключ шифрования
В памяти остались тысячи записей и неожиданно много следов.
https://www.securitylab.ru/news/577503.php
日志服务 TLS AgentLoop：让多模态调用清晰可见
https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247522649&idx=1&sn=bf5be5b2b912342f3263ee49c0c5728c
国家信息安全漏洞共享平台认证！360揽获三项漏洞治理核心殊荣
再获认可！360斩获国家信息安全漏洞共享平台三大殊荣
https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247586940&idx=1&sn=f12393e9a73c08bbc753b5e7eb087a16
Hackers Exploit Critical Cisco ISE Flaw to Bypass Authentication and Gain Root Access

Cisco has issued an urgent security advisory regarding a critical authentication-bypass vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC). This vulnerability, tracked as CVE-2026-76460, has a maximum CVSS score of 10.0 and could allow unauthenticated remote attackers to gain unauthorized access to vulnerable devices. Cisco advisory cisco-sa-ISE-ABP-VNSW7Tn5 details the […]

The post Hackers Exploit Critical Cisco ISE Flaw to Bypass Authentication and Gain Root Access appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

https://gbhackers.com/hackers-exploit-critical-cisco-ise-flaw/
可试看 | 当漏洞挖掘遇上 AI Agent：主流企业防火墙 0day 挖掘实战
自研LangGraph漏洞挖掘工作流
https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458620497&idx=3&sn=f6fdd9e6c8bc6c1fd4b8013cb7eea23f
Win11九月高危补丁翻车！域信任断裂，合法账号无法登录终端
Win11补丁致域终端出现登录异常
https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458620497&idx=2&sn=b16604558e0b1255693ad7a64e837dd8
ret2shellcode 浅析
看雪论坛作者ID：王嘟嘟
https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458620497&idx=1&sn=ad5450b7723941e8ae0f280a34e4792b
China-Aligned FamousSparrow Deploys SparroWocky Backdoor Across Latin America
The China-aligned state-sponsored threat actor known as FamousSparrow has been observed deploying a previously unreported backdoor called SparroWocky in attacks targeting multiple countries in Latin America since at least August 2025. "SparroWocky is a modular, C++ backdoor," ESET security researchers Alexandre Côté Cyr and Romain Dumont said in a technical report shared with The Hacker News
https://thehackernews.com/2026/09/china-aligned-famoussparrow-deploys.html
ФБР высадилось на два иностранных судна из-за признаков кибервзлома
Киберрасследование пришлось проводить прямо в Мексиканском заливе.
https://www.securitylab.ru/news/577499.php
AI供应链安全最佳实践速查表
https://mp.weixin.qq.com/s?__biz=MzUyOTkwNTQ5Mg==&mid=2247489496&idx=1&sn=fa418ef78ac51551b4720aa20c058461
America’s cyber strategy overlooks the infrastructure that actually keeps the military moving

Ports, railroads, and utilities keep the military operational. They're all vulnerable to Iranian cyberattacks.

The post America’s cyber strategy overlooks the infrastructure that actually keeps the military moving appeared first on CyberScoop.

https://cyberscoop.com/us-cyber-strategy-iranian-threats-infrastructure-op-ed/
OpenAI Reveals Six Model Incidents Involving Hidden Failures and Unauthorized Uploads
OpenAI on Wednesday disclosed six new instances of "unexpected or concerning model behavior" that took place over the past six months, while sharing a new framework for reporting, tracking, investigating, and disclosing model misalignment in a bid to improve transparency. "As AI systems grow more advanced and more widely deployed, we need to build a broader and better-informed consensus on the
https://thehackernews.com/2026/09/openai-reveals-six-model-incidents.html

Managed ad