Posts of last few hours

AI供应链安全最佳实践速查表
https://mp.weixin.qq.com/s?__biz=MzUyOTkwNTQ5Mg==&mid=2247489496&idx=1&sn=fa418ef78ac51551b4720aa20c058461
America’s cyber strategy overlooks the infrastructure that actually keeps the military moving

Ports, railroads, and utilities keep the military operational. They're all vulnerable to Iranian cyberattacks.

The post America’s cyber strategy overlooks the infrastructure that actually keeps the military moving appeared first on CyberScoop.

https://cyberscoop.com/us-cyber-strategy-iranian-threats-infrastructure-op-ed/
OpenAI Reveals Six Model Incidents Involving Hidden Failures and Unauthorized Uploads
OpenAI on Wednesday disclosed six new instances of "unexpected or concerning model behavior" that took place over the past six months, while sharing a new framework for reporting, tracking, investigating, and disclosing model misalignment in a bid to improve transparency. "As AI systems grow more advanced and more widely deployed, we need to build a broader and better-informed consensus on the
https://thehackernews.com/2026/09/openai-reveals-six-model-incidents.html
地球正变得不那么扁平
地球并非是完美的球形，自转以及围绕太阳公转使其赤道部分隆起，两极部分扁平。根据一项新研究，可能是由于极地地区的冰雪融化，地球两极在隆起，与此同时赤道地区则在加速下沉，地球的整体形状变得不那么扁平。研究人员利用了 GNSS 导航网络地面站在 1997-2015 年间的测量数据，绘制了地球固体部分的升降变化。结果显示，1997-2000 年间地球两极以每年约 0.5 毫米的速度隆起。到 2015 年，隆起速度已增至每年 1 毫米。

https://www.solidot.org/story?sid=85407
前网络司令部3号人物谈谈NSA重组
https://mp.weixin.qq.com/s?__biz=MzU0MzgyMzM2Nw==&mid=2247487176&idx=1&sn=400b32527d8cf0adba0cb4764cdeb7b8
APT36 Targets Indian Government and Defense Organizations With New Rust Malware Arsenal

Pakistan-nexus threat actor APT36 has launched a renewed espionage campaign targeting government and defense organizations in India and Afghanistan. Deploying a new Rust-based malware suite designed for covert command-and-control, data theft, and propagation into isolated networks. Tracked by Zscaler ThreatLabz as Operation RapidRust, the activity was observed in August 2026 and reflects a significant evolution […]

The post APT36 Targets Indian Government and Defense Organizations With New Rust Malware Arsenal appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

https://gbhackers.com/apt36-malware-campaign/
Пентагон разрешил передавать государству секреты об НЛО вопреки старым NDA
Старые соглашения о неразглашении больше не мешают сообщать властям закрытые сведения об UAP.
https://www.securitylab.ru/news/577496.php
U.S. CISA adds Acronis Backup, Cisco ISE, and Google Pixel flaws to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Acronis Backup, Cisco ISE, and Google Pixel flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added [1, 2] the following vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: CVE-2026-76460 is an authentication bypass vulnerability affecting an API in Cisco Identity Services Engine (ISE). The flaw […]
https://securityaffairs.com/199239/security/u-s-cisa-adds-acronis-backup-cisco-ise-and-google-pixel-flaws-to-its-known-exploited-vulnerabilities-catalog.html
CNCERT发布2026年人工智能大模型安全众测结果
https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247516611&idx=2&sn=3bf916e230c28755bead33aa3498363c
跨国油轮遭网络攻击失联超30小时，美军登船开展调查
美军进驻利比里亚油轮检查网络攻击情况
https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247516611&idx=1&sn=f1e28a8e0b5b903c6543ce3f0dd3a6d5
GNOME 51 释出
GNOME 桌面环境项目释出了代号为 A Coruña 的 GNOME 51，该代号旨在感谢 GUADEC 2026 的主办城市。GNOME 51 主要变化包括：Mutter 重新设计了调度和屏幕帧交付系统，即使系统处于高负荷下，动画仍然流畅；全面提升了屏幕录制性能；记住显示器的亮度设置；移除了基于 EGLStreams 的旧 NVIDIA 驱动接口支持；支持新 Wayland 协议如 ext-background-effect-v1；支持自定义指针加速配置文件；GNOME Maps 支持离线地图；GNOME Software 启动更快，GNOME File Previewer UI 重构，等等。

https://www.solidot.org/story?sid=85406
Chinese hackers use SparroWocky malware in govt espionage attacks
The China-linked espionage group FamousSparrow has been using a new backdoor named SparroWocky in attacks on government organizations in Latin America. [...]
https://www.bleepingcomputer.com/news/security/chinese-hackers-use-sparrowocky-malware-in-govt-espionage-attacks/
诚邀渠道合作伙伴共启新征程
https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247537645&idx=2&sn=deaa95fcb6fcae53b7ffbbd2a7609f02
多层伪装躲避防护检测！分层式模块化窃密木马解析
多层伪装躲避防护检测！分层式模块化窃密木马解析
https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247537645&idx=1&sn=968b0abb966af1de017f0ec93d255dbb
OPPO 姜昱辰：大模型的差距越来越小，AI 手机的差距才刚拉开
小布、ColorOS 17 与「AI 硬件」
https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653113732&idx=1&sn=e2bff0942188b3406aab16421ce923cb
Поставили камеру TP-Link в спальню? За вашей жизнью уже открыто наблюдают
Камеру можно взломать без пароля и добраться до видеопотока.
https://www.securitylab.ru/news/577495.php
Beware the SparroWock: The backdoor that bites, the commands that catch
ESET researchers document SparroWocky, the new flagship backdoor of the FamousSparrow APT group
https://www.welivesecurity.com/en/eset-research/beware-sparrowock-backdoor-bites-commands-catch/
DSRC中秋礼盒发放通知
漏洞要认真挖，月饼也要认真吃
https://mp.weixin.qq.com/s?__biz=MzA3Mzk1MDk1NA==&mid=2651909433&idx=1&sn=74290c0ebb290d364ff349050a7f74b5
12 Serverless Security Options Compared (2026): Features & Pricing

Quick Answer: There is no standalone serverless-security SKU worth buying in 2026 functions are a line item inside CNAPP or observability contracts. Datadog publishes per-function rates (the category’s only clean anchor); Prisma Cloud carries the deepest lineage (PureSec); Aqua, Sysdig, Wiz, CloudGuard, and Fortinet (Lacework) bill functions inside platform units. Graveyard warning: Thundra and Epsagon […]

The post 12 Serverless Security Options Compared (2026): Features & Pricing appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

https://gbhackers.com/best-serverless-security-compared/
以良法夯实网络安全法治根基
https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247505142&idx=1&sn=405f79759f0b4170b8a9c916858d4959

Managed ad