Posts of last few hours
Please support the site operations by clicking ads.
The FBI has confirmed that North Korean state-sponsored hackers known as TraderTraitor were behind the $6.3 billion crypto-theft attack on Binance, making it the largest cryptocurrency heist on record. [...]
https://www.bleepingcomputer.com/news/security/fbi-links-63-billion-binance-crypto-heist-to-north-korean-hackers/
原域名已变更且将在2024年彻底废弃，请访问 https://govuln.com/news/ 查看新的RSS订阅
https://govuln.com/news/url/x8dB
Reddit 的最新财报证实了众多网站的抱怨：Google AI Mode 未给网站带来流量。AI Mode 通过生成总结的方式响应用户的查询，而不是传统搜索的提供网站链接以及简要摘要。硅谷对 AI 的全面拥抱牺牲了构成互联网的无数网站。Reddit 联合创始人兼 CEO Steve Huffman 表示：“用户依然需要 Reddit，只是 Google 不再像过去那样将他们引导到 Reddit。”上季度来自 Google 搜索的引荐流量显著下滑。Google 向 AI Mode 及 AI overviews 的转型切断了原本流向 Reddit 的流量。Reddit 的回应和很多新闻网站类似：变得更封闭：Reddit 将强制要求所有用户登录，而众多新闻网站则拥抱了订阅模式。
https://www.solidot.org/story?sid=85767
Hackers attempted to exploit a critical GitLab vulnerability in Alpine Linux's development infrastructure on October 20-21, prompting the open-source project to rebuild its GitLab server and reset all passwords over concerns of a possible compromise. [...]
https://www.bleepingcomputer.com/news/security/alpine-linux-rebuilds-gitlab-after-attempted-rce-attack/
https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247497336&idx=1&sn=ee2bd5fa25eefecbba7ff5fb9ab14c1e
OpenAI has just confirmed that it's rolling out ChatGPT Work capabilities directly into regular Chat, while also combining usage allowances across ChatGPT and Codex. [...]
https://www.bleepingcomputer.com/news/artificial-intelligence/openai-says-its-doubling-pro-usage-limits-and-bringing-work-features-to-chat/
A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including international press. U.S. CISA adds Ivanti Connect Secure flaws to its Known Exploited Vulnerabilities catalog Attackers Exploit Critical Drupal Commerce […]
https://securityaffairs.com/202200/breaking-news/security-affairs-newsletter-round-602-by-pierluigi-paganini-international-edition.html
Name: CTF@AC26 - Finals (an CTF@AC event.)
Date: Oct. 30, 2026, 10 a.m. — 01 Nov. 2026, 10:00 UTC [add to calendar]
Format: Jeopardy
On-site
Location: Faculty of Automation & Computer Science, Timisoara, Romania
Offical URL: https://ctf.ac.upt.ro/
Rating weight: 25.00
Event organizers: UPT-CTF
Date: Oct. 30, 2026, 10 a.m. — 01 Nov. 2026, 10:00 UTC [add to calendar]
Format: Jeopardy
On-site
Location: Faculty of Automation & Computer Science, Timisoara, Romania
Offical URL: https://ctf.ac.upt.ro/
Rating weight: 25.00
Event organizers: UPT-CTF
https://ctftime.org/event/3463
Name: 2026 Qiangwang Challenge on Cyber Mimic Defense Qualification (an Qiangwang Challenge on Cyber Mimic Defense event.)
Date: Oct. 31, 2026, 2 a.m. — 01 Nov. 2026, 02:00 UTC [add to calendar]
Format: Jeopardy
On-line
Offical URL: https://nest.pmlabs.com.cn/en/events/qiangwang-9/registration
Rating weight: 0
Event organizers: LoveFromMimic
Date: Oct. 31, 2026, 2 a.m. — 01 Nov. 2026, 02:00 UTC [add to calendar]
Format: Jeopardy
On-line
Offical URL: https://nest.pmlabs.com.cn/en/events/qiangwang-9/registration
Rating weight: 0
Event organizers: LoveFromMimic
https://ctftime.org/event/3459
Name: Russian CTF Cup X Qualifier (an Russian CTF Cup event.)
Date: Oct. 31, 2026, 9 a.m. — 01 Nov. 2026, 09:00 UTC [add to calendar]
Format: Jeopardy
On-line
Offical URL: https://ctfcup.ru/
Rating weight: 0.00
Event organizers: ctfcup
Date: Oct. 31, 2026, 9 a.m. — 01 Nov. 2026, 09:00 UTC [add to calendar]
Format: Jeopardy
On-line
Offical URL: https://ctfcup.ru/
Rating weight: 0.00
Event organizers: ctfcup
https://ctftime.org/event/3469
网络研究院学生团队RedbudAI战队获GEEKCON 2026安全极客大赛“AI黑客极限挑战赛”赛道冠军
https://mp.weixin.qq.com/s?__biz=MzUxMTEwOTA3OA==&mid=2247485872&idx=1&sn=de7ea9f0e45eb67a1bdd30cef997f6a7
模板兔modown 主题 + erphpdown 插件，官方不升级的话，各位站长能不用就别用了
https://mp.weixin.qq.com/s?__biz=MzIwODIxMjc4MQ==&mid=2651005955&idx=1&sn=6a0155af6d69a89217fee6d888a1eede
SMS of Death lets attackers crash Android call services with a hidden, zero-click message, blocking phone calls, even emergency calls too. A specially manipulated SMS message is enough to crash Android’s phone service, interrupt ongoing calls, and temporarily render the smartphone unusable. The attack requires no interaction from the victim and can even compromise the […]
https://securityaffairs.com/202184/security/sms-of-death-android-under-attack-an-invisible-sms-can-block-calls-and-emergency-services.html
Sierra Club 的分析显示，到 2030 年美国电力行业的二氧化碳排放量可能达到 21 亿公吨，比 2025 年的水平高出约 42%。这一预计增幅将抵消过去 15 年电力行业在减排上取得的成果。随着数据中心对资源的需求持续增长，AI 基础设施的电力需求正以清洁能源电网无法跟上的速度快速增长。为绕过缓慢的公用电网接入排队流程，部分科技公司建设了主要依赖化石燃料的自备发电设施。到 2030 年由数据中心开发商建设或委托建设的离网发电设施每年可能产生逾 4.6 亿公吨的二氧化碳，大致相当于墨西哥全年的碳排放量。
https://www.solidot.org/story?sid=85766
哈勃望远镜在轨运行 36 年之后仍然极具价值，但它的轨道高度已经大幅下降，如果不采取行动它将于 2030 年代中期前重返大气层。NASA 本周公布了一份 Request For Information(RFI)，向商业公司征询提升哈勃的轨道、进行维护或对其进行受控重返大气层的方案。方案递交截至日期 11 月 30 日。NASA 未承诺是否资助一次哈勃拯救任务，它想知道有多少公司对此有兴趣，以及成本多少。哈勃的轨道高度已从 2002 年的 583 公里降至目前的 470 公里，如果不进行干预，哈勃预计会在 2033 年或 2034 年坠入大气层。NASA 想要将哈勃的轨道高度重新提升至 600 公里，如果能做到，哈勃将能至少继续运行 25 年。
https://www.solidot.org/story?sid=85765
【升级通知】2026 年 11 月 1 日 00:00 至 06:00 先知社区新版本迭代升级，期间社区暂停访问。
https://xz.aliyun.com/news/93072
https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652079657&idx=3&sn=62b5b110843a42aca0265bbe72c31840
https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652079657&idx=2&sn=0312f3c3c447b408d319b55721289b3e
https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652079657&idx=1&sn=0e7f6a51f91ae4c6aadcb6d7ca13c2b3
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: r/opensource bans AI projects, and solo devs go down with them Moderators of r/opensource, Reddit’s catch-all forum for open source software, have barred any project that “uses AI, is made by AI, or is intended for AI.” Moderator Wolvereness announced the rules in a post over the weekend. AI slop is piling up highest on the biggest open-source projects The … More →
The post Week in review: Binance hit by $6.3 billion theft, impact of Brotli vulnerability appeared first on Help Net Security.
https://www.helpnetsecurity.com/2026/11/01/week-in-review-binance-hit-by-6-3-billion-theft-impact-of-brotli-vulnerability/
Latest Blog Posts
- 3 days 4 hours ago
- 3 days 4 hours ago
- 3 days 4 hours ago
- 3 days 4 hours ago
- 3 days 4 hours ago
- 3 days 4 hours ago
- 3 days 4 hours ago
- 3 days 4 hours ago
- 3 days 4 hours ago
- 3 days 4 hours ago