Posts of last few hours

A Shared ChatGPT Link Could Run Attacker Code in Your Session and Read Private Chats
A malicious ChatGPT share link could run an attacker's code in the logged-in session of anyone who opened it, allowing them to read their private conversations, researchers at the security firm Parameter showed. The researchers reported the flaw through OpenAI's bug bounty program on October 18, and OpenAI fixed it eight days later and rated it P1, its most serious category.
https://thehackernews.com/2026/10/a-shared-chatgpt-link-could-run.html
活动回顾 | 第四期复旦白泽青年学者论坛
10月30日，白泽顺利举办第四期复旦白泽青年学者论坛活动。本次活动聚焦客户端智能体安全和大模型时代AIGC水印，带来了一场前沿技术分享与交流讨论。
https://mp.weixin.qq.com/s?__biz=MzU4NzUxOTI0OQ==&mid=2247500146&idx=1&sn=beddce5a36f6af973cb348006dcd4568
Передняя лапа дала команду задней: учёные связали импланты через организм крысы
Вместо сложной радиосистемы хватило коротких электрических импульсов.
https://www.securitylab.ru/news/579434.php
Cloudflare Reports 18.2 Million Network-Layer DDoS Attacks in Q3, Up 38%
Threat actors are launching about 8,226 network-layer distributed denial-of-service (DDoS) attacks per hour, Cloudflare revealed Thursday. The web infrastructure and security company said it autonomously mitigated 18.2 million network-layer (L3) DDoS attacks and 14.4 trillion HTTP DDoS requests in the third quarter of 2026. That amounts to 197,400 attacks per day, or one attack every 0.44
https://thehackernews.com/2026/10/cloudflare-reports-182-million-network.html
Google Launches Gemini 4 Carbon With State-Of-The-Art Cybersecurity Capabilities

Google has announced Gemini 4 Carbon, its latest AI model built to find software flaws, test whether attackers could exploit them, and produce fixes. Unveiled on October 28, 2026, Carbon builds on Gemini 4 Argon and targets complex security and coding work that can take days. Access will begin with selected cyber defenders, not a […]

The post Google Launches Gemini 4 Carbon With State-Of-The-Art Cybersecurity Capabilities appeared first on Cyber Security News.

https://cybersecuritynews.com/google-launches-gemini-4-carbon/
TeamViewer Security Flaw Could Turn Remote Support Sessions Into Computer Takeovers

A newly disclosed TeamViewer vulnerability could let an attacker turn a routine remote support session against the technician providing help. Tracked as CVE-2026-111585, the flaw allows a malicious remote computer to crash the viewer application and potentially run code on the technician’s machine. TeamViewer rates it High, with a CVSS score of 8.8. Remedio researcher […]

The post TeamViewer Security Flaw Could Turn Remote Support Sessions Into Computer Takeovers appeared first on Cyber Security News.

https://cybersecuritynews.com/teamviewer-security-flaw/
美国公布2026财年情报预算：国家情报计划拨款781亿美元，军事情报计划309亿美元
https://mp.weixin.qq.com/s?__biz=MzU0MzgyMzM2Nw==&mid=2247487304&idx=1&sn=4d0a7e388f4d09b5e32742f5a3dfd47e
Anthropic’s Claude Bypasses AI Safety Checks, Triggering Blackmail and Code Sabotage in Tests

Anthropic researchers have shown that Claude can design training data that slips past an AI safety monitor and causes a separate research model to blackmail users, weaken security code, and resist oversight. The October 2026 study exposes a gap between text that looks safe during screening and behavior learned through training. The distinction matters. These […]

The post Anthropic’s Claude Bypasses AI Safety Checks, Triggering Blackmail and Code Sabotage in Tests appeared first on Cyber Security News.

https://cybersecuritynews.com/claude-bypasses-ai-safety-checks/
Химики собрали кубит по атомам. Лазер различает состояния по частоте свечения
Молекулярный подход позволяет менять свойства квантового элемента химическим синтезом вместо настройки дефектов кристалла.
https://www.securitylab.ru/news/579431.php
DeepSeek，怎么就变成了一条「大肥鱼」
AI 公司负责模型，互联网负责人设。
https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653115760&idx=1&sn=f6dbaf67947689c1efbdba315926a207
Apple Warns iPhone Users in 99 Countries of Sophisticated Mercenary Spyware Attacks

Apple has issued a fresh round of threat notifications to selected iPhone users in 99 countries, warning that they have been targeted by sophisticated mercenary spyware attacks. Security researcher Costin Raiu reported the new wave on October 30, 2026, saying it was separate from August’s alerts and linked to new attacks. “Today’s notification is being […]

The post Apple Warns iPhone Users in 99 Countries of Sophisticated Mercenary Spyware Attacks appeared first on Cyber Security News.

https://cybersecuritynews.com/apple-warns-iphone-users/
Quickpost: WT20 Welding Electrodes & Radiation
https://buaq.net/go-451983.html
The Elephants in the Technology Room - Part 6
Why Millions of Cybersecurity Jobs Go Unfilled as Talent Struggles to Advance
Cybersecurity's hiring crisis extends beyond workforce shortages. Unrealistic job descriptions exclude newcomers, weak succession planning stalls future CISOs and burnout strains existing teams. Rethinking entry-level requirements and leadership development can help break the cycle.
https://ransomware.databreachtoday.com/blogs/elephants-in-technology-room-part-6-p-4235
Your Sex Life Is None of Meta's Business
Hims & Hers Defends Sharing Sensitive Health Data. America Shrugs and Clicks Agree.
Hims & Hers says its privacy policy warned users their sex lives could be used for advertising intelligence. The FTC alleges Meta got the data. But with most Americans resigned to losing their privacy, perhaps Silicon Valley's biggest achievement is convincing us to click "I Agree.
https://ransomware.databreachtoday.com/blogs/your-sex-life-none-metas-business-p-4236
Hospital Cyberattacks Bring Disruptions, Legal Fallout
New Mexico, Ohio Ransomware Attacks Raise Concerns as Feds Settle Pennsylvania Case
Cyber incidents at university health systems in New Mexico and Ohio disrupted patient care and sparked data theft concerns and litigation. Meanwhile, a Pennsylvania health system faces an $800,000 HIPAA settlement over a 2023 ransomware attack that exposed sensitive cancer patient photos.
https://ransomware.databreachtoday.com/hospital-cyberattacks-bring-disruptions-legal-fallout-a-33265
AI Agent Identity Crisis Forces Banks to Restrict Access
Financial Firms Face Pressure to Balance Customer Access With Data Protection
The lack of reliable ways to identify an artificial intelligence agent has caused many companies, especially banks and other financial institutions, to block most agent traffic amid rising interest in agents from enterprises and regular consumers.
https://ransomware.databreachtoday.com/ai-agent-identity-crisis-forces-banks-to-restrict-access-a-33266
ISMG Editors: PHP2Shell Fuels Cybersecurity's Black October
Also: US Healthcare Faces New Risks, Anthropic's Cloud Dependence Raises AI Risks
In this week's panel, four ISMG editors discussed the PHP2Shell threat and the "Black October" attacks, U.S. healthcare cybersecurity and deregulation, and what Anthropic's newly disclosed financials reveal about its business model and dependence on major cloud providers.
https://ransomware.databreachtoday.com/ismg-editors-php2shell-fuels-cybersecuritys-black-october-a-33267
Alice & Bob Claims New Benchmark for Breaking RSA-2048 in Days
French Startup Estimates RSA-2048 Could Fall in Three Days With 23,000 Qubits
French quantum computing startup Alice & Bob estimates that 23,000 cat qubits could break RSA-2048 encryption in three days, while 30,000 could defeat blockchain elliptic-curve cryptography in an hour, raising concerns about long-term data security and cryptocurrency exposure.
https://ransomware.databreachtoday.com/alice-bob-claims-new-benchmark-for-breaking-rsa-2048-in-days-a-33268
Создателей Kingdom Come взломали. Хакеры добрались до внутренних данных студии
Warhorse подтвердила проникновение, но пока не раскрыла, какую информацию могли получить злоумышленники.
https://www.securitylab.ru/news/579501.php
Chainalysis Confirms Cyberattack Using Agentic Techniques That Exposed Customer Data

Chainalysis has confirmed that an attacker used “offensive agentic techniques” to access its systems and internal tools, exposing customer account details. The blockchain investigation company said the accessed information included user IDs, full names, email addresses, and organization role labels, while its investigation has found no evidence that customer investigation content or authentication secrets were […]

The post Chainalysis Confirms Cyberattack Using Agentic Techniques That Exposed Customer Data appeared first on Cyber Security News.

https://cybersecuritynews.com/chainalysis-confirms-cyberattack/

Managed ad