#безопасность
-
Linux 7.4 Brings AMD Zen 6 BTB Context Isolation
The Linux 7.4 kernel is picking up support for a new AMD Zen 6 security feature — Branch Target Buffer Context Isolation (BTB CTX Isolation).
-
Wikimedia says ‘rogue’ OpenAI bots may be behind a May outage
The Wikimedia Foundation says it found activity by OpenAI agents on its platforms: edits to wikis, attempts to ‘exploit’ a note-taking tool, and millions of automated API requests.
-
Microsoft Patches Exchange Server Flaw That Let Users Read Each Other's Mail
Out-of-band updates close CVE-2026-96940 (CVSS 8.8): an authenticated user could reach other mailboxes within the same organization.
-
Researchers track a Chinese AI ‘agent fleet’
Independent researchers have spotted a group of AI agents that appears to run on Tencent’s infrastructure while querying Alibaba’s map service, Amap.
-
New Dell System Update flaw hands attackers root access
Dell is urging customers to patch its System Update tool as soon as possible: the flaw lets a remote attacker execute code with root privileges on unpatched systems.
-
Hackers steal records on 8 million people from Denmark’s central registry
Danish authorities have confirmed a breach of the Central Person Register: names, addresses, and state-issued ID numbers of some 8 million people were stolen, including residents abroad and the deceased.
-
Attackers Hit Rejetto HFS: Weak RNG Opens the Door to Admin Session Forgery
A critical flaw in Rejetto HTTP File Server is already under attack: a predictable signing key lets intruders forge an administrator cookie and run arbitrary code.
-
From: anyone@icloud.com — Spoofing Any Apple iCloud Sender
A SEC Consult researcher found two ways to send email from any @icloud.com address through Apple's infrastructure — even tim.cook@icloud.com — while passing SPF, DKIM and DMARC checks.
-
Google Pauses Open-Source Bug Bounty as AI Spam Floods In
A surge of auto-generated reports has pushed Google to temporarily stop accepting submissions to its OSS VRP. Fixes to the program are promised for early 2027.
-
Black Boxes Didn't Help: Google Data Center Figures Leak via Copy-Paste
Google marked its Nebraska data centers' water and power usage as a trade secret, but a botched redaction let anyone read the hidden figures simply by selecting the text.
-
Citrix rushes out fix for exploited NetScaler zero-day
Citrix has shipped emergency NetScaler updates for CVE-2026-88779, already used in attacks. It is billed as a denial-of-service flaw, but researchers suspect remote code execution too.
-
Google Gemini may soon get full access to your Mac's files, apps and the web
Google is testing a desktop mode for Gemini that could let it read and modify any file on your computer, control apps, and act without asking permission every time.
-
MI5: Over 100 U.K.-Linked Academics Aided Chinese Spies via Front Institute
Britain's domestic intelligence agency has issued an unprecedented warning: the CGTRI research body funds work serving China's state security ministry, and many academics may not have known who was behind the money.
-
An OpenAI safety staffer quits and sounds the alarm
David Robinson, who wrote the safety reports for OpenAI's major model releases, has left the company and, in an editorial for The Atlantic, calls the industry's culture 'broken.'
-
How to Hack Time, With C2PA
Security researcher David Buchanan produced a photo bearing a cryptographically "unforgeable" C2PA timestamp proving he knew the winning lottery numbers hours before the draw. The whole trick turns on one quirk of the C2PA spec.
-
A fake gig and a git hook: an attempt to steal developer credentials
REVSYS founder Frank Wiles describes how a supposed client tried to run arbitrary code on his laptop through an innocent-looking git repository.
-
Qubes OS 4.3.2 bundles up the accumulated security fixes
The Qubes team has released 4.3.2, a patch build that consolidates every security update and bug fix since the last stable release. The default Fedora template moves to version 44 and the kernel-latest package to Linux 7.2.
-
Federal Judge Rules a Flock License-Plate Search Was Unconstitutional Mass Surveillance
A judge in Oklahoma found that an officer violated the Fourth Amendment by running a California plate through Flock's automated reader network without a warrant. The nationwide system, she wrote, is approaching "indiscriminate mass surveillance."
-
Apple to tighten Mac disk access over risks from AI agents
The company is adding new limits to macOS "full disk access," saying that as autonomous AI agents grow more capable, the risks tied to this permission will increase "substantially."
-
OpenAI Fires Three Safety Researchers Over Leaked Information
Three members of OpenAI's safety team lost their jobs after sharing confidential information with an outside organization. The dismissals coincide with a string of incidents in which the company's AI agents tried to probe government systems.
- More