英文科技媒体分类 feed · Ars Technica · Biz & IT

"SignDrop" exploit lets local users gain all-powerful System rights.

Researcher finds 35,000 Grok Build apps wide open to anyone who looked for them.

"*sshole" poses a serious threat to Internet security.

Company said a "multifront cyberattack" included AI agents and an on-path data snatch.

Certain configurations of Alpine are affected. Other distros may be as well.

Researchers say group may have been Kremlin-sponsored in search of diplomatic targets.

“We started listening to a lot of our lower-end customers," VMware exec says.

Techniques included laptop infections, compromised internal tooling, and fake job interviews.

UEFI bootkit BlackX exploits Microsoft's lack of clarity around Secure Boot protections.

It's still unknown how attackers got access to Anthropic's verified Cursor account.

Critical flaw in EDK2 allows attackers to execute code early in the boot process.

Flubbed key signing "ceremony" allowed minting of web credentials for any site.

For 3 days this month, 333 exit nodes were hacked in hopes of stealing sensitive data.

Survey of 2,018 IT heads at big firms points to a lack of leverage.

Unconfirmed report claims PHP2Shell exploit remotely executes code on PHP sites.

Intermediate certs allow anyone to mint web credentials for any Internet server.

Meta is suspending the sharing feature while it investigates its privacy.

A researcher says attacks chaining 4 vulnerabilities is hacking unpatched boxes.

ReactOS gains NTFS install support with new driver.

The actions could have resulted in criminal charges had humans been behind the keyboard.