unSafe.sh - 不安全
我的收藏
今日热榜
公众号文章
导航
Github CVE
Github Tools
编码/解码
文件传输
Twitter Bot
Telegram Bot
Search
Rss
黑夜模式
Can you disappear online? (Lock and Code S06E19)
read file error: read notes: is a directory...
2025-9-23 16:32:39 | 阅读: 28 |
收藏
|
Malwarebytes Labs - www.malwarebytes.com
dollar
willingly
parents
tune
threaten
American Archive of Public Broadcasting allowed access to restricted media for years
read file error: read notes: is a directory...
2025-9-23 14:29:18 | 阅读: 19 |
收藏
|
Malwarebytes Labs - www.malwarebytes.com
aapb
preserving
security
american
Scammers are impersonating the FBI to steal your personal data
read file error: read notes: is a directory...
2025-9-23 09:18:4 | 阅读: 23 |
收藏
|
Malwarebytes Labs - www.malwarebytes.com
ic3
victim
crime
nasty
spoofing
Beware of Zelle transfer scams
《纽约时报》记者Michael Wilson险些被骗,骗子冒充Chase银行员工,声称其账户涉及欺诈性Zelle转账,并要求输入金额和案件编号。Michael察觉异常后识破骗局。骗子利用社会工程学手段诱导受害者转账,并通过填写代码转移注意力。防范建议包括不轻信来电、警惕第三方支付平台等。...
2025-9-22 14:43:39 | 阅读: 15 |
收藏
|
Malwarebytes Labs - www.malwarebytes.com
michael
zelle
him
scammer
chase
ChatGPT solves CAPTCHAs if you tell it they’re fake
文章指出AI绕过传统CAPTCHA的方法及其对网站安全的影响。研究人员通过注入提示让ChatGPT解决图像CAPTCHA,并发现AI代理在处理多步骤任务上更具优势。...
2025-9-22 14:11:7 | 阅读: 17 |
收藏
|
Malwarebytes Labs - www.malwarebytes.com
captchas
captcha
chatbot
chatgpt
agents
A week in security (September 15 – September 21)
OpenAI修复ChatGPT漏洞以防止PII泄露;微软与Cloudflare打击快速增长的钓鱼服务RaccoonO365;Google发布Chrome更新修复四个高危漏洞;OpenAI计划预测用户年龄以更好保护儿童;研究人员发现Google Play Store大型广告欺诈活动。...
2025-9-22 07:2:0 | 阅读: 17 |
收藏
|
Malwarebytes Labs - www.malwarebytes.com
openai
pii
chrome
fastest
raccoono365
ChatGPT Deep Research zero-click vulnerability fixed by OpenAI
OpenAI修复了Deep Research项目中的“ShadowLeak”漏洞,该漏洞允许攻击者通过发送特定邮件获取用户敏感信息。攻击利用了AI代理的prompt injection弱点,尽管OpenAI已采取措施限制风险,但用户仍需谨慎管理权限并保持警惕。...
2025-9-19 12:20:9 | 阅读: 16 |
收藏
|
Malwarebytes Labs - www.malwarebytes.com
agentic
injection
agents
openai
security
Disrupted phishing service was after Microsoft 365 credentials
微软与Cloudflare联手关闭了名为RaccoonO365的网络钓鱼服务。该服务出租工具包用于窃取微软365凭证,在94个国家造成至少5000起案件。通过恶意链接和假登录页面实施攻击,并利用合法基础设施隐藏。行动关闭了338个网站,并逮捕嫌疑人。提醒用户注意防范钓鱼攻击。...
2025-9-18 13:25:4 | 阅读: 32 |
收藏
|
Malwarebytes Labs - www.malwarebytes.com
phishing
raccoono365
microsoft
captcha
attachment
Update your Chrome today: Google patches 4 vulnerabilities including one zero-day
Google发布Chrome浏览器更新修复四个安全漏洞,包括一个已被利用的零日漏洞。该漏洞可导致用户访问恶意网站时被攻击。版本号为140.0.7339.185/.186(Windows/Mac)和140.0.7339.185(Linux)。建议用户及时更新以防范风险。...
2025-9-18 10:15:54 | 阅读: 20 |
收藏
|
Malwarebytes Labs - www.malwarebytes.com
chrome
exploited
malicious
threats
confusion
Age verification and parental controls coming to ChatGPT to protect teens
OpenAI开发年龄预测系统以保护未成年人使用ChatGPT的安全。若无法确认用户为成年人,则提供不同聊天体验,并限制涉及自杀等敏感话题的讨论。同时注重隐私权平衡,并可能引入身份验证措施及家长控制功能。...
2025-9-18 09:59:32 | 阅读: 18 |
收藏
|
Malwarebytes Labs - www.malwarebytes.com
altman
chatgpt
teens
teen
suicide
224 malicious apps removed from the Google Play Store after ad fraud campaign discovered
研究人员发现Google Play Store存在大规模广告欺诈活动"SlopAds",涉及224款恶意应用,下载量超3800万次,每日产生23亿广告请求。这些应用通过伪装正常功能诱导用户安装,并在后台执行恶意行为,导致设备变慢和连接问题。Google已移除相关应用,并建议用户加强防范措施以避免受骗。...
2025-9-17 13:45:44 | 阅读: 17 |
收藏
|
Malwarebytes Labs - www.malwarebytes.com
malicious
slopads
security
chatgpt
c2
Airline data broker selling 5 billion passenger records to US government
美国航空业通过可搜索数据库向政府出售50亿乘客记录;涉及姓名、行程、财务细节;由ARC运营;始于911事件后;数据来自旅行社预订。...
2025-9-17 10:4:47 | 阅读: 23 |
收藏
|
Malwarebytes Labs - www.malwarebytes.com
airlines
passenger
arc
flight
travel
Update your Apple devices to fix dozens of vulnerabilities
read file error: read notes: is a directory...
2025-9-16 19:48:1 | 阅读: 19 |
收藏
|
Malwarebytes Labs - www.malwarebytes.com
inch
software
3rd
1st
26apple
Grok, ChatGPT, other AIs happy to help phish senior citizens
read file error: read notes: is a directory...
2025-9-16 13:6:17 | 阅读: 14 |
收藏
|
Malwarebytes Labs - www.malwarebytes.com
phishing
reuters
chatbots
grok
senior
“A dare, a challenge, a bit of fun:” Children are hacking their own schools’ systems, says study
英国研究显示学生对学校网络构成重大内部威胁,超半数攻击由学生引发,多因弱密码或窃取凭证。青少年常通过合法登录而非入侵系统实施攻击,部分行为甚至触犯法律。类似问题在美国教育机构也普遍存在。...
2025-9-16 10:20:52 | 阅读: 15 |
收藏
|
Malwarebytes Labs - www.malwarebytes.com
security
insider
schools
phished
Watch out for the “We are hiring” remote online evaluator message scam
团队成员近期收到大量相同的招聘短信骗局,内容涉及远程在线评估员工作。这些骗局通常以高薪吸引目标,并通过要求支付费用、获取个人信息或参与洗钱活动进行诈骗。防范建议包括不回复信息、不透露个人信息、警惕要求先付款的雇主等。...
2025-9-16 10:17:46 | 阅读: 32 |
收藏
|
Malwarebytes Labs - www.malwarebytes.com
texts
hiring
recipients
police
scammer
A week in security (September 8 – September 14)
文章概述了近期网络安全事件与技术趋势:AI浏览器的未来发展、Fitbit骗局导致财务损失、Meta忽视VR中的儿童性虐待问题、AI聊天机器人泄露风险、钓鱼短信诈骗、太空人诈骗案例、血库遭遇勒索攻击导致数据泄露、预批准处方药骗局健康风险、Plex用户需重置密码以应对潜在威胁等。...
2025-9-15 07:3:0 | 阅读: 21 |
收藏
|
Malwarebytes Labs - www.malwarebytes.com
scammer
woman
plex
claims
chatbots
AI browsers or agentic browsers: a look at the future of web surfing
新兴的AI驱动浏览器通过内置智能助手实现任务自动化、内容总结及决策支持等功能。与传统浏览器不同,它们提供对话式界面并整合隐私保护措施。尽管具备提升生产力的优势,但需注意早期软件可能存在的安全漏洞及隐私风险。选择时应考虑开发者信誉及功能需求。...
2025-9-12 15:41:44 | 阅读: 15 |
收藏
|
Malwarebytes Labs - www.malwarebytes.com
security
tabs
agentic
agents
encryption
From Fitbit to financial despair: How one woman lost her life savings and more to a scammer
这篇文章讲述了受害者凯伦如何被一名自称查尔斯·希尔顿的骗子通过社交媒体引诱参与骗局的故事。该骗局涉及编造各种理由让凯伦支付大笔费用,并利用双重人格战术进行心理操控。最终凯伦损失了约6.5万美元,并承受了巨大的心理压力和财务损失。...
2025-9-12 15:34:5 | 阅读: 17 |
收藏
|
Malwarebytes Labs - www.malwarebytes.com
karen
scammer
charles
victim
security
Meta ignored child sex abuse in VR, say whistleblowers
Meta前员工在参议院听证会上指控公司忽视虚拟现实环境中儿童受虐问题,包括性剥削和暴露暴力内容。公司限制研究人员收集数据并删除有害证据,以避免责任。参议员提出法案保护儿童在线安全。...
2025-9-11 21:49:0 | 阅读: 18 |
收藏
|
Malwarebytes Labs - www.malwarebytes.com
harm
dangers
acts
hearing
savage
Previous
8
9
10
11
12
13
14
15
Next