Aggregator

A vulnerability, which was classified as problematic, was found in Mozilla Firefox. Affected by this vulnerability is an unknown functionality of the component DNS. The manipulation results in permissive cross-domain policy with untrusted domains. This vulnerability is identified as CVE-2026-16381. The attack can be executed remotely. There is not any exploit available.

A vulnerability was found in MongoDB up to 7.0.38/8.0.27/8.2.11/8.3.6. It has been classified as problematic. Affected by this vulnerability is an unknown functionality of the component Awaitable Hello Command Exhaust Mode. The manipulation leads to resource consumption. This vulnerability is referenced as CVE-2026-13074. Remote exploitation of the attack is possible. No exploit is available. Upgrading the affected component is recommended.

A vulnerability described as critical has been identified in Mozilla Firefox up to 140.12/152. Affected is an unknown function of the component WebExtensions. Executing a manipulation can lead to Remote Code Execution. This vulnerability is handled as CVE-2026-16396. The attack can be executed remotely. There is not any exploit available. Upgrading the affected component is recommended.

A vulnerability categorized as critical has been discovered in NLnet Labs Unbound up to 1.25.1. This issue affects some unknown processing. The manipulation results in an unknown weakness. This vulnerability is known as CVE-2026-42955. It is possible to launch the attack remotely. No exploit is available. It is advisable to upgrade the affected component.

Threat actors are using email addresses exposed in data breaches leaked by the ShinyHunters extortion group to send sextortion emails demanding $2,000 in Bitcoin. [...]

Microsoft закрыла уязвимость в Windows, позволявшую удаленно запускать произвольный код на чужом компьютере.

A vulnerability was found in Mozilla Firefox up to 152. It has been declared as critical. This issue affects some unknown processing of the component JIT. Executing a manipulation can lead to Remote Code Execution. This vulnerability is registered as CVE-2026-16392. It is possible to launch the attack remotely. No exploit is available. It is recommended to upgrade the affected component.

A vulnerability identified as critical has been detected in Mozilla Firefox up to 152. This issue affects some unknown processing of the component Service Workers. The manipulation leads to Remote Code Execution. This vulnerability is traded as CVE-2026-16382. It is possible to initiate the attack remotely. There is no exploit available. You should upgrade the affected component.

A vulnerability has been found in Google Chrome and classified as critical. This affects an unknown part of the component Chromecast. This manipulation causes integer overflow. This vulnerability is handled as CVE-2026-16416. The attack can be initiated remotely. There is not any exploit available. The affected component should be upgraded.

A vulnerability marked as very critical has been reported in Canonical Ubuntu 16.04 LTS up to 24.04 LTS. This issue affects some unknown processing of the component snap-confine. This manipulation causes sandbox issue. This vulnerability appears as CVE-2026-15226. The attack requires local access. There is no available exploit.

A vulnerability classified as problematic has been found in Mozilla Firefox up to 140.12/152. Impacted is an unknown function of the component Framework. This manipulation causes information disclosure. The identification of this vulnerability is CVE-2026-16374. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in ISC BIND 9 up to 9.18.50/9.18.50-S1/9.20.24/9.20.24-S1. It has been rated as critical. Affected by this issue is some unknown functionality of the component named. The manipulation leads to improper input validation. This vulnerability is documented as CVE-2026-12617. The attack can be initiated remotely. There is not any exploit available. Upgrading the affected component is advised.

A vulnerability was found in Checkmk up to 2.3.0p48/2.4.0p33/2.5.0p8. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component BI. The manipulation results in permission issues. This vulnerability is known as CVE-2026-8593. It is possible to launch the attack remotely. No exploit is available. It is recommended to upgrade the affected component.

美国司法部起诉了一位公民在入境搜查时提供了所谓的“胁迫密码”，输入该密码导致手机上的数据自动删除。这起案件被认为是美国首例“胁迫密码”案例。本案的被告是亚特兰大居民 Samuel Tunick，他的手机运行了安全加固的 Android 操作系统 GrapheneOS，它内置了一项安全功能，允许用户设置“胁迫密码”，如果输入的不是解锁密码而是“胁迫密码”，那么手机上的数据将会自动清除。本案引发了在入境时美国公民可以援引哪些宪法权利的疑问。美国政府长期坚称，在允许入境前边境处不属于美国领土。数字安全专家 Runa Sandvik 建议，为了避免被当局认为是故意销毁数据，公民可以在入境前先清空数据，入境后再重新下载。

Check Point выпустила экстренные обновления для одиннадцати версий Security Management Server.

Security firms ThreatBook and Imperva say attackers are targeting a critical flaw in Fastjson, Alibaba's JSON library for Java. In affected Spring Boot applications, a malicious JSON request can execute code without authentication, with the privileges of the Java process. Tracked as CVE-2026-16723, the vulnerability carries an Alibaba-assigned CVSS score of 9.0. The confirmed chain requires

记录一次国产网络安全智能体的能力边界探索

Аналитики связали серию атак на промышленные системы США с иранскими киберподразделениями.