Aggregator

Learn why modern industrial operations depend on IT, the misconceptions that leave organizations exposed, and how anti-fragile resilience keeps production running when IT is compromised.

The post Why Most OT Cyber Incidents Never Reach the OT Environment appeared first on Sygnia.

GitHub and PyPI (Python Package Index) have introduced a time-based mechanism in the Dependabot dependency management tool to protect against supply-chain attacks and to limit their impact. [...]

Рейды разрушали здания старательно — но индустрия быстро восстаёт из пепла.

A vulnerability described as very critical has been identified in Linux Kernel up to 7.1.3. This affects the function rmi_f3a_attention of the component synaptics-rmi4. Such manipulation of the argument gpio_count leads to out-of-bounds read. This vulnerability is documented as CVE-2026-64277. The attack needs to be performed locally. There is not any exploit available. Upgrading the affected component is recommended.

A vulnerability classified as problematic was found in Linux Kernel up to 6.6.144/6.12.95/6.18.38/7.1.3. Impacted is the function bdev_mark_dead of the component block. The manipulation results in resource consumption. This vulnerability is cataloged as CVE-2026-64326. The attack must be initiated from a local position. There is no exploit available. Upgrading the affected component is advised.

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 7.1.3. This vulnerability affects the function mtk_pcie_irq_teardown_port of the component Mediatek. Performing a manipulation results in memory leak. This vulnerability is known as CVE-2026-64461. Remote exploitation of the attack is possible. No exploit is available. It is advisable to upgrade the affected component.

A vulnerability marked as very critical has been reported in Linux Kernel up to 6.18.38/7.1.3. Affected by this vulnerability is the function ad_sigma_delta_single_conversion/ad_sd_buffer_postenable of the component iio adc ad_sigma_delta. This manipulation causes state issue. This vulnerability is tracked as CVE-2026-64501. The attack is possible to be carried out remotely. No exploit exists. It is suggested to upgrade the affected component.

A vulnerability has been found in Linux Kernel up to 7.2-rc1 and classified as critical. This affects the function vfio_pci_dev_set_pm_runtime_get of the file vfio_pci.c of the component vfio-pci driver. Performing a manipulation of the argument disable_idle_d3 results in race condition. This vulnerability was named CVE-2026-64476. The attack needs to be approached locally. There is no available exploit. The affected component should be upgraded.

A vulnerability marked as problematic has been reported in Linux Kernel up to 6.6.144/6.12.96/6.18.38/7.1.3/7.2-rc2. Impacted is the function mpl115_read_raw of the component Mpl115. Performing a manipulation results in denial of service. This vulnerability is cataloged as CVE-2026-64493. The attack must be initiated from a local position. There is no exploit available. It is suggested to upgrade the affected component.

A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.12.95/6.18.38/7.1.3. Affected by this vulnerability is the function qcom_cpufreq_hw_cpu_exit of the component qcom-cpufreq-hw. Such manipulation leads to double free. This vulnerability is traded as CVE-2026-64377. An attack has to be approached locally. There is no exploit available. It is advisable to upgrade the affected component.

unbug 写道： Scratch 因可视化编程风靡全球，尤其深受教培机构的喜爱。如今，社区爱好者给 Scratch 引入了 AI 编程助手，帮助没有编程知识的家长也能跟着孩子学习编程和创作。Scratch AI 编程助手的特点是通过语音和文字的自然语言输入，以可视化的方式一步一步教学生编程和数学知识，在十分钟内就能帮助学生从设计到创建角色造型、创建场景、完成算法和测试，最终完成一个个故事、动画和互动小游戏。这打破了以往先学概念再学创作的漫长模式，让学生从创作中学习，将计算思维、数学思维和逻辑思维的教学门槛降到了最低。还在犹豫暑假是否报编程班的家长，花半个小时就能试出孩子是否有兴趣。 Scratch AI 编程助手：https://app.vibelf.com

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter UAC-0145 Primary Compromise Vectors as of July 2026   SleeperGem: Compromised git_credential_manager, Dendreo, and fastlane RubyGems Drop a Persistent Backdoor   AgentBaiting: How 800+ Fake AI Skills and MCP Servers Delivered Malware   Chaos ransomware’s msaRAT: Living […]

A vulnerability classified as critical was found in OpenSSH up to 10.2. This affects an unknown part of the component scp. Executing a manipulation can lead to preservation of permissions. This vulnerability appears as CVE-2026-35385. The attack may be performed from remote. There is no available exploit. Upgrading the affected component is advised.

A vulnerability was found in mbed TLS up to 2.19.0/3.6.5/4.0.0. It has been rated as critical. Affected by this issue is some unknown functionality. This manipulation causes memory corruption. The identification of this vulnerability is CVE-2026-34877. It is possible to initiate the attack remotely. There is no exploit available.

安全加固 Android 操作系统 GrapheneOS 项目通过其官网介绍了锁定设备的防数据提取功能，警告使用胁迫密码删除手机数据可能会导致人身伤害或法律后果。GrapheneOS 称其安全功能目前是基于 Google Pixel 手机的硬件安全特性，2027 年通过与摩托罗拉和高通合作将会扩大到其它设备。开发者称 GrapheneOS 不依赖于“胁迫密码”保护用户数据，操作系统在 Android 以及 Pixel 基础上提供了大量安全特性，包括：针对暴力破解，10 次失败后设备锁定 4 小时，15 次失败后锁定 41 天，最多允许 20 次尝试；密码支持最长 128 个字符，支持使用高熵的 Diceware 密码短语，可选指纹 PIN 码；设备锁定时会在软件和硬件层面阻止新的 USB 连接；锁定设备间隔 18 小时后会自动重启；Android 为每个次要用户（secondary user）和私密空间使用独立的加密密钥加密数据，等等。

A vulnerability has been found in Rack up to 2.2.22/3.1.20/3.2.5 and classified as problematic. This affects the function Rack::Files of the component Response Header Handler. Performing a manipulation of the argument Content-Length results in improper handling of length parameter inconsistency. This vulnerability is known as CVE-2026-34831. Remote exploitation of the attack is possible. No exploit is available. The affected component should be upgraded.

Hackers compromised hotel Wi-Fi gateways to redirect users to fake Microsoft 365 login pages and steal credentials. ReliaQuest’s threat research team just documented attackers compromising the Wi-Fi gateways at hotels and conference centers, then quietly rerouting guests toward fake Microsoft login pages. No phishing email required. No malicious attachment. Just bad luck about which hotel […]

Телефон изъяли законно или пароль стёр данные незаконно? Суду предстоит решить оба вопроса разом.

A vulnerability was found in Rack up to 2.2.22/3.1.20/3.2.5. It has been classified as problematic. Affected is the function Rack::Static. The manipulation leads to incorrect behavior order: validate before canonicalize. This vulnerability is uniquely identified as CVE-2026-34786. The attack is possible to be carried out remotely. No exploit exists. Upgrading the affected component is recommended.

A vulnerability, which was classified as problematic, was found in Rack up to 2.2.22/3.1.20/3.2.5. The impacted element is the function Rack::Multipart. Such manipulation of the argument CONTENT_LENGTH leads to resource consumption. This vulnerability is traded as CVE-2026-34829. The attack may be launched remotely. There is no exploit available. You should upgrade the affected component.