Aggregator

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

A vulnerability was found in FELIPE TOML::XS up to 0.05. It has been declared as critical. This issue affects the function from_toml. Such manipulation leads to uncontrolled recursion. This vulnerability is uniquely identified as CVE-2026-16634. The attack can be launched remotely. No exploit exists. It is recommended to upgrade the affected component.

A vulnerability was found in e4jvikwp VikBooking Hotel Booking Engine & PMS Plugin up to 1.8.13 on WordPress. It has been classified as problematic. This vulnerability affects unknown code. This manipulation of the argument vbfX causes cross site scripting. This vulnerability is handled as CVE-2026-15401. The attack can be initiated remotely. There is not any exploit available.

A newly disclosed HTTP/2 denial-of-service vulnerability is raising concerns across the cybersecurity community after researchers confirmed that unauthenticated attackers can crash vulnerable servers by triggering memory exhaustion conditions. The issue affects multiple HTTP/2 implementations that fail to manage resource consumption properly when handling stalled data flows, enabling attackers to degrade or completely disrupt services. HTTP/2, […]

The post New HTTP/2 Vulnerability Lets Hackers Crash Servers With Memory Exhaustion Attacks appeared first on Cyber Security News.

SourTrade turns the browser itself into a malware build system, deliberately sidestepping the industry’s reliance on hash-based file fingerprints and traditional network-centric detection. SourTrade has been active since late 2024, abusing programmatic ads to reach retail traders and crypto investors in 12 geographies across APAC, LATAM, Africa, and Western markets, including Japan, Thailand, South Korea, […]

The post SourTrade Browser-Assembled Malware Defeats Hash-Based Detection by Design appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Dolphin X malware targets more than 300 apps and includes an AI Profiler that scores infected Windows PCs to help criminals identify high-value victims quickly.

A vulnerability was found in EventON Action User Plugin up to 2.5.14 on WordPress and classified as critical. This affects the function update_role_caps. The manipulation results in authorization bypass. This vulnerability is known as CVE-2026-10033. It is possible to launch the attack remotely. No exploit is available.

The threat actors behind the Golden Chickens malware-as-a-service (MaaS) ecosystem have resurfaced with four new malware families, indicating that the operators are showing no signs of stopping despite extensive public disclosures into their inner workings. The malware families in question are: TinyEgg, ChonkyChicken, a modularized variant of ChonkyChicken, and a modified web browser credential

Threat Intelligence / Browser SecurityThe threat actors behind the Golden Chickens malware-as-a-se

A vulnerability has been found in Ninja Forms Plugin up to 3.14.9 on WordPress and classified as problematic. Affected by this issue is the function _save_setting/insert_form_meta of the file Model.php/ImportForm.php of the component Import Processing. The manipulation of the argument Settings leads to sql injection. This vulnerability is traded as CVE-2026-15663. It is possible to initiate the attack remotely. There is no exploit available.

近年来，“云养殖”“云种植”等互联网新业态方兴未艾，为乡村振兴注入数字动能。然而，一些不法分子却借机以“共享经济”“数字农业”名头，将非法集资包装成稳健投资项目，诱骗广大群众入局。近日，上海“全民养牛”平台集资诈骗案一审判决引发广泛关注。

习近平主席17日出席开幕式并发表主旨讲话，围绕携手构建公正合理的全球人工智能治理体系，从发展、安全、文明、治理4个方面提出中国主张、阐述中国方案，“倡导和衷共济，完善全球治理”位列其中。

经公安部计算机信息系统安全产品质量监督检验中心检测，35款移动应用存在一项或者多项违法违规收集使用个人信息情况。

意见反馈截止日期为2026年8月7日前。

7月24日上午，国务院新闻办公室举行“开局起步‘十五五’”系列主题新闻发布会，公安部相关负责人介绍强治理护民安促发展，全力服务保障“十五五”开局起步有关情况，并回答记者提问。

为兼顾个人信息权益保护与小型个人信息处理者发展，出台《小型个人信息处理者个人信息保护简化措施规定》，针对处理不满10万人个人信息的个人信息处理者，推出差异化、轻量化合规路径，构建“分类监管、简化措施、容错包容、配套支撑”的治理体系。

近日，国家网信办、公安部联合公布《小型个人信息处理者个人信息保护简化措施规定》，自2026年9月1日起施行。