Aggregator

A vulnerability was found in ScadaBR 1.2.0. It has been declared as critical. The impacted element is an unknown function. The manipulation results in os command injection. This vulnerability is cataloged as CVE-2026-8603. The attack may be launched remotely. There is no exploit available.

A vulnerability marked as critical has been reported in ScadaBR 1.2.0. Affected by this issue is some unknown functionality. The manipulation leads to hard-coded credentials. This vulnerability is traded as CVE-2026-8605. It is possible to initiate the attack remotely. There is no exploit available.

海莲花组织最新技战术升级分析；DPRK IT Worker资金追踪：从工资到平壤的完整洗钱链；Kimsuky 利用新型 Gomir 家族变种攻击韩国群件供应商；研究人员确认ChainVeil和ViteVenom为Lazarus的PolinRider活动；朝鲜最新行动利用虚假编程面试窃取开发者资质

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

A vulnerability classified as problematic was found in Mutt up to 2.2.11. This impacts an unknown function of the component Email Handler. The manipulation results in null pointer dereference. This vulnerability was named CVE-2023-4874. The attack may be performed from remote. There is no available exploit. Upgrading the affected component is advised.

A vulnerability, which was classified as problematic, has been found in Mutt up to 2.2.11. Affected is an unknown function of the component Draft Handler. This manipulation causes undefined behavior for input to api. The identification of this vulnerability is CVE-2023-4875. The attack can only be executed locally. There is no exploit available. It is advisable to upgrade the affected component.

A vulnerability marked as critical has been reported in DbGate up to 7.1.8. The impacted element is an unknown function of the file /runners/load-reader. Performing a manipulation of the argument functionName results in os command injection. This vulnerability is known as CVE-2026-47670. Remote exploitation of the attack is possible. No exploit is available. It is suggested to upgrade the affected component.

A vulnerability described as very critical has been identified in DbGate up to 7.1.8. This affects the function unzipDirectory of the file packages/api/src/shell/unzipDirectory.js of the component ZIP Handler. Executing a manipulation can lead to path traversal. This vulnerability is handled as CVE-2026-47669. The attack can be executed remotely. There is not any exploit available. Upgrading the affected component is recommended.

A vulnerability marked as very critical has been reported in Exim up to 4.99.4. Affected by this vulnerability is an unknown functionality of the component pipe transport. This manipulation of the argument force_command causes improper privilege management. This vulnerability is registered as CVE-2026-66141. Remote exploitation of the attack is possible. No exploit is available. It is suggested to upgrade the affected component.

A vulnerability described as critical has been identified in OpenStack Zaqar up to 22.0.0. Affected by this issue is some unknown functionality. Such manipulation leads to improper authentication. This vulnerability is documented as CVE-2026-66139. The attack can be executed remotely. There is not any exploit available. Upgrading the affected component is recommended.

A vulnerability classified as very critical has been found in Exim up to 4.99.4. This affects an unknown part. Performing a manipulation of the argument queue-name results in path traversal. This vulnerability is reported as CVE-2026-66140. The attack is possible to be carried out remotely. No exploit exists. It is recommended to upgrade the affected component.

一加手机官方宣布，为保障用户设备和数据安全性，增强系统稳定性，将于 ColorOS16 及以上版本调整Bootloader解锁方式。用户可通过官方通道申请加入深度测试计划，加入测试计划后，解锁Boot

Один агент ищет мотив атаки, другой собирает улики, третий перепроверяет всё с нуля.

人类曾经历过一个语言多样性的“黄金时代”——仅仅在数千年前，全球使用的语言可能多达数万种。然而几个世纪以来，随着少数几种强势语言在全球范围内的传播，这种多样性一直受到侵蚀。如今近半数语言处于濒危状态，且每年至少有四种语言消亡。由于文字记录只能追溯到大约 6000 年前，在人类历史的大部分时间里，语言多样性的长期模式很大程度上仍不为人知。为重建过去 1 万 2000 年间世界语言的历史，研究人员用来自 171 个狩猎-采集社会的民族志数据作为早期人类群体的替代指标研发了一个人口种群模型。该模型假设，随着农业和技术进步使人口数得以增长，越来越多的人开始使用同一种语言，因而导致语言多样性的增长速度滞后于人口增长的速度。研究结果估计，1 万 2000 年前的全球语言数量可能比现在的语言数量少，语言数量随着人口的增长而增加，并在 1000 至 3000 年前达到顶峰；当时全球存在的语言可能有数万种。

人类曾经历过一个语言多样性的“黄金时代”——仅仅在数千年前，全球使用的语言可能多达数万种。然而几个世纪以来，随着少数几种强势语言在全球范围内的传播，这种多样性一直受到侵蚀。如今近半数语言处

特朗普政府本周五对来自80多个国家的商品加征约10%的关税，这是其落实一项大规模保护主义政策的最新举措，而该政策此前已多次在法院受到挑战。关税税率将在10%至12.5% 之间，于周五凌晨0时01分生效

A malicious RubyGems campaign has turned seemingly useful developer packages into tools for hidden cryptocurrency mining. The poisoned packages can consume a machine’s computing power, slow down development work, and quietly generate Monero for the attackers. The campaign also goes beyond a typical package-based infection. One set of malicious gems can examine a compromised developer […]

The post Malicious RubyGems Turn Developer Machines Into Monero Miners and Spread Through SSH appeared first on Cyber Security News.

Enterprise AI leaders from ZoomInfo, Docusign and AppViewX share what it took to build AI Centers of Excellence and govern agent identities inside two companies operating at scale. What you’ll take away: What an AI Center of Excellence looks like day to day at ZoomInfo and Docusign How to govern agent identities without standing up a parallel identity stack The traps both leaders worked hard to avoid, and what they’d do differently now What Venkat … More →

The post Governing Al agents at scale: Lessons from the leaders who’ve done it appeared first on Help Net Security.

Moin! Die „Nights of Open Knowledge“ (NooK) 2026 finden am 20. und 21. November im Audimax