Aggregator

A vulnerability was found in veraPDF validation up to 1.30.1/1.31.70. It has been rated as critical. This impacts the function getdynamicRender of the file validation-model/src/main/java/org/verapdf/gf/model/impl/pd/GFPDAcroForm.java of the component AcroForm Handler. Performing a manipulation results in xml external entity reference. This vulnerability is known as CVE-2026-54079. Remote exploitation of the attack is possible. No exploit is available. Upgrading the affected component is advised.

A vulnerability was found in veraPDF veraPDF-validation up to 1.30.1/1.31.70. It has been declared as critical. This affects the function PDFAValidator.validate/GFPDAcroForm.getdynamicRender of the component DocumentBuilderFactory. Such manipulation leads to xml external entity reference. This vulnerability is traded as CVE-2026-54082. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

Mac users are being targeted by a ClickFix campaign that turns a fake verification prompt into a path for malware installation. Victims are persuaded to copy a command from a web page, open Terminal, paste it, and run it, believing they are completing a routine CAPTCHA check. The attack does not rely on a software […]

The post macOS ClickFix Attack Deploys Atomic Stealer to Steal Passwords and Crypto Wallets appeared first on Cyber Security News.

A vulnerability was found in veraPDF parser up to 1.30.1/1.31.22. It has been classified as problematic. The impacted element is an unknown function of the file veraPDF-parser/src/main/java/org/verapdf/pd/font/type1/Type1FontProgram.java/veraPDF-parser/src/main/java/org/verapdf/parser/postscript/PSOperator.java of the component PDF Parser. This manipulation causes resource consumption. This vulnerability appears as CVE-2026-54081. The attack may be initiated remotely. There is no available exploit. Upgrading the affected component is recommended.

A vulnerability was found in veraPDF up to 1.30.1/1.31.22 and classified as problematic. The affected element is an unknown function of the file veraPDF-parser/src/main/java/org/verapdf/pd/font/cmap/CMapParser.java/veraPDF-parser/src/main/java/org/verapdf/parser/postscript/PSOperator.java of the component PDF Parser. The manipulation results in denial of service. This vulnerability is reported as CVE-2026-54080. The attack can be launched remotely. No exploit exists. It is suggested to upgrade the affected component.

A vulnerability has been found in Autodesk AutoCAD, AutoCAD LT and DWG TrueView and classified as critical. Impacted is an unknown function of the component DXF file Handler. The manipulation leads to heap-based buffer overflow. This vulnerability is documented as CVE-2026-16463. The attack can be initiated remotely. There is not any exploit available. The affected component should be upgraded.

A vulnerability, which was classified as critical, was found in Autodesk AutoCAD, AutoCAD LT and DWG TrueView. This issue affects some unknown processing. Executing a manipulation can lead to out-of-bounds read. This vulnerability is registered as CVE-2026-17550. It is possible to launch the attack remotely. No exploit is available. You should upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Autodesk AutoCAD, AutoCAD LT and DWG TrueView. This vulnerability affects unknown code of the component DWG/DXF File Handler. Performing a manipulation results in out-of-bounds read. This vulnerability is cataloged as CVE-2026-16465. It is possible to initiate the attack remotely. There is no exploit available. It is advisable to upgrade the affected component.

Cisco, Fortinet и Ivanti так часто взламывали, что спасут лишь радикальные меры.

Broadcom has released security updates to address multiple security flaws impacting VMware ESX, vCenter, Workstation, and Fusion, three of which have been designated as critical in severity. The first of the three critical-rated flaws is CVE-2026-59309 (CVSS score: 9.8), which has been described as an authentication bypass in VMware vCenter. "A malicious actor with network access to vCenter

This publication updates and replaces the 2021 Minimum Elements for a Software Bill of Materials published by the United States’ National Telecommunications and Information Administration.

A vulnerability classified as problematic was found in Balbooa Gridbox Extension up to 2.20.1. This affects an unknown part of the component Admin Interface. Such manipulation leads to cross-site request forgery. This vulnerability is listed as CVE-2026-65947. The attack may be performed from remote. There is no available exploit.

A critical security flaw in the open-source AI orchestration platform Ruflo has been disclosed, allowing unauthenticated attackers to execute arbitrary commands and fully compromise AI agent environments. Assigned a maximum CVSS base score of 10.0, the vulnerability (tracked as CVE-2026-59726) was discovered by Noma Labs and affects Ruflo’s Model Context Protocol (MCP) Bridge, a core […]

The post Critical Ruflo MCP Bridge Flaw Lets Attackers Execute Commands and Hijack AI Agents appeared first on Cyber Security News.

A vulnerability classified as critical has been found in Balbooa Gridbox Extension up to 2.20.1. Affected by this issue is the function socialLogin. This manipulation causes improper authentication. This vulnerability is tracked as CVE-2026-65888. The attack is possible to be carried out remotely. No exploit exists. It is recommended to upgrade the affected component.

A vulnerability described as problematic has been identified in CERT.PL MWDB Core up to 2.18.x. Affected by this vulnerability is an unknown functionality of the component Config/Blob Upload Endpoints. The manipulation results in improper authorization. This vulnerability is identified as CVE-2026-66724. The attack can be executed remotely. There is not any exploit available. Upgrading the affected component is recommended.

Google 发表研究报告《AI & Economy ATLAS》，它未发现有明确证据显示 AI 将导致大规模自动化以及能取代白领工作。报告是基于对 Gemini App、Google AI Mode 和 Gemini API 上 1500 万次匿名化 AI 交互的活动、任务、全景趋势和普及研究。研究发现，AI 应用仍停留在浅层，且主要以协作为主，端到端任务自动化的范围有限。计算机、金融、艺术和娱乐等领域的白领工作的 Gemini 普及率高于其它领域，金融/市场分析师、软件开发者和系统管理员是 AI 的高频用户，销售、运输工人以及食品加工/服务人员很少使用 AI。29% 的职业 AI 的影响微乎其微，另外 30% 的职业大部分工作仍然由人类负责。只有 3% 的职业会经常性的使用 AI，这些受 AI 影响最大的职业包括了软件 QA 分析师和测试人员、HR 专家以及文档管理专家。数据表明 AI 目前主要作为现有工作的补充，对某些职业中的部分任务有用，未被全面用于执行目前由人类完成的工作。员工外包给 AI 的认知任务绝大多数都不需要太多专业知识。

你有没有想过，在咖啡馆敲键盘、线上会议时打字，只通过声音就能被人还原出输入的完整文字？

TA488 returned with OWA half-click exploit deploying OWAReaper implant that survived re-imaging

JetBrains выпустила экстренное обновление. Тянуть с его установкой не стоит.

Доклад Airwars показал, где человек уже не при делах.