Aggregator

A vulnerability classified as critical has been found in Linux Kernel up to 6.6.129/6.12.77/6.18.19/6.19.9/7.0-rc4. This affects the function nfnetlink_hooks of the component netfilter. The manipulation leads to use after free. This vulnerability is uniquely identified as CVE-2026-23412. The attack can only be initiated within the local network. No exploit exists. It is recommended to upgrade the affected component.

关于栏目很多读者都会好奇少数派的编辑们到底平时都「买了啥」。我们希望通过「编辑部的新玩意」介绍编辑部成员们最近在用的新奇产品，让他们自己来谈谈这些新玩意的使用体验究竟如何。@Lotta：海备思文件夹读

A recently disclosed vulnerability in Ubuntu’s snap ecosystem, identified as CVE-2026-8933, presents a critical local privilege escalation flaw. This vulnerability allows unprivileged users to execute arbitrary code with root privileges. Qualys discovered the issue in snap-confine, a core component used by snapd to set up execution environments for snap applications. It affects specific Ubuntu releases […]

The post Ubuntu Snap-Confine Vulnerability Allows Unprivileged Users to Execute Code as Root appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Защита была включена, но остановить цепочку оказалось нечем.

The Python Package Index (PyPI) now rejects uploads of new files to releases older than 14 days to prevent attackers from poisoning long-stable releases if a project’s publishing tokens or release workflows are compromised. “This change will protect Python users and reduce the amount of “cleanup” work associated with project compromises for PyPI admins. This restriction also means that compromises don’t put releases into an indeterminate and confusing state of both “compromised” and “not compromised”, … More →

The post PyPI hardens package security with new upload restrictions appeared first on Help Net Security.

某骗子黑产软件（手机远控）的分析

A vulnerability categorized as critical has been discovered in Mozilla Firefox up to 115.37/140.12/152. This affects an unknown function of the component Navigation. The manipulation results in use after free. This vulnerability is known as CVE-2026-16351. It is possible to launch the attack remotely. No exploit is available. It is advisable to upgrade the affected component.

A vulnerability identified as critical has been detected in Mozilla Firefox up to 115.37/140.12/152. This impacts an unknown function of the component Disability Access APIs. This manipulation causes use after free. This vulnerability is handled as CVE-2026-16352. The attack can be initiated remotely. There is not any exploit available. You should upgrade the affected component.

A vulnerability was found in Mozilla Firefox up to 115.37/140.12/152. It has been rated as critical. The impacted element is an unknown function of the component cubeb. The manipulation leads to Remote Code Execution. This vulnerability is traded as CVE-2026-16350. It is possible to initiate the attack remotely. There is no exploit available. Upgrading the affected component is advised.

A vulnerability categorized as critical has been discovered in Mozilla Firefox up to 152. Affected by this vulnerability is an unknown functionality of the component Disability Access APIs. Such manipulation leads to escaping of output. This vulnerability is traded as CVE-2026-16367. The attack may be launched remotely. There is no exploit available. It is advisable to upgrade the affected component.

中国因四月萝卜快跑自动驾驶出租车事故而暂停发放新牌照后，已从六月底开始逐步恢复审批。知情人士表示，有关部门六月底完成针对整个行业的安全审查后，一些城市正逐步恢复审批自动驾驶新牌照。今年3月31日，百度

阅读： 1820

阅读： 18

Microsoft is working to resolve an ongoing Exchange Online issue that has been mistakenly quarantining customers' mailboxes since Sunday. [...]

近日，Oracle官方发布了多个安全漏洞的公告，其中Oracle产品本身漏洞1110个，影响到Oracle产品的其他厂商漏洞338个。

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

$30 000 за баг всё ещё возможны. Но уже не для всех.

Learn why crypto-agility depends not just on adopting the right standards, but on maintaining a clear, unified view of your DNS environment before the migration begins.