Aggregator

大众汽车的官方应用不支持第三方 Android 系统

Solidot
2 weeks 1 day ago
大众汽车的官方应用不支持第三方 Android 系统。大众汽车的客户如其手机运行 GrapheneOS、LineageOS 或 /e/OS 等没有预装 Google Play Services 的第三方 Android 系统，那么他们将无法通过手机运行官方应用查看汽车剩余续航里程、预约保养服务，控制充电和空调。对于这一问题，官方表示在调查，同时警告短时间内不会有变化。大众汽车解释说，它的应用使用了 Google 的 Play Integrity API，而该 API 只有预装了 Play Services 的 Android 设备会提供。GrapheneOS 最近抨击了 Google 在 Play Integrity API 功能上误导企业，称该 API 并没有真正强制要求设备安全或应用合法，只是装装样子。它留下了巨大的安全漏洞。它强制执行的是 Google 的商业利益。

AppViewX Arms Enterprise CLM Teams for Post-Quantum Migration and AI Adoption in Latest Product Release

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
2 weeks 1 day ago

New York, United States, July 22nd, 2026, CyberNewswire The platform’s new release speeds the adoption of hybrid PQC certificates and AI-driven certificate lifecycle management  AppViewX, the leading machine and agent identity security company built for the AI and quantum enterprise, today announced support for hybrid composite post-quantum cryptography (PQC) certificates and the AppViewX Model Context […]

The post AppViewX Arms Enterprise CLM Teams for Post-Quantum Migration and AI Adoption in Latest Product Release appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

CyberNewswire

Firefox 预览原生多账户容器功能

Solidot
2 weeks 1 day ago
Firefox 的扩展 Multi-Account Containers 备受欢迎，它允许用户在浏览器上同时登陆多个账号，账号之间通过容器彼此隔离。现在 Mozilla 正致力于将该扩展变成原生功能，刚刚释出的 Firefox 153 提供了容器的原生预览版，允许用户将工作、购物、个人和银行等不同在线活动隔离，同时确保每个容器内的 Cookie 和广告追踪信息完全隔离，用户在一个容器内的操作不会被其它容器看到。

Critical Meta IDOR Flaw Let Attackers Access Customer Support Cases

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
2 weeks 1 day ago

Meta has addressed a critical vulnerability involving broken access control that exposed sensitive customer support data across multiple services. This issue highlighted systemic weaknesses in authorization within their shared backend infrastructure. The flaw, categorized as an Insecure Direct Object Reference (CWE-639) combined with Broken Access Control (CWE-284) and Missing Authorization (CWE-862), allowed unauthorized users to […]

The post Critical Meta IDOR Flaw Let Attackers Access Customer Support Cases appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Divya

Hackers Exploit Windmill Flaw to Read Arbitrary Server Files Without Authentication

The Hackers News
2 weeks 1 day ago
A high-severity security flaw impacting open-source developer platform Windmill has come under active exploitation in the wild, per VulnCheck. The vulnerability in question is CVE-2026-29059 (CVSS score: 7.5), a case of unauthenticated path traversal impacting Windmill's "get_log_file" endpoint ("/api/w/{workspace}/jobs_u/get_log_file/{filename}"). "The filename parameter is concatenated into
The Hacker News

AI在重塑DevSecOps，但真正考验的是工程能力

洞源实验室
2 weeks 1 day ago
过去谈 DevSecOps，很多团队关心的是怎样把安全更早地放进研发流程里。现在，AI 已经进入软件开发生命周期，于是 DevSecOps 面临一个更现实的问题：当 AI 开始参与写代码、改代码、审代码，安全、合规和工程效率应该怎么重新组织？

Managed ad