Aggregator

За внешне безобидными файлами скрывалась многоступенчатая операция с удалённым управлением.

A ticket comes in for a small bug fix. Hand it to the junior on your team and you wait a day, review something that half works, and sit down to explain what went wrong. Describe it to Claude and the patch merges before lunch. The second path wins on every number your team reports this quarter. It also removes the only training that junior was going to get, and it removes it at every … More →

The post AI took more than junior developer jobs and the bill comes later appeared first on Help Net Security.

エレコム株式会社が提供する無線LANルーターおよび無線アクセスポイントには、複数の脆弱性が存在します。

エレコム株式会社が提供する無線LANルーターおよび無線アクセスポイントには、複数の脆弱性が存在します。

A vulnerability labeled as very critical has been found in Linux Kernel up to 6.12.91/6.18.33/7.0.10. The impacted element is the function defragmentation routine of the component mac80211. Executing a manipulation can lead to heap-based buffer overflow. This vulnerability is tracked as CVE-2026-64515. The attack can be launched remotely. No exploit exists. The affected component should be upgraded.

A vulnerability was found in Linux Kernel up to 7.0.11. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component elan_i2c. Such manipulation leads to out-of-bounds read. This vulnerability is documented as CVE-2026-64237. The attack can be executed remotely. There is not any exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in Linux Kernel up to 7.0.10 and classified as very critical. Impacted is an unknown function of the component octeontx2-af. Performing a manipulation results in out-of-bounds read. This vulnerability is cataloged as CVE-2026-64225. It is possible to initiate the attack remotely. There is no exploit available. The affected component should be upgraded.

A vulnerability classified as problematic was found in shimosyan phpUploader up to 2.0.1. Affected is an unknown function of the component Database Table Handler. Executing a manipulation can lead to exposure of private personal information to an unauthorized actor. This vulnerability is handled as CVE-2026-56124. The attack can be executed remotely. There is not any exploit available. Upgrading the affected component is advised.

A vulnerability, which was classified as critical, has been found in 1Panel-dev MaxKB up to 2.9.x. This vulnerability affects unknown code of the component ToolSerializer Endpoint. Performing a manipulation of the argument download_url results in server-side request forgery. This vulnerability is known as CVE-2026-56779. Remote exploitation of the attack is possible. No exploit is available. It is advisable to upgrade the affected component.

A vulnerability has been found in RustDesk up to 1.4.8 and classified as critical. This vulnerability affects unknown code of the component Session Scope Enforcement. This manipulation causes improper authorization. This vulnerability is handled as CVE-2026-57850. The attack can be initiated remotely. There is not any exploit available. The affected component should be upgraded.

A vulnerability classified as problematic has been found in Micro-Star International MSI Feature Manager. This issue affects some unknown processing of the file KernCoreLib64.sys of the component IOCTL Handler. The manipulation leads to information disclosure. This vulnerability is referenced as CVE-2026-57851. Remote exploitation of the attack is possible. No exploit is available.

A vulnerability was found in gpsd up to 3.27.5. It has been rated as very critical. Affected by this vulnerability is an unknown functionality of the component gpsprof. Performing a manipulation of the argument subtype results in os command injection. This vulnerability was named CVE-2026-58459. The attack may be initiated remotely. There is no available exploit.

A vulnerability described as critical has been identified in SpecterOps BloodHound up to 9.4.0. The impacted element is an unknown function of the component Custom-Nodes API. Executing a manipulation can lead to missing authorization. This vulnerability is tracked as CVE-2026-59255. The attack can be launched remotely. No exploit exists.

美团 LongCat 团队构建了 MineExplorer —— 首个在开放世界中做到分钟级长程任务的评测基准，系统性地评测多模态大模型在需要长程规划、并包含隐藏前置条件的任务中的真实能力。

过去一年，我们见证了 Search Agent 能力的显著演进。在 BrowseComp 等评测上，顶尖模型准确率从最初的 30% 区间迅速攀升至 90% 以上。然而，当基准迅速饱和，其区分模型能力的价值也随之递减。

Ваш роутер и ТВ приставка уже работают на преступников пока вы думаете что просто смотрите сериалы.

Get practical insight from teams who’ve built, scaled and handed over engineering functions at enterprise level. Most engineering teams don’t fail because of bad engineers. They fail because performance is assumed. This playbook shows how high-performance teams are built intentionally across people, structure, leadership, and AI. What you’ll learn: How to build ownership, trust and clarity in engineering teams How to hire and retain for performance, not comfort How to structure teams that scale without … More →

The post Download: The High-Performance Team Playbook appeared first on Help Net Security.

A CVSS score 7.8 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Lays (@_L4ys) of TRAPA Security' was reported to the affected vendor on: 2026-07-28, 2 days ago. The vendor is given until 2026-11-25 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 7.8 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Kağan Çapar' was reported to the affected vendor on: 2026-07-28, 2 days ago. The vendor is given until 2026-11-25 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 6.1 AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N severity vulnerability discovered by 'Tunyi Huang of TrendAI and Lucas Leong (@_wmliang_) of TrendAI Zero Day Initiative' was reported to the affected vendor on: 2026-07-28, 2 days ago. The vendor is given until 2026-11-25 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.