Aggregator

Hidden instructions in a Word document can make Microsoft 365 Copilot rewrite figures in a report, then copy the same instructions into the finished file. Håkon Måløy disclosed the technique on July 28, 144 days after reporting it to Microsoft. In his proof of concept, the internally generated file triggered the same behavior when it was used in a second Copilot drafting session. Måløy's

AI 的出现，让组织生产力进入新的阶段，这也给了飞书一个新命题。

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical vulnerability in Cisco Secure Firewall Management Center (FMC), tracked as CVE-2026-20316, to its Known Exploited Vulnerabilities (KEV) Catalog due to evidence of active exploitation. This vulnerability affects the Cisco Secure Firewall Management Center, previously known as the Firepower Management Center. It serves as […]

The post CISA Adds Cisco Secure Firewall Management Flaw to Exploited Vulnerabilities List appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Network firewalls are the workhorses of modern cybersecurity. They are trusted to protect the network, blocking malicious traffic and preventing intrusions and breaches. And for decades, network security teams have built controls around a relatively stable model: users connect to applications, applications exchange data, and security tools inspect packets, protocols, and destinations. Firewalls

Австралия предъявила Telegram увесистый список претензий.

关键词黑客攻击想象一下：一夜之间，你所在城市的水处理厂停摆，净水系统离线，居民被告知"减少用水"。

关键词后门CISA 紧急警告：Cisco Secure Firewall Management Center（

关键词黑客想象一下：你的邮箱被黑客入侵了，你赶紧改了密码，以为安全了。但黑客依然能随时查看你的所有邮件。

A covert Monero (XMR) cryptomining campaign uncovered in May 2026 is abusing Linux Pluggable Authentication Modules (PAM) to evade detection, maintain fileless execution, and persist across multiple user accounts on compromised hosts. The operation, tracked as part of the V25 (Generation 26) campaign family, demonstrates a mature blend of supply chain abuse, PAM weaponization, and […]

The post Linux XMRig Botnet Abuses PAM for Fileless Monero Mining and Persistent Access appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A vulnerability described as critical has been identified in SQLite 3.41. Affected by this issue is the function jsonParseFree of the file src/json.c of the component JSON Extraction. The manipulation results in use after free. This vulnerability is reported as CVE-2026-51298. The attack can be launched remotely. No exploit exists.

A vulnerability was found in SQLite up to 3.41 and classified as critical. The impacted element is the function sqlite3ExprDelete of the file src/expr.c. The manipulation results in use after free. This vulnerability was named CVE-2026-51300. The attack may be performed from remote. There is no available exploit.

A vulnerability was found in SQLite 3.41. It has been rated as critical. The impacted element is an unknown function of the file src/json.c of the component JSON Parsing. This manipulation causes use after free. This vulnerability is tracked as CVE-2026-51297. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability labeled as critical has been found in SQLite 3.41. Affected is the function jsonRemoveFunc of the file src/json.c of the component JSON module. Executing a manipulation can lead to use after free. This vulnerability is registered as CVE-2026-51296. It is possible to launch the attack remotely. No exploit is available.

A vulnerability, which was classified as critical, was found in Autodesk AutoCAD, AutoCAD LT and DWG TrueView. This issue affects some unknown processing. Executing a manipulation can lead to out-of-bounds read. This vulnerability is registered as CVE-2026-17550. It is possible to launch the attack remotely. No exploit is available. You should upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Autodesk AutoCAD, AutoCAD LT and DWG TrueView. This vulnerability affects unknown code of the component DWG/DXF File Handler. Performing a manipulation results in out-of-bounds read. This vulnerability is cataloged as CVE-2026-16465. It is possible to initiate the attack remotely. There is no exploit available. It is advisable to upgrade the affected component.

A vulnerability has been found in Autodesk AutoCAD, AutoCAD LT and DWG TrueView and classified as critical. Impacted is an unknown function of the component DXF file Handler. The manipulation leads to heap-based buffer overflow. This vulnerability is documented as CVE-2026-16463. The attack can be initiated remotely. There is not any exploit available. The affected component should be upgraded.

Что известно о хакерском ударе по ангольскому телеком-гиганту.

A vulnerability categorized as critical has been discovered in SAP 3D Visual Enterprise Author 9. This issue affects some unknown processing in the library PDFPublishing.dll of the component PDF File Handler. Executing a manipulation can lead to memory corruption. This vulnerability is registered as CVE-2022-41181. It is possible to launch the attack remotely. No exploit is available. A patch should be applied to remediate this issue.

A vulnerability was found in SAP 3D Visual Enterprise Author 9. It has been declared as critical. This impacts an unknown function of the file JtTranslator.exe of the component JT File Handler. Such manipulation leads to memory corruption. This vulnerability is uniquely identified as CVE-2022-41179. The attack can be launched remotely. No exploit exists. It is advisable to implement a patch to correct this issue.