Aggregator

A vulnerability was found in SAP 3D Visual Enterprise Author 9. It has been classified as critical. Affected by this issue is some unknown functionality of the component RHM File Handler. This manipulation causes memory corruption. This vulnerability is tracked as CVE-2022-41174. The attack is possible to be carried out remotely. No exploit exists. It is recommended to apply a patch to fix this issue.

The new version of Chrome, 151, comes with 370 vulnerability patches, including for seven critical flaws

A vulnerability was found in Apache Traffic Server up to 8.1.9/9.2.14/10.1.3. It has been declared as very critical. This impacts an unknown function. The manipulation results in improper privilege management. This vulnerability is identified as CVE-2026-58156. The attack can be executed remotely. There is not any exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, has been found in Apache Traffic Server up to 8.1.9/9.2.14/10.1.3. The impacted element is an unknown function. Performing a manipulation results in information disclosure. This vulnerability is known as CVE-2026-58157. Remote exploitation of the attack is possible. No exploit is available. It is advisable to upgrade the affected component.

A vulnerability classified as very critical was found in Apache Traffic Server up to 10.1.3. This vulnerability affects unknown code. The manipulation results in improper input validation. This vulnerability is known as CVE-2026-58153. It is possible to launch the attack remotely. No exploit is available. Upgrading the affected component is advised.

A vulnerability, which was classified as very critical, has been found in Apache Traffic Server up to 8.1.9/9.2.14/10.1.3. This issue affects some unknown processing. This manipulation causes out-of-bounds read. This vulnerability is handled as CVE-2026-58154. The attack can be initiated remotely. There is not any exploit available. It is advisable to upgrade the affected component.

A vulnerability was found in Apache Traffic Server up to 8.1.9/9.2.14/10.1.3 and classified as very critical. The impacted element is an unknown function of the component HPACK-XPACK Header Decoding. Executing a manipulation can lead to buffer overflow. The identification of this vulnerability is CVE-2026-58152. The attack may be launched remotely. There is no exploit available. It is suggested to upgrade the affected component.

A vulnerability was found in Apache Traffic Server up to 8.1.9/9.2.14/10.1.3. It has been classified as problematic. This affects an unknown function. The manipulation leads to http request smuggling. This vulnerability is referenced as CVE-2026-58155. Remote exploitation of the attack is possible. No exploit is available. Upgrading the affected component is recommended.

有城市水厂关停，有城市进入紧急状态

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a Cisco Secure Firewall Management Center (FMC) flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a Cisco Secure Firewall Management Center (FMC) flaw, tracked as CVE-2026-20316 (CVSS score of 5.3), to its Known Exploited Vulnerabilities (KEV) catalog. CVE-2026-20316 is a […]

熊本所在的九州“硅岛”贡献日本全国超五成半导体产值，M7.1 级地震导致当地大量半导体工厂停工。台积电在熊本的工厂主要是使用成熟制程生产车用芯片。索尼熊本工厂则主要生产车载摄像头使用的图像传感器。台积电、索尼、瑞萨电子等半导体工厂都已停工。台积电表示目前正在确认建筑物的安全性，“设备调试需要一定时间”。在半导体工厂，需经过数百道工序才能形成精细的电路。通常来说，从晶圆投入到成品出货需要约三个月时间，一旦生产中的产品出现任何细微损伤，就必须报废。

Кого может коснуться новый закон об обязательной SMS-авторизации.

A vulnerability described as critical has been identified in Google Chrome. Impacted is an unknown function of the component Compositing. The manipulation results in use after free. This vulnerability is reported as CVE-2026-17650. The attack can be launched remotely. No exploit exists. Upgrading the affected component is recommended.

A vulnerability identified as critical has been detected in Google Chrome. This affects an unknown part of the component Dawn. Performing a manipulation results in use after free. This vulnerability is identified as CVE-2026-18017. The attack can be initiated remotely. There is not any exploit available. You should upgrade the affected component.

A vulnerability was found in Apache ORC up to 1.8.8/1.9.5/2.0.4/2.1.1 and classified as critical. Affected by this issue is some unknown functionality of the component C++ LZO Decompression. The manipulation results in heap-based buffer overflow. This vulnerability is known as CVE-2025-47436. Access to the local network is required for this attack. No exploit is available. It is suggested to upgrade the affected component.

层层伪装 暗藏玄机--银狐木马借正规驱动静默接管你的电脑

A new Linux cryptomining campaign has surfaced using a rare trick to stay hidden inside compromised networks. Instead of behaving like typical malware, the operators turned a trusted Linux security feature into a tool for covering their tracks. This let them mine Monero cryptocurrency while dodging alerts that usually expose intruders. The attack began in […]

The post Linux Cryptomining Campaign Weaponizes PAM to Hide XMRig Botnet Activity appeared first on Cyber Security News.

Hackers are abusing Microsoft Teams voice calls and fake IT helpdesk personas to gain remote access to corporate endpoints, drop a custom post‑exploitation toolchain, and, in multiple cases rapidly pivot to Chaos ransomware deployment across North American organizations. Nearly 95% of observed intrusions hit North American targets, with services, manufacturing, energy, construction and IP‑focused legal […]

The post Hackers Pose as IT Helpdesk on Microsoft Teams to Deploy Chaos Ransomware appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.