Aggregator

Windows 11 избавляется от кода времён Windows 95.

The Federal Communications Commission (FCC) added foreign-produced mobile robots and networked power inverters to its Covered List on July 28. The move generally prevents new models from receiving the equipment authorization required for import, marketing, or sale in the US. Previously authorized models can still be sold, and devices people already own are unaffected. Federal purchases and use

Copybara is being weaponized in a new N26-themed fraud campaign in Italy that chains vishing, a real‑time phishing control kit, and a multi‑stage Android dropper to gain full remote control of victims’ phones via abused Accessibility services. The operator leverages real notifications already present in the legitimate N26 app to build trust, then pushes the […]

The post Copybara Abuses Android Accessibility for Keylogging, Screen Streaming and Remote Control appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Классификаторы OpenAI заблокировали расследование бага в ядре Linux.

微软确认Copilot“超级应用”将于今年推出微软公司正在开发一款AI “超级应用”，该应用将Copilot的聊天、编程和智能体能力结合在一起。在周三的财报电话会议上，微软首席执行官萨提亚·纳德拉表示

Matrix精选 2026年07月28日 25 分钟阅读信息过剩时代真正的难题，不是无法获得更多，而是不知道应该舍弃什么。——Brian Eno（英国作曲家、音乐制

Article 88b исключили из проекта — теперь всё решится в Европарламенте.

俄罗斯指控 Telegram 创始人 Pavel Durov 协助恐怖主义活动，称乌克兰情报部门利用 Telegram 策划并协调在俄罗斯境内的破坏和恐怖活动。俄罗斯对居住在阿联酋迪拜的 Durov 发出了国际逮捕令。Durov 已在俄罗斯境外生活多年，持有法国和阿联酋护照。目前尚不清楚其他国家或当局是否会遵守俄罗斯发出的逮捕令。2014 年 Durov 因拒绝遵守俄罗斯政府关闭 Telegram 平台上反对派社区的要求而离开俄罗斯。

July brought another set of threat coverage updates designed to help security teams work faster and with more confidence. ANY.RUN added 42 behavior signatures, 11 YARA rules, and 703 Suricata rules, giving SOCs broader visibility across files, malware behavior, and network activity.  We also published new threat intelligence and technical research on active malware and phishing campaigns. […]

The post Threat Coverage Digest: New TI Report, Threat Research and 750+ Detection Rules appeared first on ANY.RUN's Cybersecurity Blog.

Amazon has tied the September 2025 hijack of the npm packages debug and chalk to North Korea. For ten months, the incident sat in the public record as crypto theft: a maintainer phished through a lookalike npm domain and a wallet-draining script pushed into at least 18 packages carrying more than 2 billion weekly downloads between them. The original Aikido and Wiz reports did not attribute the

Amazon has tied the September 2025 hijack of the npm packages debug and chalk to North Korea. For t

全球最大半导体代工企业台积电29日称，受地震影响的熊本第一工厂（日本熊本县菊阳町）调整生产设备需要一定时间。由于存在余震风险，恢复正常生产尚需时日。该公司表示，建筑物的安全性已得到确认。据台积电透露，

A vulnerability labeled as very critical has been found in Linux Kernel up to 7.1.2. This issue affects the function linkstation_poweroff_init of the component Linkstation Poweroff. The manipulation results in use after free. This vulnerability is known as CVE-2026-64246. It is possible to launch the attack remotely. No exploit is available. The affected component should be upgraded.

A vulnerability was found in Linux Kernel up to 6.6.143/6.12.94/6.18.37/7.1.2. It has been classified as very critical. Affected is the function fb_find_mode of the file drivers/video/fbdev/core/modedb.c of the component fbdev/modedb. This manipulation of the argument mode_option causes use after free. This vulnerability is registered as CVE-2026-64245. Remote exploitation of the attack is possible. No exploit is available. Upgrading the affected component is recommended.

A vulnerability identified as critical has been detected in Linux Kernel up to 6.6.143/6.12.94/6.18.36/7.0.13/7.1.1. This vulnerability affects the function __add_memory_block of the file drivers/base/memory of the component Memory Management. The manipulation of the argument altmap leads to memory corruption. This vulnerability is traded as CVE-2026-64244. An attack has to be approached locally. There is no exploit available. You should upgrade the affected component.

A vulnerability categorized as very critical has been discovered in Linux Kernel up to 7.0.11. This affects the function simple_mux_control_put of the component ASoC codecs simple-mux. Executing a manipulation of the argument items can lead to memory corruption. This vulnerability appears as CVE-2026-64243. The attack may be performed from remote. There is no available exploit. It is advisable to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 7.0.11. It has been rated as critical. Affected by this issue is the function net2280_remove of the component net2280. Performing a manipulation results in double free. This vulnerability is reported as CVE-2026-64242. The attack requires a local approach. No exploit exists. Upgrading the affected component is advised.

A vulnerability, which was classified as problematic, has been found in Linux Kernel up to 6.12.95/6.18.34/7.0.11. The affected element is the function remove of the component rockchip. Performing a manipulation of the argument db_clk results in allocation of resources. This vulnerability is identified as CVE-2026-64241. The attack is only possible with local access. There is not any exploit available. It is advisable to upgrade the affected component.