Aggregator

美团 LongCat 团队构建了 MineExplorer —— 首个在开放世界中做到分钟级长程任务的评测基准，系统性地评测多模态大模型在需要长程规划、并包含隐藏前置条件的任务中的真实能力。

过去一年，我们见证了 Search Agent 能力的显著演进。在 BrowseComp 等评测上，顶尖模型准确率从最初的 30% 区间迅速攀升至 90% 以上。然而，当基准迅速饱和，其区分模型能力的价值也随之递减。

Ваш роутер и ТВ приставка уже работают на преступников пока вы думаете что просто смотрите сериалы.

Get practical insight from teams who’ve built, scaled and handed over engineering functions at enterprise level. Most engineering teams don’t fail because of bad engineers. They fail because performance is assumed. This playbook shows how high-performance teams are built intentionally across people, structure, leadership, and AI. What you’ll learn: How to build ownership, trust and clarity in engineering teams How to hire and retain for performance, not comfort How to structure teams that scale without … More →

The post Download: The High-Performance Team Playbook appeared first on Help Net Security.

A CVSS score 7.8 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Lays (@_L4ys) of TRAPA Security' was reported to the affected vendor on: 2026-07-28, 8 days ago. The vendor is given until 2026-11-25 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 7.8 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Kağan Çapar' was reported to the affected vendor on: 2026-07-28, 8 days ago. The vendor is given until 2026-11-25 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 6.1 AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N severity vulnerability discovered by 'Tunyi Huang of TrendAI and Lucas Leong (@_wmliang_) of TrendAI Zero Day Initiative' was reported to the affected vendor on: 2026-07-28, 8 days ago. The vendor is given until 2026-11-25 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

エレコム株式会社が提供する無線LANルーターおよび無線アクセスポイントは、複数の脆弱性が存在します。

A vulnerability was found in Linux Kernel up to 6.1.174/6.6.141/6.12.91/6.18.33/7.0.10. It has been rated as problematic. The affected element is the function arch_irq_work_raise of the component powerpc time. The manipulation leads to memory corruption. This vulnerability is traded as CVE-2026-64214. An attack has to be approached locally. There is no exploit available. Upgrading the affected component is advised.

A vulnerability was found in MongoDB up to 8.0.27/8.2.11/8.3.6 and classified as problematic. The impacted element is an unknown function of the component JSON Schema. Such manipulation of the argument jsonSchema leads to resource consumption. This vulnerability is referenced as CVE-2026-13064. It is possible to launch the attack remotely. No exploit is available. It is suggested to upgrade the affected component.

A vulnerability has been found in Linux Kernel and classified as problematic. This affects an unknown part of the component qmp-usbc. This manipulation causes out-of-bounds read. This vulnerability is registered as CVE-2026-64209. The attack needs to be launched locally. No exploit is available. It is suggested to install a patch to address this issue.

A vulnerability has been found in Linux Kernel up to 6.12.95/6.18.38/7.1.3/7.2-rc3 and classified as very critical. Affected is the function xfs_reflink_fill_cow_hole/xfs_reflink_fill_delalloc of the file fs/xfs/xfs_reflink.c of the component XFS. The manipulation leads to race condition. This vulnerability is traded as CVE-2026-64600. An attack has to be approached locally. There is no exploit available. The affected component should be upgraded.

A maximum-severity security flaw impacting on-premises versions of Arista VeloCloud Orchestrator (VCO) has come under active exploitation in the wild. The vulnerability, tracked as CVE-2026-16812 (CVSS score: 10.0), is a case of operating system command injection that could pave the way for arbitrary code execution. "VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue

A vulnerability was found in VITEC Flamingo 4.12.2. It has been classified as very critical. Affected by this vulnerability is the function escapeshellarg/shell_exec of the file admin/ajax/ping.php of the component Admin AJAX Endpoint. This manipulation of the argument host causes os command injection. This vulnerability appears as CVE-2026-60121. The attack may be initiated remotely. There is no available exploit.

A vulnerability was found in VITEC Flamingo 4.12.2. It has been declared as very critical. Affected by this issue is the function passthru of the file admin/ajax/gen_graphs.php of the component Graph Generation. Such manipulation of the argument start/end/key/format leads to os command injection. This vulnerability is traded as CVE-2026-61498. The attack may be launched remotely. There is no exploit available.

A vulnerability classified as critical was found in immich-app immich up to 3.0.2. This impacts an unknown function. The manipulation of the argument id/user results in improper access controls. This vulnerability is cataloged as CVE-2026-59258. The attack may be launched remotely. There is no exploit available. Upgrading the affected component is advised.

A vulnerability described as critical has been identified in openclaw feishu up to 2026.6.8. This vulnerability affects unknown code. Such manipulation leads to improper authorization. This vulnerability is traded as CVE-2026-62187. The attack may be launched remotely. There is no exploit available. Upgrading the affected component is recommended.

A vulnerability was found in gpsd up to 3.27.5. It has been classified as very critical. This issue affects some unknown processing of the component gpsprof. The manipulation of the argument used leads to os command injection. This vulnerability is listed as CVE-2026-60122. The attack may be initiated remotely. There is no available exploit. It is suggested to install a patch to address this issue.

A vulnerability classified as critical has been found in vBulletin up to 5.7.5/6.2.1. Affected by this issue is the function vB5_Template_Runtime::runMaths of the component Template Runtime. The manipulation of the argument pagenav[pagenumber] leads to code injection. This vulnerability is uniquely identified as CVE-2026-61511. The attack is possible to be carried out remotely. No exploit exists. It is recommended to upgrade the affected component.

A vulnerability described as problematic has been identified in SimpleMachines SMF up to 2.1.6/2.x. This issue affects some unknown processing of the component Image Proxy. Executing a manipulation of the argument URL can lead to server-side request forgery. The identification of this vulnerability is CVE-2026-61520. The attack may be launched remotely. There is no exploit available. Upgrading the affected component is recommended.