Aggregator

A vulnerability described as critical has been identified in SGLang up to 0.5.15. Affected is the function /load_lora_adapter_from_tensors. The manipulation results in deserialization. This vulnerability is known as CVE-2026-15969. It is possible to launch the attack remotely. No exploit is available.

A vulnerability marked as critical has been reported in SGLang up to 0.5.15. This impacts an unknown function of the component Dumper Subsystem. The manipulation of the argument DUMPER_SERVER_PORT leads to improper neutralization of directives in dynamically evaluated code. This vulnerability is traded as CVE-2026-15971. It is possible to initiate the attack remotely. There is no exploit available.

Физики 25 лет искали новую частицу в поведении мюона. Нашли кое-что хуже.

One expert said they were pleased by the guidance, which touches on open-weight AI models, patching and more.

The post CISA issues recommendations to federal agencies on open-source software security appeared first on CyberScoop.

Amazon linked multiple high-profile open-source software supply chain attacks targeting the Node Package Manager (npm) ecosystem to North Korean hackers. [...]

Его не найти ни в природе, ни в одной лаборатории мира.

Broadcom has released security updates to fix five vulnerabilities in VMware vCenter, ESX, Workstation, and Fusion, including three critical flaws that allow attackers to bypass authentication, execute arbitrary code, or escape from a virtual machine to the host. [...]

Достаточно было просто открыть страницу — и Firefox на Android делал всё остальное сам, за хакеров.

Jscrambler launched its Unified Client-Side Security Platform, introducing a new approach to securing applications and customer data where AI-powered risks increasingly operate: inside the browser. “AI didn’t create browser risk—it dramatically accelerated it,” said Rui Ribeiro, CEO and Co-Founder of Jscrambler. “Today, software compromise and AI-driven data harvesting occur simultaneously inside the browser, yet most security architectures still treat them as separate problems. Our Unified Client-Side Security Platform changes that by bringing software integrity and … More →

The post Jscrambler launches Unified Client-Side Security Platform appeared first on Help Net Security.

У доверенного имени может появиться новый хозяин, которого никто не заметит.

Google says artificial intelligence is dramatically increasing the number of security vulnerabilities it can find and fix in Chrome, with more than 1,000 security bugs patched across the browser's two most recent releases as it expands its use of AI. [...]

Security experts have been sounding the alarm for years about the risks of using generic TV boxes that promise unlimited content streaming for a one-time fee, warning that they secretly rent the user's Internet connection out to strangers. But a groundbreaking new analysis finds these devices also routinely spoof themselves as mobile phones clicking ads on AI-generated websites as part of sprawling operation that seeks to defraud online merchants and advertising networks.

Residential security company Brinks Home has disclosed that hackers breached some of its systems and are threatening to leak allegedly stolen data. [...]

Melbourne, Florida, July 30th, 2026, CyberNewswire The growing number of high-profile AI security incidents making headlines around the world are not simply cybersecurity failures. They are architectural failures, according to OpenMatter Network Co-Founder and CEO Renee Davis. “Recent incidents involving increasingly autonomous AI systems – including OpenAI’s widely reported cyber evaluation that resulted in the […]

The post OpenMatter Network Calls on Enterprise Leaders to Rethink AI Security Before the Next Rogue AI Crisis appeared first on Cyber Security News.

Открытый код больше не гарантирует безопасность.

为了减少电子垃圾，欧盟的新法律将要求在欧洲销售的电子产品能更换电池，这一法律将于 2027 年 2 月生效。为了遵守该法律，任天堂已经宣布在欧洲销售的 Switch 2 游戏机以及手柄将允许更换电池。现在 PC 外设制造商罗技透露在欧洲销售的新鼠标将可以更换锂电池。支持更换电池的新鼠标将只在欧洲销售。罗技新任游戏业务负责人 Robin Piispanen 声称，新款欧洲版鼠标不仅制造成本更高，而且更重、更结实，以最大限度降低意外刺伤的风险。