Aggregator

A vulnerability marked as critical has been reported in Eclipse PIA up to 0.5.x. This issue affects some unknown processing of the file /v1/upload/sbom of the component OIDC Discovery. The manipulation of the argument iss leads to server-side request forgery. This vulnerability is listed as CVE-2026-18353. The attack may be initiated remotely. There is no available exploit. It is suggested to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in GStreamer. This affects an unknown function of the component gst-plugins-bad. The manipulation leads to out-of-bounds read. This vulnerability is referenced as CVE-2026-52719. Remote exploitation of the attack is possible. No exploit is available.

A vulnerability, which was classified as critical, was found in GStreamer. This impacts an unknown function of the component librfb. The manipulation results in heap-based buffer overflow. This vulnerability is identified as CVE-2026-52720. The attack can be executed remotely. There is not any exploit available.

A vulnerability has been found in GStreamer and classified as critical. Affected is an unknown function of the component VMnc Decoder. This manipulation causes integer overflow. This vulnerability is tracked as CVE-2026-52722. The attack is possible to be carried out remotely. No exploit exists.

AtlasRAT is being delivered through a fake Flash Player installer that looks harmless but can give attackers remote control of a Windows computer. The campaign abuses a familiar software name to lower a victim’s guard, then loads much of its malicious code directly into memory, where it is harder for traditional file-based checks to catch. […]

The post Fake Flash Player Installer Uses Microsoft-Themed Certificate to Deploy AtlasRAT appeared first on Cyber Security News.

Home Assistant’s FFmpeg integration recently came under scrutiny after researchers demonstrated that unsafe argument handling in the Wyoming Assist satellite feature could be exploited to steal Supervisor tokens and ultimately execute commands as root on the host system. The issue arises not from FFmpeg’s core parsing logic but rather from how Home Assistant incorporates attacker-controlled […]

The post Home Assistant FFmpeg Flaw Lets Attackers Steal Supervisor Tokens and Execute Code as Root appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

当“私域”从服务工具异化为逃避监管的“暗道”，信任便成了被收割的对象。私域直播对消费者权益的侵害，本质上是对“信任”这一商业根基的系统性侵蚀。直播场域无论公私，诚信与规则都是立身之本。

今天，人工智能正在以前所未有的速度改变世界，也不断提出新的治理命题：如何既鼓励创新又实现有效治理、既保障安全又促进发展、既维护国家利益又增进全球福祉，世界人工智能大会展现了一种值得国际社会共同思考的治理思路和行动路径。

《实施方案》的出台，为推进IPv6技术创新和融合应用明晰了实施路径与工作遵循。随着政策部署落地见效，我国IPv6发展将逐步实现从规模部署向全面赋能的跨越，持续激活IPv6网络内生效能，深度赋能千行百业数字化转型……

网络空间是亿万民众共同的精神家园。习近平总书记高度重视网络生态建设和网络空间法治建设，强调“网络空间天朗气清、生态良好，符合人民利益。网络空间乌烟瘴气、生态恶化，不符合人民利益”。网络暴力不仅侵犯个人或者组织的合法权益，而且扰乱网络秩序……

近日，中国人民银行、国家发展改革委、科技部、工业和信息化部、海关总署、市场监管总局、金融监管总局、国家知识产权局、国家数据局联合印发《关于加强科技金融领域数据开发利用的通知》。

基于美国科技人才政策演进，本文梳理特朗普第二任期对内、对外和对华三个层面的AI人才政策，审视其长期系统性投入人才储备、加速AI领域外交人才转型、强化对华AI人才竞争等措施的表征，探究其力图确保在AI领域绝对优势这一核心目标的背后逻辑……

Мошенники даже копировали предупреждения о мошенничестве — и убеждали жертв не доверять настоящим сайтам.

A vulnerability was found in Linux Kernel up to 6.12.74/6.18.13/6.19.3 and classified as critical. Impacted is the function dw_i3c_master_i2c_xfers of the component i3c. Executing a manipulation can lead to memory leak. This vulnerability appears as CVE-2026-45863. The attacker needs to be present on the local network. There is no available exploit. It is suggested to upgrade the affected component.

A vulnerability classified as problematic was found in Linux Kernel up to 6.19.3. This vulnerability affects unknown code of the component netfilter. The manipulation results in privilege escalation. This vulnerability is reported as CVE-2026-45860. The attacker must have access to the local network to execute the attack. No exploit exists. Upgrading the affected component is advised.

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.12.74/6.18.13/6.19.3. This issue affects the function qd_put of the component gfs2. This manipulation causes use after free. This vulnerability appears as CVE-2026-45861. The attacker needs to be present on the local network. There is no available exploit. It is advisable to upgrade the affected component.

A vulnerability has been found in Linux Kernel up to 6.19.3 and classified as problematic. This issue affects some unknown processing. Performing a manipulation results in insufficiently random values. This vulnerability is reported as CVE-2026-45862. The attacker must have access to the local network to execute the attack. No exploit exists. The affected component should be upgraded.

A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.12.74/6.18.13/6.19.3. This vulnerability affects the function skb_gso_segment of the component netfilter. Such manipulation leads to injection. This vulnerability is documented as CVE-2026-45859. The attack requires being on the local network. There is not any exploit available. You should upgrade the affected component.

A vulnerability categorized as problematic has been discovered in vim up to 9.2.564. This issue affects the function update_snapshot of the file src/terminal.c of the component Command Line Handler. Executing a manipulation can lead to out-of-bounds read. This vulnerability is tracked as CVE-2026-52859. The attack can be launched remotely. No exploit exists. It is advisable to upgrade the affected component.

A vulnerability classified as critical was found in Linux Kernel up to 6.18.32/7.0.9. This affects the function ep_remove_file of the component eventpoll. Such manipulation of the argument f_ep leads to use after free. This vulnerability is referenced as CVE-2026-46242. The attack needs to be initiated within the local network. No exploit is available. Upgrading the affected component is advised.