Aggregator

谷歌将其年龄验证API带给全球安卓开发者谷歌公司周三宣布，将在2026年底前向全球用户推出Play Signal API。该技术已在巴西上线，允许 Android 开发者识别其应用的低龄用户，以提供更

交通基础设施数智升级

TrendAI joins Nvidia as an inaugural partner in the Open Secure AI Alliance, advancing open models, harnesses, and research to strengthen cyber defense.

TrendAI joins Nvidia as an inaugural partner in the Open Secure AI Alliance, advancing open models, harnesses, and research to strengthen cyber defense.

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

The Russian state-sponsored hacking group Laundry Bear, also known as Void Blizzard, is exploiting an Exchange Outlook Web Access vulnerability in email campaigns to deliver a sophisticated backdoor called OWAReaper. [...]

Claude is down for some users, with Anthropic confirming elevated errors across multiple AI models. The disruption is causing requests to fail with a "529 Overloaded" message, including in Claude and tools that rely on its API. [...]

Cisco is warning that a high-severity Secure Firewall Management Center (FMC) static credential vulnerability, tracked as CVE-2026-20316, was actively exploited in zero-day attacks to gain unauthorized access to vulnerable devices. [...]

These are the top threats you should know about this week.

Claude Mythos found new flaws in HAWK and reduced AES, proving AI can autonomously advance cryptography research. Anthropic published two cryptographic research results achieved by Claude Mythos Preview working mostly autonomously: an improved attack on HAWK, a post-quantum digital signature scheme currently under NIST review, and a 200 to 800 times faster attack on a […]

Amazon's threat intelligence team traced domain records from the open-source software hack to a smaller, earlier compromise by the same North Korean group.

The post A little-known npm package was North Korea’s warm-up act for the axios hack appeared first on CyberScoop.

A vulnerability classified as problematic has been found in pydantic pydantic-ai up to 1.105.0/2.0.0b5. Affected by this vulnerability is an unknown functionality of the component UI adapter. Performing a manipulation results in path traversal. This vulnerability is known as CVE-2026-54249. Remote exploitation of the attack is possible. No exploit is available. It is recommended to upgrade the affected component.

Popular telehealth provider Hims & Hers "shared consumers’ sensitive health information with third-party advertising platforms such as Meta and Snap despite promising to protect patient privacy," the federal government alleges.

速修复

速修复

A vulnerability described as very critical has been identified in MSI Center 2.0.66.0. Affected is an unknown function of the file NTIOLib_X64.sys. Such manipulation leads to improper privilege management. This vulnerability is traded as CVE-2026-6102. An attack has to be approached locally. There is no exploit available.

A vulnerability marked as problematic has been reported in Autel MaxiCharger AC Elite Home 1.39.51. This impacts an unknown function of the component USB Interface. This manipulation causes improper authentication. This vulnerability appears as CVE-2026-13306. The attack requires local access. There is no available exploit.

A vulnerability labeled as problematic has been found in Autel MaxiCharger AC Elite Home 1.39.51. This affects an unknown function of the component NFC interface. The manipulation results in stack-based buffer overflow. This vulnerability is reported as CVE-2026-13309. The attack requires a local approach. No exploit exists.