Aggregator

A vulnerability classified as very critical has been found in Linux Kernel up to 6.1.177/6.6.144/6.12.96/6.18.39/7.1.4. Affected is the function receive_big of the component virtio-net. Performing a manipulation results in memory corruption. This vulnerability was named CVE-2026-64552. The attack may be initiated remotely. There is no available exploit. It is recommended to upgrade the affected component.

A vulnerability described as critical has been identified in Linux Kernel up to 7.0.12. Impacted is the function zap_other_threads of the file kernel/signal.c of the component signal. The manipulation of the argument group_stop_count results in race condition. This vulnerability is cataloged as CVE-2026-53352. The attack must originate from the local network. There is no exploit available. Upgrading the affected component is recommended.

A vulnerability has been found in Linux Kernel up to 7.0.9 and classified as critical. This vulnerability affects unknown code of the component mailbox. This manipulation causes null pointer dereference. This vulnerability is tracked as CVE-2026-53295. The attack is only possible within the local network. No exploit exists. The affected component should be upgraded.

A vulnerability identified as critical has been detected in Linux Kernel up to 7.0.12. The impacted element is the function shm_destroy_orphaned of the file shm_perm.lock of the component ipc. The manipulation leads to deserialization. This vulnerability is listed as CVE-2026-52930. The attack must be carried out from within the local network. There is no available exploit. You should upgrade the affected component.

A vulnerability was found in Linux Kernel up to 7.1-rc1. It has been rated as critical. The affected element is the function rock_continue of the file rock.c of the component isofs. Performing a manipulation of the argument cont_extent results in infinite loop. This vulnerability was named CVE-2026-46303. The attack needs to be approached within the local network. There is no available exploit. Upgrading the affected component is advised.

A vulnerability classified as critical has been found in Linux Kernel up to 6.6.139/6.12.85/6.18.26/7.0.3/7.1-rc1. Impacted is the function ipv6_rpl_srh_rcv of the component RFC 6554 Source Routing Header Handler. Performing a manipulation results in out-of-bounds write. This vulnerability is reported as CVE-2026-43501. The attacker must have access to the local network to execute the attack. No exploit exists. It is recommended to upgrade the affected component.

Jellyfin has released version 12.0, a significant update to its open-source media server. This version includes a wide range of platform improvements and essential security updates affecting both the server and the web client. The project strongly advises administrators to plan their upgrade carefully because it includes database migrations and compatibility-breaking changes for existing deployments. […]

The post Jellyfin 12.0 Released With Security Fixes for Unauthorized File Access and XSS Flaws appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

DRAM Bad Again~

从标准化的 SaaS，到低成本适配具体业务流程的办公 Agent。

Они восстановили молекулярного предка бактерий и заставили его снова работать спустя миллионы лет.

Dell has released security updates for the Secure Connect Gateway (SCG) Application and Appliance after discovering three critical vulnerabilities. These flaws can expose enterprise deployments to unauthenticated administrative access, remote command execution, and potential host-level compromise. Detailed in Dell Security Advisory DSA-2026-382, these issues affect SCG 5.0 appliance versions earlier than 5.36.00.16 and application versions […]

The post Dell Secure Connect Gateway Critical Flaws Allow Unauthenticated Remote Code Execution and Admin Access appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Google warned that the rapid integration of AI-assisted coding tools has significantly expanded software supply chain risks

A Chinese-language group is compromising government and education sites to create a reverse-proxy network with gambling-themed sites.

CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.  

• CVE-2026-75650 Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability
• CVE-2026-81963 Microsoft Windows Link Following Vulnerability  
• CVE-2026-85880 Microsoft Windows Heap-Based Buffer Overflow Vulnerability 
• CVE-2026-86218 N-able N-central Static Code Injection Vulnerability 

These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risks to the federal enterprise.

Binding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk establishes vulnerability management requirements for Federal Civilian Executive Branch (FCEB) agencies. BOD 26-04 reinforces the importance of the KEV Catalog and requires federal agencies to prioritize rapid remediation of high-risk vulnerabilities, specifically those identified by Common Vulnerabilities and Exposures (CVEs) listed in CISA’s KEV Catalog on publicly exposed assets that grant total control of the asset post-exploitation, while deferring action for lower-risk vulnerabilities. BOD 26-04 further establishes basic expectations for when agencies must check whether threat actors compromised the system before the patch was applied.

While BOD 26-04 applies only to FCEB agencies, CISA encourages all organizations to adopt risk-based vulnerability management and prioritize remediation of KEV Catalog vulnerabilities. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.

Aware of an exploited vulnerability not currently listed in the KEV Catalog? Submit it for potential addition through CISA’s KEV Nomination Form. Potential KEV additions must have a CVE ID, evidence of exploitation, and clear mitigation guidance. 

Researchers at the security firm Calif have built a worm that takes over a WeChat account via an incoming call and demonstrated it spreading among three test phones. The person being called does not have to answer or touch their phone for it to work, but the caller must already be one of their WeChat contacts. Calif reported the flaw to Tencent in July and says the company has since

In the last six months, Chainguard doubled its output from 500 million to more than 1 billion container build manifests. We also surpassed 3,000 unique container images and 675,000 image versions in our catalog. Those are the headline numbers, but I want to share what's actually behind them. The number itself is less interesting than the system that produced it, and why we had to fundamentally

Nearly 9 in 10 incidents investigated by Unit 42 in 2025 involved an identity weakness, and 65% of initial access […]

The post Identity Based Cyberattacks in the GCC: What the 2026 Data Says to Fix First appeared first on HawkEye.

Аналитики Positive Technologies выявили активность вредоносного ПО в семидесяти процентах компаний СНГ.

Anthropic’s Claude Mythos Preview has demonstrated the ability to complete an end-to-end enterprise intrusion simulation, progressing from initial access through chained exploitation and network traversal to the defined compromise objective. The result marks a material shift in frontier-model cyber capability: the model did not merely solve isolated CTF-style tasks, but autonomously connected weaknesses commonly found […]

The post Claude Mythos Executes End-to-End Intrusion From Initial Access to Full Domain Compromise appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.