Aggregator

技术不分咖位，热爱才是一切！当AI遇上安全，真正的交叉点在哪里？

OpenAI is now rolling out ChatGPT Astra, its most powerful model to date, to those with a $20 Plus subscription, but there's no word on when free users will get access.. [...]

用户把几份资料交给 Grok Bot，让它整理成报告，随后关掉了桌面应用。只要工作仍在使用云端能力，任务就可以继续。

华为、苹果正面交锋折叠屏；古尔曼：阿里千问开源 Qwen-Drive-1.0-4B：首个面向自动驾驶的视觉语言基础模型；「国家反诈 AI」APP 正式上线。

Пол Мейер сократил число граней вдвое по сравнению с предыдущим решением и сохранил строгую математическую справедливость.

比断网更危险的是链路失真。

A vulnerability categorized as problematic has been discovered in MojoX::Authentication up to 0.005. This affects the function parse_assertion of the component SAML2. Executing a manipulation can lead to improper certificate validation. The identification of this vulnerability is CVE-2026-86304. The attack may be launched remotely. There is no exploit available. It is advisable to upgrade the affected component.

卷 2 明确面向网络安全从业者、数字调查员和威胁分析师，覆盖域名/IP 追踪、电话与人员情报、漏洞评估、威胁画像，并强调把原始数据转化为结构化情报报告。

今天给大家推送印度石油与能源研究大学（UPES）大学教授阿卡什德普·巴尔德瓦杰（Akashdeep Bhardwaj）撰写的两本开源情报应用方法的书籍。

Currently trending CVE - Hype Score: 1 - Multiple vulnerabilities exist in a daemon of AOS-CX that may allow for improper processing of malformed input. An unauthenticated remote attacker could exploit these vulnerabilities by sending specially crafted packets to the affected service. Successful exploitation could ...

Currently trending CVE - Hype Score: 9 - In the Linux kernel, the following vulnerability has been resolved: net/rds: handle zerocopy send cleanup before the message is queued A zerocopy send can fail after user pages have been pinned but before the message is attached to the sending socket. The purge path currently ...

Currently trending CVE - Hype Score: 2 - As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening releases that address multiple internally discovered ...

Currently trending CVE - Hype Score: 2 - As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening releases that address multiple internally discovered ...

Currently trending CVE - Hype Score: 6 - Unrestricted Upload of File with Dangerous Type vulnerability in Elementor Elementor Pro allows Using Malicious Files. This issue affects Elementor Pro: from n/a through 4.2.1.

A vulnerability was found in Apache Software Foundation Apache Ant. It has been rated as critical. The impacted element is an unknown function of the component ftp/scp. Performing a manipulation results in path traversal. This vulnerability was named CVE-2026-78254. The attack may be initiated remotely. There is no available exploit.

A vulnerability was found in itsourcecode Sales and Inventory System 1.0. It has been declared as critical. The affected element is an unknown function of the file /pages/cust_edit1.php. Such manipulation of the argument ID leads to sql injection. This vulnerability is uniquely identified as CVE-2026-86310. The attack can be launched remotely. Moreover, an exploit is present.

Submit #902720 / VDB-399483

Submit #895529 / VDB-399288

A vulnerability was found in itsourcecode Sales and Inventory System 1.0. It has been classified as critical. Impacted is an unknown function of the file /pages/pro_searchfrm.php. This manipulation of the argument ID causes sql injection. This vulnerability is handled as CVE-2026-86309. The attack can be initiated remotely. Additionally, an exploit exists.