Aggregator

在iOS 27 beta 3中发现的代码表明，苹果公司正准备为 Lucid 和小米车辆添加车钥匙支持，并且该功能可能即将推出。该代码引用了标识符“LCID”和“XIA1”，它们似乎分别对应 Lucid

[This is a Guest Diary by Jason Callahan, an ISC intern as part of the SANS.edu BACS program]Ever

A vulnerability, which was classified as critical, was found in Mysterium Network Mysterium Node up to 1.35.x. This issue affects some unknown processing of the file /tequilapi/config/user of the component Config User Endpoint. The manipulation results in improper authorization. This vulnerability is identified as CVE-2026-31309. The attack can be executed remotely. There is not any exploit available.

Seldom updated, occasionally insightful.HomeAboutContact

蓝色起源拟融资 100 亿美元； SpaceXAI 首个编程智能体模型 Grok 4.5 发布；全新奔驰纯电 GLC SUV 车型上市，29.99 万元起

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

A vulnerability, which was classified as problematic, has been found in CycloneDX cyclonedx-node-npm up to 4.x. This vulnerability affects unknown code of the component CLI. The manipulation of the argument --workspace leads to os command injection. This vulnerability is referenced as CVE-2026-55849. The attack can only be performed from a local environment. No exploit is available.

13个高危漏洞POC已更新，覆盖思源笔记/用友U8/蓝凌/Discuz/UniFi等系统漏洞复现。

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

微软 Xbox 将把黑曜石工作室转移到开发新的《辐射》系列游戏中据知情人士透露，微软 Xbox 的子公司黑曜石娱乐已取消多个项目，并将开始制作热门《辐射》系列中的一款新游戏，作为该部门更广泛重组的一部

A vulnerability classified as critical was found in CoreWCF up to 1.8.0/1.9.0. This affects an unknown part of the component SAML Token Validation. Executing a manipulation can lead to algorithm downgrade. The identification of this vulnerability is CVE-2026-54781. The attack may be launched remotely. There is no exploit available.

OpenAI 确认 GPT-5.6 系列本周开放使用7 月 8 日，OpenAI 通过 X 平台确认，GPT-5.6 系列的三款 AI 模型 Sol、Terra、Luna 将于本周四正式面向所有用户开

A vulnerability classified as problematic has been found in Monsta Limited of New Zealand Monsta FTP up to 2.14.4. Affected by this issue is the function isBlockedIP of the component IP Blocklist Handler. Performing a manipulation of the argument URL results in server-side request forgery. This vulnerability was named CVE-2026-60105. The attack may be initiated remotely. There is no available exploit.

A vulnerability described as problematic has been identified in GitLab up to 18.11.6/19.0.3/19.1.1. Affected by this vulnerability is an unknown functionality of the component Work Item Metadata Access. Such manipulation leads to missing authorization. This vulnerability is uniquely identified as CVE-2026-8472. The attack can be launched remotely. No exploit exists.

周三，美国一名联邦法官批准了美国证券交易委员会(SEC)与埃隆·马斯克就购买推特股票一事达成的和解协议。尽管如此，她也表示，对该协议所暴露出的“危险信号”抱有“重大疑虑”。华盛顿特区地区法官斯帕克尔·

A vulnerability marked as problematic has been reported in GitLab up to 18.11.6/19.0.3/19.1.1. Affected is an unknown function of the component Cross-project Reference Pages. This manipulation causes improper authorization. This vulnerability is handled as CVE-2026-7492. The attack can be initiated remotely. There is not any exploit available.

A vulnerability labeled as problematic has been found in GitLab up to 18.11.6/19.0.3/19.1.1. This impacts an unknown function of the component Input Sanitization. The manipulation results in permission issues. This vulnerability is known as CVE-2026-6896. It is possible to launch the attack remotely. No exploit is available.