Aggregator

看雪论坛作者ID：Qmeimei10086

vivo数据保护合规工程师陈晓芳发表了题为《重塑生成式AI的信任链：海外AI标识监管与出海实战》的主题演讲。

A vulnerability described as problematic has been identified in Aruba HiSpeed Cache Plugin up to 3.0.14 on WordPress. This affects an unknown part. Such manipulation leads to cross site scripting. This vulnerability is listed as CVE-2026-15889. The attack may be performed from remote. There is no available exploit.

A vulnerability marked as problematic has been reported in davidanderson Redux Framework Plugin up to 4.5.13.1 on WordPress. Affected by this issue is the function user_meta_save of the component Slider Field. This manipulation causes cross site scripting. This vulnerability is tracked as CVE-2026-5399. The attack is possible to be carried out remotely. No exploit exists.

安全学术圈现面向从事网络空间安全及相关方向研究的学者、研究生与工程技术人员长期征稿。诚邀各位踊跃投稿、积极推荐。

Grand Theft Auto VI (GTA 6) is still three months from release, but cybercriminals are not waiting for the launch date. Security firm Huntress found malware disguised as a leaked copy of the game, aimed at fans hoping to get their hands on it early. The sample Huntress pulled apart contained several different malware components. Researchers described an opportunistic bundle, “throwing everything they can at the users who attempt an installation,” a package that includes … More →

The post Fake GTA 6 download delivers malware-packed bundle to impatient gamers appeared first on Help Net Security.

Root-доступ не требует ни пароля, ни предварительного доступа.

We’re excited to share that ANY.RUN has once again been recognized by G2 as a leader in malware analysis. In G2’s Fall 2026 awards, we earned both Momentum Leader and Grid Leader recognition, highlighting our continued growth and strong position in the market. Most importantly, these achievements reflect the trust security professionals place in ANY.RUN […]

The post ANY.RUN Secures Leader Status in G2’s Malware Analysis Rankings appeared first on ANY.RUN's Cybersecurity Blog.

拉斯克奖公布了 2026 年的获奖名单。基础医学奖授予了发现掌管睡眠的大脑神经传递物质“食欲素”（Orexin）的日本筑波大学教授柳泽正史（66岁）和美国斯坦福医学院的 Emmanuel Mignot。临床医学奖项授予了开发血友病治疗药的中外制药公司前顾问服部有宏（66岁）、顾问北泽刚久（57岁）以及研究总部长井川智之（49岁）。这是日本人自 2014 年名城大学教授森和俊获奖以来，时隔近 12 年再次获奖。该奖被称为诺贝尔奖的风向标。公共服务奖授予了为帕金森病治疗作出贡献的美国演员迈克尔·J·福克斯。他本人罹患帕金森病，以其姓名冠名的基金会出资逾 30 亿美元加快了开发治疗方法的研究。

非法交易网络不断迁移，但其背后的商户与资金关系仍可通过链上追踪。

近期360捕获到 Kimsuky 组织攻击活动，其通过恶意LNK文件和PowerShell投递，经环境检测、内存加载载荷后，利用伪装成Chrome更新的计划任务实现持久化，以达到长期控制目的

为在情报学领域深入落实国家人才培养战略，激发大学生对开源情报分析的热情，提升学生在数据采集、深度分析及情报应用

情报史的本质是一部信息获取方式的演进史。在人类文明的历史长河中，决策者对未知环境的认知需求始终驱动着情报活动的形态变迁。

A vulnerability labeled as problematic has been found in Bosch Sensortec COINES_SDK up to 2.12.2. Affected by this vulnerability is the function mqueue_add_data of the file bridge_decoder.c of the component PC bridge protocol decoder. The manipulation results in buffer overflow. This vulnerability is identified as CVE-2026-42807. The attack is only possible with local access. There is not any exploit available.

A vulnerability identified as problematic has been detected in Bosch Sensortec BHI385 SensorAPI up to 2.1.0. Affected is the function bhi385_parse_debug_message of the file bhi385_parse.c of the component Debug Message Parser. The manipulation of the argument data_ptr leads to stack-based buffer overflow. This vulnerability is referenced as CVE-2026-42805. The attack can only be performed from a local environment. No exploit is available.

A vulnerability categorized as problematic has been discovered in Red Hat crun up to 1.29.1. This impacts an unknown function. Executing a manipulation can lead to link following. The identification of this vulnerability is CVE-2026-88265. The attack can only be executed locally. There is no exploit available.

A vulnerability was found in Bosch Sensortec BME690 SensorAPI up to 1.0.3. It has been rated as critical. This affects the function read_all_field_data of the file bme69x.c of the component Field Data Parsing. Performing a manipulation of the argument gas_index results in out-of-bounds read. This vulnerability was named CVE-2026-42806. The attack may be initiated remotely. There is no available exploit.

A vulnerability was found in Bosch Sensortec COINES_SDK up to 2.11. It has been declared as critical. The impacted element is the function coines_read_stream_sensor_data of the component Host Streaming API. Such manipulation leads to buffer overflow. This vulnerability is uniquely identified as CVE-2026-42808. The attack can be launched remotely. No exploit exists.

22万用户信息泄露，包括敏感的咨询详情和照片。