Aggregator

A vulnerability classified as critical has been found in Apple Safari, iOS, iPadOS and macOS up to 26.5.1. This vulnerability affects unknown code of the component Web Handler. Performing a manipulation results in use after free. This vulnerability is identified as CVE-2026-43727. The attack can be initiated remotely. There is not any exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Apple Safari, iOS, iPadOS and macOS up to 26.5.1. It has been rated as critical. This affects an unknown function of the component Website Handler. Performing a manipulation results in incorrect permission assignment. This vulnerability is known as CVE-2026-43721. Remote exploitation of the attack is possible. No exploit is available. Upgrading the affected component is advised.

A vulnerability labeled as problematic has been found in CODECHILD XML::Bare up to 0.53. This impacts the function parserc_parse of the component Attribute Parser. Executing a manipulation can lead to infinite loop. The identification of this vulnerability is CVE-2026-13401. The attack may be launched remotely. There is no exploit available.

Mozilla проверила популярные трекеры цикла и осталась недовольна результатом.

研究团队结合了地面大型巡天计划 LAMOST DR7 的光谱观测，与 ESA 盖亚太空望远镜的高精度视差资料，建立起包含 155,600 颗邻近太阳次巨星（Subgiant stars）的庞大基准样本。由于这类恒星形成于银河系早期，其化学组成几乎保留了最原始的样貌，是推算时间极佳的恒星化石。团队利用马可夫链蒙地卡罗（MCMC）算法重建真实年龄分布，推导出样本中最古老恒星的真实年龄为 137.3（+1.8 / -1.5）亿年，若考虑大爆炸后约 2 亿年才形成首批长寿命恒星，这与宇宙微波背景辐射预测的 138 亿年宇宙年龄完全相符。最新结果显示，目前并没有可信的观测证据支持宇宙年龄超过 138 亿年。

It was a perfectly ordinary morning. Roland Hambach, CEO of ene’t GmbH, was sitting at breakfast scrolling through his emails. Then came the first one with the subject line “DDoS Attack.” Then the second. Then the third. His first instinct: spam, delete. But then the IT department sounded the alarm at the same time.   What followed was […]

The post Three Emails, Then Silence: What a DDoS Attack Teaches a CEO appeared first on Link11.

速修复

速修复

U.S. prosecutors on Thursday charged a New York man and woman for their roles in a large-scale crime ring that laundered money stolen in cyber investment fraud scams. [...]

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds KNX Association KNX Protocol Connection Authorization Option 1 and Oracle flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added SonicWall and Microsoft flaws to its Known Exploited Vulnerabilities (KEV) catalog. The flaws added to the catalog are: The vulnerability CVE-2023-4346 (CVSS […]

1.      securotrop勒索团伙公布新的受害公司 2.      thegentlemen勒索团伙公布新的受害公司3.      gunra勒索团伙公布新的受害公司 4.      dragonforce勒索团伙公布新的受害公司

微软宣布开源 Comic Chat，源代码采用 MIT 许可证托管在 GitHub 上。Comic Chat 是一款能自动将 IRC 中的对话转换为漫画格形式的聊天客户端，其中包含插图人物、对话气泡和表情。它的一个目的是帮助世界认识 Comic Sans 字体。Comic Sans 字体最早由微软字体设计师 Vincent Connare 于 1994 年设计，在 Comic Chat 中找到了它真正的家。它非正式的手写风格与软件的对话气泡完美匹配。Comic Chat 最早于 1995 年开发，1996 年随 Internet Explorer 3 推出。开源 Comic Chat 的一个意图是保存软件历史，以及让开源社区在此基础上探索、学习和二次开发。

Разработчики NGINX выпустили обновления, устраняющие три уязвимости в веб-сервере.

【火绒安全周报】人工智能拟人化互动服务新规/印度最大核电站疑遭勒索攻击

火绒小问答——「企业版」文件实时监控

A ransomware attack has stopped milk production at Fairlife, the Coca-Cola dairy brand known for its high-protein milk, protein shakes, and nutrition drinks. Coca-Cola disclosed the incident on July 16, 2026, in a Form 8-K filed with the U.S. Securities and Exchange Commission (SEC). “Product quality and safety have not been impacted. However, as a result of the incident, production operations at fairlife in the United States are temporarily suspended. fairlife’s Canada production operations are … More →

The post Ransomware attack halts Coca-Cola’s Fairlife US milk production appeared first on Help Net Security.

A vulnerability described as critical has been identified in Linux Kernel up to 6.19.10. The affected element is the function device_delete of the component irdma. Such manipulation leads to deadlock. This vulnerability is referenced as CVE-2026-31565. The attack needs to be initiated within the local network. No exploit is available. Upgrading the affected component is recommended.

A vulnerability described as critical has been identified in Linux Kernel up to 6.19.12. Affected by this issue is the function tse_start_xmit of the component net. The manipulation results in stack-based buffer overflow. This vulnerability was named CVE-2026-31658. The attack needs to be approached within the local network. There is no available exploit. Upgrading the affected component is recommended.

A vulnerability was found in Linux Kernel up to 6.19.12. It has been declared as critical. Affected by this issue is the function proto_register of the component mptcp. Executing a manipulation can lead to use after free. This vulnerability is registered as CVE-2026-31669. The attack requires access to the local network. No exploit is available. It is recommended to upgrade the affected component.