Aggregator

A vulnerability categorized as critical has been discovered in Linux Kernel. The impacted element is the function l2cap_reassemble_sdu of the file net/bluetooth/l2cap_core.c of the component Bluetooth. The manipulation results in use after free. This vulnerability is identified as CVE-2022-3564. The attack can only be performed from the local network. There is not any exploit available. It is best practice to apply a patch to resolve this issue.

Что такое анализ состава ПО (SCA) и почему без него сложно контролировать риски в зависимостях и компонентах.

A vulnerability was found in Broadcom Symantec Management Suite 8.7.3/8.8/8.8.1. It has been rated as very critical. The impacted element is an unknown function of the component Task Scheduler. This manipulation causes Local Privilege Escalation. This vulnerability is handled as CVE-2026-15380. It is possible to launch the attack on the local host. There is not any exploit available.

A vulnerability was found in Broadcom Symantec IT Management Suite 8.8/8.8.1. It has been declared as problematic. The affected element is an unknown function of the component WMI Provider. The manipulation results in information disclosure. This vulnerability is known as CVE-2026-15379. It is possible to launch the attack remotely. No exploit is available.

Recent reports indicate that GPT-5.6 Codex has unintentionally deleted files in users’ home directories under certain configurations, raising concerns about the risks of running advanced AI coding agents with unrestricted access to the system. This issue, brought to light by researcher Tibo Sottiaux, appears to be linked to edge-case behavior when the model operates in […]

The post GPT-5.6 Codex Reportedly Wipes Files From Home Directories appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A vulnerability was found in hubspotdev HubSpot All-In-One Marketing Plugin up to 11.3.62 on WordPress. It has been classified as problematic. Impacted is the function wp_localize_script. The manipulation leads to missing encryption of sensitive data. This vulnerability is traded as CVE-2026-9656. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability was found in Linux Kernel. It has been rated as problematic. The affected element is the function read_50_controller_cap_complete of the file tools/mgmt-tester.c of the component BlueZ. The manipulation of the argument cap_len leads to null pointer dereference. This vulnerability is referenced as CVE-2022-3563. The attack needs to be initiated within the local network. No exploit is available. Applying a patch is the recommended action to fix this issue.

准备好手速啦~

月之暗面宣布了 2.8 万亿参数开放权重模型 Kimi K3，完整的权重将于 7 月 27 日发布。月之暗面称，Kimi K3基于 Kimi Delta Attention 和 Attention Residuals 构建，参数规模 2.8 万亿，具备原生视觉功能和 100 万个词元上下文窗口。它是全球首个 3 万亿参数级别的开放权重模型，专为长程编码、知识工作和推理等前沿智能领域而设计。在基准测试中，Kimi K3 整体性能仅落后于 Claude Fable 5 和 GPT-5.6 Sol。Kimi K3 现已在 Kimi.com、Kimi Work、Kimi Code 和 Kimi API 上线。发布初期 Kimi K3 将默认采用最大思考强度模式，低强度和高强度模式将在后续更新中推出。

А попался Пекин на том, что собрал базу избирателей, которая оказалась больше всего населения Америки.

Британские власти ответили на масштабную кибератаку реальными тюремными сроками.

CISA on Thursday ordered government agencies to prioritize patching two actively exploited vulnerabilities in the Fortinet FortiSandbox threat detection platform. [...]

A sophisticated cyber espionage campaign targeting government and diplomatic organizations across Southeast Asia has used a Go-based remote access Trojan, dubbed GoSerpent, to collect sensitive documents for weeks before exfiltrating them via network shares. Researchers first identified the activity in February 2026, although evidence indicates the operation began in late 2025. The attackers deployed GoSerpent […]

The post GoSerpent Silently Steals Government Files for Weeks Before Sending Them to Hackers appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A vulnerability was found in ASUS AURA SYNC up to 1.07.83 and classified as problematic. This issue affects some unknown processing of the component AURA SYNC Driver. Executing a manipulation can lead to improper access controls. This vulnerability appears as CVE-2019-25764. The attack requires local access. There is no available exploit.

A vulnerability has been found in NEX-Forms Plugin up to 9.2.2 on WordPress and classified as problematic. This vulnerability affects unknown code of the component Dashboard. Performing a manipulation results in cross site scripting. This vulnerability is reported as CVE-2026-10525. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability, which was classified as critical, was found in AI Copilot Plugin up to 1.5.3 on WordPress. This affects an unknown part. Such manipulation leads to improper privilege management. This vulnerability is documented as CVE-2026-9810. The attack can be executed remotely. There is not any exploit available.

A vulnerability, which was classified as problematic, has been found in Royal Addons for Elementor Plugin up to 1.7.1062 on WordPress. Affected by this issue is some unknown functionality of the component REST Endpoint. This manipulation causes information disclosure. This vulnerability is registered as CVE-2026-13402. Remote exploitation of the attack is possible. No exploit is available.

A vulnerability classified as critical was found in User Registration & Membership Plugin up to 5.2.2 on WordPress. Affected by this vulnerability is an unknown functionality. The manipulation results in authorization bypass. This vulnerability is cataloged as CVE-2026-11966. The attack may be launched remotely. There is no exploit available.

A vulnerability classified as problematic has been found in WooCommerce WPS Bookings for WooCommerce Plugin up to 3.11.6 on WordPress. Affected is an unknown function of the component Booking. The manipulation leads to authorization bypass. This vulnerability is listed as CVE-2026-12393. The attack may be initiated remotely. There is no available exploit.

A vulnerability described as critical has been identified in User Registration & Membership Plugin up to 5.2.2 on WordPress. This impacts an unknown function of the component Registration Form. Executing a manipulation can lead to improper privilege management. This vulnerability is tracked as CVE-2026-11961. The attack can be launched remotely. No exploit exists.