Aggregator

当人们还在吐槽Mac 只能办公不能玩大型3A游戏的时候，国外开发者 ScottJG 干了一件事：把一块 600

A critical security vulnerability impacting the Funnel Builder plugin for WordPress has come under active exploitation in the wild to inject malicious JavaScript code into WooCommerce checkout pages with the goal of stealing payment data. Details of the activity were published by Sansec this week. The vulnerability currently does not have an official CVE identifier. It

WordPress снова в заголовках. И снова не по хорошему поводу.

用户对 Windows 11 的抱怨微软显然听到了，今年以来软件巨头一直强调正致力于改进 Windows 11 的使用体验。它最近披露了两个方面的改进：其一是“低延迟模式（low latency profile）”，通过加速 CPU 改进“开始”菜单和“文件管理器”的性能；其二是不再降级用户安装的显卡驱动版本。Windows Central 测试了测试版引入的“低延迟模式”，发现在相同硬件上速度和响应有显著提升。用户再次抱怨微软过于依赖硬件去改进软件性能，而不是致力于优化软件降低对硬件的需求。微软和 GitHub 副总裁 Scott Hanselman 对这一批评进行了回应，称 macOS 和 Linux 等现代操作系统都采用了类似的加速机制。对于用户抱怨 Windows Update 降级了他们安装的新版本显卡驱动，微软宣布改变通过 Windows Update 发布显卡驱动的方式。

Аудиофайл сам запускает код и ведёт прямо к root через дыру в драйвере.

The Russian hacker group Secret Blizzard has developed its long-running Kazuar backdoor into a modular peer-to-peer (P2P) botnet designed for long-term persistence, stealth, and data collection. [...]

A vulnerability classified as critical has been found in RRWO Net::Statsd::Lite up to 0.8.x on Perl. This issue affects some unknown processing. Performing a manipulation results in crlf injection. This vulnerability is known as CVE-2026-46719. Remote exploitation of the attack is possible. No exploit is available. It is recommended to upgrade the affected component.

A vulnerability described as critical has been identified in multicollab Plugin up to 5.2 on WordPress. This vulnerability affects the function cf_add_comment. Such manipulation leads to missing authorization. This vulnerability is traded as CVE-2025-4202. The attack may be launched remotely. There is no exploit available. Upgrading the affected component is recommended.

Аферисты за месяц опустошили 75-летнюю вдову из Санкт-Петербурга.

​放弃「军备竞赛」，全新一代理想 L9 押注具身智能