Aggregator

A vulnerability has been found in libssh2 up to 1.11.1 and classified as problematic. This affects an unknown function of the component SSH Handler. This manipulation causes uninitialized resource. This vulnerability appears as CVE-2026-58051. The attack may be initiated remotely. In addition, an exploit is available.

A vulnerability identified as critical has been detected in Linux Kernel up to 6.12.93/6.18.35/7.0.12. This issue affects the function tmigr_handle_remote_up of the component timers. This manipulation causes infinite loop. This vulnerability is registered as CVE-2026-53180. Remote exploitation of the attack is possible. No exploit is available. You should upgrade the affected component.

A vulnerability classified as critical was found in Linux Kernel up to 6.18.35/7.0.12. This issue affects the function walk_s1 of the component KVM. Executing a manipulation of the argument srcu can lead to injection. This vulnerability appears as CVE-2026-53277. The attacker needs to be present on the local network. There is no available exploit. Upgrading the affected component is advised.

A vulnerability has been found in Linux Kernel up to 6.18.35/7.0.12 and classified as critical. Affected by this vulnerability is the function rtw_update_protection of the component staging. This manipulation causes buffer overflow. This vulnerability is tracked as CVE-2026-53179. The attack is only possible within the local network. No exploit exists. The affected component should be upgraded.

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.12.90/6.18.32/7.0.9. This issue affects the function __driver_attach of the component Platform. This manipulation of the argument driver_override causes use after free. This vulnerability is registered as CVE-2026-53119. The attack requires access to the local network. No exploit is available. It is advisable to upgrade the affected component.

A vulnerability was found in Canonical LXD up to 5.21.4/6.8 on Linux. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. Such manipulation leads to null pointer dereference. This vulnerability is listed as CVE-2026-9639. The attack may be performed from remote. There is no available exploit. It is recommended to upgrade the affected component.

A vulnerability was found in Canonical LXD up to 5.0.6/5.21.4/6.8. It has been rated as critical. Affected by this issue is some unknown functionality. Performing a manipulation results in incorrect authorization. This vulnerability is cataloged as CVE-2026-9640. It is possible to initiate the attack remotely. There is no exploit available. Upgrading the affected component is advised.

A new open-source offensive security platform called RedAmon is redefining automated penetration testing by chaining reconnaissance, exploitation, post-exploitation, AI-driven triage, and automated code remediation all into a single end-to-end pipeline that culminates in a GitHub pull request with the fix already written. RedAmon is a modular, containerized penetration testing framework built on Docker that requires […]

The post RedAmon AI Tool that Chains Reconnaissance, Exploitation, and Post-exploitation appeared first on Cyber Security News.

A vulnerability identified as critical has been detected in GLPI up to 10.0.3. The impacted element is an unknown function of the component API REST Handler. The manipulation of the argument user_token leads to sql injection. This vulnerability is traded as CVE-2022-39323. It is possible to initiate the attack remotely. There is no exploit available. You should upgrade the affected component.

A vulnerability was found in FreeRDP up to 2.8.x. It has been rated as problematic. This affects an unknown function. The manipulation leads to out-of-bounds read. This vulnerability is referenced as CVE-2022-39320. Remote exploitation of the attack is possible. No exploit is available. Upgrading the affected component is advised.

A vulnerability described as problematic has been identified in FreeRDP up to 2.8.x. This affects an unknown part of the component ZGFX Decoder. Executing a manipulation can lead to out-of-bounds read. This vulnerability is registered as CVE-2022-39317. It is possible to launch the attack remotely. No exploit is available. Upgrading the affected component is recommended.

A vulnerability classified as problematic has been found in FreeRDP up to 2.8.x. This vulnerability affects unknown code of the component urbdrc Channel Handler. The manipulation leads to divide by zero. This vulnerability is documented as CVE-2022-39318. The attack can be initiated remotely. There is not any exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic was found in FreeRDP up to 2.8.x. This issue affects some unknown processing of the component urbdrc Channel Handler. The manipulation results in out-of-bounds read. This vulnerability is reported as CVE-2022-39319. The attack can be launched remotely. No exploit exists. Upgrading the affected component is advised.

A vulnerability was found in FreeRDP up to 2.8.x. It has been declared as problematic. The impacted element is an unknown function of the component ZGFX Decoder. Executing a manipulation can lead to out-of-bounds read. The identification of this vulnerability is CVE-2022-39316. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

新发现的网络攻击活动正在分发一种此前未记录的恶意软件家族 SharkLoader，它作为加载器，在被攻陷的主机上部署 Cobalt Strike Beacon。 卡巴斯基将该活动命名为 StrikeShark，并表示该活动针对了印度尼西亚的外交机构、多个国家的软件开发公司，以及位于黎巴嫩、叙利亚、哥伦比亚、北马其顿、尼泊尔和塞尔维亚的其他行业实体。 这家俄罗斯网络安全供应商表示：“观察...

乌克兰安全局（SSU）表示，其与美国联邦调查局（FBI）合作，揭露了一起由俄罗斯情报机构策划的长期活动，旨在入侵乌克兰、欧洲及美国政府官员、军事人员、政治人物和活动人士的消息应用账户。 该机构补充说，这些系统性网络攻击旨在窃取受害者的敏感信息。 该机构在 Telegram 上发布的一则帖子中警告称：“这些‘黑客攻击’的目标是获取用户交换的敏感军事、政治和经济信息...

日本电信运营商 KDDI Corporation 披露了一起数据泄露事件，威胁行为者获取了其用于该国其他五家互联网服务提供商（ISP）的电子邮件系统访问权限。 该公司表示，它于 6 月 17 日发现了此次入侵，并立即通过阻止攻击者和实施防御措施进行了响应。 调查确定，黑客利用了 KDDI Corporation 在其系统上使用的未命名第三方软件中的漏洞。 KDDI 警告称：“虽然已经为...

FBI 和 CISA 警告称，一场针对 Signal 用户、与俄罗斯情报机构有关的钓鱼活动已演变为窃取 Signal Backup Recovery Keys，使攻击者能够访问受害者的历史消息。 这份更新的公共服务公告是对 2026 年 3 月一份警告的更新，该警告称威胁行为者通过钓鱼活动针对商业消息应用（尤其是 Signal）的用户，目的是劫持账户而非破坏端到端加密。 FBI 今天发布的一份 P...

Polymarket 表示，在黑客通过第三方供应商入侵平台前端并注入恶意脚本后，它将全额赔偿估计损失 300 万美元的用户。 该公司在一份简短声明中表示，此次黑客攻击是一次供应链攻击的结果，影响了其网站的一个依赖项。 Polymarket 是全球最大的基于加密货币的预测市场之一，允许用户交易价格反映市场对事件结果集体估计的合同。 它提供体育、经济指标、天气模式、奖项、政治和立法结果，甚至军事冲突的...

Wiz 的研究人员披露了 Amazon Q Developer 的 Visual Studio Code 扩展中的一个高严重性漏洞，该漏洞可能允许攻击者通过诱骗开发者打开恶意代码仓库来窃取其云凭据。 Amazon Q Developer 是一款 AI 驱动的编码助手，为开发者提供代码建议、自动重构以及通过与本地进程集成访问外部工具和服务等功能。 AWS 于 4 月 20 日收到该问题的通知，并于 ...