Aggregator

Modular, Lightweight, Dynamic and Async-first [!IMPORTANT]Giskard v3 is a fresh rewri

Japan's Digital Agency has discovered a data breach that may have exposed around 246,000 record rows containing personal information of government employees. [...]

Frontier AI is compressing the attack lifecycle from vulnerability discovery to exploitation, forcing defenders to detect, patch and respond at machine speed. Cybersecurity has always been a race between attackers and defenders. ENISA’s latest assessment suggests that frontier AI is changing the speed of that race, and the gap between discovering a vulnerability and exploiting […]

September 15, 2026Thank

招聘网站上充斥着需要AI专长的职位，而传统岗位的招聘信息似乎正在减少。设计项目前期阶段大量工作过去需好几个人完成，现在点几下鼠标就能搞定。学习城市规划专业的金尚宇说：“我的感受是，AI替代的，其实就是

АНБ начинает самую масштабную реформу в истории.

CVE-2026-85706 is a path traversal vulnerability with a 10 out of 10 CVSS score, affecting both GitLab Community Edition and Enterprise Edition instances.

2026年9月15日 12:15人工智能, 科技资讯01.08K

September 15, 2026All t

美司法部称百万伊朗石油收益通过币安洗钱美国司法部正寻求没收6100万美元，其称该款项产生自伊朗黑市石油销售，并通过币安进行了洗钱。在周一提交的一份民事没收申请中，曼哈顿联邦检察官指控伊朗使用加密货币洗

A vulnerability has been found in lenve vhr 1.0-SNAPSHOT and classified as critical. This issue affects some unknown processing of the component MailReceiver. Performing a manipulation results in deserialization. This vulnerability is reported as CVE-2026-90490. The attack is possible to be carried out remotely. Moreover, an exploit is present. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability classified as problematic was found in langbot-app LangBot up to 4.10.10. Affected is an unknown function of the component Password Recovery. Executing a manipulation can lead to insufficient entropy. This vulnerability is registered as CVE-2026-90562. It is possible to launch the attack remotely. No exploit is available. Upgrading the affected component is advised.

A vulnerability was found in LibreNMS up to 1.65.0. It has been declared as critical. This vulnerability affects unknown code of the file ajax_table.php of the component API Endpoint. Executing a manipulation of the argument searchPhrase can lead to sql injection. This vulnerability appears as CVE-2020-15875. The attack may be performed from remote. There is no available exploit. It is recommended to upgrade the affected component.

Память научили расти этажами без электрических утечек.

New releaseSep 15, 2026Scans Discord links across mutual guilds to extract profiles, cross‑reference

Homebrew package manager version 7.0.0 has been released with a built-in vulnerability scanner, stronger security controls, and the full release of its native BrewUI graphical interface. [...]

A vulnerability classified as critical has been found in FlowiseAI Flowise up to 3.1.2. This issue affects some unknown processing of the file packages/components/nodes/tools/MCP/core.ts of the component MCP Server. The manipulation leads to os command injection. This vulnerability is referenced as CVE-2026-69263. Remote exploitation of the attack is possible. No exploit is available. It is recommended to upgrade the affected component.

A vulnerability has been found in FlowiseAI Flowise up to 3.1.2 and classified as critical. Affected by this vulnerability is the function validatePythonCodeForDataFrame of the component CSVAgent. The manipulation of the argument csvFile leads to os command injection. This vulnerability is listed as CVE-2026-69264. The attack may be initiated remotely. There is no available exploit. The affected component should be upgraded.

A vulnerability labeled as problematic has been found in Siemens Desigo CC ClickOnce Client, Desigo CC Flex Client, Desigo CC Installed Client and Desigo CC. This impacts an unknown function. The manipulation results in code injection. This vulnerability was named CVE-2026-34223. The attack needs to be approached locally. There is no available exploit.

A vulnerability has been found in Bestechnic BES2300 Bluetooth Audio SoC firmware up to 4.x and classified as critical. Affected by this issue is the function SBC_DecodeFrames. This manipulation causes buffer overflow. The identification of this vulnerability is CVE-2026-79379. It is possible to initiate the attack remotely. There is no exploit available. The affected component should be upgraded.