今日共收录 1854 条安全情报，包含 1458 个 CVE，156 篇安全通告，以及 125 篇研究论文。
← 返回归档列表CVE-2026-105612
PostgreSQL Anonymizer contains a vulnerability that data-modifying CTEs to bypass the read-only restriction of masked ro
CVE-2026-103506
An authenticated user in Grafana can read SSO client secrets and modify instance-wide SSO settings without the required
CVE-2026-100105
A user with permission to edit contact points but not their protected fields can change protected settings, such as a co
CVE-2026-111419
A sensitive information exposure vulnerability exists on the Foxit official website because JavaScript code contains thi
CVE-2026-111418
A server-side request forgery (SSRF) vulnerability exists in the Foxit official website’s HTML-to-PDF conversion service
CVE-2026-111417
A broken access control vulnerability exists in the Foxit official website’s HTML-to-PDF conversion service due to the u
Threat actors are delivering malicious loaders and cryptocurrency miners under the guise of artificial intelligence (AI)
Google on Wednesday took the wraps off Gemini 4 Carbon, its latest frontier model with state-of-the-art cybersecurity an
Security teams have spent years trying to detect threats faster. AI is changing the harder part: how much time defenders
A flaw in Telegram for Android could be chained with two other bugs to take full control of a victim's phone through a v
AI is beginning to take over much of the work that has traditionally defined the security analyst's job. Investigating a
Hackers exploited a critical Cisco Catalyst SD-WAN flaw, fixed in February, to plant custom malware inside the systems t
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the d
Google’s new frontier model scored 88.2% on SEC-bench Pro and is rolling out first to vetted cyber defenders via its Fai
Unpatched voting machines, unverifiable QR-coded ballots, and AI-driven influence campaigns leave US elections short of
Cisco open sourced Project Quarry, a rule language for detecting AI agent attacks that only emerge across sequences of b
The flaws could lead to arbitrary code execution, authorization bypasses, and privilege escalation. The post Adobe, Veea
BAE Systems says no data was extracted and no PII was breached in the incident that disrupted US bankruptcy court notice
The personal and work information was allegedly stolen from an Okta single sign-on system earlier this year. The post Ov
The data of So-net and Plala customers in Japan was exposed, along with 54,401 email account passwords and 16 bank accou