HPE Patches Critical RCE Vulnerabilities in AOS-CX
CVE-2026-73749
Nearly two dozen issues, tracked collectively as CVE-2026-73749 (CVSS score of 9.8), were addressed with the updates. Th
#news
共收录 3763 条相关情报。
← 返回所有主题OpenAI Pledges $1 Billion to Bring Frontier AI to Critical Infrastructure Defenders
The Daybreak initiative will provide subsidized AI cyber capabilities, training and technical assistance, though OpenAI
Phishing Campaign Sends Millions of Emails Using Invisible Unicode to Evade Filters
Microsoft is alerting of a "high-volume phishing campaign" that's using invisible Unicode tag characters to bypass email
Critical Citrix NetScaler auth bypass now leveraged in attacks
CVE-2026-19490
2026年9月4日，据BleepingComputer报道，安全情报公司Previdian指出攻击者已在野外针对Citrix NetScaler中一个严重级别的身份验证绕过漏洞（CVE-2026-19490）展开利用。该漏洞允许攻击者绕过身
PostgreSQL Fixes 12-Year-Old Logical Decoding Flaw Enabling Replication-Role Code Execution
CVE-2026-6471
PostgreSQL has released updates to address a security flaw that allows an account with the REPLICATION attribute to run
New Ted Backdoor Hides Inside Victims' Own HAProxy Builds to Intercept Web Traffic
A previously undocumented Linux toolkit has been found compiled directly into the trojanized HAProxy load balancers of t
Microsoft says some users can’t open the Teams desktop client
Microsoft is working to resolve a known issue that causes delays or blocks some users from opening the Microsoft Teams d
39 New Methods That Compromise Passkey Authentication
Passkeys eliminate many password-based attacks, but researchers have documented 39 methods for compromising authenticati
Sangoma Switchvox Vulnerabilities Exploited in the Wild
CVE-2026-9586
Tracked as CVE-2026-9586, the unauthenticated SQL injection flaw can be exploited remotely for arbitrary code execution.
New CrowdStrike 'FalconFlank' zero-day grants SYSTEM privileges
An anonymous security researcher who uses the "Nightmare Eclipse" handle released a CrowdStrike Falcon zero-day exploit
Exchange Online outage causes email delays, 'Server busy' errors
Microsoft is working to resolve an ongoing Exchange Online outage that is delaying email sent to and received from exter
12-Year-Old PostgreSQL Vulnerability Enables Database, Server Takeover
CVE-2026-6471
Dubbed PostGREShell, CVE-2026-6471 turns low-level replication access into code execution, permanent superuser privilege
Catch Raises $5 Million for AI Executive Assistant With Guardrails
Catch promises the capabilities of a trusted executive assistant, with built-in controls governing what data and systems
Google warns of new Chrome zero-day flaw exploited in attacks
Google has updated the Chrome browser to address an actively exploited high-severity zero-day flaw in the V8 engine and
VMware Workstation and Fusion Updates Patch Critical Vulnerability
The flaws could allow attackers with administrative access to a virtual machine to execute code on the host system. The
Google Patches 6th Chrome Zero-Day of 2026
Google’s Chrome 152 security update resolves 12 vulnerabilities, including a high-severity type confusion flaw in the V8
Nvidia Is Buying AI Platform Hugging Face for $13 Billion
The deal highlights Nvidia’s push to champion increasingly popular open-source AI models. The post Nvidia Is Buying AI P
Over 440,000 Exploit Attempts Target Super Forms and Elementor Pro RCE Flaws
CVE-2026-14894
Threat actors are exploiting two critical security flaws in WordPress plugins Super Forms and Elementor Pro, according t
Plex Urges Immediate Updates After Patching Multiple Undisclosed Security Flaws
Plex is urging users to update their instances to the latest version following the release of an update that patches mul
Google Releases Chrome Update to Patch Actively Exploited V8 Zero-Day
CVE-2026-85046
Google on Thursday released security updates to patch 12 vulnerabilities, including one that has come under active explo