Posts of last few hours
More than 100 technology, cybersecurity, and financial-services organizations have joined OpenAI in an open letter urging a global surge in cyber defense as artificial intelligence models grow more capable of attacking and protecting digital systems. Published Thursday as “A call for collective action on cyber defense,” the statement warns that AI-enabled cyberattacks will become far […]
The post 100+ Tech and Security Organizations Call for Global Cyber Defense Surge Against AI Attacks appeared first on Cyber Security News.
https://cybersecuritynews.com/ai-cyber-defense-letter/
发表在《科学》期刊上的一项研究分析了加拉帕戈斯群岛（Galápagos）珊瑚长达千年的记录，发现随着地球变暖，厄尔尼诺现象正在加剧，东太平洋的厄尔尼诺-南方涛动（ENSO）变率比工业化前时代高出了约 36.5%。这些发现表明，气候变化已经在放大全球最重要的极端天气来源之一，并可能对生态系统、基础设施和人类社会带来日益增长的风险。ENSO 是导致年际气候极端事件的主要原因，它与干旱、洪水、野火、珊瑚白化事件以及对农业和人类健康的影响相关。该现象源于热带太平洋与大气之间的复杂相互作用。近几十年来发生了数次异常强烈的厄尔尼诺事件，其变暖范围覆盖了热带太平洋的大部分区域。
https://www.solidot.org/story?sid=85217
Threat actors are increasingly abusing overlooked Active Directory service principal name (SPN) misconfigurations to launch stealthier Kerberoasting attacks, turning ordinary user accounts into high-value credential targets. The technique, dubbed “Ghost SPN” by Trellix researchers, can allow an intruder with delegated directory permissions to temporarily assign an SPN to a standard account, request a Kerberos service […]
The post Hackers Abuse Active Directory SPN Misconfigurations for Stealthy Kerberoasting Attacks appeared first on Cyber Security News.
https://cybersecuritynews.com/active-directory-spn-misconfigurations/
Currently trending CVE - Hype Score: 8 - Apache Flink CDC version 3.4.0 was vulnerable to a SQL injection via maliciously crafted identifiers eg. crafted database name or crafted table name. Even through only the logged-in database user can trigger the attack, we recommend users update Flink CDC version to 3.5.0 which ...
https://cvemon.intruder.io/cves/CVE-2025-62228
Currently trending CVE - Hype Score: 8 - React Router is a router for React. In @remix-run/react versions 1.15.0 through 2.17.0. and react-router versions 7.0.0 through 7.8.2, a XSS vulnerability exists in in React Router's meta()/ APIs in Framework Mode when generating script:ld+json tags which could allow ...
https://cvemon.intruder.io/cves/CVE-2025-59057
Currently trending CVE - Hype Score: 9 - An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions.
https://cvemon.intruder.io/cves/CVE-2026-66384
Currently trending CVE - Hype Score: 9 - An issue was discovered in ownCloud owncloud/core before 10.13.1. An attacker can access, modify, or delete any file without authentication if the username of a victim is known, and the victim has no signing-key configured. This occurs because pre-signed URLs can be accepted ...
https://cvemon.intruder.io/cves/CVE-2023-49105
Currently trending CVE - Hype Score: 22 - In the Linux kernel, the following vulnerability has been resolved:
xfrm: nat_keepalive: avoid double free on send error
nat_keepalive_send() frees the keepalive skb whenever the IPv4 or IPv6
send helper reports an error.
That cleanup is only correct before the skb is handed ...
https://cvemon.intruder.io/cves/CVE-2026-72137
Currently trending CVE - Hype Score: 2 - Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.
https://cvemon.intruder.io/cves/CVE-2026-63520
Currently trending CVE - Hype Score: 9 - In the Linux kernel, the following vulnerability has been resolved:
ipv6: account for fraggap on the paged allocation path
In __ip6_append_data(), when the paged-allocation branch is taken
(MSG_MORE / NETIF_F_SG / large fraglen), alloclen and pagedlen are
computed ...
https://cvemon.intruder.io/cves/CVE-2026-53362
Currently trending CVE - Hype Score: 4 - Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to bypass a security feature over a network.
https://cvemon.intruder.io/cves/CVE-2026-55040
Currently trending CVE - Hype Score: 8 - React Router is a router for React. In @react-router/node versions 7.0.0 through 7.9.3, @remix-run/deno prior to version 2.17.2, and @remix-run/node prior to version 2.17.2, if createFileSessionStorage() is being used from @react-router/node (or @remix-run/node/@remix-run/deno ...
https://cvemon.intruder.io/cves/CVE-2025-61686
Currently trending CVE - Hype Score: 8 - Flowise is a drag & drop user interface to build a customized large language model flow. In version 3.0.5 and earlier, the `forgot-password` endpoint in Flowise returns sensitive information including a valid password reset `tempToken` without authentication or verification. ...
https://cvemon.intruder.io/cves/CVE-2025-58434
A newly disclosed vulnerability in cPanel and WHM, the widely used web hosting control panel software, could let a low-privileged, authenticated user seize root-level control of an entire server. Tracked as CVE-2026-65643, the flaw resides in cPanel’s domain parking functionality and was publicly detailed in an advisory published on August 27, 2026, by cPanel support […]
The post Critical cPanel Vulnerability Allows Attackers to Take Full Server Control appeared first on Cyber Security News.
https://cybersecuritynews.com/critical-cpanel-vulnerability/
A vulnerability was found in AWS diagram-as-code up to 0.23. It has been rated as problematic. The impacted element is an unknown function of the component Zip Extraction. This manipulation causes path traversal.
This vulnerability appears as CVE-2026-81838. The attack requires local access. There is no available exploit.
Upgrading the affected component is advised.
https://vuldb.com/vuln/396404
A vulnerability was found in Frappe up to 16.32.0. It has been declared as problematic. The affected element is the function LinksWidget.set_body of the file frappe/public/js/frappe/widgets/links_widget.js of the component Workspace Link Widget. The manipulation of the argument Description results in cross site scripting.
This vulnerability is reported as CVE-2026-81731. The attack can be launched remotely. No exploit exists.
https://vuldb.com/vuln/396403
A vulnerability was found in Red Hat Enterprise Linux. It has been classified as problematic. Impacted is an unknown function of the component ICC Profile Parsing. The manipulation leads to out-of-bounds write.
This vulnerability is documented as CVE-2026-81893. The attack needs to be performed locally. There is not any exploit available.
https://vuldb.com/vuln/396402
A vulnerability was found in MongoDB C# Driver up to 3.11.0 and classified as problematic. This issue affects some unknown processing of the component Diagnostic Representation. Executing a manipulation can lead to information disclosure.
This vulnerability is registered as CVE-2026-81530. The attack needs to be launched locally. No exploit is available.
It is suggested to upgrade the affected component.
https://vuldb.com/vuln/396401
A vulnerability has been found in Redis up to 8.10.0 and classified as critical. This vulnerability affects the function tlsProcessPendingData. Performing a manipulation results in use after free.
This vulnerability is cataloged as CVE-2026-81934. It is possible to initiate the attack remotely. There is no exploit available.
The affected component should be upgraded.
https://vuldb.com/vuln/396400
A vulnerability, which was classified as critical, was found in MongoDB C# Driver up to 3.11.0. This affects an unknown part. Such manipulation leads to improper neutralization.
This vulnerability is listed as CVE-2026-81529. The attack may be performed from remote. There is no available exploit.
You should upgrade the affected component.
https://vuldb.com/vuln/396399
Latest Blog Posts
- 4 days 23 hours ago
- 2 months ago
- 2 months ago
- 2 months ago
- 2 months 1 week ago
- 6 months 4 weeks ago
- 1 year ago
- 1 year ago
- 1 year 1 month ago
- 1 year 5 months ago