Aggregator

CVE-2026-12417 | pravel SignUp & SignIn Plugin up to 1.0.0 on WordPress AJAX admin-ajax.php pravel_change_password reset_activation_code password recovery

Vuldb Updates
4 days 18 hours ago
A vulnerability, which was classified as critical, has been found in pravel SignUp & SignIn Plugin up to 1.0.0 on WordPress. This impacts the function pravel_change_password of the file admin-ajax.php of the component AJAX Handler. This manipulation of the argument reset_activation_code causes weak password recovery. The identification of this vulnerability is CVE-2026-12417. It is possible to initiate the attack remotely. There is no exploit available.
vuldb.com

大型猿类笑声节奏与人类相似，存在了 1500 万年

Solidot
4 days 18 hours ago
根据发表在《Communications Biology》期刊上的一项研究，大猿的笑声节奏可能与现代人类相似，而这一现象已持续了至少 1500 万年。研究结果还表明，在大猿的演化过程中，笑声变得更快、变化更多，且越来越受到所处情境的影响。所有大猿（人科动物）都会笑，包括与人类亲缘关系较近的物种，如倭黑猩猩，以及亲缘关系较远的物种，如婆罗洲猩猩。然而笑声的节奏随时间如何演变，及其可能与人类语言的演化有何关联，此前尚不清楚。 在研究中，英国华威大学的研究人员分析了 4 只婆罗洲猩猩（Pongo pygmaeus）、两只大猩猩（Gorilla gorilla）、3只倭黑猩猩（Pan paniscus）、4只黑猩猩（Pan troglodytes）以及4个人的笑声录音，这些个体的年龄在6个月至7岁之间。 科学家研究了140段笑声序列，并测量了每次发声之间的时间间隔。研究发现，所有物种的笑声都遵循一种规律的节律模式，连续发声之间的间隔均匀。由于这种模式在所有研究物种中均存在，研究人员推测，这种有节奏的笑声可能早在 1500 万年前就已存在于它们的共同祖先身上。 他们还推断，随着时间的推移，笑声变得更快、更多样化，比如人类会根据情境改变笑声的速度，如被挠痒时发出的笑声比玩耍时更快，而其他猿类则不会。此外，与人类亲缘关系越近的猿类，其笑声节奏的变化性就越大。 这些发现表明，在大猿和人类的演化过程中，发声的灵活性和控制力可能逐渐增强，作者推测这可能促成了语言的出现，未来需要通过更大样本量的研究证实这些发现。

每小时走五分钟有助于抵消久坐的危害

Solidot
4 days 18 hours ago
久坐是一种健康风险，但对久坐行为的干预需要考虑可行性和有效性。根据发表在《British Journal of Sports Medicine》期刊上的一项研究，研究人员评估了每隔 30 分钟、60 分钟或 120 分钟就站起来步行 5 分钟的干预措施。有 19342 名成年人参与了研究，其中 11484 人分成三组执行上述三种不同的干预方法。结果显示，所有干预组参与者报告疲劳和负面情绪显著降低，正面情绪显著提升。在考虑了可行性和有效性等因素之后，研究人员指出每小时站起来走 5 分钟在可行性和有效性之间取得了最佳平衡。

Play

Dark Feed IO
4 days 18 hours ago

You must login to view this content

cohenido

Akira

Dark Feed IO
4 days 18 hours ago

You must login to view this content

cohenido

Why 24/7 Support Is Essential for Cybersecurity Providers

Cyber Security News
4 days 19 hours ago

Hackers and other bad actors don’t keep normal business hours. They know that their best chance is when businesses are closed for the day, and the programs that they use can operate at any time.  A ransomware attack can begin at 2 a.m. on a Sunday or a phishing campaign may spread through a company […]

The post Why 24/7 Support Is Essential for Cybersecurity Providers appeared first on Cyber Security News.

Sweta Bose

Your First GRC Agent: A Red Teamer's Walkthrough

Bleeping Computer.
4 days 20 hours ago
AI won't replace GRC analysts, but it can eliminate much of the repetitive work they do. Anecdotes walks through building an agent that continuously monitors controls, identifies evidence gaps, and opens remediation tasks. [...]
Sponsored by Anecdotes

New Linux pedit COW Exploit Enables Root Access by Poisoning Cached Binaries

The Hackers News
4 days 20 hours ago
A flaw in the Linux kernel's traffic-control subsystem can let a local unprivileged user gain root on affected systems. CVE-2026-46331, nicknamed "pedit COW," is an out-of-bounds write in the packet-editing action (act_pedit) that corrupts shared page-cache memory. A public, working exploit appeared within a day of the CVE assignment on June 16. Red Hat rates the flaw as
The Hacker News

Amazon Q Developer Flaw Could Let Malicious Repos Run Code via MCP Configs

The Hackers News
4 days 20 hours ago
A high-severity flaw in Amazon Q Developer let a malicious repository run commands and steal a developer's cloud credentials. The path was short: a developer opens the repo, trusts the workspace, and Amazon Q does the rest. Amazon has patched it. Tracked as CVE-2026-12957 (CVSS 8.5), the bug sat in how Amazon's AI coding assistant handled Model Context Protocol (MCP) servers. Wiz
The Hacker News

美光与其大客户签署了长达五年的供货协议

Solidot
4 days 20 hours ago
美光 CEO Sanjay Mehrotra 在最新的财报电话会议上披露，该公司与 16 家大客户签署了“战略客户协议”，大部分协议涵盖的时间从 2026 年一直持续到 2030 年，客户承诺购买一定数量的产品，支付价格处于设有最低和最高价格的定价区间内。这意味着如果内存价格进一步上涨，客户基本不会受到的影响。美光 CEO 称，客户意识到，内存和存储设备的供应短缺需要相当长的时间才能缓解。美光预计供应将在 2028 年逐步改善，但目前无法预测内存供应何时才能赶上持续增长的需求。他说客户同意预付款项，该公司将利用这笔资金扩建晶圆厂。

New Bluekit Phishing-as-a-Service Bypasses MFA to Steal Microsoft Login Credentials

Cyber Security News
4 days 20 hours ago

A sophisticated Phishing-as-a-Service (PhaaS) platform called Bluekit has been confirmed operational at scale, with cybersecurity firm Netcraft detecting approximately 70 live hostnames in a single week. First documented by Varonis Threat Labs as an emerging tool still in development, Bluekit has since matured into a fully operational threat capable of bypassing multi-factor authentication (MFA) and […]

The post New Bluekit Phishing-as-a-Service Bypasses MFA to Steal Microsoft Login Credentials appeared first on Cyber Security News.

Guru Baran

Managed ad