Aggregator

キヤノン製のプロダクションプリンター、オフィス/スモールオフィス向け複合機には、機微な情報を取得可能な脆弱性が存在します。

Canvas, one of the preeminent learning management systems in the United States, descended into maintenance mode this Thursday,

The post Academic Lockdown: How the ShinyHunters Attack on Canvas LMS Paralyzed Thousands of Schools During Finals appeared first on Penetration Testing Tools.

苹果芯片代工为何引入英特尔、三星？苹果公司与英特尔、三星电子合作，为其设备生产芯片的消息引发关注。彭博社发文透露了苹果这么做的背后原因。首先苹果公司倾向于为任一关键组件配备多个供应商。过去几十年里，在

网络安全研究人员披露了 Ollama 中的一个严重安全漏洞，若该漏洞被成功利用，远程且未经身份验证的攻击者可能泄露其整个进程内存。   这一越界读取漏洞被追踪为 CVE - 2026 - 7482（通用漏洞评分系统 CVSS 分数：9.1），Cyera 将其命名为 “流血的喇嘛（Bleeding Llama）”，全球可能有超 30 万台服务器受影响。  ...

error code: 1003

Administrators of expansive Linux fleets are being presented with an emergency “kill switch” designed to neutralize vulnerable segments

The post The Kernel Kill Switch: Sasha Levin’s New “Last Line of Defense” for Linux Vulnerability Mitigation appeared first on Penetration Testing Tools.

macOS users are once again being enticed by “simplistic remedies” for system optimization or disk purification, yet following

The post The Terminal Trap: How the “ClickFix” Scam Tricks Mac Users into Self-Infecting with Data-Stealing Malware appeared first on Penetration Testing Tools.

Microsoft has modernized several quintessential utilities within the Sysinternals Suite, a collection frequently utilized by system administrators, support

The post Deep Diagnostics: Microsoft Supercharges Sysinternals with AI-Era Process Tracking and Linux Support appeared first on Penetration Testing Tools.

攻击者在一场正在进行的恶意广告活动中，滥用谷歌广告和 Claude.ai 的合法共享聊天内容。   用户在搜索 “Claude mac 下载” 时，可能会看到谷歌的赞助搜索结果，其中将 claude.ai 列为目标网站，但实际引导用户执行的操作会在其 Mac 设备上安装恶意软件。   被用于攻击 Mac 用户的 Claude 共享聊天内容   ...

error code: 1003

Currently trending CVE - Hype Score: 1 - Acceptance of extraneous untrusted data with trusted data in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.

Currently trending CVE - Hype Score: 1 - Bitcoin Core through 28.x has a security issue, the details of which are not disclosed. The earliest affected version is 0.14.

周四，Ivanti 发布了 2026 年 5 月针对 Endpoint Manager Mobile（EPMM）产品的安全更新，修复了五个漏洞，其中包括一个在针对性攻击中被利用的零日漏洞。   这个被利用的漏洞编号为 CVE - 2026 - 6973，属于高危的输入验证不当问题，已认证且具备管理员权限的攻击者可利用该漏洞进行远程代码执行。   Ivanti 表示，知晓 &ld...

error code: 1003

NVIDIA has corroborated a data breach involving a subset of GeForce NOW subscribers, though the incursion was notably

The post Cloud Gaming Compromise: NVIDIA Partner GFN.am Hit by Data Breach Exposing Millions of Records appeared first on Penetration Testing Tools.

Теперь школам поставили дедлайн: заплатить до 12 мая. А иначе…

The decentralized exchange Ekubo, established upon the Starknet platform, suffered a loss of approximately $1.4 million in Bitcoin

The post 53 Seconds, 85 Transactions: How the Ekubo Router Exploit Siphoned $1.4M in Wrapped Bitcoin appeared first on Penetration Testing Tools.

美国匿名电话号码的时代可能即将结束。上个月30日，美国联邦通信委员会一致批准了一项提案，拟要求电信提供商在激活服务前验证客户的身份。政府签发的身份证、实际地址、法定姓名和现有电话号码都将被包含在内。所

五年前，我们做了一只水獭造型的玩偶挂件。我们希望桌面上能有这样一个小东西：不闪光光、不发声、不吵吵你，只是趴在那里，偶尔被你眼角扫到一眼，心情突然就柔软几秒。首批监工水獭用户返图首批监工水獭做出来后反