Aggregator

Name: HackHowl 2026 (an HackHowl event.)
Date: Aug. 15, 2026, midnight — 17 Aug. 2026, 05:00 UTC  [add to calendar]
Format: Jeopardy
On-line
Offical URL: https://hackhowl.com/
Rating weight: 0.00
Event organizers: Hack Howl

Name: THJCC CTF 2026 summer (an THJCC CTF event.)
Date: Aug. 15, 2026, midnight — 16 Aug. 2026, 12:00 UTC  [add to calendar]
Format: Jeopardy
On-site
Offical URL: https://ctf2026-sum.thjcc.org/
Rating weight: 0.00
Event organizers: CakeisTheFake

Name: Trace Athena OSINT CTF (an Trace Athena OSINT CTF event.)
Date: Aug. 15, 2026, 3:30 a.m. — 15 Aug. 2026, 18:30 UTC  [add to calendar]
Format: Jeopardy
On-line
Location: On-line
Offical URL: https://trace.athena-ctf.com/
Rating weight: 0
Event organizers: Athena-CTF

Name: 0xV01D CTF 2026 V2 (an 0xV01D CTF event.)
Date: Aug. 15, 2026, 7:30 a.m. — 16 Aug. 2026, 07:30 UTC  [add to calendar]
Format: Jeopardy
On-line
Offical URL: https://0xv01d-ctf.xyz/
Rating weight: 0
Event organizers: OxV01D

Name: CTFZone 2026 (an CTFZone event.)
Date: Aug. 19, 2026, 8 a.m. — 19 Aug. 2026, 16:00 UTC  [add to calendar]
Format: Jeopardy
On-site
Location: Russia, Moscow
Offical URL: https://board.ctfz.zone/
Rating weight: 0
Event organizers: BIZone

A vulnerability labeled as critical has been found in Rocket.Chat up to 7.10.14/8.7.0. The affected element is the function dangerouslySetInnerHTML of the file InquireSidePanelItem.tsx of the component Omnichannel Queue. The manipulation of the argument Name results in injection. This vulnerability is identified as CVE-2026-65644. The attack can be executed remotely. There is not any exploit available. The affected component should be upgraded.

Here’s a look at the most interesting products from the past week, featuring releases from F5 Networks, Intezer, Netscout, and Tufin. NETSCOUT expands Adaptive DDoS Protection with outbound attack mitigation NETSCOUT has announced an extension of its Adaptive DDoS Protection (ADP) solution enabling service providers to automatically detect and mitigate outbound DDoS attack traffic. By extending protection from the attack target towards its source, NETSCOUT helps operators prevent compromised subscriber devices from disrupting their own … More →

The post New infosec products of the week: August 21, 2026 appeared first on Help Net Security.

广东警官学院、广州锦行网络科技有限公司联合发起的“2026年AI时代网络安全专业一流课程建设研讨会”在广警白云校区顺利召开。

政策解读抢先看

2026.08.28 / BEIJING / 北京·民航国际会议中心> system_booting... 赛博疆...

AI攻击猛增，思科安全收入本季度同比增长14%，达到22亿美元。

南京信息工程大学的研究人员在《科学》上发表研究报告，称全球对太阳能发展的推动可能带来隐性的损害生物多样性的代价。可再生能源的扩张有助于应对气候变化，但大规模太阳能开发也可能因栖息地改变或破碎化而导致生物多样性丧失，从而引发新的环境得失权衡。研究人员汇编了一个大型数据集，它涵盖了 2014 年至 2023 年中国的 2344 个县。他们的数据集整合了鸟类观测数据、太阳能政策、环境条件和社会经济信息。他们还考察了土地利用、植被状况和农业生产力变化所带来的影响。研究结果表明，太阳能扩张政策的力度加大与鸟类多样性的显著下降有关：政策强度每增加一个标准差，鸟类生物多样性指数便会下降 2.10%。这些影响在较富裕地区和非沙漠地区最为显著，且对地理分布广泛的物种影响尤为严重。这主要应归因于土地的迅速转化，特别是将农田和草地转化为开发区，后者降低了植被的多样性。

Microsoft has confirmed that a critical remote code execution flaw in Entra ID, its cloud-based identity and access management platform, has already been exploited in the wild. The vulnerability, tracked as CVE-2026-69836, was disclosed on August 20, 2026, and carries the maximum severity rating of Critical, underscoring just how dangerous this bug is for organizations […]

The post Microsoft Entra ID Remote Code Execution Vulnerability Exploited in the Wild appeared first on Cyber Security News.

为在情报学领域深入落实国家人才培养战略，激发大学生对开源情报分析的热情，提升学生在数据采集、深度分析及情报应用等方面的综合能力，特举办“第四届全国大学生开源情报数据采集与分析挑战专项”活动。

金穹是特朗普政府于 2025 年启动的下一代国土导弹防御计划，旨在通过“天基拦截器 + 天基传感器 + 陆海基武器 + 人工智能指挥控制”构成的系统，为美国本土、海外驻军及盟友提供针对弹道导弹、高超声速武器、先进巡航导弹及下一代空中打击的全程防御。

A vulnerability identified as problematic has been detected in Rocket.Chat up to 8.7.x. Impacted is the function getThreadsList/getThreadMessages of the component Meteor DDP. The manipulation of the argument rid/tmid leads to improper authorization. This vulnerability is referenced as CVE-2026-65645. Remote exploitation of the attack is possible. No exploit is available. You should upgrade the affected component.

本次研究的相关实验数据、分析方法及识别程序已正式开源，附开源链接，供安全、风控及研究人员进一步测试、验证和完善。

诚邀感兴趣、有意愿、正义感人群参加。

A vulnerability categorized as critical has been discovered in Red Hat Multicluster Engine for Kubernetes. This issue affects some unknown processing of the component clusterclaims-controller. Executing a manipulation of the argument spec.namespace can lead to improper privilege management. The identification of this vulnerability is CVE-2026-73267. The attack may be launched remotely. There is no exploit available.

国立研究開発法人科学技術振興機構が提供するスマートフォンアプリ「日本科学未来館アシストアプリ」には、クロスサイトスクリプティングの脆弱性が存在します。