Aggregator

CVE-2026-1606 | GitLab Community Edition/Enterprise Edition up to 18.11.5/19.0.2/19.1.0 code injection (EUVD-2026-39178 / Nessus ID 322746)

Vuldb Updates
1 week 1 day ago
A vulnerability labeled as critical has been found in GitLab Community Edition and Enterprise Edition up to 18.11.5/19.0.2/19.1.0. Affected by this vulnerability is an unknown functionality. Such manipulation leads to code injection. This vulnerability is referenced as CVE-2026-1606. It is possible to launch the attack remotely. No exploit is available. The affected component should be upgraded.
vuldb.com

CVE-2026-5309 | GitLab Enterprise Edition up to 18.11.5/19.0.2/19.1.0 authorization (EUVD-2026-39175 / Nessus ID 322748)

Vuldb Updates
1 week 1 day ago
A vulnerability described as critical has been identified in GitLab Enterprise Edition up to 18.11.5/19.0.2/19.1.0. This affects an unknown part. Executing a manipulation can lead to authorization bypass. This vulnerability is tracked as CVE-2026-5309. The attack can be launched remotely. No exploit exists. Upgrading the affected component is recommended.
vuldb.com

中国科学家研发出降低镉吸收能力的水稻

Solidot
1 week 1 day ago
镉不是植物生长的必要元素，但其通过土壤—水稻—食物链进入人体长期摄入后，会引发肾功能损伤、癌症、骨质疏松等严重健康问题。OsNramp5 是水稻中负责从根部往茎部运输镉的关键转运蛋白，但也同时负责锰离子等植物生长必需的金属离子的运输，敲除 OsNramp5 可以有效降低镉的运输，但也会造成其他必要金属元素的缺乏，使水稻大幅减产。根据发表在 PNAS 期刊上的研究，中国科学院遗传与发育生物学研究所等通过碱基替换技术，靶向编辑水稻负责吸收镉元素的核心转运基因 OsNramp5，创制了优异人工等位变异，发现了特异降低镉吸收而不影响锰等其他关键金属离子吸收的新机制，解决了低镉与高产难以兼顾的难题，为镉污染农田安全生产主粮提供了可落地的育种新方案。

Gemini 3.5 Flash Released With Computer Use Capabilities that Build Agents

Cyber Security News
1 week 1 day ago

Google has officially released Gemini 3.5 Flash with native “computer use” capabilities, marking a significant shift toward autonomous AI agents that can interact directly with digital environments. Announced on June 24, 2026, the update enables developers to build intelligent agents capable of performing actions across browsers, mobile devices, and desktop systems. The newly integrated feature […]

The post Gemini 3.5 Flash Released With Computer Use Capabilities that Build Agents appeared first on Cyber Security News.

Abinaya

CVE-2026-53273 | Linux Kernel up to 7.0.12 tee kfree idr use after free (EUVD-2026-39224)

Vuldb Updates
1 week 1 day ago
A vulnerability was found in Linux Kernel up to 7.0.12 and classified as critical. Impacted is the function kfree of the component tee. The manipulation of the argument idr results in use after free. This vulnerability was named CVE-2026-53273. The attack needs to be approached within the local network. There is no available exploit. It is suggested to upgrade the affected component.
vuldb.com

CVE-2026-53274 | Linux Kernel up to 7.0.12 net __smc_setsockopt denial of service (EUVD-2026-39225)

Vuldb Updates
1 week 1 day ago
A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.1.175/6.6.142/6.12.93/6.18.35/7.0.12. Impacted is the function __smc_setsockopt of the component net. The manipulation leads to denial of service. This vulnerability is traded as CVE-2026-53274. An attack has to be approached locally. There is no exploit available. It is advisable to upgrade the affected component.
vuldb.com

CVE-2026-53275 | Linux Kernel up to 7.0.12 ipv6 net/ipv6/mcast.c pskb_may_pull use after free (EUVD-2026-39226)

Vuldb Updates
1 week 1 day ago
A vulnerability identified as critical has been detected in Linux Kernel up to 7.0.12. Affected is the function pskb_may_pull of the file net/ipv6/mcast.c of the component ipv6. The manipulation leads to use after free. This vulnerability is listed as CVE-2026-53275. The attack must be carried out from within the local network. There is no available exploit. You should upgrade the affected component.
vuldb.com

OpenAI 宣布了专用于推理的自研 AI 芯片 Jalapeño

Solidot
1 week 1 day ago
OpenAI 宣布了首款自研芯片 Jalapeño，由 OpenAI 与博通公司合作设计和制造，专门用于 AI 推理。OpenAI 没有披露技术方面的细节，只是称初步测试显示每瓦性能显著优于目前最先进的同类产品。OpenAI 与博通是在去年 10 月正式宣布合作，OpenAI 声称利用其模型加速了芯片的设计。自研 AI 芯片旨在减少对英伟达的依赖，Google 和亚马逊也都开发了自研芯片。

WhatsApp to Warn Users Before Starting Chats With New Phone Numbers

Cyber Security News
1 week 1 day ago

WhatsApp is rolling out a new security warning on both Android and iOS that appears before users even open a conversation with an unknown phone number. WABetaInfo noted that the feature displays the country where the number is registered, whether it’s saved as a contact, and whether any groups are shared, prompting users to pause […]

The post WhatsApp to Warn Users Before Starting Chats With New Phone Numbers appeared first on Cyber Security News.

Guru Baran

Hacker gets 18 months for attack that compromised 60,000 betting accounts

Help Net Security
1 week 1 day ago

A 21-year-old man known online as “Snoopy” was sentenced to 18 months in prison for his role in a scheme that hacked user accounts on a fantasy sports and betting website and sold access to them, causing hundreds of thousands of dollars in losses. Nathan Austad of Farmington, Minnesota, pleaded guilty in December 2025 to one count of conspiracy to commit computer intrusion. According to prosecutors, Austad and his co-conspirators launched a credential stuffing attack … More →

The post Hacker gets 18 months for attack that compromised 60,000 betting accounts appeared first on Help Net Security.

Sinisa Markovic

Managed ad