Aggregator

A vulnerability has been found in Adobe Acrobat Reader up to 24.001.30356/26.001.21367 and classified as critical. Affected by this vulnerability is an unknown functionality of the component File Handler. Performing a manipulation results in improperly controlled modification of object prototype attributes. This vulnerability is identified as CVE-2026-34621. The attack can be initiated remotely. Additionally, an exploit exists. The affected component should be upgraded.

Siemensから各製品向けのアドバイザリが公表されました。

2026年05月12日（現地時間）、米国CISAがCISA ICS Advisory / ICS Medical Advisoryを公表しました。

A vulnerability was found in Open5GS up to 2.7.7 and classified as problematic. Affected is the function smf_nsmf_handle_create_data_in_hsmf of the component SMF. Executing a manipulation can lead to null pointer dereference. This vulnerability appears as CVE-2026-8252. The attack may be performed from remote. In addition, an exploit is available. The project was informed of the problem early through an issue report but has not responded yet.

A vulnerability classified as critical has been found in Microsoft Edge. This issue affects some unknown processing. The manipulation leads to injection. This vulnerability is uniquely identified as CVE-2026-42838. The attack is possible to be carried out remotely. No exploit exists. It is recommended to upgrade the affected component.

A vulnerability was found in Devs Palace ERP Online up to 4.0.0. It has been classified as problematic. Affected by this vulnerability is an unknown functionality of the file /inventory/purchase_save. The manipulation leads to cross site scripting. This vulnerability is traded as CVE-2026-8253. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability was found in Devs Palace ERP Online up to 4.0.0. It has been rated as problematic. This affects an unknown part of the file /inventory/add_new_customer. This manipulation causes cross site scripting. This vulnerability is handled as CVE-2026-8255. The attack can be initiated remotely. Additionally, an exploit exists. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability was found in Devs Palace ERP Online up to 4.0.0. It has been declared as problematic. Affected by this issue is some unknown functionality of the file /inventory/sales_save. The manipulation results in cross site scripting. This vulnerability is known as CVE-2026-8254. It is possible to launch the attack remotely. Furthermore, an exploit is available. The vendor was contacted early about this disclosure but did not respond in any way.

2025 年，Google 第一次提前将 Android 部分从 I/O 大会的 Keynote 开幕演讲环节中拆了出来。彼时 AI 领域已是风云诡谲，作为曾经靠 Google Assistant 和

字节跳动旗下TikTok周二宣布，其正在推出 TikTok GO ，这是一种让用户直接在其应用内发现并预订酒店、景点和体验的方式。这一新服务正在美国推出，并且面向十八岁及以上的用户。 TikTok G

Apache Camelには、複数の脆弱性があります。これらの脆弱性のうち一部の脆弱性について概念実証コードが公開されていることを確認しています。この問題は、当該製品を修正済みのバージョンに更新することで解決します。詳細は、開発者が提供する情報を参照してください。

系统页面加载缓慢、查询超时怎么办？

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

Josephine Wolff on Why Healthcare Must Scrutinize Cyber and AI Coverage
Healthcare organizations face growing pressure to reassess cyber insurance policies as cyberattacks disrupt patient care and AI tools introduce new liability risks. Josephine Wolff of Tufts University discusses how exclusions, compliance demands and AI-related uncertainty shape insurance decisions.

Frame's AI Models Build Contextualized Security Lessons Automatically in Minutes
Frame Security, founded by former Wiz product and sales leader Tal Shlomo, emerged from stealth with $50 million to build AI-generated cyber training and simulations designed to prepare employees for phishing, deepfakes, voice cloning and other personalized social engineering attacks.

Agency Grants Routers a 18-Month Reprieve From Obsolesce
The U.S. Federal Communications Commission extended through Jan. 1, 2029, a waiver allowing foreign-made routers already approved for use in the United States to continue receiving updates. The agency earlier this year instituted a ban on foreign-made consumer routers, citing national security concerns.

Kernel Privilege Escalation Has One Linux Maintainer Contemplating a 'Kill Switch'
Back-to-back kernel vulnerabilities in Linux has defenders scrambling to apply defenses in the age of quick turnaround time for hackers to exploit nascent flaws. "Dirty Frag" and "Copy Fail" kernel privilege escalation vulnerabilities became public knowledge within two weeks of each other.

In the face of relentless cyberattacks that threaten patient safety, hospitals must strengthen their resilience, with clinical continuity, secure backups and coordinated recovery emerging as critical strategies, said John Riggi of the American Hospital Association and Josh Howell of Rubrik.