Aggregator

CVE-2026-45678 | open-telemetry opentelemetry-ebpf-instrumentation up to 0.8.x Postgres Protocol Parser buffer overflow (GHSA-pgvv-q3wf-mm9m)

VulDB Recent Entries
2 weeks ago
A vulnerability labeled as critical has been found in open-telemetry opentelemetry-ebpf-instrumentation up to 0.8.x. This vulnerability affects unknown code of the component Postgres Protocol Parser. The manipulation results in buffer overflow. This vulnerability is identified as CVE-2026-45678. The attack can be executed remotely. There is not any exploit available. The affected component should be upgraded.
vuldb.com

CVE-2026-40780 | Liquid Web/StellarWP BookIt Plugin prior 2.5.4.1 on WordPress authentication bypass

VulDB Recent Entries
2 weeks ago
A vulnerability identified as critical has been detected in Liquid Web/StellarWP BookIt Plugin on WordPress. This affects an unknown part. The manipulation leads to authentication bypass using alternate channel. This vulnerability is referenced as CVE-2026-40780. Remote exploitation of the attack is possible. No exploit is available. You should upgrade the affected component.
vuldb.com

Red Hat Confirms Supply Chain Compromise of @redhat-cloud-services npm Packages

Cyber Security News
2 weeks ago

Red Hat has officially confirmed a supply chain compromise affecting multiple packages published under the @redhat-cloud-services npm namespace, disclosed publicly on June 1, 2026. A compromised GitHub account was used to inject malicious code into frontend libraries maintained within a Red Hat GitHub organization, raising significant concern across enterprise environments that depend on these packages […]

The post Red Hat Confirms Supply Chain Compromise of @redhat-cloud-services npm Packages appeared first on Cyber Security News.

Guru Baran

Russia Says Foreign Spyware Found on High-Ranking Officials’ Mobile Phones

Cyber Security News
2 weeks ago

Russia’s Federal Security Service (FSB) has claimed it disrupted a large-scale cyber-espionage operation involving the deployment of advanced spyware on mobile devices used by high-ranking government officials. The agency stated that the campaign was orchestrated by unidentified foreign intelligence services and aimed at covert surveillance and data exfiltration. According to the FSB, the operation involved […]

The post Russia Says Foreign Spyware Found on High-Ranking Officials’ Mobile Phones appeared first on Cyber Security News.

Abinaya

Instagram Account Hijacks Expose the Security Risks of AI-Powered Support

Security Affairs
2 weeks ago
Attackers exploited Meta’s AI support chatbot to reset Instagram passwords and hijack accounts without accessing victims’ email inboxes. Attackers abused Meta’s AI-powered support chatbot to reset Instagram passwords and hijack accounts without accessing victims’ email inboxes. The issue affected several users, including high-profile accounts, before Instagram fixed the flaw. Security researcher Jane Wong and other […]
Pierluigi Paganini

拒绝停止呼吸的土壤

Solidot
2 weeks ago
法国生化学家 Sébastien Fontaine 15 年来一直试图杀死土壤，他想要了解没有任何生命的土壤能释放多少碳。 他的团队将土壤密封在罐子内，用伽马射线进行灭菌照射。然后等待土壤释放的二氧化碳——这是微生物呼吸持续进行的标志——下降。他们等待了几周，几个月。在显微镜下，经辐射处理的土壤没有显示任何生命迹象，但它仍在继续释放二氧化碳。土壤拒绝停止呼吸。Fontaine 的实验室重复了实验得到了相同的结果。研究人员开始寻找无生命土壤中的呼吸来源。Fontaine 的团队如今报告，他们的土壤样本在六年内持续消耗氧气并释放二氧化碳。他们提出，为生命提供能量的代谢过程也可能发生在活细胞之外。他们的实验表明，即使没有通常组织土壤的生物蛋白质，这种代谢过程也能在土壤中发挥作用。如果他们的假设正确，那么部分生化反应如释放富碳糖分子能量的反应，可能并非生物所独有。此类反应甚至可能在地球生命出现前就已经存在。

Managed ad