Aggregator

这篇文章核心内容均来自于claude的官方博客。对于Agent安全，Anthropic认为有上中下三策。

Over 900 Oracle E-Business Suite (EBS) instances have been found exposed online amid ongoing attacks exploiting a critical security flaw. [...]

A vulnerability was found in Oracle MySQL Shell up to 8.0.30. It has been declared as critical. This issue affects some unknown processing of the component Core Client. The manipulation results in information disclosure. This vulnerability is cataloged as CVE-2022-39402. The attack must be initiated from a local position. There is no exploit available.

A vulnerability was found in Oracle MySQL Installer up to 1.6.3. It has been rated as critical. Impacted is an unknown function. This manipulation causes Local Privilege Escalation. This vulnerability is registered as CVE-2022-39404. The attack needs to be launched locally. No exploit is available.

A vulnerability identified as problematic has been detected in Oracle MySQL Shell up to 8.0.30. The impacted element is an unknown function of the component Core Client. Performing a manipulation results in an unknown weakness. This vulnerability is reported as CVE-2022-39403. The attack requires a local approach. No exploit exists.

A vulnerability described as critical has been identified in Oracle MySQL Server up to 8.0.30. The impacted element is an unknown function of the component Optimizer. Executing a manipulation can lead to denial of service. This vulnerability is handled as CVE-2022-39400. The attack can be executed remotely. There is not any exploit available.

A vulnerability categorized as critical has been discovered in Oracle Solaris 11. Affected is an unknown function of the component Kernel. The manipulation results in denial of service. This vulnerability is identified as CVE-2022-39401. The attack is only possible with local access. There is not any exploit available.

Frankfurt am Main, Deutschland, 1st July 2026, CyberNewswire

Executive Summary:Since Russia’s full-scale invasion of Ukraine on February 24, 2022, cybera

A vulnerability described as critical has been identified in GNU C Library up to 2.43. Affected by this issue is some unknown functionality of the component malloc Character Match Handler. Such manipulation leads to heap-based buffer overflow. This vulnerability is referenced as CVE-2026-5450. The attack can only be performed from a local environment. No exploit is available.

A vulnerability marked as problematic has been reported in GNU C Library up to 2.43. Affected by this vulnerability is the function _IO_wdefault_pbackfail of the file libio/wgenops.c of the component Unicode Character Handler. This manipulation causes buffer under-read. The identification of this vulnerability is CVE-2026-5928. The attack can only be executed locally. There is no exploit available.

A vulnerability, which was classified as problematic, has been found in GitHub Enterprise Server up to 3.17.16/3.18.10/3.19.7/3.20.3. This impacts an unknown function. This manipulation causes missing authorization. The identification of this vulnerability is CVE-2026-9132. It is possible to initiate the attack remotely. There is no exploit available. It is advisable to upgrade the affected component.

A vulnerability was found in GitHub Enterprise Server up to 3.17.16/3.18.10/3.19.7/3.20.3/3.21.1. It has been rated as problematic. The impacted element is an unknown function. Performing a manipulation results in clickjacking. This vulnerability is cataloged as CVE-2026-9106. It is possible to initiate the attack remotely. There is no exploit available. Upgrading the affected component is advised.

A vulnerability classified as critical has been found in GNU C Library up to 2.43. This affects the function nis_local_principal of the component UDP Handler. Performing a manipulation results in buffer overflow. This vulnerability is identified as CVE-2026-5358. The attack is only possible with local access. There is not any exploit available.

A vulnerability classified as problematic was found in GitHub Enterprise Server up to 3.17.16/3.18.10/3.19.7/3.20.3. This vulnerability affects unknown code of the component REST API. Executing a manipulation can lead to cross site scripting. This vulnerability is handled as CVE-2026-10585. The attack can be executed remotely. There is not any exploit available. Upgrading the affected component is advised.

A vulnerability was found in LibreOffice up to 25.8.6/26.2.2. It has been rated as critical. This affects an unknown function of the component OOXML Handler. Performing a manipulation of the argument salt results in out-of-bounds write. This vulnerability is cataloged as CVE-2026-4430. It is possible to initiate the attack remotely. There is no exploit available. Upgrading the affected component is advised.

Phishing pages don’t sit still anymore. They redirect, load scripts, harvest credentials through dynamic forms, and rebuild their DOM after the initial load — and most URL analysis workflows still only see the finish line, not the race. This June, ANY.RUN closed that gap directly inside the Interactive Sandbox and extended its automation reach with […]

The post Release Notes: In-Browser Data Inspection, Torq Integration, and 1,100+ Threat Coverage Updates appeared first on ANY.RUN's Cybersecurity Blog.

Organizations have never had greater awareness of cyber risk. Yet turning that awareness into operational resilience has never been more challenging. The 2026 Bitdefender Cybersecurity Assessment confirms this is the case, as this year's findings reveal a series of surprising contradictions. Here are a few examples, based on the independent survey of 1,200 IT and cybersecurity professionals

For the latest discoveries in cyber research for the week of 22nd June, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Texas Parks and Wildlife Department has been affected by a third-party data breach involving its license system vendor. The incident exposed driver’s license information, passport numbers, emails, phone numbers, and residential addresses for […]

The post 22nd June – Threat Intelligence Report appeared first on Check Point Research.