Aggregator

Only 24% of organizations test identity disaster recovery plans every 6 months, Quest Software said

Cybersecurity researchers have discovered a new malware called KadNap that's primarily targeting Asus routers to enlist them into a botnet for proxying malicious traffic. The malware, first detected in the wild in August 2025, has expanded to over 14,000 infected devices, with more than 60% of victims located in the U.S., according to the Black Lotus Labs team at Lumen. A lesser number of

A vulnerability, which was classified as critical, was found in Mozilla Firefox up to 148.0.1 on Android. The affected element is an unknown function of the component Playback. Executing a manipulation can lead to heap-based buffer overflow. This vulnerability is registered as CVE-2026-3845. It is possible to launch the attack remotely. No exploit is available. You should upgrade the affected component.

A vulnerability, which was classified as problematic, has been found in Mozilla Firefox up to 148.0.1. Impacted is an unknown function of the component CSS Parser. Performing a manipulation results in permissive cross-domain policy with untrusted domains. This vulnerability is cataloged as CVE-2026-3846. It is possible to initiate the attack remotely. There is no exploit available. It is advisable to upgrade the affected component.

A vulnerability classified as critical was found in Mozilla Firefox up to 148.0.1. This issue affects some unknown processing. Such manipulation leads to memory corruption. This vulnerability is listed as CVE-2026-3847. The attack may be performed from remote. There is no available exploit. Upgrading the affected component is advised.

今日暂未更新资讯~
更多最新文章，请访问SecWiki

该报告揭示了AI算力扩张与能源基础设施之间的深层矛盾，指出单纯依靠市场机制无法解决电网升级的成本与风险分摊问题，呼吁通过技术创新与精细化政策监管的结合，实现技术竞争力与电网安全的平衡。

该报告揭示了AI算力扩张与能源基础设施之间的深层矛盾，指出单纯依靠市场机制无法解决电网升级的成本与风险分摊问题，呼吁通过技术创新与精细化政策监管的结合，实现技术竞争力与电网安全的平衡。

Перегрев убивает электронику, энергетику и промышленность десятилетиями — но теперь у нас есть решение.

Google Cloud report details a sharp rise in attackers exploiting software vulnerabilities, including React2Shell

Microsoft is rolling out passkey support for Microsoft Entra on Windows devices, adding phishing-resistant passwordless authentication via Windows Hello. [...]

Meta 被指 “隐瞒” 智能眼镜用户的隐私相关事实：银行卡信息、X行为画面、浑然不知自己被录制的果体人群。

Забытые языки программирования помогают злоумышленникам обмануть защиту.

APT28 used BEARDSHELL and COVENANT malware to spy on Ukrainian military personnel, enabling long-term surveillance since April 2024. The Russia-linked group APT28 (aka UAC-0001, aka Fancy Bear, Pawn Storm, Sofacy Group, Sednit, BlueDelta, and STRONTIUM) has used BEARDSHELL and COVENANT malware to conduct long-term surveillance of Ukrainian military personnel. According to ESET, the campaign began in April 2024 and relies on […]

A vulnerability classified as critical has been found in Ivanti DSM up to 2026.1. This vulnerability affects unknown code. This manipulation causes exposed dangerous routine. This vulnerability is tracked as CVE-2026-3483. The attack is restricted to local execution. No exploit exists. It is recommended to upgrade the affected component.