Aggregator

速修复

Yakit x Memfit AI 加速助力业务逻辑漏洞测试

Anthropic公司协助美国家安全局利用定制Mythos模型开展网络攻击活动

AI需求加速增长，促使更多企业加大力度落实更严格的网络安全控制

Jun 8, 2026Interview with Filip Stojkovski on the State of AI inSecOpsFilip joins us to talk throu

A vulnerability was found in VMware VCF operations, Aria Operations and Telco Cloud Platform up to 8.18.7. It has been declared as problematic. Affected by this issue is some unknown functionality. Executing a manipulation can lead to cross site scripting. This vulnerability is tracked as CVE-2026-41724. The attack can be launched remotely. No exploit exists. It is recommended to upgrade the affected component.

A vulnerability was found in VMware VCF operations, Aria Operations and Telco Cloud Platform. It has been classified as problematic. Affected by this vulnerability is an unknown functionality. Performing a manipulation results in cross site scripting. This vulnerability is identified as CVE-2026-41723. The attack can be initiated remotely. There is not any exploit available. Upgrading the affected component is recommended.

A vulnerability was found in VMware VCF operations, Aria Operations and Telco Cloud Platform and classified as problematic. Affected is an unknown function. Such manipulation leads to cross site scripting. This vulnerability is referenced as CVE-2026-41722. It is possible to launch the attack remotely. No exploit is available. It is suggested to upgrade the affected component.

A vulnerability has been found in Samba and classified as problematic. This impacts an unknown function of the component WINS Service. This manipulation causes null pointer dereference. The identification of this vulnerability is CVE-2026-3238. It is possible to initiate the attack remotely. There is no exploit available.

国家安全部提示：“AI中转站”风险不容小觑一段时间以来，随着人工智能应用需求的迅猛增长，批量提供海内外大模型访问服务的 “AI中转站” 在国内迅速走红。然而也因粗放发展、无序运营滋生了一系列安全风险。

Банки и операторы связи обяжут компенсировать похищенное мошенниками.

科技巨头东芝和大型零售商无印良品警告访客，其网站上出现的可疑登录弹窗可能会窃取用户凭证。 这两家日本公司均建议在认证界面中输入了账户登录信息的用户立即更改密码，以保护其服务账户安全。 这些登录弹窗由托管在 polyfill[.]io 的外部服务生成。该服务于 2024 年在其 CDN 分发的脚本中引入了恶意代码。 东芝在一则简短通报中表示：「我们已确认，我们网站的某些部分可能会...

error code: 1003

黑客正在积极利用 Everest Forms Pro 插件中的一个关键漏洞（CVE-2026-3300），该漏洞可让他们完全控制 WordPress 网站。 该安全问题影响插件 1.9.12 及更早版本，无需身份验证即可被利用，在服务器上执行任意代码。 Everest Forms Pro 是 WordPress 表单构建插件 Everest Forms 的商业附加组件。它用于创建联系表单、注册表单...

error code: 1003