Submit #880100: liftoff-sr CIPster master branch (reproduced on 1802525be27d33e19a9a83c163e331a1d13b1892) Out-of-bounds Read/Write [Accepted] Vuldb Submit 2 days 23 hours ago Submit #880100 / VDB-393610 Carnegie
Microsoft says August Windows updates may cause gaming issues Bleeping Computer. 2 days 23 hours ago Microsoft is investigating a potential issue with the August 2026 updates that may prevent some games from launching or cause them to crash on affected Windows 11 systems. [...] Sergiu Gatlan
OpenAI承诺不保留企业客户使用AI的数据 不安全 2 days 23 hours ago OpenAI承诺,在提升产品安全性的同时,将不再保留企业客户使用其人工智能模型时产生的数据。该公司周三表示,正向部分客户开放一项新技术的预览,该技术能够跨多次模型交互识别出模式与安全风险。此举旨在突破
X 算法向民主党用户推送更多激发愤怒的内容 Solidot 2 days 23 hours ago 根据发表在 PNAS 期刊上的一项研究,X 算法会向民主党用户推送更多激发愤怒(ragebait)的信息流。论文合作者、斯坦福大学博士后研究员 Ziv Epstein 说,和其它社媒网站类似,X 信息流算法的优化目标是提升用户参与度,但并非所有类型的参与度都一视同仁。X 的算法会向用户推送与其价值观相冲突的内容,尤其是当他们回复那些令其愤怒或挑衅的帖子时。尽管回复仅占互动的 6.8%,但它们承载了不成比例的权重:“这是一个愤怒诱饵(ragebait)的反馈循环。算法学会你会被激怒,然后继续为你推送更多此类内容。”目前不清楚为什么 X 更频繁向民主党用户而不是共和党用户推送激发愤怒的内容。这可能是因为 X 上右翼内容总体上更多,或者民主党用户更倾向于与其不认同的帖子互动。
X 算法向民主党用户推送更多激发愤怒的内容 不安全 2 days 23 hours ago 根据发表在 PNAS 期刊上的一项研究,X 算法会向民主党用户推送更多激发愤怒(ragebait)的信息流。论文合作者、斯坦福大学博士后研究员 Ziv Epstein 说,和其它社媒网站类
Microsoft переименовывает продукты каждые три года — энтузиаст создал реестр всех ребрендингов Securitylab.ru 2 days 23 hours ago Если вы не понимаете, как сейчас называется знакомая программа Microsoft, вы не одни.
[0day-rubbish] VMS 6.48.809 Authenticated command injection to root RCE (8.8) 不安全 3 days ago Full Disclosuremailing list archivesFrom: disclosure via Fulldisclosure
[0day-rubbish] ONE Reporter 13.1 Authenticated RCE / privilege escalation via CommandExecutor (8.8) 不安全 3 days ago Full Disclosuremailing list archivesFrom: disclosure via Fulldisclosure
[0day-rubbish] Gemini 7.3.0 Authenticated SQL injection to xp_cmdshell RCE (8.8) 不安全 3 days ago Full Disclosuremailing list archivesFrom: disclosure via Fulldisclosure
[0day-rubbish] RoboTask 11.0.5.1229 Unauthenticated REST API remote task execution (9.8) 不安全 3 days ago Full Disclosuremailing list archivesFrom: disclosure via Fulldisclosure
[0day-rubbish] ActiveFax Server 10.70 Unauthenticated LPD Ghostscript %pipe% SYSTEM RCE (9.8) 不安全 3 days ago Full Disclosuremailing list archivesFrom: disclosure via Fulldisclosure
[0day-rubbish] Tornado 2.11.3 Unauthenticated arbitrary file write to root RCE (storeTo=file: to cron) (9.8) 不安全 3 days ago Full Disclosuremailing list archivesFrom: disclosure via Fulldisclosure
[0day-rubbish] Datalore On-Premises 2026.2.3 Unauthenticated RCE via InteractiveReport access-mapping flaw (9.8) 不安全 3 days ago Full Disclosuremailing list archivesFrom: disclosure via Fulldisclosure
APPLE-SA-08-18-2026-1 Safari 26.6.1 不安全 3 days ago Full Disclosuremailing list archivesFrom: Apple Product Security via Fulldisclos
Cudy WR3000: Hard-coded JWT Secret to Root Command Injection 不安全 3 days ago Full Disclosuremailing list archivesFrom: Nir Yehoshua
Думаете, вы помните свою жизнь? А вот и нет. Вы помните лишь ту удобную историю, которую собрал мозг Securitylab.ru 3 days ago Объясняем, почему реальность заканчивается в момент запоминания.