Aggregator

A vulnerability was found in Google Chrome on Android. It has been classified as problematic. Impacted is an unknown function of the component DevTools. This manipulation causes Local Privilege Escalation. This vulnerability is tracked as CVE-2026-7913. The attack is restricted to local execution. No exploit exists. Upgrading the affected component is recommended.

A vulnerability marked as critical has been reported in Google Chrome. This affects an unknown function of the component ServiceWorker. The manipulation leads to sandbox issue. This vulnerability is traded as CVE-2026-7909. It is possible to initiate the attack remotely. There is no exploit available. It is suggested to upgrade the affected component.

A vulnerability described as critical has been identified in Google Chrome. This impacts an unknown function of the component Views. The manipulation results in use after free. This vulnerability is known as CVE-2026-7910. It is possible to launch the attack remotely. No exploit is available. Upgrading the affected component is recommended.

A vulnerability classified as critical has been found in Google Chrome on Windows. Affected is an unknown function of the component Aura. This manipulation causes use after free. This vulnerability is handled as CVE-2026-7911. The attack can be initiated remotely. There is not any exploit available. It is recommended to upgrade the affected component.

社交平台 X 推出了一个新的历史标签页，该标签页将你的书签、点赞、视频和文章集中收集在一个地方以便于访问。最初在 iOS 上可用，X 平台的产品负责人将这个新资源描述为一种更好的方式来追踪你所有喜欢的

A ransomware group that only surfaced in mid-2025 has already made a significant mark on the threat landscape. The Gentlemen, a ransomware-as-a-service (RaaS) operation, has quickly risen to become one of the most active ransomware programs in the world, with around 332 published victims in just the first five months of 2026 alone. The group […]

The post The Gentlemen RaaS Leverages Fortinet and Cisco Edge Devices for Initial Access appeared first on Cyber Security News.

Enterprise adoption of retrieval-augmented generation has moved sensitive corporate content into a new storage format that existing security tools cannot inspect. Companies deploying internal AI assistants convert documents into high-dimensional numerical vectors and ship them to embedding services and vector databases over ordinary HTTPS connections. Data loss prevention products scan documents and network traffic, and they read none of it. A research framework called VectorSmuggle, released by Jascha Wanger of ThirdKey under the Apache 2.0 … More →

The post Vector embedding security gap exposes enterprise AI pipelines appeared first on Help Net Security.

Те, кто не защитит свои активы сейчас, рискуют просто не успеть.

​AI 放大腾讯核心优势。

法官拒绝立即批准马斯克与SEC的和解协议美国一位联邦法官周三表示，拒绝立即批准马斯克与美国证券交易委员会(SEC）达成的和解协议，因为该协议存在 “危险信号”。此前，马斯克愿意支付150万美元与 SE

In this Help Net Security video, Casey Bleeker, CEO at SurePath AI, talks about the AI governance gap that exists in almost every organization. Drawing from three years of conversations with IT, business, and security leaders, Casey explains why AI adoption is outpacing governance maturity by a wide margin, creating friction between security teams pushing for responsible use and business leaders worried about falling behind competitors. Casey walks through what a typical audit reveals at … More →

The post Closing the AI governance gap in your enterprise appeared first on Help Net Security.

Атака использовала именно те механизмы защиты, которым разработчики доверяли больше всего.

周二，微软针对其产品组合中的 138 个安全漏洞发布了补丁，不过这些漏洞均未被列为已公开披露或正遭受主动攻击的漏洞。   在这 138 个漏洞中，30 个被评为严重级别，104 个为重要级别，3 个为中等级别，1 个为低级别。其中多达 61 个漏洞归类为权限提升漏洞，其次是 32 个远程代码执行漏洞、15 个信息泄露漏洞、14 个欺骗漏洞、8 个拒绝服务漏洞、6 个安全功能绕过漏洞以及 ...

error code: 1003

软银对OpenAI的押注为其带来250亿美元收益亿万富翁孙正义对OpenAI的巨额押注，正推动软银集团利润飙升。这家总部位于东京的全球科技投资者周三发布财报称，今年前三个月，对这家ChatGPT开发商

2026年4月28日，中国工程院院士黄殿中在第九届数字中国建设峰会－数字中国创新大赛会上作主旨报告。

西氏医药服务公司（West Pharmaceutical Services）披露，其成为一起网络攻击的目标，导致数据泄露和系统加密。   该公司表示，5 月 4 日检测到异常。对这起事件的调查判定，攻击者从网络中窃取了数据。   西氏医药服务公司在提交给美国证券交易委员会（SEC）的文件中指出：“2026 年 5 月 7 日，西氏医药服务公司判定，公司遭遇了一起重大...

error code: 1003

Attackers rely on stolen credentials, compromised service accounts, and social engineering attacks targeting employees, according to Sophos’ The State of Identity Security 2026 survey. What do you estimate to be the overall cost to your organization to rectify the identity breach? Base: organization could not stop the security breach. n=510. (Source: Sophos) Identity attack trends A survey of 5,000 IT and cybersecurity leaders across 17 countries found that more than 70% of organizations were affected … More →

The post Over 70% of organizations hit by identity breaches appeared first on Help Net Security.

Разбор уязвимости превратился в редкий эксперимент о будущем поиска багов.