Aggregator

CVE-2026-27579 | karnop realtime-collaboration-platform up to master Appwrite Project origin validation (GHSA-qh5m-p8jh-hx88)

VulDB Recent Entries
1 month 2 weeks ago
A vulnerability classified as problematic was found in karnop realtime-collaboration-platform up to master. The affected element is an unknown function of the component Appwrite Project. The manipulation results in origin validation error. This vulnerability was named CVE-2026-27579. The attack may be performed from remote. There is no available exploit.
vuldb.com

CVE-2026-27480 | static-web-server Static Web Server up to 2.40.x response discrepancy (GHSA-qhp6-635j-x7r2)

VulDB Recent Entries
1 month 2 weeks ago
A vulnerability classified as problematic has been found in static-web-server Static Web Server up to 2.40.x. Impacted is an unknown function. The manipulation leads to observable response discrepancy. This vulnerability is uniquely identified as CVE-2026-27480. The attack is possible to be carried out remotely. No exploit exists. It is recommended to upgrade the affected component.
vuldb.com

AI-Assisted Threat Actor Compromises 600+ FortiGate Devices in 55 Countries

The Hackers News
1 month 2 weeks ago
A Russian-speaking, financially motivated threat actor has been observed taking advantage of commercial generative artificial intelligence (AI) services to compromise over 600 FortiGate devices located in 55 countries. That's according to new findings from Amazon Threat Intelligence, which said it observed the activity between January 11 and February 18, 2026. "No exploitation of FortiGate
The Hacker News

SerpApi Files Suit Against SearchApi for Stealing Proprietary Technology

Cyber Security News
1 month 2 weeks ago

AUSTIN, Texas, Feb. 19, 2026– SerpApi filed suit in U.S. District Court for the Western District of Texas against Zilvinas Kucinskas and his company, SearchApi, for systematically stealing SerpApi’s proprietary technology and using its trade secrets to build a product that directly copies and competes with SerpApi. As detailed in SerpApi’s complaint, Mr. Kucinskas, a former […]

The post SerpApi Files Suit Against SearchApi for Stealing Proprietary Technology appeared first on Cyber Security News.

Kavichselvan

CVE-2025-68218 | Linux Kernel up to 6.1.158/6.6.117/6.12.59/6.17.9 open_mutex deadlock (WID-SEC-2025-2868)

Vuldb Updates
1 month 2 weeks ago
A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.1.158/6.6.117/6.12.59/6.17.9. This affects the function open_mutex. The manipulation results in deadlock. This vulnerability was named CVE-2025-68218. The attack needs to be approached within the local network. There is no available exploit. You should upgrade the affected component.
vuldb.com

CVE-2025-68219 | Linux Kernel up to 6.6.117/6.12.59/6.17.9 cifs smb3_cleanup_fs_context_contents double free (Nessus ID 299530 / WID-SEC-2025-2868)

Vuldb Updates
1 month 2 weeks ago
A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.6.117/6.12.59/6.17.9. This affects the function smb3_cleanup_fs_context_contents of the component cifs. Such manipulation leads to double free. This vulnerability is referenced as CVE-2025-68219. The attack needs to be initiated within the local network. No exploit is available. You should upgrade the affected component.
vuldb.com

CVE-2025-68221 | Linux Kernel up to 6.17.9 mptcp mptcp_pm_nl_rm_addr state issue (Nessus ID 278973 / WID-SEC-2025-2868)

Vuldb Updates
1 month 2 weeks ago
A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.17.9. The impacted element is the function mptcp_pm_nl_rm_addr of the component mptcp. The manipulation leads to state issue. This vulnerability is uniquely identified as CVE-2025-68221. The attack can only be initiated within the local network. No exploit exists. It is advisable to upgrade the affected component.
vuldb.com

CVE-2025-68215 | Linux Kernel up to 6.12.59/6.17.9 ice/ice_adapter.c ice_ptp_cleanup_pf initialization (Nessus ID 298236 / WID-SEC-2025-2868)

Vuldb Updates
1 month 2 weeks ago
A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.12.59/6.17.9. This affects the function ice_ptp_cleanup_pf of the file ice/ice_adapter.c. Such manipulation leads to improper initialization. This vulnerability is documented as CVE-2025-68215. The attack requires being on the local network. There is not any exploit available. It is advisable to upgrade the affected component.
vuldb.com

CVE-2025-68216 | Linux Kernel up to 6.17.9 LoongArch bpf_selftests information disclosure (Nessus ID 279004 / WID-SEC-2025-2868)

Vuldb Updates
1 month 2 weeks ago
A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.17.9. This issue affects the function bpf_selftests of the component LoongArch. Performing a manipulation results in information disclosure. This vulnerability was named CVE-2025-68216. The attack needs to be approached within the local network. There is no available exploit. It is advisable to upgrade the affected component.
vuldb.com

CVE-2025-68212 | Linux Kernel up to 6.17.9 fs statmount_string uninitialized pointer (Nessus ID 278917 / WID-SEC-2025-2868)

Vuldb Updates
1 month 2 weeks ago
A vulnerability was found in Linux Kernel up to 6.17.9 and classified as critical. The impacted element is the function statmount_string of the component fs. The manipulation results in uninitialized pointer. This vulnerability is identified as CVE-2025-68212. The attack can only be performed from the local network. There is not any exploit available. It is suggested to upgrade the affected component.
vuldb.com

CVE-2025-68209 | Linux Kernel up to 6.17.8 mlx5_add_cq_to_tasklet initialization (Nessus ID 296481 / WID-SEC-2025-2868)

Vuldb Updates
1 month 2 weeks ago
A vulnerability was found in Linux Kernel up to 6.17.8. It has been classified as critical. This issue affects the function mlx5_add_cq_to_tasklet. Performing a manipulation results in improper initialization. This vulnerability is reported as CVE-2025-68209. The attacker must have access to the local network to execute the attack. No exploit exists. Upgrading the affected component is recommended.
vuldb.com

Qilin

Dark Feed IO
1 month 2 weeks ago

You must login to view this content

cohenido

Qilin

Dark Feed IO
1 month 2 weeks ago

You must login to view this content

cohenido

Qilin

Dark Feed IO
1 month 2 weeks ago

You must login to view this content

cohenido

Cybersecurity Companies’ Stocks Fall Sharply as Anthropic Releases Claude Security Tool

Cyber Security News
1 month 2 weeks ago

Shares of major cybersecurity companies nosedived on Friday after AI startup Anthropic unveiled Claude Code Security, a new AI-powered tool capable of autonomously scanning codebases for software vulnerabilities and suggesting targeted patches sparking fears that artificial intelligence could begin displacing traditional enterprise security solutions. Anthropic announced Claude Code Security on February 19, 2026, as a […]

The post Cybersecurity Companies’ Stocks Fall Sharply as Anthropic Releases Claude Security Tool appeared first on Cyber Security News.

Guru Baran

New Shai-Hulud–like npm Worm Attack 19+ Packages to Steal dev/CI Secrets

Cyber Security News
1 month 2 weeks ago

A new supply chain worm is actively targeting the npm ecosystem, with a research team identifying at least 19 malicious npm packages designed to steal developer and CI/CD secrets and automatically spread across repositories and workflows. The campaign, tracked as SANDWORMMODE, uses typosquatted npm packages and poisoned GitHub Actions to infect both developer machines and […]

The post New Shai-Hulud–like npm Worm Attack 19+ Packages to Steal dev/CI Secrets appeared first on Cyber Security News.

Abinaya

微软游戏业务高管离职，接替者来自 AI 部门

Solidot
1 month 2 weeks ago
微软 Xbox 和游戏业务 CEO Phil Spencer 在公司工作 38 年之后离职，被广泛视为其接任者的 Xbox 总裁 Sarah Bond 也已辞职，游戏业务的新 CEO 将是负责 CoreAI 产品的 Asha Sharma。Spencer 是在 2014 年 3 月被任命为 Xbox 负责人，他任内推出了游戏订阅服务 Xbox Game Pass，最为人所知的事情可能是以 690 亿美元收购动视暴雪。他还收购了一系列游戏工作室，其中包括 2020 年以 75 亿美元收购 Bethesda 母公司 ZeniMax，完全控制了著名的游戏 IP 如 《辐射》和《上古卷轴》（Bethesda）、《毁灭战士》和《雷神之锤》（id Software）。

Managed ad