银狐黑产组织最新免杀变种样本分析
银狐黑产组织最新免杀变种样本分析
Aggregator
海莲花APT组织利用华为数字签名程序加载恶意模块攻击活动分析
3 months ago
海莲花APT组织利用华为数字签名程序加载恶意模块攻击活动分析
传 iPhone18 大存储版价格暴涨；中国 AI 50 强发布，寒武纪第一；OpenAI 下半年推 AI 硬件 | 极客早知道
3 months ago
曝月之暗面正敲定新一轮融资，估值上升至 48 亿美元；马斯克称特斯拉 AI5 芯片比肩英伟达；北京首设机器人专业职称评审
小心 | 清洁阿姨，正在悄悄地监听你
3 months ago
那些匪夷所思的真实窃听案例~
Just-in-Time (JIT) Provisioning: How Automated User Provisioning Works in SSO
3 months ago
Learn how Just-in-Time (JIT) provisioning automates user account creation in SSO. Expert guide for CTOs on SAML, SCIM vs JIT, and enterprise IAM security.
The post Just-in-Time (JIT) Provisioning: How Automated User Provisioning Works in SSO appeared first on Security Boulevard.
SSOJet - Enterprise SSO & Identity Solutions
SAML vs OIDC: Choosing the Right Protocol for Modern Single Sign-On
3 months ago
Comparing SAML and OIDC for enterprise SSO. Learn which protocol works best for web, mobile, and CIAM solutions in this deep dive for CTOs.
The post SAML vs OIDC: Choosing the Right Protocol for Modern Single Sign-On appeared first on Security Boulevard.
SSOJet - Enterprise SSO & Identity Solutions
Granular Policy Enforcement for Decentralized Model Context Resources
3 months ago
Secure your Model Context Protocol (MCP) deployments with granular policy enforcement and post-quantum cryptography. Prevent tool poisoning and puppet attacks.
The post Granular Policy Enforcement for Decentralized Model Context Resources appeared first on Security Boulevard.
Read the Gopher Security's Quantum Safety Blog
CVE-2026-23885 | AlchemyCMS alchemy_cms up to 7.4.11/8.0.2 resources_helper.rb eval eval injection (GHSA-2762-657x-v979 / EUVD-2026-3281)
3 months ago
A vulnerability was found in AlchemyCMS alchemy_cms up to 7.4.11/8.0.2. It has been classified as problematic. Affected is the function eval of the file app/helpers/alchemy/resources_helper.rb. This manipulation causes improper neutralization of directives in dynamically evaluated code.
This vulnerability is tracked as CVE-2026-23885. The attack is possible to be carried out remotely. No exploit exists.
Upgrading the affected component is recommended.
vuldb.com
CVE-2026-23886 | swift-otel swift-w3c-trace-context up to 1.0.3 OpenTelemetry Protocol denial of service (GHSA-mvpq-2v8x-ww6g / EUVD-2026-3282)
3 months ago
A vulnerability classified as problematic was found in swift-otel swift-w3c-trace-context up to 1.0.3. This affects an unknown function of the component OpenTelemetry Protocol. Executing a manipulation can lead to denial of service.
This vulnerability is handled as CVE-2026-23886. The attack can be executed remotely. There is not any exploit available.
Upgrading the affected component is advised.
vuldb.com
CVE-2026-23880 | HackUCF OnboardLite input validation (GHSA-93w8-83cg-h89g / EUVD-2026-3283)
3 months ago
A vulnerability has been found in HackUCF OnboardLite and classified as problematic. Affected by this vulnerability is an unknown functionality. This manipulation causes improper input validation.
The identification of this vulnerability is CVE-2026-23880. It is possible to initiate the attack remotely. There is no exploit available.
Applying a patch is the recommended action to fix this issue.
vuldb.com
CVE-2026-23877 | swingmx swingmusic up to 2.1.3 /folder/dir-browser list_folders path traversal (GHSA-pj88-9xww-gxmh / EUVD-2026-3284)
3 months ago
A vulnerability marked as problematic has been reported in swingmx swingmusic up to 2.1.3. This affects the function list_folders of the file /folder/dir-browser. Performing a manipulation results in path traversal: '/../filedir'.
This vulnerability is reported as CVE-2026-23877. The attack is possible to be carried out remotely. No exploit exists.
It is suggested to upgrade the affected component.
vuldb.com
NightSpire
3 months ago
You must login to view this content
cohenido
Qilin
3 months ago
You must login to view this content
cohenido
Ransomware 'Most Wanted': Cops Seek Head of Black Basta
3 months ago
Crackdown Targets Multiple Members of Cybercrime Group, Including 'Hash Crackers'
Police raided two suspected members of the notorious Black Basta ransomware group - tied to over 600 victims worldwide and many millions in ransom payments - in Ukraine and issued an international arrest warrant for the Russian national suspected of being the operation's founder and ringleader.
Police raided two suspected members of the notorious Black Basta ransomware group - tied to over 600 victims worldwide and many millions in ransom payments - in Ukraine and issued an international arrest warrant for the Russian national suspected of being the operation's founder and ringleader.
HHS Urges Health Sector to Harden Security of PHI, Devices
3 months ago
Feds Pushing HIPAA Regulated Entities to Bolster Security Risk Management
Federal regulators are advising regulated healthcare firms and their third-party vendors to harden systems, software and medical devices to better safeguard protected health information. Hardening is a necessary measure for protecting data privacy security - but also in protecting patient safety.
Federal regulators are advising regulated healthcare firms and their third-party vendors to harden systems, software and medical devices to better safeguard protected health information. Hardening is a necessary measure for protecting data privacy security - but also in protecting patient safety.
Aikido Gets $60M Series B to Scale, Automate AI Pen Testing
3 months ago
5x Revenue Growth, $1B Valuation Fuel Investment in Code Security Innovation
Backed by DST Global, Aikido Security's $60 million Series B will fund global expansion and boost its AI-powered security tools. CEO Willem Delbare said the firm's autonomous pen-testing and code remediation capability cuts cost, boosts software resilience and already outperforms humans.
Backed by DST Global, Aikido Security's $60 million Series B will fund global expansion and boost its AI-powered security tools. CEO Willem Delbare said the firm's autonomous pen-testing and code remediation capability cuts cost, boosts software resilience and already outperforms humans.
Over-the-Air Software Updates Pose Risks to Vehicles
3 months ago
eSync Alliance Chair Shrikant Acharya on How Standardization Can Prevent Breaches
Over-the-air updates are an irreplaceable part of software-defined vehicles, giving manufacturers a convenient way of remotely fixing and upgrading vehicles. If not appropriately secured, over-the-air updates can become a gateway for data theft, malware injection, vehicle theft and even injury.
Over-the-air updates are an irreplaceable part of software-defined vehicles, giving manufacturers a convenient way of remotely fixing and upgrading vehicles. If not appropriately secured, over-the-air updates can become a gateway for data theft, malware injection, vehicle theft and even injury.
美团 LongCat-Flash-Thinking-2601 发布，工具调用能力登顶开源 SOTA！
3 months ago
美团 LongCat 团队正式对外发布并开源 LongCat-Flash-Thinking-2601。作为已发布的 LongCat-Flash-Thinking 模型的升级版，LongCat-Flash-Thinking-2601 在 Agentic Search（智能体搜索）、Agentic Tool Use（智能体工具调用）、TIR（工具交互推理）等核心评测基准上，均达到开源模型 SOTA 水平。
美团技术团队
四部门发文，加速汽车行业数字化转型
3 months ago
构建高端化、智能化、绿色化的现代化汽车产业体系。
CVE-2026-1192 | Tosei Online Store Management System ネット店舗管理システム imode_alldata.php command injection
3 months ago
A vulnerability categorized as critical has been discovered in Tosei Online Store Management System ネット店舗管理システム 1.01. The affected element is an unknown function of the file /cgi-bin/imode_alldata.php. Executing a manipulation of the argument DevId can lead to command injection.
This vulnerability is handled as CVE-2026-1192. The attack can be executed remotely. Additionally, an exploit exists.
The vendor was contacted early about this disclosure but did not respond in any way.
vuldb.com