Aggregator

苹果将于 3 月 4 日举行产品发布会；2026 春节档新片预售票房破 5 亿；导演贾樟柯发布短片

A vulnerability identified as problematic has been detected in GNU Patch 2.7. Impacted is the function another_hunk. The manipulation leads to denial of service. This vulnerability is uniquely identified as CVE-2021-45261. The attack can only be initiated within the local network. No exploit exists.

A vulnerability has been found in Linux Kernel up to 6.1.161/6.6.122/6.12.68/6.18.8 and classified as critical. Affected by this vulnerability is the function efivar_entry_get of the component efivarfs. This manipulation causes uninitialized pointer. This vulnerability is tracked as CVE-2026-23156. The attack is only possible within the local network. No exploit exists. The affected component should be upgraded.

A vulnerability was found in Linux Kernel up to 6.6.122/6.12.68/6.18.8 and classified as critical. Affected by this issue is the function is_user_task of the component perf. Such manipulation leads to null pointer dereference. This vulnerability is listed as CVE-2026-23159. The attack must be carried out from within the local network. There is no available exploit. It is suggested to upgrade the affected component.

威胁猎人愿您马年业务畅通、风险不扰； 新年快乐，阖家安康，万事顺意。

AI原生安全筑内核，守护新一代数字供应链安全！

骏马迎春福满门，智能值守护乾坤

Currently trending CVE - Hype Score: 20

Currently trending CVE - Hype Score: 2 - NLnet Labs Unbound up to and including version 1.24.2 is vulnerable to possible domain hijack attacks. Promiscuous NS RRSets that complement positive DNS replies in the authority section can be used to trick resolvers to update their delegation information for the zone. Usually ...

Currently trending CVE - Hype Score: 2 - Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, ...

2026年，我建议将OSINT系统地纳入每日情报收集计划，可以让大家始终掌握最新动态并做出全面分析。

新春喜乐至 护网守平安

We uncover how a campaign used Atlassian Jira Cloud to launch automated and targeted spam campaigns, exploiting trusted SaaS workflows to bypass security controls.

律回岁晚，冰雪消融辞旧岁；春到人间，骏马奔腾迎新年。InForSec祝网络安全华人学者新春快乐！