Aggregator

今日暂未更新资讯~
更多最新文章，请访问SecWiki

《高级军事研究杂志》（JAMS）2025年秋季第16卷第2期特刊聚焦于人工智能与颠覆性技术对现代军事战略、作战艺术及伦理法律框架的深远影响。

唐纳德·特朗普总统每天都因其强硬的移民执法、关税政策、重拾门罗主义、坚持控制格陵兰岛关键地区以及有时咄咄逼人的言辞而受到左翼的批评。他被指责搞殖民主义，欺凌盟友和小国，行事如同19世纪的帝国主义者，并将宪法第二条赋予的权力滥用到宪法范围之外。

Torrance, United States / California, February 9th, 2026, CyberNewswire Criminal IP (criminalip.io), the AI-powered threat intelligence and attack surface intelligence platform, is now integrated with IBM QRadar SIEM and QRadar SOAR. The integration brings external, IP-based threat intelligence directly into IBM QRadar’s detection, investigation, and response workflows, enabling security teams to identify malicious activity faster […]

The post Criminal IP Integrates with IBM QRadar to Deliver Real-Time Threat Intelligence Across SIEM and SOAR appeared first on Cyber Security News.

A vulnerability was found in Linux Kernel up to 6.16.3/6.17-rc2 and classified as critical. The affected element is the function tasdevice_priv of the component ALSA. Executing a manipulation can lead to memory corruption. This vulnerability is registered as CVE-2025-39696. The attack requires access to the local network. No exploit is available. It is suggested to upgrade the affected component.

A vulnerability marked as critical has been reported in Linux Kernel up to 6.1.148/6.6.102/6.12.43/6.16.3/6.17-rc2. Impacted is an unknown function. This manipulation causes null pointer dereference. This vulnerability is handled as CVE-2025-39694. The attack can only be done within the local network. There is not any exploit available. It is suggested to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.12.43/6.16.3/6.17-rc2. Affected by this vulnerability is an unknown functionality. The manipulation leads to privilege escalation. This vulnerability is listed as CVE-2025-39695. The attack must be carried out from within the local network. There is no available exploit. It is advisable to upgrade the affected component.

A vulnerability classified as critical was found in Linux Kernel up to 6.17-rc2. Affected is the function drm_atomic_get_new_connector_state. Executing a manipulation can lead to null pointer dereference. This vulnerability is tracked as CVE-2025-39693. The attack is only possible within the local network. No exploit exists. Upgrading the affected component is advised.

A vulnerability classified as critical has been found in Linux Kernel up to 6.17-rc2. This impacts the function bh_read. Performing a manipulation results in use after free. This vulnerability is identified as CVE-2025-39691. The attack can only be performed from the local network. There is not any exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in Linux Kernel up to 6.1.148/6.6.102/6.12.43/6.16.3/6.17-rc2 and classified as critical. Impacted is the function ksmbd_rdma_stop_listening. Performing a manipulation results in null pointer dereference. This vulnerability is cataloged as CVE-2025-39692. The attack must originate from the local network. There is no exploit available. The affected component should be upgraded.

A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.16.3/6.17-rc2. This issue affects some unknown processing of the component iio. Such manipulation leads to uninitialized pointer. This vulnerability is listed as CVE-2025-39690. The attack must be carried out from within the local network. There is no available exploit. You should upgrade the affected component.

A vulnerability classified as critical was found in Linux Kernel up to 6.17-rc2. This affects an unknown part of the component iio. The manipulation results in buffer overflow. This vulnerability is identified as CVE-2025-39687. The attack can only be performed from the local network. There is not any exploit available. Upgrading the affected component is advised.

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.17-rc2. This vulnerability affects the function set_ftrace_filter of the component Function Call Handler. This manipulation causes allocation of resources. This vulnerability is tracked as CVE-2025-39689. The attack is only possible within the local network. No exploit exists. It is advisable to upgrade the affected component.

A vulnerability classified as critical has been found in Linux Kernel up to 6.17-rc2. Affected by this issue is the function insn_rw_emulate_bits of the component comedi. The manipulation leads to information disclosure. This vulnerability is referenced as CVE-2025-39686. The attack needs to be initiated within the local network. No exploit is available. It is recommended to upgrade the affected component.

A vulnerability described as critical has been identified in Linux Kernel up to 6.17-rc2. Affected by this vulnerability is the function request_irq. Executing a manipulation can lead to out-of-bounds read. The identification of this vulnerability is CVE-2025-39685. The attack needs to be done within the local network. There is no exploit available. Upgrading the affected component is recommended.

Военная медицина получила прототип «умного» порошка.

LayerX researchers say that a security in Anthropic's Claude Desktop Extensions can be exploited to allow threat actors to place a RCE vulnerability into Google Calendar, the latest report to highlight the risks that come with giving AI models with full system privileges unfettered access to sensitive data.

The post Flaw in Anthropic Claude Extensions Can Lead to RCE in Google Calendar: LayerX appeared first on Security Boulevard.

A vulnerability classified as critical was found in Atos Unify OpenScape Common Management Portal V10 up to 4.16.x/5.0.x. This issue affects some unknown processing of the component Common Management Portal Web Interface. The manipulation results in unrestricted upload. This vulnerability is reported as CVE-2023-45353. The attack can be launched remotely. No exploit exists. Upgrading the affected component is advised.

A vulnerability, which was classified as critical, has been found in Atos Unify OpenScape Common Management Portal V10 up to 4.16.x/5.0.x. Impacted is an unknown function of the component Common Management Portal Web Interface. This manipulation causes privilege escalation. This vulnerability appears as CVE-2023-45354. The attack may be initiated remotely. There is no available exploit. It is advisable to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Atos Unify OpenScape Common Management Portal V10 up to 4.16.x/5.0.x. The affected element is an unknown function of the component Common Management Portal Web Interface. Such manipulation leads to path traversal. This vulnerability is traded as CVE-2023-45352. The attack may be launched remotely. There is no exploit available. You should upgrade the affected component.