Aggregator

A vulnerability, which was classified as problematic, has been found in ZTE ZXUniPOS NDS-LTE. The affected element is an unknown function. Performing a manipulation results in cryptographic issues. This vulnerability is reported as CVE-2026-49000. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability classified as problematic has been found in Yoast SEO Plugin up to 26.5 on WordPress. This issue affects some unknown processing of the component Search REST API Endpoint. This manipulation of the argument post_id causes missing authorization. This vulnerability is registered as CVE-2025-14481. Remote exploitation of the attack is possible. No exploit is available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, was found in creativemindssolutions CM Ad Changer Plugin up to 2.0.7 on WordPress. The impacted element is the function cmac_campaigns_action of the component Uploaded File Handler. Executing a manipulation can lead to cross-site request forgery. This vulnerability appears as CVE-2026-9236. The attack may be performed from remote. There is no available exploit.

A vulnerability classified as problematic was found in devitemsllc ShopLentor Plugin up to 3.3.8 on WordPress. Impacted is an unknown function of the component Block Attribute Handler. Such manipulation leads to cross site scripting. This vulnerability is documented as CVE-2026-6287. The attack can be executed remotely. There is not any exploit available.

教宗良十四世发布了其首道通谕《伟大的人类（Magnifica Humanitas）》，谈论了在 AI 时代守护人类。但这篇 通谕被质疑部分是在 AI 帮助下撰写的。AI 检测工具 Pangra 的分析显示，部分段落有 40% 到 100% 的概率是由 AI 撰写的，大部分段落则没有使用 AI。以前发布的通谕没有发现使用 AI 的痕迹。根据文本和间接证据判断，所使用的 AI 很可能是 Anthropic 的 Claude。而这份通谕的一位顾问是 Anthropic 联合创始人 Christopher Olah。

教宗良十四世发布了其首道通谕《伟大的人类（Magnifica Humanitas）》，谈论了在 AI 时代守护人类。但这篇通谕被质疑部分是在 AI 帮助下撰写的。AI 检测工具 Pang

Intel is currently architecting an elegant communication framework for the Linux ecosystem. This innovation bridges adjacent workstations directly via USB4 or Thunderbolt media, bypassing traditional network configuration matrices entirely. Consequently, this point-to-point architecture facilitates...

The post Intel Architects High-Velocity Point-to-Point Interconnect Paradigm for Linux appeared first on Information Security News.

Что изменилось в OpenBSD 7.9 и почему релиз важен не только для фанатов Unix?

荷兰以公共利益风险为由阻止美企进行收购荷兰政府已阻止美国信息技术巨头Kyndryl收购Solvinity，后者是一家托管荷兰在线身份平台的荷兰云服务提供商。荷兰政府称，该交易可能构成公共利益风险。荷兰

A vulnerability was found in Oracle MySQL Server up to 8.0.45/8.4.8/9.6.0. It has been rated as problematic. The impacted element is an unknown function of the component InnoDB. The manipulation leads to denial of service. This vulnerability is listed as CVE-2026-22004. The attack may be initiated remotely. There is no available exploit. Upgrading the affected component is advised.

A vulnerability, which was classified as problematic, was found in Framework Filter Package up to 3.0.5/4.0.1 on Joomla. Affected is an unknown function. Such manipulation leads to cross site scripting. This vulnerability is listed as CVE-2026-48905. The attack may be performed from remote. There is no available exploit.

A vulnerability was found in IBM Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty 8.5/9.0. It has been classified as critical. This affects an unknown part. The manipulation leads to code injection. This vulnerability is documented as CVE-2026-8633. The attack can be initiated remotely. There is not any exploit available. Upgrading the affected component is recommended.

A vulnerability was found in IBM Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty 8.5/9.0. It has been rated as problematic. This issue affects some unknown processing of the component HTTP Request Handler. This manipulation causes http request smuggling. This vulnerability appears as CVE-2026-8620. The attack may be initiated remotely. There is no available exploit. Upgrading the affected component is advised.

维基媒体基金会在五月中旬解雇了 MediaWiki 资深首席开发者 Brooke Vibber，5 月 21 日解散了 Community Tech 团队，五名工程师和一名经理全部离职。他们多数人都是工会组织者。Brooke Vibber 于 2003 年初担任 MediaWiki 项目的首席开发者，维基百科就运行在 MediaWiki 之上，她是维基媒体基金会聘用的第一位全职员工，也是首位 CTO，她被认为是少数深入理解系统技术底层的资深开发者。而 Community Tech 团队旨在通过 Community Wishlist 实现社区志愿者们想要的功能。维基媒体基金会此举立即引发了志愿者的抗议，社区志愿者准备采取罢工等集体行动。这是首次志愿者与基金会员工联合发起声援行动。名叫 Femke 的管理员认为一个致力于造福社会的组织，不应该在没有工会的情况下运作。维基媒体基金会拥有 2.966 亿美元的储备金，足以支付 17.1 个月的运营支出。而工会 Wiki Workers United 只要求：领导层对员工和社区保持透明和负责；决策前倾听员工对年度规划的建议；告别朝令夕改的招人、辞退与晋升乱象，等等，相当的温和。

维基媒体基金会在五月中旬解雇了 MediaWiki 资深首席开发者 Brooke Vibber，5 月 21 日解散了 Community Tech 团队，五名工程师和一名经理全部离职。他

苹果公司可能计划借鉴安卓的防盗妙招苹果公司正在开发一项功能，该功能可以在iPhone被用户抢走时自动锁定。该功能预计将借鉴安卓的 “被盗检测锁定” 机制，利用多种信号的组合来判断手机是否被抢夺。目前苹

Microsoft recently initiated the distribution of its May “C” preview update for Windows 11. This release serves as an early testing vehicle for upcoming capabilities. Consequently, these components will undergo validation before merging into...

The post Architectural Refinements and Feature Modernization in the Latest Windows 11 Preview Deployment appeared first on Information Security News.