Aggregator

The Boring Stuff Is Dangerous Now

darkreading
4 weeks 1 day ago
AI agents capable of discovering and exploiting obscure vulnerabilities are emerging alongside developers producing vast amounts of potentially flawed AI-generated code, forcing defenders to adapt accordingly.
Shlomie Liberow

NASA 维护旅行者号代码的工程师日益稀少

Solidot
4 weeks 1 day ago
NASA 在 48 年前先后发射了两艘旅行者号探测器，当年曾为旅行者号写代码的工程师如今早已白发苍苍，甚至已经去世。旅行者号机载计算机运行的是汇编语言，是专为通用电气开发的处理器编写的。探测器上有三个计算机系统：计算机指令子系统（CCS）、姿态调节控制子系统（ACS）以及飞行数据子系统（FDS）。其底层飞行工作依赖于专门的汇编语言，地面系统和早期任务工具使用了 Fortran 语言。探测器上的计算机内存非常小，总容量仅为 64-70 KB。几十年来，地面控制团队成员不断减少，也逐渐老去。更糟的是很多原始文档遗失或支离破碎。项目文件大多是纸质的，每次项目搬迁办公室，会有更多的文件丢失。NASA JPL Interplanetary Network Directorate 项目主任 Suzy Dodd 在 2024 年称建造探测器的人都已经不在人世。Larry Zottarelli 是最后一位仍在工作的原始团队工程师，他于 2016 年 80 岁时退休。目前旅行者号维护团队大多数人都年过八旬，团队还依赖于一份退休工程师名单，以便在紧急情况下呼叫。该名单每年都在缩小。

CVE-2026-43122 | Linux Kernel up to 6.18.13/6.19.3 ACPI Idle Driver __acpi_processor_start null pointer dereference (WID-SEC-2026-1405)

Vuldb Updates
4 weeks 1 day ago
A vulnerability classified as critical was found in Linux Kernel up to 6.18.13/6.19.3. Affected is the function __acpi_processor_start of the component ACPI Idle Driver. Such manipulation leads to null pointer dereference. This vulnerability is uniquely identified as CVE-2026-43122. The attack can only be initiated within the local network. No exploit exists. Upgrading the affected component is advised.
vuldb.com

CVE-2026-43124 | Linux Kernel up to 6.19.5 pstore vmap null pointer dereference (WID-SEC-2026-1405)

Vuldb Updates
4 weeks 1 day ago
A vulnerability was found in Linux Kernel up to 6.19.5. It has been rated as critical. This issue affects the function vmap of the component pstore. Performing a manipulation results in null pointer dereference. This vulnerability is identified as CVE-2026-43124. The attack can only be performed from the local network. There is not any exploit available. Upgrading the affected component is advised.
vuldb.com

CVE-2026-43121 | Linux Kernel up to 6.18.15/6.19.5 io_zcrx_put_niov_uref double free (Nessus ID 313159 / WID-SEC-2026-1405)

Vuldb Updates
4 weeks 1 day ago
A vulnerability was found in Linux Kernel up to 6.18.15/6.19.5. It has been declared as critical. Impacted is the function io_zcrx_put_niov_uref. Such manipulation leads to double free. This vulnerability is listed as CVE-2026-43121. The attack must be carried out from within the local network. There is no available exploit. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-71294 | Linux Kernel up to 6.12.74/6.18.15/6.19.5 amdgpu buffer_funcs null pointer dereference (WID-SEC-2026-1405)

Vuldb Updates
4 weeks 1 day ago
A vulnerability was found in Linux Kernel up to 6.12.74/6.18.15/6.19.5. It has been classified as critical. This affects the function buffer_funcs of the component amdgpu. This manipulation causes null pointer dereference. The identification of this vulnerability is CVE-2025-71294. The attack needs to be done within the local network. There is no exploit available. Upgrading the affected component is recommended.
vuldb.com

CVE-2025-71293 | Linux Kernel up to 6.18.15/6.19.5 null pointer dereference (WID-SEC-2026-1405)

Vuldb Updates
4 weeks 1 day ago
A vulnerability was found in Linux Kernel up to 6.18.15/6.19.5 and classified as critical. Affected by this issue is some unknown functionality. The manipulation results in null pointer dereference. This vulnerability was named CVE-2025-71293. The attack needs to be approached within the local network. There is no available exploit. It is suggested to upgrade the affected component.
vuldb.com

CVE-2025-71291 | Linux Kernel up to 6.19.5 misc bcm_vk_read null pointer dereference (WID-SEC-2026-1405)

Vuldb Updates
4 weeks 1 day ago
A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.1.164/6.6.127/6.12.74/6.18.15/6.19.5. Affected by this vulnerability is the function bcm_vk_read of the component Misc. Performing a manipulation results in null pointer dereference. This vulnerability was named CVE-2025-71291. The attack needs to be approached within the local network. There is no available exploit. It is advisable to upgrade the affected component.
vuldb.com

SmartBear expands ReadyAPI with AI-powered API testing capabilities

Help Net Security
4 weeks 1 day ago

SmartBear has announced ReadyAPI’s new AI test generation capability that accelerates API testing by up to 80% while giving teams control to enable or disable AI. While competitors focus on speed alone, ReadyAPI’s AI test generation capability is architected for quality at scale and addresses the testing gap by aligning validation with development velocity without compromising application integrity. The AI capability automates repetitive test creation while QA professionals maintain oversight and strategic orchestration. Users can … More →

The post SmartBear expands ReadyAPI with AI-powered API testing capabilities appeared first on Help Net Security.

Industry News

CMD

Dark Feed IO
4 weeks 1 day ago

You must login to view this content

cohenido

Boulevard of Broken Dreams: 2 Decades of Cyber Fails

darkreading
4 weeks 1 day ago
From the MGM and Caesars fiasco and MOVEit's patch nightmare to epic business blunders and the jaded reality of living in a post-breach world, Dark Reading looks back at the mistakes, miscalculations, systemic failures, and cringeworthy moments that still have us shaking our heads.
Dark Reading Editorial Team

Managed ad