Aggregator

Signal 新增针对社会工程学和网络钓鱼攻击的安全警告

HackerNews
1 month ago
Signal 推出了新的应用内确认和警告信息，作为额外的安全防护措施，以应对可能导致各类欺诈的网络钓鱼和社会工程学攻击。   此举旨在设置一定阻碍，让用户有时间评估外部请求的安全性。   近期，正如美国联邦调查局（FBI）、荷兰政府和德国当局所强调的，出现了针对知名人士的攻击，攻击者利用虚假的 “Signal 支持” 警报进行操作。   所有这...
hackernews

数百恶意软件包上传后，RubyGems 暂停新用户注册

HackerNews
1 month ago
Ruby 编程语言的标准包管理器 RubyGems 在一场被称为 “重大恶意攻击” 事件后，暂时暂停了账户注册。   Mend.io 负责软件供应链安全的高级产品经理马切伊・门斯费尔德（Maciej Mensfeld）在 X 平台发文称：“我们目前正应对针对 RubyGems 的重大恶意攻击。暂时暂停新用户注册。涉及数百个软件包，大多针对我们，但有些包...
hackernews

iOS 27的相机App可能新增更多自定义功能

不安全
1 month ago
苹果公司的下一个 iOS 系统更新可能包含手机摄影师一直期待的东西：对相机应用更多的控制。据彭博社记者马克·古尔曼称，相机应用在 iOS 27 系统中将“完全可自定义”，用户可以“选择自己喜欢的位于

奥尔特曼称是马斯克想夺取OpenAI控制权

不安全
1 month ago
OpenAI CEO萨姆·奥尔特曼周二驳斥了埃隆·马斯克的说法，称真正想要夺取OpenAI控制权并从中牟利的人，其实是马斯克。奥尔特曼在加州奥克兰联邦法院接受其律师询问时，否认了马斯克提出的主张。马斯

CVE-2026-34268 | Oracle Java SE/GraalVM for JDK/GraalVM Enterprise Edition Security improper authorization (Nessus ID 309659 / WID-SEC-2026-1201)

Vuldb Updates
1 month ago
A vulnerability identified as critical has been detected in Oracle Java SE, GraalVM for JDK and GraalVM Enterprise Edition. Affected by this vulnerability is an unknown functionality of the component Security. This manipulation causes improper authorization. This vulnerability appears as CVE-2026-34268. The attack requires local access. There is no available exploit. You should upgrade the affected component.
vuldb.com

CVE-2026-22018 | Oracle Java SE/GraalVM for JDK/GraalVM Enterprise Edition Libraries denial of service (Nessus ID 309659 / WID-SEC-2026-1201)

Vuldb Updates
1 month ago
A vulnerability was found in Oracle Java SE, GraalVM for JDK and GraalVM Enterprise Edition. It has been classified as problematic. The impacted element is an unknown function of the component Libraries. Performing a manipulation results in denial of service. This vulnerability is cataloged as CVE-2026-22018. It is possible to initiate the attack remotely. There is no exploit available. Upgrading the affected component is recommended.
vuldb.com

CVE-2026-22021 | Oracle Java SE/GraalVM for JDK/GraalVM Enterprise Edition JSSE denial of service (Nessus ID 309659 / WID-SEC-2026-1201)

Vuldb Updates
1 month ago
A vulnerability has been found in Oracle Java SE, GraalVM for JDK and GraalVM Enterprise Edition and classified as problematic. Impacted is an unknown function of the component JSSE. This manipulation causes denial of service. This vulnerability is tracked as CVE-2026-22021. The attack is possible to be carried out remotely. No exploit exists. The affected component should be upgraded.
vuldb.com

Managed ad