Aggregator

A vulnerability, which was classified as critical, has been found in M2Team NanaZip 6.0.1630.0/6.0.1638.0. Affected is an unknown function of the component FS File Handler. The manipulation of the argument ZEALFS_V1_HEADER leads to out-of-bounds read. This vulnerability is traded as CVE-2026-42446. It is possible to initiate the attack remotely. There is no exploit available. It is advisable to upgrade the affected component.

A vulnerability classified as problematic was found in M2Team NanaZip 6.0.1630.0/6.0.1638.0. This impacts an unknown function. Executing a manipulation can lead to allocation of resources. This vulnerability appears as CVE-2026-42444. The attack may be performed from remote. There is no available exploit. Upgrading the affected component is advised.

A vulnerability classified as problematic has been found in M2Team NanaZip 6.0.1630.0/6.0.1638.0. This affects an unknown function of the component UFS Filesystem Image Parser. Performing a manipulation of the argument fs_ipg results in divide by zero. This vulnerability is reported as CVE-2026-42443. The attack is possible to be carried out remotely. No exploit exists. It is recommended to upgrade the affected component.

A vulnerability described as problematic has been identified in HPE Aruba Networking Wireless Operating System up to 10.4.1.10/10.7.2.2/10.8.0.0. The impacted element is an unknown function of the component Affected Service. Such manipulation leads to denial of service. This vulnerability is documented as CVE-2026-23825. The attack can be executed remotely. There is not any exploit available.

A vulnerability marked as problematic has been reported in HPE Aruba Networking Wireless Operating System up to 10.4.1.10/10.7.2.2/10.8.0.0. The affected element is an unknown function. This manipulation causes denial of service. This vulnerability is registered as CVE-2026-23824. Remote exploitation of the attack is possible. No exploit is available.

A vulnerability labeled as critical has been found in Adobe Substance3D Designer up to 15.1.0. Impacted is an unknown function of the component File Handler. The manipulation results in out-of-bounds write. This vulnerability is cataloged as CVE-2026-34682. The attack may be launched remotely. There is no exploit available. The affected component should be upgraded.

A spokesperson for the company confirmed the incident but declined to provide specifics on how many factories in North America were impacted. Foxconn has factories in Wisconsin, Ohio, Texas, Virginia, Indiana and several across Mexico.

BWH Hotels says hackers accessed guest reservation data, including names and contacts, for over six months across multiple hotel brands. BWH Hotels disclosed a data breach, with threat actors having had access to guest reservation data for more than six months. The incident exposed names and contact details of an undisclosed number of guests. BWH […]

The letter noted that many Americans are unaware that their data is being used to set variable prices, a trend that is particularly pervasive for online shoppers.

IT teams often struggle to quickly coordinate responses across disparate systems during network incidents. This upcoming webinar explores how automation and AI-assisted workflows can reduce response times and help prevent outages. [...]

Signal has introduced new in-app confirmations and warning messages as additional safeguards against phishing and social engineering attempts that could lead to various forms of fraud. [...]

Microsoft has marked May 2026 Patch Tuesday by releasing fixes for 120+ CVE-numbered vulnerabilities, none of which (for a change) are actively exploited or have been publicly disclosed. Still, some deserve more consideration and should be addressed sooner than others. Patches to prioritize For Satnam Narang, senior staff research engineer at Tenable, the four critical remote code execution bugs in Microsoft Word stand out in this release, and especially the two (CVE-2026-40361, CVE-2026-40364) that have … More →

The post Microsoft May 2026 Patch Tuesday: Many fixes, but no zero-days appeared first on Help Net Security.

West Pharmaceutical Services filed a report with the Securities and Exchange Commission (SEC) on Monday evening warning customers that a hacker breached the company network on May 4, stole data and encrypted systems.

Microsoft has released the Windows 10 KB5087544 extended security update to fix the May 2026 Patch Tuesday vulnerabilities and resolve an issue with the new Remote Desktop warnings. [...]

用重新押注 Android，给 Gemini 搭建一套硬件「骨架」