Aggregator

嗯，用户让我总结这篇文章的内容，控制在100字以内，而且不需要用“文章内容总结”这样的开头。好的，首先我需要仔细阅读文章，抓住主要信息。 文章讲的是Microsoft Office 2021和LTSC版本将在2026年10月结束支持。结束支持后，软件还能用，但不再有安全更新。微软建议升级到Microsoft 365云订阅版，或者可以选择Office 2024买断版。LTSC版本的支持周期也从之前的10年缩短到5年了。 所以，我需要把这些关键点浓缩到100字以内。重点包括结束支持的时间、影响、微软的建议以及LTSC的变化。这样用户就能快速了解主要内容了。 再检查一下字数，确保不超过限制。同时，语言要简洁明了，避免使用复杂的术语。 Microsoft Office 2021及LTSC版将于2026年10月结束支持，此后不再提供安全更新。微软建议升级至Microsoft 365云订阅版或Office 2024买断版以确保持续安全。

In this Help Net Security interview, Idan Habler, AI Security Researcher at Cisco, breaks down a threat most security teams haven’t named yet: agentic memory as an attack surface. Habler walks through MemoryTrap, a disclosed and remediated method to compromise Claude Code’s memory, showing how a single poisoned memory object can spread across sessions, users, and subagents. He explains why AI memory needs the same governance as secrets and identities, and what organizations must rebuild … More →

The post Agentic AI memory attacks spread across sessions and users, and most organizations aren’t ready appeared first on Help Net Security.

JPCERT/CC held the ICS Security Conference 2026 on February 10, 2026. This conference aims to share the current threat landscape surrounding Industrial Control System (ICS) in Japan and abroad, as well as initiatives undertaken by stakeholders in ICS security. It...

A vulnerability was found in Ubiquiti UniFi Play PowerAmp and UniFi Play Audio Port. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component actor Handler. The manipulation results in denial of service. This vulnerability was named CVE-2026-22565. The attack may be performed from remote. There is no available exploit. It is recommended to upgrade the affected component.

A vulnerability was found in Ubiquiti UniFi Play PowerAmp and UniFi Play Audio Port. It has been classified as critical. Affected is an unknown function of the component SSH. The manipulation leads to improper access controls. This vulnerability is uniquely identified as CVE-2026-22564. The attack is possible to be carried out remotely. No exploit exists. Upgrading the affected component is recommended.

A vulnerability was found in Ubiquiti UniFi Play PowerAmp and UniFi Play Audio Port and classified as critical. This impacts an unknown function of the component actor Handler. Executing a manipulation can lead to command injection. This vulnerability is handled as CVE-2026-22563. The attack can be executed remotely. There is not any exploit available. It is suggested to upgrade the affected component.

A vulnerability has been found in Python CPython up to 3.14.x and classified as critical. This affects the function webbrowser.open. Performing a manipulation results in command injection. This vulnerability is known as CVE-2026-4786. Remote exploitation of the attack is possible. No exploit is available. The affected component should be upgraded.

好的，我现在要帮用户总结这篇文章的内容。用户的要求是用中文总结，控制在100字以内，不需要特定的开头，直接写描述。 首先，我需要通读整篇文章，抓住主要信息。文章讲的是暗网的一个论坛TierOne发起了一个写作比赛，奖金池1万美元。参赛者需要提交关于漏洞利用的技术文章，比如远程代码执行、命令注入等。比赛有严格的规则，比如原创性、字数要求等。 接下来，我要提取关键点：暗网论坛、写作比赛、技术文章、漏洞利用、奖金池、参赛规则。这些是主要内容。 然后，我需要用简洁的语言把这些点整合起来，控制在100字以内。要注意逻辑连贯，避免遗漏重要信息。 最后，检查字数是否符合要求，并确保语言流畅自然。 暗网论坛TierOne宣布举办技术文章竞赛，奖金池达1万美元。参赛者需提交关于漏洞利用的技术文章，涵盖远程代码执行、命令注入等主题。比赛要求原创且内容详实，并设定了严格的参与规则。

A vulnerability, which was classified as problematic, was found in ImageMagick up to 7.1.2-18. The impacted element is an unknown function of the component MSL Decoder. Such manipulation leads to off-by-one. This vulnerability is traded as CVE-2026-40312. The attack may be launched remotely. There is no exploit available. You should upgrade the affected component.

A vulnerability, which was classified as critical, has been found in ImageMagick up to 6.9.13-43/7.1.2-18. The affected element is an unknown function of the component XMP Profile Handler. This manipulation causes use after free. This vulnerability appears as CVE-2026-40311. The attack may be initiated remotely. There is no available exploit. It is advisable to upgrade the affected component.

A vulnerability classified as critical was found in ImageMagick up to 6.9.13-43/7.1.2-18. Impacted is an unknown function of the component XML File Parser. The manipulation results in heap-based buffer overflow. This vulnerability is reported as CVE-2026-33899. The attack can be launched remotely. No exploit exists. Upgrading the affected component is advised.

A vulnerability classified as critical has been found in EspoCRM up to 9.3.3. This issue affects some unknown processing of the file /api/v1/Email/importEml of the component Endpoint. The manipulation of the argument fileId leads to authorization bypass. This vulnerability is documented as CVE-2026-33740. The attack can be initiated remotely. There is not any exploit available. It is recommended to upgrade the affected component.

A vulnerability described as problematic has been identified in ImageMagick up to 6.9.13-43/7.1.2-18. This vulnerability affects unknown code of the component Image Parser. Executing a manipulation can lead to uncontrolled recursion. This vulnerability is registered as CVE-2026-33902. It is possible to launch the attack remotely. No exploit is available. Upgrading the affected component is recommended.

A vulnerability marked as critical has been reported in jqlang jq. This affects the function strlen. Performing a manipulation results in improper null termination. This vulnerability is cataloged as CVE-2026-33948. It is possible to initiate the attack remotely. There is no exploit available. It is suggested to install a patch to address this issue.

A critical security vulnerability impacting ShowDoc, a document management and collaboration service popular in China, has come under active exploitation in the wild. The vulnerability in question is CVE-2025-0520 (aka CNVD-2020-26585), which carries a CVSS score of 9.4 out of 10.0. It relates to a case of unrestricted file upload that stems from improper validation of

好的，我现在要帮用户总结这篇文章的内容。用户的要求是用中文，控制在100字以内，不需要特定的开头，直接写文章描述即可。 首先，我需要通读整篇文章，抓住关键信息。文章主要讲的是ShowDoc的一个安全漏洞，编号是CVE-2025-0520，CVSS评分高达9.4。这个漏洞允许攻击者上传任意PHP文件，从而实现远程代码执行。漏洞影响的是ShowDoc 2.8.7之前的版本，已经在2020年修复。 接下来，文章提到这个漏洞最近被积极利用，攻击者在honeypot上植入了web shell。数据显示有超过2000个ShowDoc实例在线，大部分在中国。这说明N日漏洞被广泛利用的情况越来越严重。 现在我要把这些信息浓缩到100字以内。重点包括：ShowDoc的高危漏洞、CVSS评分、攻击方式、受影响版本、修复时间、近期被利用的情况以及实例数量和分布。 可能的结构是：先点出漏洞名称和评分，然后说明攻击方式和影响版本，接着提到修复情况和近期的利用情况，最后补充实例数量和分布。 检查一下字数是否符合要求，并确保语言简洁明了。 ShowDoc文档管理服务发现高危漏洞（CVE-2025-0520），CVSS评分9.4。该漏洞源于文件扩展名验证不当，允许攻击者上传任意PHP文件并远程执行代码。此漏洞影响ShowDoc 2.8.7以下版本，在线实例超2000个，多分布于中国。建议用户升级至最新版本以防范威胁。

A vulnerability labeled as problematic has been found in SAP Human Capital Management for S4HANA up to SAP_HRRXX 600. Affected by this issue is some unknown functionality of the component Message Handler. Such manipulation leads to observable response discrepancy. This vulnerability is listed as CVE-2026-34264. The attack may be performed from remote. There is no available exploit. Applying a patch is advised to resolve this issue.

A vulnerability identified as problematic has been detected in SAP Business Analytics and Content Management up to SAP_HRRXX 600. Affected by this vulnerability is an unknown functionality of the component Remote Function Module. This manipulation causes missing authorization. This vulnerability is tracked as CVE-2026-34261. The attack is possible to be carried out remotely. No exploit exists. It is recommended to apply a patch to fix this issue.

A vulnerability categorized as problematic has been discovered in SAP ERP and S4 HANA. Affected is an unknown function. The manipulation results in missing authorization. This vulnerability is identified as CVE-2026-34256. The attack can be executed remotely. There is not any exploit available. It is best practice to apply a patch to resolve this issue.

A vulnerability was found in SAP Landscape Transformation. It has been rated as critical. This impacts an unknown function. The manipulation leads to code injection. This vulnerability is referenced as CVE-2026-27675. Remote exploitation of the attack is possible. No exploit is available. Applying a patch is the recommended action to fix this issue.