Aggregator

Cybersecurity Companies’ Stocks Fall Sharply as Anthropic Releases Claude Security Tool

Cyber Security News
4 months ago

Shares of major cybersecurity companies nosedived on Friday after AI startup Anthropic unveiled Claude Code Security, a new AI-powered tool capable of autonomously scanning codebases for software vulnerabilities and suggesting targeted patches sparking fears that artificial intelligence could begin displacing traditional enterprise security solutions. Anthropic announced Claude Code Security on February 19, 2026, as a […]

The post Cybersecurity Companies’ Stocks Fall Sharply as Anthropic Releases Claude Security Tool appeared first on Cyber Security News.

Guru Baran

New Shai-Hulud–like npm Worm Attack 19+ Packages to Steal dev/CI Secrets

Cyber Security News
4 months ago

A new supply chain worm is actively targeting the npm ecosystem, with a research team identifying at least 19 malicious npm packages designed to steal developer and CI/CD secrets and automatically spread across repositories and workflows. The campaign, tracked as SANDWORMMODE, uses typosquatted npm packages and poisoned GitHub Actions to infect both developer machines and […]

The post New Shai-Hulud–like npm Worm Attack 19+ Packages to Steal dev/CI Secrets appeared first on Cyber Security News.

Abinaya

微软游戏业务高管离职，接替者来自 AI 部门

Solidot
4 months ago
微软 Xbox 和游戏业务 CEO Phil Spencer 在公司工作 38 年之后离职，被广泛视为其接任者的 Xbox 总裁 Sarah Bond 也已辞职，游戏业务的新 CEO 将是负责 CoreAI 产品的 Asha Sharma。Spencer 是在 2014 年 3 月被任命为 Xbox 负责人，他任内推出了游戏订阅服务 Xbox Game Pass，最为人所知的事情可能是以 690 亿美元收购动视暴雪。他还收购了一系列游戏工作室，其中包括 2020 年以 75 亿美元收购 Bethesda 母公司 ZeniMax，完全控制了著名的游戏 IP 如 《辐射》和《上古卷轴》（Bethesda）、《毁灭战士》和《雷神之锤》（id Software）。

CVE-2025-58034

CVE Trends
4 months ago
Currently trending CVE - Hype Score: 1 - An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4.0 through 7.4.10, FortiWeb 7.2.0 through 7.2.11, FortiWeb 7.0.0 ...

CVE-2025-64446

CVE Trends
4 months ago
Currently trending CVE - Hype Score: 1 - A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.4, FortiWeb 7.4.0 through 7.4.9, FortiWeb 7.2.0 through 7.2.11, FortiWeb 7.0.0 through 7.0.11 may allow an attacker to execute administrative commands on the system via ...

CVE-2026-2617 | Beetel 777VR1 up to 01.00.09 Telnet Service/SSH Service insecure default initialization of resource

Vuldb Updates
4 months ago
A vulnerability was found in Beetel 777VR1 up to 01.00.09 and classified as critical. This affects an unknown function of the component Telnet Service/SSH Service. The manipulation results in insecure default initialization of resource. This vulnerability is identified as CVE-2026-2617. The attack can only be performed from the local network. Additionally, an exploit exists. Applying restrictive firewalling is recommended. The vendor was contacted early about this disclosure but did not respond in any way.
vuldb.com

CVE-2026-2618 | Beetel 777VR1 up to 01.00.09 SSH Service risky encryption

Vuldb Updates
4 months ago
A vulnerability was found in Beetel 777VR1 up to 01.00.09. It has been classified as problematic. This impacts an unknown function of the component SSH Service. This manipulation causes risky cryptographic algorithm. This vulnerability is tracked as CVE-2026-2618. The attack is possible to be carried out remotely. Moreover, an exploit is present. It is suggested to increase the level of encryption. The vendor was contacted early about this disclosure but did not respond in any way.
vuldb.com

CVE-2026-2622 | Blossom up to 1.17.1 Article Title ArticleController.java content cross site scripting

Vuldb Updates
4 months ago
A vulnerability labeled as problematic has been found in Blossom up to 1.17.1. This vulnerability affects the function content of the file blossom-backend/backend/src/main/java/com/blossom/backend/server/article/draft/ArticleController.java of the component Article Title Handler. The manipulation results in cross site scripting. This vulnerability is reported as CVE-2026-2622. The attack can be launched remotely. Moreover, an exploit is present. The vendor was contacted early about this disclosure but did not respond in any way.
vuldb.com

Managed ad