Aggregator

Hudson Rock has warned OpenClaw users that infostealers are targeting their configuration files

New research from Microsoft has revealed that legitimate businesses are gaming artificial intelligence (AI) chatbots via the "Summarize with AI" button that's being increasingly placed on websites in ways that mirror classic search engine poisoning (SEO). The new AI hijacking technique has been codenamed AI Recommendation Poisoning by the Microsoft Defender Security Research Team. The tech giant

A vulnerability identified as critical has been detected in Sciyon Koyuan Thermoelectricity Heat Network Management System 3.0. This affects an unknown part of the file /SISReport/WebReport20/Proxy/AsyncTreeProxy.aspx. The manipulation of the argument PGUID leads to sql injection. This vulnerability is documented as CVE-2026-2621. The attack can be initiated remotely. Additionally, an exploit exists. The vendor was contacted early about this disclosure but did not respond in any way.

Submit #751809 / VDB-346272

A vulnerability categorized as critical has been discovered in Huace Monitoring and Early Warning System 2.2. Affected by this issue is some unknown functionality of the file /Web/SysManage/ProjectRole.aspx. Executing a manipulation of the argument ID can lead to sql injection. This vulnerability is registered as CVE-2026-2620. It is possible to launch the attack remotely. Furthermore, an exploit is available. The vendor was contacted early about this disclosure but did not respond in any way.

Операторы ботнета Kimwolf признали, что случайно нарушили работу инфраструктуры I2P.

Submit #751808 / VDB-346271

Eurail B.V. revealed that traveler data were stolen in a recent security breach, and are now being sold on the dark web. Eurail B.V. confirmed that the traveler data stolen in a breach earlier this year is now being offered for sale on the dark web. The company disclosed the development as part of its […]

Теперь, чтобы найти человека по фото, не нужно быть гением – достаточно подписки.

A vulnerability was found in Netgate pfSense CE up to 2.8.0. It has been rated as critical. Affected by this vulnerability is the function exec_php of the file pfsense.exec_php of the component XMLRPC API. Performing a manipulation results in improper access controls. This vulnerability is cataloged as CVE-2025-69691. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability was found in Netgate pfSense CE up to 2.7.2. It has been declared as critical. Affected is the function unserialize of the component Backup File Handler. Such manipulation leads to deserialization. This vulnerability is listed as CVE-2025-69690. The attack may be performed from remote. There is no available exploit.

Космос – это больше не про звезды и романтику, это про то, как быстро у вас перестанут работать банковские карты.

«Раздевающий» чат-бот Илона Маска довел британское правительство до новых запретов.

Locked out? Learn what an SSO code actually is, where to find your company domain, and how to solve common login errors in Zoom, Slack, and Salesforce.

The post What Is a Single Sign-On (SSO) Code? appeared first on Security Boulevard.

​如此生活三十年，直到机器人进家。

Китайский след в коде и арабский в письме: эксперты нашли странную языковую смесь в вирусах.

A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.12.9/6.13-rc6. This affects the function tcpci_irq. Such manipulation leads to null pointer dereference. This vulnerability is referenced as CVE-2024-57914. The attack needs to be initiated within the local network. No exploit is available. It is advisable to upgrade the affected component.

A vulnerability has been found in Linux Kernel up to 6.1.124/6.6.71/6.12.9/6.13-rc6 and classified as critical. Impacted is the function usb_ffs_open_thread. This manipulation causes denial of service. This vulnerability is handled as CVE-2024-57913. The attack can only be done within the local network. There is not any exploit available. The affected component should be upgraded.

A vulnerability, which was classified as problematic, has been found in Linux Kernel up to 6.6.71/6.12.9. This affects an unknown part of the component dwmac-tegra. This manipulation causes denial of service. This vulnerability is tracked as CVE-2025-21663. The attack is only possible within the local network. No exploit exists. It is advisable to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.1.124/6.6.71/6.12.9. It has been rated as problematic. Affected by this vulnerability is the function cmd_alloc_index. Performing a manipulation results in allocation of resources. This vulnerability is reported as CVE-2025-21662. The attacker must have access to the local network to execute the attack. No exploit exists. Upgrading the affected component is advised.