Aggregator

CVE-2026-23097 | Linux Kernel up to 6.6.121/6.12.67/6.18.7/6.19-rc6 mm/rmap.c migrate_pages deadlock (Nessus ID 297961)

Vuldb Updates
4 months 1 week ago
A vulnerability was found in Linux Kernel up to 6.6.121/6.12.67/6.18.7/6.19-rc6. It has been declared as critical. This affects the function migrate_pages of the file mm/rmap.c. Executing a manipulation can lead to deadlock. This vulnerability appears as CVE-2026-23097. The attacker needs to be present on the local network. There is no available exploit. It is recommended to upgrade the affected component.
vuldb.com

CVE-2026-23100 | Linux Kernel up to 6.18.7/6.19-rc6 hugetlb hugetlb_pmd_shared reference count (Nessus ID 297963)

Vuldb Updates
4 months 1 week ago
A vulnerability described as critical has been identified in Linux Kernel up to 6.18.7/6.19-rc6. This impacts the function hugetlb_pmd_shared of the component hugetlb. Such manipulation leads to improper update of reference count. This vulnerability is uniquely identified as CVE-2026-23100. The attack can only be initiated within the local network. No exploit exists. Upgrading the affected component is recommended.
vuldb.com

CVE-2026-23052 | Linux Kernel up to 6.18.6/6.19-rc5 ftrace_process_locs allocation of resources (Nessus ID 297964)

Vuldb Updates
4 months 1 week ago
A vulnerability was found in Linux Kernel up to 6.18.6/6.19-rc5. It has been rated as critical. Affected by this issue is the function ftrace_process_locs. This manipulation causes allocation of resources. This vulnerability appears as CVE-2026-23052. The attacker needs to be present on the local network. There is no available exploit. Upgrading the affected component is advised.
vuldb.com

CVE-2025-71192 | Linux Kernel up to 6.1.160/6.6.120/6.12.65/6.18.5/6.19-rc4 ALSA snd_ac97_controller_register double free (Nessus ID 297966 / WID-SEC-2026-0324)

Vuldb Updates
4 months 1 week ago
A vulnerability classified as critical was found in Linux Kernel up to 6.1.160/6.6.120/6.12.65/6.18.5/6.19-rc4. Impacted is the function snd_ac97_controller_register of the component ALSA. The manipulation results in double free. This vulnerability is identified as CVE-2025-71192. The attack can only be performed from the local network. There is not any exploit available. Upgrading the affected component is advised.
vuldb.com

Akira

Dark Feed IO
4 months 1 week ago

You must login to view this content

cohenido

OpenAI Frontier organizes AI agents under one system

Help Net Security
4 months 1 week ago

OpenAI introduced Frontier, a platform designed to organize AI agents that perform business tasks within internal systems and workflows. The platform connects data from multiple internal systems including customer relationship management tools, ticketing platforms, and data warehouses. This integration creates a shared knowledge layer that allows AI agents to understand business processes and decision points across departments. “We’ve learned that teams don’t just need better tools that solve pieces of the puzzle. They needed help … More →

The post OpenAI Frontier organizes AI agents under one system appeared first on Help Net Security.

Sinisa Markovic

170+ SolarWinds Help Desk Installations Vulnerable to RCE Attacks Exposed Online

Cyber Security News
4 months 1 week ago

Over 170 SolarWinds Web Help Desk installations remain vulnerable to a critical remote code execution (RCE) flaw that has been actively exploited in the wild and recently added to CISA’s Known Exploited Vulnerabilities catalog. The vulnerability, tracked as CVE-2025-40551, carries a CVSS score of 9.8 and allows unauthenticated attackers to execute arbitrary commands on affected […]

The post 170+ SolarWinds Help Desk Installations Vulnerable to RCE Attacks Exposed Online appeared first on Cyber Security News.

Guru Baran

Pro-Russian group Noname057(16) launched DDoS attacks on Milano Cortina 2026 Winter Olympics

Security Affairs
4 months 1 week ago
Italy stopped Russian-linked cyberattacks targeting Foreign Ministry offices and Winter Olympics websites and hotels, Foreign Minister Tajani said. Italy has thwarted a series of Russian-linked cyberattacks aimed at Foreign Ministry offices, including one in Washington, as well as Winter Olympics websites and hotels in Cortina d’Ampezzo, according to Foreign Minister Antonio Tajani. “We have foiled […]
Pierluigi Paganini

Substack 警告用户数据泄漏

Solidot
4 months 1 week ago
Substack 通知用户数据泄漏。数据泄漏事件发生在 2025 年 10 月，但 Substack 直到本周才发现。CEO Chris Best 表示，未经授权的第三方访问了部分用户数据，包括邮箱地址、电话号码和其他内部元数据，信用卡号、密码和财务信息未被访问。Substack 未透露有多少用户受到影响。本周一有黑客在 BreachForums 论坛上泄露了一个 Substack 数据库，包含 697,313 条数据记录。Substack 非常受记者和内容创作者的欢迎，截至 2025 年 3 月有 500 万付费订阅用户。

ShadowSyndicate Using Server Transition Technique in Ransomware Attacks

Cyber Security News
4 months 1 week ago

ShadowSyndicate, a malicious activity cluster first identified in 2022, has evolved its infrastructure management techniques by adopting a server transition method that allows the threat actor to rotate SSH keys across multiple servers. This new approach makes it harder for security teams to track the group’s operations. The threat actor initially gained attention for using […]

The post ShadowSyndicate Using Server Transition Technique in Ransomware Attacks appeared first on Cyber Security News.

Tushar Subhra Dutta

Managed ad