Aggregator

A vulnerability, which was classified as very critical, was found in Octopus Deploy Octopus Server up to 2026.1.11586/2026.2.13189. Affected by this vulnerability is an unknown functionality of the component Project Trigger Actions. Executing a manipulation can lead to improper authorization. This vulnerability appears as CVE-2026-12702. The attack may be performed from remote. There is no available exploit. You should upgrade the affected component.

近几个月来，长鑫存储一直在提高对华为的芯片售价，当华为要求缓解不断上涨的成本压力时，长鑫存储并未让步。六月，双方的紧张关系在长鑫存储位于安徽合肥的工厂进一步升温。当时，与华为有深厚战略合作关系的新凯来

A vulnerability, which was classified as very critical, has been found in Imagination Graphics DDK up to 1.18 RTM2/23.2 RTM2/24.2 RTM2/25.3 RTM/26.1 RTM1. Affected is an unknown function of the component GPU Firmware. Performing a manipulation results in memory corruption. This vulnerability is reported as CVE-2026-49745. The attack is possible to be carried out remotely. No exploit exists. It is advisable to upgrade the affected component.

A vulnerability classified as very critical was found in Imagination Graphics DDK up to 1.18 RTM2/23.2 RTM2/24.2 RTM2/25.3 RTM/26.1 RTM0. This impacts an unknown function of the component GPU Firmware. Such manipulation leads to memory corruption. This vulnerability is documented as CVE-2026-49744. The attack needs to be performed locally. There is not any exploit available. Upgrading the affected component is advised.

A vulnerability classified as problematic has been found in SUNNET Corporate Training Management System up to 10.3. This affects the function e-paper draft upload. This manipulation causes unrestricted upload. This vulnerability is registered as CVE-2026-24727. Remote exploitation of the attack is possible. No exploit is available.

A vulnerability described as critical has been identified in Imagination Graphics DDK up to 1.18 RTM1/23.2 RTM1/24.2 RTM2/25.3 RTM/26.1 RTM1. The impacted element is an unknown function of the component GPU driver. The manipulation results in use after free. This vulnerability is cataloged as CVE-2026-49743. The attack must be initiated from a local position. There is no exploit available. Upgrading the affected component is recommended.

JetBrains has addressed a series of security vulnerabilities affecting IntelliJ IDEA and TeamCity, including several critical flaws that could allow code execution or unauthorized actions in development and continuous integration environments. The updates fix weaknesses in Remote Development sessions, Git and Perforce VCS integrations, workspace handling, agent registration, and permission validation. JetBrains Patches Multiple Vulnerabilities […]

The post JetBrains Patches Multiple Vulnerabilities Affecting IntelliJ IDEA and TeamCity appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Home游戏 游戏

One compromised hotel Wi-Fi gateway can silently redirect every guest to attacker controlled servers, putting corporate accounts at risk even when users think they are browsing safely. The campaign starts with a simple idea that many travelers overlook. When you connect to hotel or conference Wi-Fi, you trust that gateway to handle your traffic honestly. […]

The post One Compromised Wi-Fi Gateway Can Redirect Every Hotel Guest to Attacker Controlled Servers appeared first on Cyber Security News.

近两百家美国科技初创公司组成 Little Tech Association 联盟，联署致函美国总统特朗普、商务部长 Howard Lutnick 等政府高官，呼吁政府不要禁止使用来自中国的开放权重模型。此前由于中国 AI 模型在性能上逼近美国的前沿 AI 模型 Anthropic 的 Fable 5 和 OpenAI 的 GPT-5.6 Sol，美国政府官员表示在考虑封禁中国的 AI 模型。Little Tech Association 的联署信指出，此举会削弱美国初创公司，且并不能阻止开放权重模型扩散。而美国要保持其领先地位需要有世界领先的开放权重模型，确保美国公司能访问其它地方的开放权重模型。

近两百家美国科技初创公司组成 Little Tech Association 联盟，联署致函美国总统特朗普、商务部长 Howard Lutnick 等政府高官，呼吁政府不要禁止使用来自中国

Специалисты нашли на сервере в Гонконге 585 файлов, связанных с атакой на тайское ведомство.

Comparitech’s analysis of incidents in the first half of 2026 finds that the emergence of The Gentlemen ransomware has resulted in surge in attacks against higher education

Il Parlamento e il Consiglio della UE hanno approvato il Digital Omnibus sull'IA, ossia un regolam

Origin Energy Limited has confirmed a cybersecurity incident involving unauthorized access to and disclosure of customer data, representing a significant data security event for one of Australia’s largest energy providers. The company identified the breach on July 22, 2026, and it is currently under active investigation to determine the full extent and impact on affected […]

The post Australian Energy Giant Origin Confirms Data Breach Exposes Customer Data appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Critical Security Updates – Zimbra Collaboration Suite Overview Zimbra Collaboration Suite Daffodil released version 10.1.20 addressing nine security vulnerabilities. Issues […]

The post Weekly Threat Landscape Digest – Week 30 appeared first on HawkEye.

越南或将禁止16岁以下儿童在社媒发帖、评论或对帖子做出回应，因为该国寻求加入其他政府加强未成年人网络保护的行列。根据越南文化、体育与旅游部的一份法令草案，16岁以下儿童必须由其父母或法定监护人负责注册

Apache Syncope has released versions 4.1.24.1, 4.1.24.1.2, and 4.0.74.0.7 to address six security vulnerabilities affecting the 4.1, 4.0, and 3.0 release branches. These vulnerabilities include a self-service privilege escalation bug, multiple post-authentication remote code execution (RCE) pathways, authenticated server-side request forgery (SSRF), and SQL injection issues. Apache Syncope Flaws CVE-2026-62183 affects deployments that utilize the […]

The post Apache Syncope Flaws Let Users Gain Admin Roles and Execute Remote Code appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Google has launched a preview of CodeMender, an AI agent built to scan code for security flaws, confirm they are exploitable, and generate fixes for developers to review. (Source: Google) The company describes it as a response to attackers who are already using AI to speed up their work, arguing that defenders need automation that moves at the same speed. “CodeMender can help you advance from passive scanning to automated code remediation, and reduce zero-day … More →

The post Google gives developers an AI bug hunter that also writes patches appeared first on Help Net Security.

Artificial intelligence adoption is soaring, but consumer trust lags. Transparency, human oversight, and clear AI use cases are key to closing the trust gap. Businesses are rapidly adopting AI, with 93% planning deployment, but consumer trust lags far behind: only 23% trust companies to use AI with their data, revealing a major “AI trust gap.” […]