Lockbit
You must login to view this content
Aggregator
eFAQ Publishes Investigation Into Alleged Scam Activity and Coordinated Reputation Attacks
2 weeks 5 days ago
New York, USA, June 19th, 2026, CyberNewswire eFAQ has published a documented investigation into a coordinated reputation attack campaign aimed at influencing brand perception in search results and how AI assistants surface and summarize information. The campaign followed a recognizable pattern. Dozens of accounts — most created days before publishing and most deleted shortly after […]
The post eFAQ Publishes Investigation Into Alleged Scam Activity and Coordinated Reputation Attacks appeared first on Cyber Security News.
Cybernewswire
CISA Warns Fortinet Customers as FortiBleed Hits 86,644 FortiGate Devices
2 weeks 5 days ago
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday urged Fortinet customers with FortiGate appliances to take steps to secure against ongoing malicious activity aimed at thousands of internet-accessible devices.
The sweeping campaign, believed to be the work of Russian-speaking threat actors, has been codenamed FortiBleed. The number of compromised devices stands at
The Hacker News
水稻为什么会“午睡”
2 weeks 5 days ago
在正午高光、高温双重胁迫下，农作物光合作用会被大幅抑制，光能利用效率大幅下降，造成作物平均减产 30% 左右。这种作物“午睡”现象长期制约着光能利用效率与产量提升，自 1910 年被发现至今，困扰科学界长达百年。根据发表在《细胞》期刊上的一项研究，中科院等研究团队通过 10 年跨学科联合攻关，发现植物体内一种名为 MBS1 的超小蛋白可响应强光，形成凝聚体小液滴，通过类似“防护服”的保护作用过滤强光实现“防晒”。研究团队随后在海南、北京、吉林、黑龙江等地开展大田试验。测产结果显示，与底盘对照品种稻花香相比，增强表达 MBS1 的材料在光热胁迫较轻的吉林等地，增产约 10%~15%；在北京等中等光热地区，增产达 20%~30%；而在强光高热的海南，增产幅度高达 40%。这为应对全球气候变暖、实现粮食增产提供了新的基础理论与技术路径。
Nintendo America Employee Data Exposed After Shadowbyt3$ Targets TinyPulse
2 weeks 5 days ago
Nintendo America employee records were exposed via TinyPulse after Shadowbyt3 claimed theft of HR files, tax forms, bank data, and staff survey responses.
Deeba Ahmed
Microsoft June 2026 Update Bug Exposes Recycle Bin Filenames in Deletion Dialog
2 weeks 5 days ago
Microsoft has confirmed a new bug introduced by its June 2026 Patch Tuesday security update that causes Windows to display internal Recycle Bin filenames instead of the original user-facing filenames in file-deletion confirmation dialogs. After installing the Windows security update released on June 9, 2026 (KB5094125), users attempting to permanently delete a single item from […]
The post Microsoft June 2026 Update Bug Exposes Recycle Bin Filenames in Deletion Dialog appeared first on Cyber Security News.
Guru Baran
Шесть CVE и два экстренных патча. F5 выпустила внеплановое предупреждение для NGINX и BIG-IP
2 weeks 5 days ago
Уязвимости затронули почти всю линейку NGINX-продуктов F5.
14,971 WordPress Sites Cleaned in Global SocGholish Takedown
2 weeks 5 days ago
Operation EndGame disrupted SocGholish, taking down 106 servers and cleaning 14,971 WordPress sites used to spread fake-update malware. On June 18, 2026, law enforcement agencies from the Netherlands, Canada, the United States, and Germany, coordinated through Europol, executed a joint action week against SocGholish, one of the most persistent and widely deployed malware distribution networks […]
Pierluigi Paganini
PCB 价格因中东冲突一月内上涨四成
2 weeks 5 days ago
在内存和 SSD 之后，又一个计算机核心元件面临价格快速上涨。这一次是因为中东冲突导致生产高纯度树脂的沙特工厂停产。树脂是制造电路板（PCB）的基本原材料，位于沙特阿拉伯 Jubail 的一家工厂为陶氏化学与沙特阿美的合资企业，它供应了全球七成的高纯度 PPE 树脂。该公司于三月下旬因中东冲突关闭，4 月 6 日和 7 日还遭到导弹袭击。陶氏化学 CEO Jim Fitterling 此前表示公司预计物流和供应链恢复正常至少需要 275 天。高盛报告称 3 月到 4 月间 PCB 价格上涨了 40%。全球最大 PCB 制造商之一的胜宏科技警告中东冲突可能会推高铜和树脂的价格。替代树脂需要重新设计电路板、重新进行可靠性和性能测试，以及重新获得认证。环氧树脂原料的交货期已经从三周延长到了十五周。
CVE-2022-37772 | Maarch RM 2.8.3 excessive authentication (EUVD-2022-40382)
2 weeks 5 days ago
A vulnerability, which was classified as problematic, was found in Maarch RM 2.8.3. Impacted is an unknown function. The manipulation results in improper restriction of excessive authentication attempts.
This vulnerability is known as CVE-2022-37772. It is possible to launch the attack remotely. No exploit is available.
vuldb.com
CVE-2018-8294 | Microsoft Edge/ChakraCore Chakra Scripting Engine memory corruption (EUVD-2022-4036 / Nessus ID 110983)
2 weeks 5 days ago
A vulnerability categorized as critical has been discovered in Microsoft Edge and ChakraCore. This vulnerability affects unknown code of the component Chakra Scripting Engine. The manipulation results in memory corruption.
This vulnerability is known as CVE-2018-8294. It is possible to launch the attack remotely. No exploit is available.
Applying a patch is advised to resolve this issue.
vuldb.com
CVE-2022-37710 | Patterson Dental Eaglesoft 21 Encrypted Key hard-coded key (EUVD-2022-40324)
2 weeks 5 days ago
A vulnerability labeled as problematic has been found in Patterson Dental Eaglesoft 21. Impacted is an unknown function of the component Encrypted Key Handler. Such manipulation leads to use of hard-coded cryptographic key
.
This vulnerability is referenced as CVE-2022-37710. The attack can only be performed from a local environment. No exploit is available.
vuldb.com
eFAQ Publishes Investigation Into Alleged Scam Activity and Coordinated Reputation Attacks
2 weeks 5 days ago
New York, USA, 19th June 2026, CyberNewswire
CyberNewswire
CVE-2022-37705 | Amanda runtar privileges management (EUVD-2022-40319)
2 weeks 5 days ago
A vulnerability was found in Amanda. It has been rated as critical. The impacted element is an unknown function of the file runtar. The manipulation leads to improper privilege management.
This vulnerability is referenced as CVE-2022-37705. The attack can only be performed from a local environment. No exploit is available.
vuldb.com
CVE-2022-37703 | Amanda 3.5.1 calcsize opendir privileges management (EUVD-2022-40317)
2 weeks 5 days ago
A vulnerability classified as critical has been found in Amanda 3.5.1. This affects the function opendir of the component calcsize. The manipulation leads to improper privilege management.
This vulnerability is traded as CVE-2022-37703. It is possible to initiate the attack remotely. There is no exploit available.
vuldb.com
CVE-2022-37704 | Amanda rundump command injection (EUVD-2022-40318)
2 weeks 5 days ago
A vulnerability was found in Amanda. It has been declared as critical. The affected element is an unknown function of the file rundump. Executing a manipulation can lead to command injection.
The identification of this vulnerability is CVE-2022-37704. The attack can only be executed locally. There is no exploit available.
vuldb.com
CVE-2018-8367 | Microsoft Edge/ChakraCore Chakra Scripting Engine memory corruption (EUVD-2022-4030 / Nessus ID 117414)
2 weeks 5 days ago
A vulnerability was found in Microsoft Edge and ChakraCore. It has been rated as critical. The impacted element is an unknown function of the component Chakra Scripting Engine. This manipulation causes memory corruption.
This vulnerability appears as CVE-2018-8367. The attack may be initiated remotely. There is no available exploit.
It is recommended to apply a patch to fix this issue.
vuldb.com
CVE-2026-39830 | x-crypto up to 0.51.x on Go SSH Peer Close deadlock (EUVD-2026-31397 / Nessus ID 316570)
2 weeks 5 days ago
A vulnerability was found in x-crypto up to 0.51.x on Go. It has been classified as problematic. This affects the function Close of the component SSH Peer Handler. This manipulation causes deadlock.
This vulnerability is registered as CVE-2026-39830. Remote exploitation of the attack is possible. No exploit is available.
Upgrading the affected component is recommended.
vuldb.com
CVE-2026-12706 | FFmpeg RASC Video Decoder decode_move use after free (WID-SEC-2026-2015)
2 weeks 5 days ago
A vulnerability marked as critical has been reported in FFmpeg. This affects the function decode_move of the component RASC Video Decoder. The manipulation leads to use after free.
This vulnerability is documented as CVE-2026-12706. The attack can be initiated remotely. There is not any exploit available.
vuldb.com
CVE-2026-39829 | x-crypto up to 0.51.x RSA/DSA inefficient cpu computation (EUVD-2026-31396 / Nessus ID 316561)
2 weeks 5 days ago
A vulnerability was found in x-crypto up to 0.51.x and classified as problematic. Affected by this issue is some unknown functionality of the component RSA/DSA. The manipulation results in inefficient cpu computation.
This vulnerability is cataloged as CVE-2026-39829. The attack may be launched remotely. There is no exploit available.
It is suggested to upgrade the affected component.
vuldb.com