Aggregator

A vulnerability was found in Oracle iSetup up to 12.2.15. It has been rated as very critical. Affected is an unknown function. The manipulation leads to privilege escalation. This vulnerability is uniquely identified as CVE-2026-46937. The attack is possible to be carried out remotely. No exploit exists. Upgrading the affected component is advised.

A vulnerability was found in Oracle Cost Management up to 12.2.15. It has been declared as very critical. This impacts an unknown function of the component Cost Planning. Executing a manipulation can lead to privilege escalation. This vulnerability is handled as CVE-2026-46929. The attack can be executed remotely. There is not any exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Oracle Advanced Outbound Telephony up to 12.2.15. It has been classified as critical. This affects an unknown function of the component Internal Operations. Performing a manipulation results in improper authorization. This vulnerability is known as CVE-2026-46949. Remote exploitation of the attack is possible. No exploit is available. Upgrading the affected component is recommended.

A vulnerability was found in Oracle Cost Management up to 12.2.15 and classified as critical. The impacted element is an unknown function of the component Cost Planning. Such manipulation leads to privilege escalation. This vulnerability is traded as CVE-2026-46938. The attack may be launched remotely. There is no exploit available. It is suggested to upgrade the affected component.

A vulnerability has been found in Oracle Process Manufacturing Product Development up to 12.2.15 and classified as very critical. The affected element is an unknown function of the component Quality Management Specs. This manipulation causes privilege escalation. This vulnerability appears as CVE-2026-46916. The attack may be initiated remotely. There is no available exploit. The affected component should be upgraded.

Павел Дуров советует отправить индийскую Reliance в глобальный бан из-за сетевого пиратства.

根据 Sensor Tower 的《State of AI Report for 2026》报告，在 ChatGPT 发布三年半之后，其市场份额首次跌破 50%，而用户正在 Google Gemini、Anthropic Claude 等不同 AI 助手之间切换。ChatGPT 是最快达到 10 亿月活用户的应用，它的月活用户目前超过 11 亿，之后是 Gemini 的 6.62 亿 和 Claude 的 2.45 亿。ChatGPT 在今年 1 月市场份额还超过 50%，但到了 5 月底降至 46.4%，Gemini 占 27.7% 和 Claude 占 10.3%，Grok、Perplexity、DeepSeek 和 Meta AI 都低于 5%。 Sensor Tower 估计，2026 年上半年，AI 应用下载量预计将接近 23 亿次，用户支出将超过 42 亿美元。相比之下 2025 年上半年的 AI 支出为 18.3 亿美元——这表明 AI 行业正将重心从增长转向盈利。但下载量和支出增长率均已放缓，表明即使绝对数量在继续攀升，市场可能正走向成熟。中国和印度的 AI 应用下载量出现了下滑，2026 年第一季度亚洲下载量下降了 3.3%。

Если нельзя получить лучшие чипы — нужно изобрести вычисления, где чипы вообще не главное.

实战化的Agentic SOC应坚持“人类主导、AI支撑”的核心原则，不仅要靠应用场景，还要考虑智能体安全与AI运行维护。

速修复

奇安信 Qcode Agents 和奇安信开源卫士入选 2026 Gartner®中国安全技术成熟度曲线报告。

威胁猎人获评“反欺诈情报”领域代表企业。

6月18日（明天）10：30，准备好手速啦

“复兴杯”第五届全国大学生网络安全精英赛总决赛暨颁奖典礼日前在唐山丰润数字创新示范产业园•网络安全集成服务创新示范基地举行。

Micro-Star International Co., Ltd.が提供するRadiX AX6600 WiFi 6 Tri-Band Gaming Routerには、OSコマンドインジェクションの脆弱性が存在します。

正经解决办法是升级客户端、终端模拟器，使之支持OSC序列。但会遇上不想、不便升级的情形，此时只能从服务端解决，即不要发送OSC序列。

Zimperium 的 zLabs 安全研究人员记录了一种新的 Android 银行木马 Rokarolla，该木马针对 217 个银行和加密货币应用程序，并包含 137 条远程命令。 这些功能加在一起，使操作者几乎可以完全控制受感染的手机：它能够获取锁屏 PIN 码、读取和发送短信、重写剪贴板以重定向加密货币支付，并关闭 Google Play Protect。 Rokarolla 以其命令与控...

Google Cloud Vertex AI Python SDK 中的一个漏洞允许攻击者在无需访问受害者项目的情况下，劫持受害者的机器学习模型上传，并在 Google 的服务基础设施内运行代码。 Palo Alto Networks Unit 42 通过 Google 的漏洞赏金计划发现并报告了此漏洞，将该技术称为“Pickle in the Middle”（中间人 Pi...