Aggregator

用多 Agent 分工处理安全任务，用 Docker 沙箱约束工具执行，用持久化事件和上下文投影保证任务过程可恢复、可审计、可复盘。

The U.S. Department of Justice announced Friday that it has seized the CFAKE.com and SOCFAKE.com websites, which allegedly hosted nonconsensual AI-generated nude images and videos of women, in what appears to be the first publicly announced domain seizure under the TAKE IT DOWN Act. [...]

The revelation mirrors an alarming pattern of Chinese espionage groups dropping backdoors into critical infrastructure to intercept research and steal data with national security implications.

The post Google exposes China espionage group that’s been lurking in networks undetected since 2023 appeared first on CyberScoop.

A vulnerability in the SimpleHelp remote management software allows unauthenticated attackers to create privileged technician accounts on servers using the OpenID Connect (OIDC) authentication protocol. [...]

A China-linked espionage group hid inside North American medical, academic, and military research networks for more than a year, quietly stealing sensitive research and defense email. The way in was a backdoor on their REDCap research servers that stole login credentials. The exfiltration was the unusual part: the attackers rewired the victims' own Google Workspace rules to copy any message

Cybersecurity researchers have flagged two malicious cyber campaigns that exhibit similarities with a persistent North Korean threat cluster known as Contagious Interview (aka Famous Chollima, HexagonalRodent, and Void Dokkaebi). According to a report published by Proofpoint, the threat actor has been found orchestrating phishing campaigns using developer role recruitment or code review themes

The denial-of-service (DoS) exploit takes advantage of two features in HTTP/2 that were designed to save Internet bandwith, not power massive amplification attacks.

The critical, three-stage attack is now patched, but it's part of a new group of AI prompt-injection issues that use hidden URLs and other variables.

A vulnerability described as problematic has been identified in Valhalla up to 3.6.3. Affected by this vulnerability is an unknown functionality. Executing a manipulation can lead to cross site scripting. This vulnerability is tracked as CVE-2026-49294. The attack can be launched remotely. No exploit exists.

A vulnerability marked as critical has been reported in LibreOffice up to 26.2.3. Affected is an unknown function. Performing a manipulation results in type confusion. This vulnerability is identified as CVE-2026-8358. The attack can be initiated remotely. There is not any exploit available. It is suggested to upgrade the affected component.

A vulnerability labeled as critical has been found in LibreOffice up to 26.2.3. This impacts an unknown function. Such manipulation leads to out-of-bounds write. This vulnerability is referenced as CVE-2026-8357. It is possible to launch the attack remotely. No exploit is available. The affected component should be upgraded.

A vulnerability identified as critical has been detected in LibreOffice up to 26.2.3. This affects an unknown function. This manipulation causes out-of-bounds write. The identification of this vulnerability is CVE-2026-8356. It is possible to initiate the attack remotely. There is no exploit available. You should upgrade the affected component.

A vulnerability categorized as critical has been discovered in LibreOffice up to 25.8.6/26.2.2. The impacted element is an unknown function. The manipulation results in out-of-bounds write. This vulnerability was named CVE-2026-6047. The attack may be performed from remote. There is no available exploit. It is advisable to upgrade the affected component.

A vulnerability was found in LibreOffice up to 25.8.6/26.2.2. It has been rated as critical. The affected element is an unknown function. The manipulation leads to out-of-bounds write. This vulnerability is uniquely identified as CVE-2026-6045. The attack is possible to be carried out remotely. No exploit exists. Upgrading the affected component is advised.

A vulnerability was found in LibreOffice up to 25.8.6/26.2.2. It has been declared as critical. Impacted is an unknown function. Executing a manipulation can lead to use after free. This vulnerability is handled as CVE-2026-6040. The attack can be executed remotely. There is not any exploit available. It is recommended to upgrade the affected component.