Aggregator

A vulnerability was found in Google Chrome on Windows. It has been rated as critical. The affected element is an unknown function of the component Core. The manipulation leads to use after free. This vulnerability is referenced as CVE-2026-12007. Remote exploitation of the attack is possible. No exploit is available. Upgrading the affected component is advised.

Since 2025, promotional efforts have surrounded the T1 phone from Trump Mobile, a wireless carrier founded by the son of US President Trump and operating under a license from the Trump Organization. Marketed heavily...

The post Teardown Reveals Trump T1 Phone Is a Rebadged HTC appeared first on Information Security News.

A vulnerability was found in Google Chrome on Android. It has been declared as critical. Impacted is an unknown function of the component GPU. Executing a manipulation can lead to heap-based buffer overflow. The identification of this vulnerability is CVE-2026-12010. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

When a new batch of source code appeared on GitHub, it unexpectedly caught the attention of security researchers. Over the past few days, repositories bearing the name Miasma-Open-Source-Release began appearing across the platform in...

The post Miasma Toolkit Targets Software Supply Chains appeared first on Information Security News.

Musicians who uploaded songs to YouTube may have unknowingly handed Google the raw material for training its music AI, without ever giving separate consent. A group of independent artists has filed suit against Google,...

The post Google Faces Lawsuit Over Lyria 3 AI Music Training appeared first on Information Security News.

North Korean hackers have launched a sweeping new campaign against software developers. The attackers rely on fake job postings and offers to review someone else’s code. According to Proofpoint, they have already targeted employees...

The post UNK_DeadDrop: North Korean Hackers Target Developers appeared first on Information Security News.

Google has rolled out an urgent update for Chrome on Windows, macOS, and Linux. In total, the browser receives fixes for 74 vulnerabilities. Crucially, one of these flaws is already being exploited in real-world...

The post Chrome Emergency Update Fixes Exploited Zero-Day Flaw appeared first on Information Security News.

【火绒安全周报】国家安全部发文/Instagram再曝严重安全漏洞

火绒小问答——「企业版」异常终端问题说明

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

男性不育是当前全球生殖健康领域日益受到关注的问题。除遗传、激素异常和生殖系统疾病等已知原因外，环境暴露和生活方式因素也越来越受到重视。一些药物残留和环境污染物可能通过水体、土壤或食物链进入人体，但它们对男性生殖健康的潜在影响仍未被充分阐明。南京大学研究人员的一项研究探讨了环境暴露物奥硝唑对男性生育力的潜在影响。奥硝唑是一类可用于人类、畜禽和水产养殖领域的抗感染药物。研究人员首先分析了临床血清样本，发现少精子症患者血清奥硝唑水平高于健康对照人群。进一步分析显示，较高的血清奥硝唑水平与较低的精子浓度和总正常前向运动精子数显著相关，提示奥硝唑相关暴露可能与精子质量下降存在关联。研究人员称补充 Omega-3 脂肪酸 DHA 能显著改善奥硝唑诱导的生精功能损伤和减速分裂障碍。

Mandiant and Google Threat Intelligence Group (GTIG) have issued a critical warning after identifying an active compromise-and-extortion campaign targeting Oracle PeopleSoft infrastructure, attributed to the notorious threat actor UNC6240, also known as ShinyHunters. The campaign exploited CVE-2026-35273, a critical unauthenticated remote code execution (RCE) vulnerability with a CVSS score of 9.8, as a zero-day before […]

The post Oracle PeopleSoft 0-Day RCE Vulnerability Exploited in Attacks by ShinyHunters appeared first on Cyber Security News.