Aggregator

作者曾玩过《动物森友会》，但现在无法找回账号，因密码和邮箱不符，官方也无法协助，令他感到无奈和怀念。

Submit #649543 / VDB-324622

Submit #649542 / VDB-324621

Submit #649541 / VDB-324620

AMD终止其开源驱动项目AMDVLK，转而全力支持社区驱动的Mesa RADV项目。这一决策旨在简化开发流程、强化对开源社区的承诺，并统一Linux平台下的Vulkan驱动战略。Mesa RADV在Linux社区中比AMDVLK更受欢迎，并获得了Valve、Google和Red Hat等公司的支持。

AMD 终止自己的 AMDVLK 开源驱动项目，拥抱社区驱动项目 Mesa RADV。这一决定早有先兆：AMD 在今年五月宣布支持 Mesa RADV 驱动。此后它就没有再发布任何新的 AMDVLK 驱动。现在 AMD 正式宣布，为简化开发流程，强化对开源社区的承诺，统一 Linux Vulkan 驱动战略，决定停止 AMDVLK 开源项目，全力支持 RADV 驱动作为 Radeon 显卡官方支持的开源 Vulkan 驱动。Mesa RADV 在 Linux 社区比 AMDVLK 更受欢迎，得到了 Valve、Google 和 Red Hat 等公司的支持。

Apple Music在iOS 26中推出多项新功能，包括自动过渡、歌词翻译与发音、锁屏动态封面、内置音乐回忆、播放列表文件夾、置顶音乐及新增小组件，提升用户体验与效率。

A vulnerability classified as critical was found in Dassault Systèmes SOLIDWORKS eDrawings up to 2025. This affects an unknown function of the component JT File Parser. The manipulation results in use of uninitialized variable. This vulnerability was named CVE-2025-9450. The attack may be performed from remote. There is no available exploit.

A vulnerability classified as critical has been found in Dassault Systèmes SOLIDWORKS eDrawings up to 2025. The impacted element is an unknown function of the component PAR File Parser. The manipulation leads to use after free. This vulnerability is uniquely identified as CVE-2025-9449. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability described as problematic has been identified in Dassault Systèmes SOLIDWORKS eDrawings up to 2025. The affected element is an unknown function of the component PAR File Parser. Executing manipulation can lead to out-of-bounds read. This vulnerability is handled as CVE-2025-9447. The attack can be executed remotely. There is not any exploit available.

A vulnerability marked as critical has been reported in itsourcecode Web-Based Internet Laboratory Management System 1.0. Impacted is the function User::AuthenticateUser of the file login.php. Performing manipulation of the argument user_email results in sql injection. This vulnerability is known as CVE-2025-10599. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

American First Finance, LLC, a Dallas-based financial services firm, suffered a significant insider breach when a recently terminated employee exploited unauthorized access to its production database.  The incident, dubbed the FinWise insider breach, resulted in the exfiltration of sensitive customer records nearly 689,000 names, Social Security numbers, and other personal identifiers via direct SQL queries […]

The post FinWise Insider Breach Exposes 700K Customer Records to Former Employee appeared first on Cyber Security News.

Submit #649501 / VDB-324616

Новая система обновлений вызывает споры в IT-сообществе.

A vulnerability labeled as critical has been found in SourceCodester Pet Grooming Management Software 1.0. This issue affects some unknown processing of the file /admin/search_product.php. Such manipulation of the argument group_id leads to sql injection. This vulnerability is traded as CVE-2025-10598. The attack may be launched remotely. Furthermore, there is an exploit available.

ManageEngine unveiled that its security information and event management (SIEM) solution, Log360, has been strengthened with a reengineered threat detection approach, in a major enhancement aimed at addressing the needs of security operations center (SOC) teams. Over 60% of SOC teams are overwhelmed with irrelevant threat data, of which a majority (53%) of cloud security alerts can be considered noise, according to the 2025 Threat Intelligence Benchmark study commissioned by Google. ManageEngine’s latest release bolsters … More →

The post ManageEngine enhances Log360 to reduce alert fatigue for SOC teams appeared first on Help Net Security.

ブラザー工業株式会社およびそのOEMベンダーが提供する複数の製品では、初期設定における管理者パスワードは製品のシリアル番号から容易に導出可能です。

A vulnerability identified as critical has been detected in kidaze CourseSelectionSystem up to 42cd892b40a18d50bd4ed1905fa89f939173a464. This vulnerability affects unknown code of the file /Profilers/PriProfile/COUNT2.php. This manipulation of the argument cname causes sql injection. This vulnerability appears as CVE-2025-10597. The attack may be initiated remotely. There is no available exploit. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available.

大模型安全避坑指南