Aggregator

原域名已变更且将在2024年彻底废弃，请访问 https://govuln.com/news/ 查看新的RSS订阅

Why Millions of Cybersecurity Jobs Go Unfilled as Talent Struggles to Advance
Cybersecurity's hiring crisis extends beyond workforce shortages. Unrealistic job descriptions exclude newcomers, weak succession planning stalls future CISOs and burnout strains existing teams. Rethinking entry-level requirements and leadership development can help break the cycle.

Hims & Hers Defends Sharing Sensitive Health Data. America Shrugs and Clicks Agree.
Hims & Hers says its privacy policy warned users their sex lives could become advertising intelligence. The FTC alleges Meta got the data. But with Americans resigned to losing their privacy, perhaps Silicon Valley's biggest achievement is convincing us to click "I Agree.

New Mexico, Ohio Ransomware Attacks Raise Concerns as Feds Settle Pennsylvania Case
Cyber incidents at university health systems in New Mexico and Ohio disrupted patient care and sparked data theft concerns and litigation. Meanwhile, a Pennsylvania health system faces an $800,000 HIPAA settlement over a 2023 ransomware attack that exposed sensitive cancer patient photos.

Financial Firms Face Pressure to Balance Customer Access With Data Protection
The lack of reliable ways to identify an artificial intelligence agent has caused many companies, especially banks and other financial institutions, to block most agent traffic amid rising interest in agents from enterprises and regular consumers.

Also: US Healthcare Faces New Risks, Anthropic's Cloud Dependence Raises AI Risks
In this week's panel, four ISMG editors discussed the PHP2Shell threat and the "Black October" attacks, U.S. healthcare cybersecurity and deregulation, and what Anthropic's newly disclosed financials reveal about its business model and dependence on major cloud providers.

French Startup Estimates RSA-2048 Could Fall in Three Days With 23,000 Qubits
French quantum computing startup Alice & Bob estimates that 23,000 cat qubits could break RSA-2048 encryption in three days, while 30,000 could defeat blockchain elliptic-curve cryptography in an hour, raising concerns about long-term data security and cryptocurrency exposure.

Currently trending CVE - Hype Score: 14 - A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting ...

Currently trending CVE - Hype Score: 20 - In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU grace period tcp_v4_syn_recv_sock() transfers ownership of ireq->ireq_opt to the child socket (newinet->inet_opt) without copying it. Another cpu can concurrently ...

Currently trending CVE - Hype Score: 13 - A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able ...

Currently trending CVE - Hype Score: 10 - VMware ESX contains an insufficient logging vulnerability. A malicious administrator could exploit this issue to perform certain operations without them being logged.

Currently trending CVE - Hype Score: 1 - An issue was discovered in localstack 4.9.2 allowing attackers to execute arbitrary code via crafted content hosted on a web-accessable URL and when passed said URL in the the templateURL to the _localstack/cloudformation/deploy endpoint, the hosted content can get executed in ...

Currently trending CVE - Hype Score: 14 - PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The global state may then refer to request memory even after it has been freed. Subsequent requests may ...

Currently trending CVE - Hype Score: 14 - PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request ...

Currently trending CVE - Hype Score: 15 - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server via a specially ...

Currently trending CVE - Hype Score: 2 - In the Linux kernel, the following vulnerability has been resolved: net: skbuff: preserve shared-frag marker during coalescing skb_try_coalesce() can attach paged frags from @from to @to. If @from has SKBFL_SHARED_FRAG set, the resulting @to skb can contain the ...

Currently trending CVE - Hype Score: 13 - Microsoft Outlook Remote Code Execution Vulnerability

A vulnerability has been found in Node.js up to 24.22.0/26.12.0 and classified as problematic. This impacts the function tls.checkServerIdentity of the component TLS Hostname Verification. This manipulation causes improper certificate validation. This vulnerability is registered as CVE-2026-105483. Remote exploitation of the attack is possible. No exploit is available.