Aggregator

A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.18.20/6.19.10. This vulnerability affects the function netfs_unbuffered_write of the file fs/netfs/direct_write.c. Such manipulation leads to null pointer dereference. This vulnerability is documented as CVE-2026-31437. The attack requires being on the local network. There is not any exploit available. It is advisable to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.18.20/6.19.10. It has been declared as critical. Affected by this issue is some unknown functionality of the component netfs. The manipulation results in infinite loop. This vulnerability is cataloged as CVE-2026-31435. The attack must originate from the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.1.167/6.6.130/6.12.79/6.18.20/6.19.10. It has been classified as critical. Affected by this vulnerability is the function create_space_info_sub_group of the component btrfs. The manipulation of the argument sub_group[] leads to memory leak. This vulnerability is listed as CVE-2026-31434. The attack must be carried out from within the local network. There is no available exploit. Upgrading the affected component is recommended.

SAP’s July 2026 Security Patch Day addresses multiple high-impact vulnerabilities across its enterprise products, including a severe memory corruption issue in the SAP NetWeaver Application Server ABAP. The most critical vulnerability, tracked as CVE-2026-44747, has a CVSS score of 9.9 and affects several SAP kernel releases used by NetWeaver AS ABAP. SAP has categorized this […]

The post SAP July 2026 Patch Day Fixes Critical NetWeaver, Approuter, and Commerce Cloud Vulnerabilities appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The U.S. Treasury Department's Office of Foreign Assets Control (OFAC) has designated two individuals and a VPN service provider for enabling ransomware actors' and other cybercriminals' malicious activities, including ransomware attacks against Americans. The VPN, named First VPN Service (1VPNS), has been accused of offering its tools to ransomware groups, along with its 45-year-old Ukrainian

The U.S. Treasury Department's Office of Foreign Assets Control (OFAC) has designated two individua

CNNVD发布国产PAV数据标准，替代美国NVD CPE，破解命名混乱、覆盖盲区等难题，实现漏洞影响产品数据自主可...

AI SOC 平台是一种安全运营平台，智能体通过对相关安全数据进行推理，在人工监督下执行SOC的核心工作（检测、分诊、调查和响应）。它不同于AI赋能SOC，后者是在现有的SIEM中总结警报，而底层工作则保持手动。

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

A vulnerability described as problematic has been identified in Bitdefender Total Security and Internet Security 25.0.7.29/26.0.10.45/27.0.25.114/27.0.46.231. The impacted element is an unknown function of the component File Shredder Module. The manipulation results in race condition. This vulnerability is cataloged as CVE-2026-6851. The attack must be initiated from a local position. There is no exploit available.

Технические детали уязвимости, из-за которой Apple судится с OpenAI.

A vulnerability marked as very critical has been reported in SUSE openSUSE. The affected element is an unknown function. The manipulation leads to symlink following. This vulnerability is listed as CVE-2026-59674. The attack must be carried out locally. There is no available exploit.

A newly disclosed vulnerability in the Windows File System Proxy (WinFsp) could allow a local attacker to gain SYSTEM-level privileges by exploiting a race condition that triggers a kernel heap overflow. Tracked as CVE-2026-3006, this vulnerability affects WinFsp versions 2.1.25156 and earlier, according to an advisory published by the Cyber Security Agency of Singapore (CSA) […]

The post WinFsp Race Condition Flaw Allows Attackers to Gain SYSTEM-Level Access on Windows appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

打造“自由军械库”：美国国防部暂停CMMC第二阶段要求

企业因网络攻击造成的财务损失越来越大

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

When a company falls victim to a ransomware attack, it is not uncommon for it to turn to experts for

A vulnerability was found in RabbitMQ up to 4.2.5. It has been classified as problematic. This affects an unknown function of the component Stream Listener. The manipulation leads to resource consumption. This vulnerability is uniquely identified as CVE-2026-57220. The attack is possible to be carried out remotely. No exploit exists.