Aggregator

A vulnerability marked as critical has been reported in FreeIPMI up to 1.6.17. This vulnerability affects unknown code of the component Intelligent Platform Management Interface. Performing a manipulation results in stack-based buffer overflow. This vulnerability is known as CVE-2026-50031. Remote exploitation of the attack is possible. No exploit is available. It is suggested to upgrade the affected component.

Rapid7 details a critical unauthenticated overflow in HP Poly VoIP phones that can lead to root RCE, with patches available for affected models. Rapid7’s latest disclosure on CVE-2026-0826 should get serious attention from anyone running HP Poly VoIP phones in an enterprise setting. It’s a critical unauthenticated stack-based buffer overflow that can give a remote […]

Китайским ИИ-специалистам теперь нужно спрашивать государство, можно ли им ехать за рубеж.

AI agents run inside coding assistants, MCP servers, and multi-agent frameworks, and the access that makes them useful also opens paths to prompt injection, tool poisoning, and credential theft. Public CVE feeds carry agent-execution flaws that reach production faster than the tooling built to catch them. Agent Threat Rules, or ATR, is an open detection format aimed at this category of attack. ATR rules are YAML documents that conform to a versioned schema. Each one … More →

The post Agent Threat Rules: Open detection rule format for AI agent security threats appeared first on Help Net Security.

A vulnerability, which was classified as critical, has been found in Google Android 14/15/16/16-qpr2. Affected by this vulnerability is an unknown functionality of the file ubsan_throwing_runtime.cpp. Performing a manipulation results in integer overflow. This vulnerability is identified as CVE-2026-0080. The attack can be initiated remotely. There is not any exploit available.

A vulnerability was found in Google Android 14/15/16/16-qpr2. It has been rated as critical. The affected element is the function validateNode of the file ResourceTypes.cpp. Performing a manipulation results in out-of-bounds read. This vulnerability is reported as CVE-2026-0076. The attack requires a local approach. No exploit exists.

A vulnerability classified as critical was found in Google Android 16-qpr2. This affects an unknown part of the file ActivityRecord.java. Executing a manipulation can lead to Local Privilege Escalation. The identification of this vulnerability is CVE-2026-0077. The attack can only be executed locally. There is no exploit available. Applying a patch is advised to resolve this issue.

A vulnerability, which was classified as critical, has been found in Google Android 14/15/16/16-qpr2. This vulnerability affects the function setGlobalProxy of the file DevicePolicyManagerService.java. The manipulation leads to improper synchronization. This vulnerability is referenced as CVE-2026-0078. The attack can only be performed from a local environment. No exploit is available.

A vulnerability, which was classified as critical, was found in Google Android 14/15/16/16-qpr2. This issue affects some unknown processing of the file ubsan_throwing_runtime.cpp. The manipulation results in integer overflow. This vulnerability is identified as CVE-2026-0079. The attack is only possible with local access. There is not any exploit available.

A vulnerability categorized as critical has been discovered in Google Android 14/15/16/16-qpr2. The impacted element is the function getPreferredSize of the file LauncherProcessImageListener.kt. Executing a manipulation can lead to denial of service. This vulnerability appears as CVE-2026-0074. The attack requires local access. There is no available exploit.

A vulnerability described as critical has been identified in Google Android 14/15/16/16-qpr2. Affected by this vulnerability is an unknown functionality of the file DevicePolicyManagerService.java. Such manipulation leads to denial of service. This vulnerability is uniquely identified as CVE-2026-0070. Local access is required to approach this attack. No exploit exists.

A vulnerability classified as critical has been found in Google Android 14/15/16/16-qpr2. Affected by this issue is some unknown functionality. Performing a manipulation results in sql injection. This vulnerability was named CVE-2026-0075. The attack may be initiated remotely. There is no available exploit.

A vulnerability was found in Google Android 14. It has been declared as critical. Impacted is the function verifySignature of the file ApkChecksums.java. Such manipulation leads to denial of service. This vulnerability is documented as CVE-2026-0069. The attack needs to be performed locally. There is not any exploit available.

Легенда из 1995 года отчаянно пытается выжить в эпоху нейросетей.

In this Help Net Security video, Garfield Jones, SVP Global Strategy and Research, QuSecure, lays out what CISOs should do over the next 24 months. A recent Google paper moved the expected arrival of a cryptographically relevant quantum computer from 2035 to 2029, leaving organizations about two and a half years to prepare. Such a machine, paired with Shor’s algorithm, would break the public key encryption in use today. Jones explains the Harvest Now, Decrypt … More →

The post What CISOs need to do about post-quantum migration in the next 24 months appeared first on Help Net Security.

​闭关十年，驭势科技是时候下山了。

电商大促背后，黑灰产正在“围猎”品牌增长。威胁猎人发布《电商大促业务欺诈场景解决方案》，助力企业提前识别、拦截并响应业务风险。

A vulnerability was found in Google Android 14/15/16/16-qpr2. It has been classified as critical. This issue affects the function updateState of the file GraphicsDriverEnableAngleAsSystemDriverController.java. This manipulation causes denial of service. This vulnerability is registered as CVE-2026-0060. The attack needs to be launched locally. No exploit is available.

A vulnerability labeled as critical has been found in Google Android 14/15/16/16-qpr2. This impacts an unknown function of the file WindowState.java. The manipulation results in permission issues. This vulnerability is known as CVE-2026-0061. Attacking locally is a requirement. No exploit is available.

A vulnerability marked as critical has been reported in Google Android 14/15/16/16-qpr2. Affected is an unknown function of the file ubsan_throwing_runtime.cpp. This manipulation causes denial of service. This vulnerability is handled as CVE-2026-0067. It is possible to launch the attack on the local host. There is not any exploit available.