Aggregator

Windows 11 二月更新可能导致部分三星笔记本电脑用户无法访问 C 盘

Solidot
3 days 3 hours ago
微软正在调查一个影响部分三星笔记本电脑的问题。用户在安装 2026 年 2 月安全更新后无法访问 C 盘，无法启动应用。微软表示正与三星合作以确定该问题是否与 Windows 更新或受影响设备上安装的三星软件有关。微软称，受影响用户会遭遇 C 盘无法访问，访问被拒绝的错误信息。该问题也阻止用户访问文件，以及启动 Outlook、Office、浏览器、系统工具和快速助手（Quick Assist）。问题主要发生在巴西、葡萄牙、韩国和印度，影响三星 Galaxy Book 4 等消费类设备。该问题可能与三星共享应用有关，但确切原因尚未确认。

arXiv 成立独立基金会，招聘 CEO

Solidot
3 days 3 hours ago
根据本周发布的一则招聘通知，预印本平台 arXiv 正在成立独立的非盈利基金会，招聘一位有相关领域经验的 CEO，预期薪水 30 万美元左右。arXiv 已有逾 30 年历史，托管了逾 270 万篇学术论文，每五天新增 1000 篇论文，累积下载量 32 亿次。arXiv 上的论文都是开放获取，旨在打破学术研究中的障碍，让研究人员能分享和发现最新研究成果。arXiv 此前由康奈尔大学图书馆管理，在 Simons Foundation 基金会的支持下，它正在成立一个非盈利基金会，将迈入新的阶段。它目前的年度预算约为 600 万美元，有 27 名员工，大部分都是远程工作。

Meta to Permanently Remove End-to-End Encryption Feature in Instagram DMs

Cyber Security News
3 days 3 hours ago

Meta has confirmed it will permanently remove end-to-end encryption (E2EE) support from Instagram direct messages, with the feature officially shutting down after May 8, 2026. The announcement, quietly posted on Instagram’s Help Center support page, marks a significant reversal from Meta’s earlier commitment to privacy-focused messaging across its platforms. Instagram’s E2EE feature was never widely […]

The post Meta to Permanently Remove End-to-End Encryption Feature in Instagram DMs appeared first on Cyber Security News.

Guru Baran

Week in review: AiTM phishing kit used to hijack AWS accounts, year-long malware campaign targets HR

Help Net Security
3 days 5 hours ago

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Turning expertise into opportunity for women in cybersecurity Speaker diversity in cybersecurity has been a talking point for over a decade, with panels, pledges, and dedicated conference tracks failing to produce change. Stages still skew heavily male, even as women represent millions of qualified professionals in the field. SheSpeaksCyber, a free and open directory launched by the Women4Cyber Foundation, aims … More →

The post Week in review: AiTM phishing kit used to hijack AWS accounts, year-long malware campaign targets HR appeared first on Help Net Security.

Help Net Security

CVE-2026-32426 | themelexus Medilazar Core Plugin up to 1.4.7 on WordPress filename control (EUVD-2026-11957)

Vuldb Updates
3 days 5 hours ago
A vulnerability was found in themelexus Medilazar Core Plugin up to 1.4.7 on WordPress. It has been classified as critical. Affected by this vulnerability is an unknown functionality. This manipulation causes improper control of filename for include/require statement in php program ('php remote file inclusion'). This vulnerability is registered as CVE-2026-32426. Remote exploitation of the attack is possible. No exploit is available. Upgrading the affected component is recommended.
vuldb.com

CVE-2026-32425 | linknacional Payment Gateway Pix for GiveWP Plugin up to 2.2.3 on WordPress authorization (EUVD-2026-11955)

Vuldb Updates
3 days 5 hours ago
A vulnerability, which was classified as critical, has been found in linknacional Payment Gateway Pix for GiveWP Plugin up to 2.2.3 on WordPress. Affected by this vulnerability is an unknown functionality. This manipulation causes missing authorization. This vulnerability is handled as CVE-2026-32425. The attack can be initiated remotely. There is not any exploit available.
vuldb.com

CVE-2026-32433 | codepeople CP Contact Form with Paypal Plugin up to 1.3.61 on WordPress sql injection (EUVD-2026-11969)

Vuldb Updates
3 days 5 hours ago
A vulnerability labeled as critical has been found in codepeople CP Contact Form with Paypal Plugin up to 1.3.61 on WordPress. This impacts an unknown function. Executing a manipulation can lead to sql injection. This vulnerability is registered as CVE-2026-32433. It is possible to launch the attack remotely. No exploit is available.
vuldb.com

Managed ad