Aggregator
CVE-2026-32375 | raratheme Travel Diaries Plugin up to 1.2.4 on WordPress authorization
CVE-2026-32386 | EnvoThemes Envo Extra Plugin up to 1.9.13 on WordPress authorization
CVE-2026-32380 | raratheme Numinous Plugin up to 1.3.0 on WordPress authorization
CVE-2026-32379 | raratheme Rara Academic Plugin up to 1.2.2 on WordPress authorization
CVE-2026-32385 | Metagauss RegistrationMagic Plugin up to 6.0.7.6 on WordPress authorization
成果分享 | 正在互联网“裸奔”的小程序云服务
Вирусы больше не в моде. Теперь хакеры грабят пользователей с помощью программ для сисадминов
G.O.S.S.I.P 阅读推荐 2026-03-13 以(脆弱的)驱动之名
EU Parliament backs extension of CSAM detection rules until 2027
The European Parliament has voted to extend a temporary exemption to EU privacy legislation that allows online platforms to voluntarily detect child sexual abuse material (CSAM). The extension prolongs a derogation from the EU’s ePrivacy Directive, which was set to expire on 3 April 2026, until 3 August 2027. Lawmakers say the additional time will allow the EU to negotiate and adopt a permanent legal framework to prevent and combat child sexual abuse online. Members … More →
The post EU Parliament backs extension of CSAM detection rules until 2027 appeared first on Help Net Security.
Каждый пятый разговор с Copilot — про здоровье. Microsoft не стала делать вид, что не заметила — и запустила медицинский ИИ
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.
- CVE-2026-3909 Google Skia Out-of-Bounds Write Vulnerability
- CVE-2026-3910 Google Chromium V8 Unspecified Vulnerability
These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Binding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities established the KEV Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the BOD 22-01 Fact Sheet for more information.
Although BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing timely remediation of KEV Catalog vulnerabilities as part of their vulnerability management practice. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.
Apple Released Emergency Updates for iOS 15.8.7 to Thwart ‘Coruna’ Exploit Kit
Apple has rolled out an emergency security update, iOS 15.8.7 and iPadOS 15.8.7, to protect older devices from a severe threat known as the ‘Coruna’ exploit kit. Released on March 11, 2026, this critical patch backports fixes from newer iOS versions, ensuring that users on legacy hardware are not left vulnerable to advanced cyberattacks. The […]
The post Apple Released Emergency Updates for iOS 15.8.7 to Thwart ‘Coruna’ Exploit Kit appeared first on Cyber Security News.
Threat Modeling with AI: A Developer-Driven Boon for Enterprise Security
For companies running a modern, adaptive and defense-centered security program, threat modeling is not a new concept. In fact, it’s one of the core tenets of preventative cybersecurity best practices. Being able to find vulnerabilities within software or a network, map them out and remediate them – before an attacker can successfully orchestrate a breach..
The post Threat Modeling with AI: A Developer-Driven Boon for Enterprise Security appeared first on Security Boulevard.
[工具]微信也可以接入“龙虾”啦,腾讯出品workbuddy体验
AI-HealthTech Innovator Humata Health Partners with AccuKnox for Zero Trust CNAPP
Menlo Park, California, USA, March 13th, 2026, CyberNewswire AI-HealthTech innovator Humata Health announced that it is partnering with AccuKnox, a leader in Code to Cognition Security, Zero Trust Cloud-Native Application Protection Platform (CNAPP), to streamline security for its SaaS platform. Healthcare Security Requirements To meet HIPAA mandates, the company adopted an on-prem deployment supported by AccuKnox. By […]
The post AI-HealthTech Innovator Humata Health Partners with AccuKnox for Zero Trust CNAPP appeared first on Cyber Security News.