Aggregator

CVE-2026-26113 | Microsoft Office untrusted pointer dereference (Nessus ID 301779)

Vuldb Updates
6 days 21 hours ago
A vulnerability identified as critical has been detected in Microsoft Office. The affected element is an unknown function. Performing a manipulation results in untrusted pointer dereference. This vulnerability is reported as CVE-2026-26113. The attack is possible to be carried out remotely. No exploit exists. Applying a patch is the recommended action to fix this issue.
vuldb.com

CVE-2025-62291 | strongSwan up to 6.0.2 eap-mschapv2 Plugin integer underflow (Nessus ID 302046)

Vuldb Updates
6 days 21 hours ago
A vulnerability identified as critical has been detected in strongSwan up to 6.0.2. This issue affects some unknown processing of the component eap-mschapv2 Plugin. The manipulation leads to integer underflow. This vulnerability is traded as CVE-2025-62291. It is possible to initiate the attack remotely. There is no exploit available. You should upgrade the affected component.
vuldb.com

CVE-2025-9615 | Red Hat Enterprise Linux/OpenShift Container Platform NetworkManager permissions (ID 1809 / Nessus ID 302046)

Vuldb Updates
6 days 21 hours ago
A vulnerability categorized as critical has been discovered in Red Hat Enterprise Linux and OpenShift Container Platform. This issue affects some unknown processing of the component NetworkManager. Such manipulation leads to preservation of permissions. This vulnerability is documented as CVE-2025-9615. The attack needs to be performed locally. There is not any exploit available. Applying a patch is advised to resolve this issue.
vuldb.com

Academia and the “AI Brain Drain”

Security Boulevard
6 days 21 hours ago

In 2025, Google, Amazon, Microsoft and Meta collectively spent US$380 billion on building artificial-intelligence tools. That number is expected to surge still higher this year, to $650 billion, to fund the building of physical infrastructure, such as data centers (see go.nature.com/3lzf79q). Moreover, these firms are spending lavishly on one particular segment: top technical talent.

Meta reportedly offered a single AI researcher, who had cofounded a start-up firm focused on training AI agents to use computers, a compensation package of $250 million over four years (see ...

The post Academia and the “AI Brain Drain” appeared first on Security Boulevard.

Bruce Schneier

本田首次巨亏，取消多款电动汽车

Solidot
6 days 21 hours ago
本田公布了其上市以来的首次巨额亏损，宣布调整电动汽车战略，取消多款电动汽车。本田曾在 2024 年公布计划，拟到 2030 年度为止为电动化战略投资约 10 万亿日元（约合人民币 4317 亿元），到 2030 年在全球推出全新 EV 系列“Honda 0”7 款车型。然而受中国 EV 厂商崛起及美国特朗普政府政策转向影响，本田于 2025 年 5 月将投资规模下调至 7 万亿日元，将截至 2030 年 EV 销量占比预期从 30% 下调至 20%。2025 年 EV 销量实际占比仅约 2%。由于无法抗衡价格竞争力突出的比亚迪等中国车企，本田 2025 年的中国新车销量为 64 万辆，同比下滑 24%，仅为销量峰值时的 4 成。

Managed ad