Aggregator

A vulnerability identified as critical has been detected in Apple macOS, iOS and iPadOS. This affects an unknown function of the component HID Handler. The manipulation leads to memory corruption. This vulnerability is listed as CVE-2025-46302. It is possible to launch the attack on the physical device. There is no available exploit. You should upgrade the affected component.

A vulnerability categorized as critical has been discovered in Apple macOS, iOS and iPadOS. The impacted element is an unknown function of the component HID Handler. Executing a manipulation can lead to memory corruption. This vulnerability is tracked as CVE-2025-46301. The physical device can be targeted for the attack. No exploit exists. It is advisable to upgrade the affected component.

A vulnerability was found in Apple macOS, iOS and iPadOS. It has been rated as critical. The affected element is an unknown function of the component HID Handler. Performing a manipulation results in memory corruption. This vulnerability is identified as CVE-2025-46300. The attack may be carried out on the physical device. There is not any exploit available. Upgrading the affected component is advised.

A vulnerability was found in Apple iOS and iPadOS up to 18.7.4. It has been declared as critical. Impacted is an unknown function of the component Backup File Handler. Such manipulation leads to path traversal. This vulnerability is referenced as CVE-2025-43537. The attack needs to be initiated within the local network. No exploit is available. It is recommended to upgrade the affected component.

Enterprise cloud programs have reached a point where most foundational services are already in place, and the daily work now centers on governance, security enforcement, and managing sprawl across environments. Hybrid and multi-cloud architectures have become routine in large organizations, bringing new operational pressures around consistency and control. A new survey of cloud architects and enterprise cloud decision-makers found that Azure has become a dominant platform in enterprise environments, with 93.4% of respondents reporting an … More →

The post Cloud teams are hitting maturity walls in governance, security, and AI use appeared first on Help Net Security.

A vulnerability was found in Google Keras up to 3.13.0. It has been classified as critical. This issue affects some unknown processing of the component HDF5. This manipulation causes file inclusion. The identification of this vulnerability is CVE-2026-1669. It is possible to initiate the attack remotely. There is no exploit available. Upgrading the affected component is recommended.

Intelから各製品向けのアップデートが公開されました。

A vulnerability was found in ZBT WE2001 23.09.27 and classified as critical. This vulnerability affects the function Logout of the component Cookie Handler. The manipulation results in path traversal. This vulnerability was named CVE-2025-64074. The attack may be performed from remote. There is no available exploit.

A vulnerability has been found in Apple iOS and iPadOS up to 18.6/26.2 and classified as problematic. This affects an unknown part of the component Deleted Notes Handler. The manipulation leads to state issue. This vulnerability is uniquely identified as CVE-2026-20682. The attack can only be initiated within the local network. No exploit exists. The affected component should be upgraded.

A vulnerability, which was classified as critical, was found in Apple macOS, watchOS, visionOS, iOS, iPadOS and tvOS up to 26.2. Affected by this issue is some unknown functionality of the component Image Parser. Executing a manipulation can lead to memory corruption. This vulnerability is handled as CVE-2026-20675. The attack can be executed remotely. There is not any exploit available. You should upgrade the affected component.

A vulnerability, which was classified as problematic, has been found in Apple macOS, iOS and iPadOS up to 26.2. Affected by this vulnerability is an unknown functionality of the component Mail Preview. Performing a manipulation results in information disclosure. This vulnerability is known as CVE-2026-20673. Remote exploitation of the attack is possible. No exploit is available. It is advisable to upgrade the affected component.

近日，沃尔沃集团北美公司因商业服务提供商 Conduent 数据泄露事件影响的几家主要公司之一。

2026年2月6日清晨，一起震惊克里姆林宫的暗杀事件发生在莫斯科市中心。一名冒充送餐员的刺客潜入公寓楼，在楼

图片：2026年1月30日，在巴拿马，一艘集装箱船停靠在巴拿马港务公司（PPC）的码头。此前，巴拿马最高法院

本文约3505字，预计阅读时间10分钟。

Мир готовится покорять Марс с железками в голове.

Security teams in large enterprises already spend significant time tracking vulnerabilities across software supply chains, third-party libraries, and internal codebases. Java environments add another layer of exposure because so many mission-critical systems still run on the JVM. A 2026 Azul survey of more than 2,000 Java professionals found that 64% said more than half of their organization’s applications or workloads are built with Java or run on a Java Virtual Machine. That footprint means Java … More →

The post Java security work is becoming a daily operational burden appeared first on Help Net Security.

Рассказываем, как устроена экономика осознанного бездействия технологических гигантов.

背景近期，飞牛（fnOS）网络附加存储设备（NAS）曝出大规模遭入侵并感染恶意软件的安全事件。

WhatsApp has accused the Russian government of attempting a nationwide block on its messaging service to force over 100 million users onto a Kremlin-backed alternative riddled with surveillance risks. In a statement on X, the Meta-owned app declared: “Today the Russian government attempted to fully block WhatsApp in an effort to drive people to a […]

The post Russia Blocked WhatsApp For Over 100 Million Users Nationwide appeared first on Cyber Security News.