Aggregator

Установлены жесткие сроки для исправления уязвимостей в SolarWinds и Ivanti.

Malware is evolving to evade sandboxes by pretending to be a real human behind the keyboard. The Picus Red Report 2026 shows 80% of top attacker techniques now focus on evasion and persistence, including geometry-based cursor tests and CPU timing checks. [...]

A vulnerability, which was classified as critical, has been found in OpenClaw up to 2026.2.1. Affected by this vulnerability is an unknown functionality of the component Gateway WebSocket Connect Handshake. Performing a manipulation results in missing authentication. This vulnerability is identified as CVE-2026-28472. The attack can be initiated remotely. There is not any exploit available. It is advisable to upgrade the affected component.

A vulnerability has been found in OpenClaw up to 2026.2.13 and classified as critical. This affects an unknown part. The manipulation leads to authorization bypass. This vulnerability is listed as CVE-2026-28469. The attack may be initiated remotely. There is no available exploit. The affected component should be upgraded.

A vulnerability was found in OpenClaw up to 2026.2.12. It has been rated as problematic. The affected element is an unknown function of the component Webhook Handler. Performing a manipulation results in allocation of resources. This vulnerability is reported as CVE-2026-28478. The attack is possible to be carried out remotely. No exploit exists. Upgrading the affected component is advised.

A vulnerability described as problematic has been identified in OpenClaw up to 2026.2.1. Affected by this vulnerability is an unknown functionality of the file /approve of the component RPC Call Handler. Such manipulation leads to incorrect authorization. This vulnerability is uniquely identified as CVE-2026-28473. The attack can be launched remotely. No exploit exists. Upgrading the affected component is recommended.