Aggregator

A vulnerability categorized as critical has been discovered in ntpd up to 4.2.8p8. Impacted is an unknown function of the component Origin Timestamp Protection. Executing a manipulation can lead to improper input validation. This vulnerability is registered as CVE-2016-7431. It is possible to launch the attack remotely. No exploit is available. It is advisable to upgrade the affected component.

A vulnerability identified as critical has been detected in ntpd up to 4.2.8p8. The affected element is an unknown function of the component Initial Sync Calculation. The manipulation leads to incorrect calculation. This vulnerability is documented as CVE-2016-7433. The attack can be initiated remotely. There is not any exploit available. You should upgrade the affected component.

A vulnerability, which was classified as critical, has been found in MatrixSSL up to 3.8.6. Affected by this issue is the function pstm_exptmod of the component Modular Expontiation Handler. The manipulation leads to information disclosure. This vulnerability is uniquely identified as CVE-2016-8671. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability has been found in Oracle M10-1, M10-4, M10-4S, M12-1, M12-2 and M12-2S and classified as problematic. This affects an unknown function of the component XCP Firmware. Performing a manipulation results in improper input validation. This vulnerability is reported as CVE-2016-7431. The attack is possible to be carried out remotely. No exploit exists. The affected component should be upgraded.

A vulnerability was found in Oracle M3000, M4000, M5000, M8000 and M9000 and classified as problematic. This impacts an unknown function of the component XCP Firmware. Executing a manipulation can lead to improper input validation. This vulnerability appears as CVE-2016-7431. The attack may be performed from remote. There is no available exploit. It is suggested to upgrade the affected component.

Exim 发布了安全更新，以修复一个严重的安全问题。该问题影响特定配置，可能导致内存损坏和潜在的代码执行。   Exim 是一款开源邮件传输代理（MTA），专为类 Unix 系统设计，用于接收、路由和传递电子邮件。   此漏洞编号为 CVE - 2026 - 45185，又名 “Dead.Letter”，是 Exim 在通过 GnuTLS 处理 TLS ...

error code: 1003

韩国总统府政策室长金容范(Kim Yong-beom)在 Facebook 上发帖，提议将韩国芯片制造商一部分激增的利润进行再分配，将 AI 繁荣所产生的利润与全体公民共享。金容范认为 AI 带来的经济收益至少部分是建立在韩国过去五十年建设的工业基础设施之上，他指出 AI 时代的超额利润是集中化的，少数芯片公司和少数人获得巨额收益。上个月数万民众聚集在三星主要芯片工厂外，要求员工获得更高的 AI 利润分成。三星工会要求将 15% 的营业利润分配给芯片部门员工。工会威胁将于 5 月 21 日开始为期 18 天的罢工。

韩国总统府政策室长金容范(Kim Yong-beom)在 Facebook 上发帖，提议将韩国芯片制造商一部分激增的利润进行再分配，将 AI 繁荣所产生的利润与全体公民共享。金容范认为 A

谷歌公司正在安卓中推出一项新的可选择加入功能，旨在帮助安全研究人员调查间谍软件攻击。该功能被称为 “入侵日志记录”，是安卓高级保护模式的一部分，该模式是谷歌去年推出的，一种可选择加入的特殊安全模式，启

Сотни вредоносных пакетов показали, насколько быстро привычная инфраструктура может стать ловушкой.

[This is a Guest Diary by Joshua Nikolson, an ISC Intern and part of the SANS.edu Bachelor's degree

几代以来，照片一直被视为现实的记录。它们记录事件，保存记忆，并为调查结果提供支持。

Critical Fortinet vulnerabilities fixed in FortiSandbox and FortiAuthenticator

Fortinet patched critical flaws in FortiSandbox and FortiAuthenticator that could let attackers remotely execute code on unpatched systems. Fortinet addressed two critical vulnerabilities affecting FortiSandbox and FortiAuthenticator. The flaws could allow attackers to execute arbitrary commands or code on unpatched systems. The first vulnerability, tracked as CVE-2026-44277, is an improper access control issue in FortiAuthenticator. […]

Google 宣布了运行桌面模式 Android 操作系统的新笔电 Googlebook，但除了一遍遍强调 AI、AI 以及 AI 外没有透露更多信息，比如实现 AI 操作所需的运算是否要借助于云端，是否会将用户在笔记本上的所有操作上传到云端，搜索巨人除了突出 AI 外没有解释是否存在类似微软 Recall 的隐私问题。Googlebook 和运行 Chrome OS 的 Chromebook 一样，由第三方公司宏碁、华硕、戴尔、惠普和联想制造和出售。Google 称 Googlebook 深度集成了 Gemini Intelligence，仅仅移动光标就能激活被称为“Magic Pointer”的 AI 功能，AI 会分析屏幕上的内容，根据上下文提供建议，能从多个应用中提取数据。比如将光标指向电邮中的日期即可创建日历预约。Googlebook 也能与用户的 Android 手机深度交互，能将手机上的应用串流到笔记本上，能将手机上的文件传输到电脑上。