Aggregator

Linux Kernel 是当前服务器与云主机最广泛使用的开源操作系统内核，承载企业核心业务、容器底座、虚拟化平台等关键负载。其优势在于开源透明、社区维护活跃、生态完善，被绝大多数 Linux 发行版（Ubuntu、Red Hat Enterprise Linux、CentOS、Fedora、openSUSE 等）采用作为底层内核。 近期，Linux Kernel 中被披露存在一个名为 "Dirty Frag" 的本地权限提升漏洞。 该漏洞由内核中两个独立的页缓存写入漏洞组合而成： xfrm-ESP（esp4 / esp6）模块漏洞：影响范围自 2017 年起的内核版本（commit cac2661c53f3 之后），覆盖范围广，但在部分发行版（如 Ubuntu）受 AppArmor 策略限制无法直接触发 RxRPC（rxrpc）模块漏洞：无需命名空间权限即可触发，但 rxrpc 内核模块并非所有发行版默认加载。

Администрация Трампа официально поставила взлом рядом с санкциями и переговорами.

我们永远不做逃兵，我们永远不会离分。

今日暂未更新资讯~
更多最新文章，请访问SecWiki

一艘挂荷兰旗帜的探险游轮MV Hondius号载着150人，从阿根廷南部的乌斯怀亚出发，横渡南大西洋。4月6日至28日，船上乘客开始生病。随后迅速发展为肺炎、急性呼吸窘迫综合征（ARDS）和休克。这些都是重症汉坦病毒肺综合症的典型特征。

两周前，Mozilla 宣布借助 Claude Mythos Preview 和其他 AI 模型，在 Fire

On Thursday, dozens of students took to social media to say they saw a message from a cybercriminal group as they navigated through Canvas, an educational platform created by Instructure that hosts teaching materials, tests, readings and more.

A threat actor is selling a 243 million record dataset attributed to credilink.com.br, described in the post as a Brazilian credit information and risk analysis provider serving financial institutions and retailers.

Обычная сессия в браузере открывала лишние данные военной платформы.

根据发表在 PNAS 期刊上的一项研究，人类历史上首次男性生育力低于女性。研究人员利用了联合国的 World Population Prospects 报告，发现人类男性生育力低于女性的转折点发生在 2024 年，这一转折是人口中男性比例上升驱动的。全球人口中男性比例不断上升，原因是部分国家选择性堕胎（主要是堕女胎）、男性死亡率下降以及每年出生的男孩数量显著多于女孩。历史上男性人口过剩通常在他们达到生育年龄前就消失了，但现代社会改变了这一状况。研究还表明，男性生育力低于女性的转变在不同地区发生的时间存在差异：大洋洲、南美洲和亚洲的转变发生在近期，而撒哈拉以南非洲则可能要到 2100 年，多数欧洲和北美国家的转变发生在几十年前。研究人员警告男性过多以及无子女男性增加会给社会带来挑战，他们建议加强女性社会地位，遏制选择性堕胎，为男性提供稳定的工作。

A threat actor claims to have leaked a database from LDLC, a major French retailer of computers, components, smartphones, and gaming/audio/TV equipment, releasing 1,504,635 records for free under the hashtag #freebreach3d.

Cybersecurity researchers have discovered fraudulent apps on the official Google Play Store for Android that falsely claimed to offer access to call histories for any phone number, only to trick users into joining a subscription that provided fake data and incurred financial loss. The 28 apps have collectively racked up more than 7.3 million downloads, with one of them alone accounting for over

A threat actor is advertising what they describe as a US banking / premium credit client dataset tied to communitychoicecu.com, releasing a 1M+ record sample with full card numbers, names, issuing banks, and addresses.

Военные инженеры променяли умную электронику на… обычные железки?

A vulnerability marked as critical has been reported in mauriciopoppe math-codegen up to 0.4.2. The impacted element is the function cg.parse of the component Mathematical Expression Handler. This manipulation causes code injection. The identification of this vulnerability is CVE-2026-41507. It is possible to initiate the attack remotely. There is no exploit available. It is suggested to upgrade the affected component.

A vulnerability labeled as problematic has been found in go-git up to 5.17.x/6.0.0-alpha.1. The affected element is an unknown function. The manipulation results in insufficiently protected credentials. This vulnerability was named CVE-2026-41506. The attack may be performed from remote. There is no available exploit. The affected component should be upgraded.

A vulnerability identified as critical has been detected in SEPPmail Secure Email Gateway 15.0.1. Impacted is an unknown function. The manipulation leads to improper neutralization of directives in dynamically evaluated code. This vulnerability is uniquely identified as CVE-2026-44128. The attack is possible to be carried out remotely. No exploit exists. You should upgrade the affected component.

A vulnerability categorized as critical has been discovered in SEPPmail Secure Email Gateway up to 15.0.3. This issue affects some unknown processing. Executing a manipulation can lead to missing authorization. This vulnerability is handled as CVE-2026-44125. The attack can be executed remotely. There is not any exploit available. It is advisable to upgrade the affected component.