Aggregator

微软表示，随着公司越来越依赖人工智能来发现其代码库中的漏洞，Windows 用户应预期看到安全更新数量的增加。在今天发布的一篇博客文章中，微软称 AI 的进步显著加速了漏洞发现，使工程师能够在漏洞被用于零日攻击之前识别出更多安全问题。微软表示："漏洞发现的节奏正在发生变化，AI 的进步使得在更多代码中、以更快的速度发现更多问题成为可能，新的机制可以同时加速发现和分析。"作为这一策略的一部分，微软正...

一个名为 Helix 的新型数据勒索组织正利用身份导向策略，如语音钓鱼（vishing）、设备代码钓鱼和多因素认证（MFA）滥用，从 SharePoint 环境中窃取数据。初始接触通过 vishing 进行。在某些情况下，威胁行为者冒充目标员工的上司拨打其电话，利用上司姓名或来电显示欺骗来显得合法。其目的是诱骗目标落入设备代码钓鱼陷阱，从而获取其账户访问权限。一旦进入系统，Helix 操作员会迅速...

Every serious software product runs on code that someone else wrote and released for free. A web service leans on a cryptography library, a data pipeline pulls in a parser, and a mobile app ships a handful of small utilities that one person maintains in spare time. All of it carries the same label. A new paper argues that the single label hides differences large enough to change how each piece behaves once it lands … More →

The post The open source library holding up your stack might have one maintainer appeared first on Help Net Security.

Armored Likho APT组织利用BusySnake Stealer实施间谍活动；APT-C-36使用新加载器开展攻击活动；Scattered Spider: 通过共享的战术、技术和程序定义网络犯罪团伙；从发票到 AnyDesk：揭露针对俄罗斯航空航天组织的网络钓鱼活动

A vulnerability described as problematic has been identified in plugins360 All-in-One Video Gallery Plugin up to 4.8.5 on WordPress. This vulnerability affects unknown code of the component Request Handler. The manipulation of the argument vdl results in server-side request forgery. This vulnerability is cataloged as CVE-2026-12123. The attack may be launched remotely. There is no exploit available.

A vulnerability marked as critical has been reported in LA-Studio Element Kit Plugin up to 1.6.0 on WordPress. This affects an unknown part of the component User Registration. The manipulation leads to incorrect authorization. This vulnerability is listed as CVE-2026-12276. The attack may be initiated remotely. There is no available exploit.

A vulnerability labeled as critical has been found in EscortWP Plugin up to 3.6.2 on WordPress. Affected by this issue is some unknown functionality. Executing a manipulation can lead to backdoor. This vulnerability is tracked as CVE-2026-12685. The attack can be launched remotely. No exploit exists.

Data brokers collect personal details on most adults in the United States and sell them to buyers that include employers, landlords, insurance companies, and government agencies. California gives residents a way to push back. You can ask a broker to delete your records, or to stop selling and sharing them. A team at UC Irvine decided to find out what happens when someone sends those requests to the whole California registry. The answer gives consumers … More →

The post Most data brokers won’t tell you what happened to your deletion request appeared first on Help Net Security.

A vulnerability identified as problematic has been detected in Samsung Pass up to 5.2.10.2. Affected by this vulnerability is an unknown functionality of the component Input Validation Handler. Performing a manipulation results in improper input validation. This vulnerability is identified as CVE-2026-21057. The attack is only possible with local access. There is not any exploit available.

A vulnerability categorized as problematic has been discovered in Samsung Health up to 6.30.5.105. Affected is an unknown function of the component Authorization. Such manipulation leads to improper authorization. This vulnerability is referenced as CVE-2026-21056. The attack can only be performed from a local environment. No exploit is available.

A vulnerability was found in Samsung Bixby up to 4.0.70.7. It has been rated as problematic. This impacts an unknown function of the component Android Application Components. This manipulation causes improper export of android application components. The identification of this vulnerability is CVE-2026-21055. The attack can only be executed locally. There is no exploit available.

A vulnerability was found in Samsung InputSharing. It has been declared as problematic. This affects an unknown function of the component Export. The manipulation results in improper export of android application components. This vulnerability was named CVE-2026-21054. The attack needs to be approached locally. There is no available exploit.

A vulnerability was found in Samsung Email up to 6.2.13.0. It has been classified as problematic. The impacted element is an unknown function of the component Input Validation. The manipulation leads to improper input validation. This vulnerability is uniquely identified as CVE-2026-21053. Local access is required to approach this attack. No exploit exists.

A vulnerability was found in Samsung SemClipboardService and classified as problematic. The affected element is an unknown function of the component SemClipboardService. Executing a manipulation can lead to path traversal. This vulnerability is handled as CVE-2026-21052. It is possible to launch the attack on the local host. There is not any exploit available.

A vulnerability has been found in Samsung TencentWifiSecurity and classified as problematic. Impacted is an unknown function of the component Settings Handler. Performing a manipulation results in incorrect default permissions. This vulnerability is known as CVE-2026-21051. Attacking locally is a requirement. No exploit is available.

A vulnerability, which was classified as problematic, was found in Samsung SmartThingsKit. This issue affects some unknown processing of the component Access Control. Such manipulation leads to improper access controls. This vulnerability is traded as CVE-2026-21050. An attack has to be approached locally. There is no exploit available.

A vulnerability, which was classified as problematic, has been found in Samsung Device. This vulnerability affects unknown code of the file libpadm.so of the component Memory Handler. This manipulation causes out-of-bounds write. This vulnerability appears as CVE-2026-21049. The attack requires local access. There is no available exploit.

A vulnerability classified as critical was found in Samsung Media Codec. This affects an unknown part of the file libimagecodec.media.quram.so of the component Parser DNG Format. The manipulation results in out-of-bounds write. This vulnerability is reported as CVE-2026-21048. The attack can be launched remotely. No exploit exists.

A vulnerability classified as critical has been found in Samsung fabricKeymaster. Affected by this issue is some unknown functionality of the component Trustlet. The manipulation leads to time-of-check time-of-use. This vulnerability is documented as CVE-2026-21046. The attack needs to be performed locally. There is not any exploit available.

A vulnerability described as problematic has been identified in Samsung KnoxGuardManager. Affected by this vulnerability is an unknown functionality of the component Persistence Configuration. Executing a manipulation can lead to improper privilege management. This vulnerability is registered as CVE-2026-21044. The attack needs to be launched locally. No exploit is available.