Posts of last few hours

Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacks
Palo Alto Networks has released security updates for a high-severity PAN-OS RCE zero-day, tracked as CVE-2026-0322, that has been exploited in attacks targeting firewalls. [...]
https://www.bleepingcomputer.com/news/security/palo-alto-networks-warns-of-pan-os-rce-flaw-exploited-in-attacks/
Weekly Threat Bulletin – October 14th, 2026
These are the top threats you should know about this week.
https://www.f5.com/labs/articles/weekly-threat-bulletin-october-14th-2026
FBI raids DPRK IT worker laptop farms in Texas, US nationals arrested
The U.S. Department of Justice (DoJ) has disrupted the Famous Chollima threat group's operations by arresting two suspects, charging 14 individuals, and seizing nearly 187 laptops used in North Korean remote IT worker schemes. [...]
https://www.bleepingcomputer.com/news/security/fbi-raids-dprk-it-worker-laptop-farms-in-texas-us-nationals-arrested/
Ledger asks sellers across Asia to halt sales after supply-chain attack
Ledger has asked resellers and distributors of its wallets in Indonesia, Singapore, Thailand, the Philippines, Vietnam, Malaysia, and Hong Kong to suspend device sales and remove products from shelves while it investigates device tampering. [...]
https://www.bleepingcomputer.com/news/security/ledger-asks-sellers-across-asia-to-halt-sales-after-supply-chain-attack/
Microsoft drops an actively exploited zero-day among record high of 1,413 vulnerabilities

In its October Patch Tuesday, the tech giant addressed more defects in one month than any annual total on record. Nearly 4 in 5 vulnerabilities affect Windows.

The post Microsoft drops an actively exploited zero-day among record high of 1,413 vulnerabilities appeared first on CyberScoop.

https://cyberscoop.com/microsoft-patch-tuesday-october-2026/
Cisco patches new Secure Email Gateway zero-day exploited in attacks
Cisco has patched another actively exploited zero-day flaw in its Secure Email Gateway (SEG) that lets remote unauthenticated attackers execute commands with root privileges. [...]
https://www.bleepingcomputer.com/news/security/cisco-patches-actively-exploited-secure-email-gateway-zero-day/
Spyware manufacturer had access to data harvested by former Polish government, current PM says
Prime Minister Donald Tusk, who ordered the investigation, on Monday called the sprawling spyware operation spearheaded by the country’s previous ruling party “one of the biggest scandals in Polish history since the fall of communism.”
https://therecord.media/spyware-manufacturer-had-access-to-data-harvested-by-previous-polish-government
研究估计到 2050 年每年新增痴呆症人数将会翻倍
一项新研究估计，2023 年有 1140 万人患上痴呆症，到 2050 年预计这一数字将增加一倍以上，新增痴呆症人数将达到 2470 万。研究发现女性的痴呆症发病率高于男性，且低中收入国家的发病率远高于高收入国家。在校正年龄因素后，女性发病为每千人年 10.6 例，男性为 8.6 例。低中收入国家的发病率为每千人年 13.6 例，而高收入国家为 8.3 例。目前全世界有逾 5700 万人受痴呆症困扰，到 2050 年这一数字将达到 1.5 亿。每年新增 2400 万痴呆症病例，将给个人、家庭、卫生系统及经济带来巨大压力。

https://www.solidot.org/story?sid=85615
В Meta украли 99 процентов чистого кода и назвали взлом мелкой неприятностью
Корпоративные секреты оказались не единственным трофеем незваных гостей.
https://www.securitylab.ru/news/578716.php
GTA 6 可能提前发布 PC 版本
Rockstar 尚未正式宣布，但有报道称它计划于 2027 年第一季度发布 GTA 6 的 PC 版本，与主机版本仅仅相隔几个月。GTA 6 将于 2026 年 11 月发布主机版本。据彭博报道，在 GTA 6 开发过程中 Rockstar 员工总数从开发 Red Dead Redemption II 的 2,441 人增长到 4,711 人。GTA 6 制作预算据称超过 20 亿美元，提前释出 PC 版本旨在加快回收制作费用。上一代 GTA 5 的主机版本和 PC 版本相隔 1 年 7 个月，而 GTA 5 的主要受众是主机玩家，PC 玩家占少数。如今 PC 玩家的规模已经显著扩大。加快发布 PC 版本也有助于扩大 GTA 6 的受众规模。

https://www.solidot.org/story?sid=85614
苹果推出广告鼓励 Chrome 用户切换到 Safari
如何吸引 Chrome 的用户改用其它浏览器？Chrome 是目前市场份额最高的浏览器。苹果推出了一个广告页（无中文）：Switch to Safari。苹果列举了一系列 Safari 的优点，称在 Mac 设备上，相比 Chrome，使用 Safari 播放流视频，续航时间最长可多出 5 个小时；常用网站的页面加载速度更快；单次充电即可全天播放流视频；动画内容渲染性能更出色；复杂 Web 应用 JavaScript 运行速度更快；默认阻止第三方 Cookie 追踪；屏蔽恼人的干扰内容，等等。苹果称，Safari 在速度、电池续航以及隐私上都超过 Chrome。

https://www.solidot.org/story?sid=85613
1411 дыр, 70 критических. Обычный вторник в Microsoft окончательно отменяется
Пока админы считали патчи, одну из брешей уже использовали в реальных атаках.
https://www.securitylab.ru/news/578713.php
Ampath Laboratories Data Breach Claim Says 10 Databases Copied, Including 80M+ Admission Records
An actor using the handle "ByteToBreach" claims to have copied 10 databases from Ampath Laboratories out of an environment containing roughly 375 databases.
https://darkwebinformer.com/ampath-laboratories-data-breach-claim-says-10-databases-copied-including-80m-admission-records/
Google передумала экономить на хакерах. Награды за дыры Chrome выросли вчетверо
За самые интересные находки в Chrome снова готовы платить десятки тысяч долларов.
https://www.securitylab.ru/news/578711.php
Climb Up Customer Dataset Offered for Sale With 151,000 Records Across 29 French Gyms
An actor using the handle "Alduin" claims to be selling a Climb Up customer dataset. The post describes Climb Up as the largest network of indoor climbing gyms in France and says the material concerns customers across 29 locations.
https://darkwebinformer.com/climb-up-customer-dataset-offered-for-sale-with-151-000-records-across-29-french-gyms/
Linus Torvalds 用 LLM 辅助开发的补丁递交接受审查
Linux 作者 Linus Torvalds 在维护者峰会上透露他在大模型帮助下开发了一系列补丁解决一个长期存在的问题。现在这组 10 个补丁已递交接受审查。这些补丁主要增强 folio 的查找机制：通过识别处于热数据状态的 folio，设置一个“延迟释放该 folio 直至 RCU 周期结束”的标志。随后利用 RCU 延迟在 RCU 保护下进行常规的 folio 查找，同时在 RCU 保护下直接进行实际的 folio 数据访问...补丁在测试中性能实现了数量级的提升，但已发现存在竞态条件，因此需要进一步完善。

https://www.solidot.org/story?sid=85612
Senators press Trump admin to rally federal government around AI safety, security 

The letter argues federal agencies should more rigorously test AI models for security threats and sandbox evasion, set new safety standards and lean into defensive AI.

The post Senators press Trump admin to rally federal government around AI safety, security  appeared first on CyberScoop.

https://cyberscoop.com/congress-presses-trump-administration-ai-safety-cybersecurity/
原域名已变更且将在2024年彻底废弃，请访问 https://govuln.com/news/ 查看新的RSS订阅
原域名已变更且将在2024年彻底废弃，请访问 https://govuln.com/news/ 查看新的RSS订阅
https://govuln.com/news/url/x8dB
Под водой завёлся новый хищник: он мягкий, быстрый... и не живой
Роборыба разгоняется до 26 см/с и умеет нырять, всплывать и подниматься по спирали.
https://www.securitylab.ru/news/578708.php
Три подростка за полгода построили империю шантажа и сдали спецслужбам всех своих покупателей
Французские следователи закрыли подпольный поисковик и добрались до его клиентской базы.
https://www.securitylab.ru/news/578709.php

Managed ad