Aggregator

雅思9月1日起停止纸笔考试 全部采用机考

不安全
4 days 20 hours ago
自2026年年中开始，雅思考试将在全球范围内陆续停止纸笔考试，全部采用机考。中国大陆地区的雅思考试将于9月1日起停止纸笔考试、全部采用机考形式。用于英国签证及移民的雅思考试将于7月1日起停止纸笔考试、

OTA 升级后续航减 200KM，央视揭新能源汽车「锁电」真相；黄仁勋：别怕 AI，应届生迎来最好时机；微信测试「组合支付」功能 | 极客早知道

极客公园
4 days 21 hours ago
任正非罕见出镜：华为芯片基础技术研究实验室亮相《新闻联播》；苹果 iOS / macOS 27 的 Safari 浏览器将引入 AI 自动整理标签页功能；特斯拉 Model 3 服役 7 年跑了 61 万公里后，实测续航缩水 34.2%；特朗普 T1 手机交付遥遥无期

通用汽车同意支付1275万美元解决加州司机隐私诉讼

不安全
4 days 21 hours ago
通用汽车已与由加州总检察长邦塔领导的执法机构达成了一项与隐私相关的和解。早在2024年，纽约时报报道称，包括通用汽车在内的汽车制造商正在与保险公司共享其客户的驾驶行为信息，并且一些客户担心他们的保险费

Welcoming the Costa Rican Government to Have I Been Pwned

Troy Hunt
4 days 21 hours ago

Today, we welcome the 42nd government onboarded to Have I Been Pwned’s free gov service: Costa Rica.

The CSIRT of the Government of Costa Rica now has access to monitor government domains against the data in HIBP. This enables their national cybersecurity incident response team to identify exposure

Troy Hunt

CVE-2026-41018 | Apache Airflow Providers Elasticsearch up to 6.5.2 Elasticsearch task-log log file

VulDB Recent Entries
4 days 21 hours ago
A vulnerability was found in Apache Airflow Providers Elasticsearch up to 6.5.2. It has been rated as problematic. This affects an unknown function of the component Elasticsearch task-log Handler. The manipulation leads to sensitive information in log files. This vulnerability is traded as CVE-2026-41018. It is possible to initiate the attack remotely. There is no exploit available. Upgrading the affected component is advised.
vuldb.com

CVE-2026-43826 | Apache Airflow Providers OpenSearch up to 1.9.0 OpenSearch task-log log file

VulDB Recent Entries
4 days 21 hours ago
A vulnerability was found in Apache Airflow Providers OpenSearch up to 1.9.0. It has been declared as problematic. The impacted element is an unknown function of the component OpenSearch task-log Handler. Executing a manipulation can lead to sensitive information in log files. This vulnerability appears as CVE-2026-43826. The attack may be performed from remote. There is no available exploit. It is recommended to upgrade the affected component.
vuldb.com

Vibe Hacking: Two AI-Augmented Campaigns Target Government and Financial Sectors in Latin America

Trend Micro Research, News and Perspectives
4 days 21 hours ago
TrendAI™ Research has identified two emerging threat campaigns—SHADOW-AETHER-040 and SHADOW-AETHER-064—that use agentic AI to drive intrusion operations against government and financial organizations in Latin America, marking these among the first cases we have observed of AI agents executing attacks from initial access to data exfiltration.
Joseph C Chen

Weekly Update 503

Troy Hunt
4 days 22 hours ago

Well, it's the day before the Instructure "pay or leak" deadline (at least by my Aussie watch), and the company remains removed from the ShinyHunters website. In its place sits a press statement that amounts to "we're not making any statements". So

Troy Hunt

CVE-2026-8177 | SHLOMIF XML::LibXML up to 2.0210 on Perl out-of-bounds (Issue 146)

VulDB Recent Entries
4 days 22 hours ago
A vulnerability was found in SHLOMIF XML::LibXML up to 2.0210 on Perl. It has been classified as problematic. The affected element is an unknown function. Performing a manipulation results in out-of-bounds read. This vulnerability is reported as CVE-2026-8177. The attack is possible to be carried out remotely. No exploit exists. It is suggested to install a patch to address this issue.
vuldb.com

CVE-2026-45191 | STIGTSP Net::CIDR::Lite up to 0.23 on Perl improper validation of unsafe equivalence in input

VulDB Recent Entries
4 days 22 hours ago
A vulnerability was found in STIGTSP Net::CIDR::Lite up to 0.23 on Perl and classified as problematic. Impacted is an unknown function. Such manipulation leads to improper validation of unsafe equivalence in input. This vulnerability is documented as CVE-2026-45191. The attack can be executed remotely. There is not any exploit available. It is suggested to upgrade the affected component.
vuldb.com

CVE-2026-45190 | STIGTSP Net::CIDR::Lite up to 0.23 on Perl find/bin_find improper validation of unsafe equivalence in input

VulDB Recent Entries
4 days 22 hours ago
A vulnerability has been found in STIGTSP Net::CIDR::Lite up to 0.23 on Perl and classified as problematic. This issue affects the function find/bin_find. This manipulation causes improper validation of unsafe equivalence in input. This vulnerability is registered as CVE-2026-45190. Remote exploitation of the attack is possible. No exploit is available. The affected component should be upgraded.
vuldb.com

Managed ad