Aggregator

Submit #803269 / VDB-360120

Владельцев GitHub Enterprise призвали срочно обновить систему.

近日，微步顺利通过中国网络安全审查技术与认证中心（CCRC）严格测评审核，成功拿下三项信息安全服务最高等级资质

2026年3月，微步正式获评国家信息安全漏洞库（CNNVD）2026-2027年度一级技术支撑单位。

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to secure their Windows systems against a vulnerability exploited in zero-day attacks. [...]

A vulnerability described as problematic has been identified in Juniper Networks Junos OS up to 23.4R1 on SRX. This affects an unknown part of the component Command-Line Interface. Executing a manipulation can lead to information disclosure. The identification of this vulnerability is CVE-2025-21592. The attack can only be executed locally. There is no exploit available. Upgrading the affected component is recommended.

A vulnerability labeled as critical has been found in Juniper Junos OS up to 24.2R1. This impacts an unknown function of the component Flexible PIC Concentrator. Executing a manipulation can lead to heap-based buffer overflow. This vulnerability appears as CVE-2025-30644. The attacker needs to be present on the local network. There is no available exploit. The affected component should be upgraded.

A vulnerability has been found in Juniper Junos OS up to 24.4R1-S3 and classified as critical. This vulnerability affects unknown code of the component User Interface. This manipulation causes improper access controls. This vulnerability is registered as CVE-2025-52963. The attack needs to be launched locally. No exploit is available. The affected component should be upgraded.

一份报告发现，逾三分之二两岁以下婴儿使用屏幕，少数婴儿每天最多花 8 小时在屏幕上。近三分之一新生儿每天看屏幕的时间超过三小时，4-11 个月大的婴儿近 20% 每天使用屏幕逾一小时。已有证据表明，屏幕时间与儿童肥胖、近视、睡眠和行为问题风险，以及长大后社交问题等负面影响相关联。新生儿父母允许婴儿使用屏幕的一大理由是分散他们注意力，让自己有时间做其它家务活或工作。

在前两天的BlacksetHat Asia 2026上，@浅蓝和@1ua分享一个非常有趣的议题，Java中的GhostBits漏洞

A vulnerability classified as problematic was found in LibTIFF 4.3.0. This affects the function _TIFFmemcpy of the file tif_unix.c. The manipulation of the argument DE results in out-of-bounds read. This vulnerability is known as CVE-2022-22844. Access to the local network is required for this attack. No exploit is available.

A vulnerability identified as problematic has been detected in eventsource up to 2.0.1. This affects an unknown part. This manipulation causes information disclosure. This vulnerability appears as CVE-2022-1650. The attack may be initiated remotely. There is no available exploit. You should upgrade the affected component.

A vulnerability was found in Schneider Electric spaceLYnk, Wiser for KNX and fellerLYnk up to 2.6.2. It has been rated as critical. The affected element is an unknown function. Performing a manipulation results in missing authentication. This vulnerability is cataloged as CVE-2022-22809. The attack must originate from the local network. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability has been found in Schneider Electric EcoStruxure EV Charging Expert and classified as problematic. The impacted element is an unknown function. This manipulation causes permissive cross-domain policy with untrusted domains. This vulnerability is tracked as CVE-2022-22808. The attack is possible to be carried out remotely. No exploit exists. The affected component should be upgraded.

构建密码学资产清单：微软密码学态势管

Articles related to cyber risk quantification, cyber risk management, and cyber resilience.

The post AI Governance and Risk Insights for Enterprises | Kovrr appeared first on Security Boulevard.

В России появились судебные споры о качестве работ, выполненных с помощью ИИ.

RunSafe report reveals most attacks on medical devices disrupt patient care

A vulnerability classified as critical has been found in NTP 4.2.8p15. This vulnerability affects the function mstolfp of the file libntp/mstolfp.c. This manipulation causes out-of-bounds write. The identification of this vulnerability is CVE-2023-26553. The attack needs to be done within the local network. There is no exploit available.

A vulnerability classified as critical was found in NTP 4.2.8p15. This issue affects the function mstolfp of the file libntp/mstolfp.c. Such manipulation leads to out-of-bounds write. This vulnerability is referenced as CVE-2023-26554. The attack needs to be initiated within the local network. No exploit is available.