Aggregator

A vulnerability described as critical has been identified in Huawei Smart Phone. Affected by this vulnerability is an unknown functionality of the component Facial Recognition Module. Such manipulation leads to permission issues. This vulnerability is referenced as CVE-2022-48360. The attack needs to be initiated within the local network. No exploit is available.

Attackers Impersonated IT Worker to Steal Credentials, Access Patient Data
Marathon Health is notifying nearly 5.7 million people of a data breach involving an attacker who impersonated an IT worker, stole an employee's credentials and accessed a cloud-hosted application. The incident highlights a rise in social engineering threats facing healthcare organizations.

Binance Sees $3.6B in Net Outflows as THORChain Faces FBI Blocking Request
The FBI has blamed North Korea's TraderTraitor hackers to the $6 billion-plus Binance theft and asked crypto services to block hundreds of linked addresses - but the stolen funds are still moving, and customers have pulled billions from the exchange since withdrawals reopened.

New Safeguards Improve Misbehavior Detection but Struggle With Unknown Threats
OpenAI and Anthropic, in separate posts, said they have expanded their agent misbehavior detection methods to prevent rogue agents from proliferating. But while the technology showed improved recognition of misalignment, it is not foolproof, highlighting the gap between innovation and guardrails.

TV Boxes, Telehealth Devices and Digital Signage Sold With Unwanted Bonus
Google disrupted an Android botnet operated by Chinese manufacturer Videostrong, which preinstalled persistent XCPE malware in device firmware and sold criminal affiliates access to more than 1 million compromised devices for advertising fraud, residential proxy abuse and data theft worldwide.

A vulnerability classified as problematic was found in octo-sts Octo STS up to 0.11.1. The affected element is the function TrustPolicy.CheckToken of the component TrustPolicy. Executing a manipulation can lead to information disclosure. This vulnerability is registered as CVE-2026-105770. It is possible to launch the attack remotely. No exploit is available. Upgrading the affected component is advised.

iaito — Qt-based graphical interface for the radare2 reverse engineering framework, providing disass

A vulnerability classified as problematic has been found in labbench up to 0.46.0. Impacted is the function read/read_relational. Performing a manipulation results in deserialization. This vulnerability is cataloged as CVE-2026-120833. The attack must be initiated from a local position. There is no exploit available. It is recommended to upgrade the affected component.

Vulnerability / CryptocurrencyBTCPay Server, a self-hosted, open-source cryptocurrency payment p

A vulnerability described as problematic has been identified in Red Hat Enterprise Linux, libslirp and OpenShift Container Platform. This issue affects the function icmp_forward_error of the component ICMP. Such manipulation leads to out-of-bounds read. This vulnerability is listed as CVE-2026-120830. The attack may be performed from remote. There is no available exploit.

至顶科技： 至顶网 科技行者 Solidot

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project

资讯

"[V]ulnerabilities that have been tolerated for far too long can now be discovered and exploited at a scale that was once unimaginable," the NCSC's chief will warn in releasing the agency's annual report.

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

Ransomware / Cyber AttackSynology is urging customers to update the DiskStation Manager (DSM) soft

全球在建核电站已增至 79 个机组，达到 40 年来的高水平。据世界核协会统计，2026 年全球有 11 个新核电机组开工建设，截至 10 月 16 日，在建核电机组数量达到 79 个。这