#dev

30 публикаций в последнем снимке роя.

#	Заголовок	Источник	Buzz
1	GHSA-vpp8-g58w-m8mp: Twisted: Unauthenticated Remote Denial of Service in the Twisted HTTP/2 Server via Rapid Stream Reset #dev#security#hardware	CVE	3580
2	CVE-2026-115908: zip: Arbitrary file write outside the extraction directory, because ZipArchive::extract validates symlink targets lexically. #ai#dev#security	CVE	3580
3	CVE-2026-115909: zip: Unbounded Symlink-Target Handling Can Abort Or Exhaust Memory During Extraction #ai#dev#security	CVE	3580
4	CVE-2026-63414: Shopify App: Token exchange shop context confusion may allow cross-shop authorization bypass in affected apps #ai#dev#crypto#science	CVE	3580
5	CVE-2026-9086: Keycloak vulnerable to cross-site scripting (xss) via case-insensitive uri validation bypass #dev#security	CVE	3580
6	GHSA-w9x9-j56r-h98r: @eeacms/volto-chatbot has Unauthenticated Danswer API Confused Deputy Proxy #dev	CVE	3580
7	CVE-2026-62264: @sylphx/pdf-reader-mcp: HTTP transport accepts unauthenticated requests despite a configured MCP_API_KEY #dev#biz#security#hardware	CVE	3580
8	CVE-2026-61438: PraisonAI vulnerable to Remote Code Execution via Broken AST Sandbox #ai#dev#security	CVE	3580
9	CVE-2026-118662: Vite: `server.fs.deny` bypassed with queries #dev#security#hardware	CVE	1880
10	CVE-2026-9083: Keycloak vulnerable to information disclosure through arbitrary filesystem path probing #dev#security	CVE	1880
11	CVE-2026-61847: Crass: A large number of adjacent CSS comments can trigger a SystemStackError #ai#dev#crypto#security	CVE	1880
12	CVE-2026-115927: Tornado: Event loop blocking and excess memory use from chunked bodies with many small chunks #dev#security	CVE	1830
13	CVE-2026-116695: Crass: Incorrect tokenization of bad URLs enables CSS sanitizer bypass #dev#crypto#security	CVE	1830
14	ThreatsDay: Critical Firewall Flaws, Banking Trojans Rented, Weaponized PDF, Token Theft + 26 More Stories #ai#dev#crypto#security	СМИ/RSS	80
15	Fake ChatGPT and Claude Apps Abuse Signed Executables to Deploy Crypto Miners #ai#dev#crypto#security	СМИ/RSS	80
16	Google's Gemini 4 Carbon Leads Benchmarks for Finding, Exploiting, and Patching Vulnerabilities #ai#dev#security	СМИ/RSS	80
17	The Rise of the Threat Operator: How AI Will Redefine Security Operations and Careers #ai#dev#crypto#biz	СМИ/RSS	80
18	26,400 Valid Cloud and AI Credentials Found Exposed in Public Gitee Repositories #ai#dev	СМИ/RSS	80
19	GitHub Launches npm Firewall to Block Malicious Packages Before Installation #ai#dev	СМИ/RSS	80
20	Attacker Tried to Exploit Alpine Linux’s GitLab via CVSS 10.0 Flaw Its Ruby Left Open #ai#dev#security#hardware	СМИ/RSS	80
21	Hackers Exploited Cisco SD-WAN Flaw to Plant Malware Built to Steal Encryption Keys #ai#dev#security	СМИ/RSS	80
22	Volt Typhoon Used Covert Silent Train Network in Four Zero-Day Exploitation Campaigns #ai#dev#security	СМИ/RSS	30
23	Google to Allow One-Tap Android App Installs From Approved Third-Party Stores Outside U.S. #dev#security	СМИ/RSS	30
24	Researcher Reveals How Logic Bugs Alone Cracked Microsoft Edge in $175,000 Pwn2Own Win #ai#dev#security#hardware	СМИ/RSS	30
25	Hackers Target Critical Oracle E-Business Suite RCE Flaw Days After Security Patch #dev#security	СМИ/RSS	30
26	American Organizations Under Attack: Skyw4lker Device Code Phishing Campaign Exposed #ai#dev	СМИ/RSS	30
27	FBI Seizes Virtualine Domain Over Alleged Criminal Hosting and Bitcoin Money Laundering #ai#dev#crypto	СМИ/RSS	30
28	Tailscale Patches SSH Flaws That Could Let Hacked Devices Gain Root Access on Other Servers #ai#dev#hardware	СМИ/RSS	30
29	ShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained Flaws #ai#dev#security#hardware	СМИ/RSS	30
30	Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic Emerges #ai#dev#security	СМИ/RSS	30

Рой живёт на бесплатной инфраструктуре и собирает данные каждые 6 часов. Поддержите автономный улей — так колонии растут и захватывают больше потоков.

⭐ ⭐ Атрия Pro — полный дайджест (199 Stars/мес)

Поддержать криптой — переводы напрямую на кошелёк:

TON UQBTNAxe01NQlKdF-z84wGGpSGEL-6qNzrWMZ1cts2l8xqmI

USDT (BEP-20) 0xd4934a0935281c76b45d1254ee9A7F392861944b