همهٔ اخبار

CVE-2026-13769 – Insecure file permissions in AWS CLI

CVE-2026-13762 and CVE-2026-13763 - Issue with HTTP/2 multi-frame request body inspection in AWS WAF

CVE-2026-13760 - OS Command Injection in NodejsFunction Docker Bundling in aws-cdk-lib

CVE-2026-12957 and CVE-2026-12958 - Issues in Language Servers for AWS and Amazon Q Developer Plugins

CVE-2026-108096: Improper authorization in query resolvers for SQL-backed models in AWS Amplify API Category

CVE-2026-12043 - Heap double-free in AWS Common Runtime aws-c-http

CVE-2026-107783 - Insertion of sensitive information into log file in AWS Tools for PowerShell

Introducing on-demand CPU and memory profiling with flamegraphs for Workers and Durable Objects

[NEU] [hoch] Microsoft Azure: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in Microsoft Azure ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen und vertrauliche Informationen offenzulegen.

USN-8887-3: Linux kernel vulnerabilities

USN-8875-2: Linux kernel (NVIDIA) vulnerabilities

USN-8903-2: Linux kernel vulnerabilities

USN-8905-2: Linux kernel (GCP) vulnerabilities

'AgentCorruption' Puts AWS Environments At Risk With Single Prompt

Suspected TraderTraitor Group Uses Trojanized Terraform Provider to Deliver Cross-Platform Malware

CVE-2026-107608: Improper link resolution in asset bundling output handling in aws-cdk-lib

CVE-2026-107322 - OS command injection in Amazon Agent Plugins for AWS databases-on-aws

CVE-2026-107332 - Insecure default file permissions on cached credentials in AWS Toolkit for Visual Studio Code

AWS’s repeated problems with AI agent controls illustrates the autonomous agent dilemma

USN-8906-1: Linux kernel (IBM) vulnerabilities

USN-8905-1: Linux kernel (GCP) vulnerabilities

USN-8904-1: Linux kernel (Azure) vulnerabilities

USN-8903-1: Linux kernel vulnerabilities

USN-8888-2: Linux kernel (Azure) vulnerabilities

USN-8887-2: Linux kernel (AWS) vulnerabilities

AWS takes aim at runaway AI agent behavior with Strands Box

CVE-2026-107352 - Missing authorization checks in Amazon Athena engine version 3 request handling

CVE-2026-105811 - Authorization bypass through a user-controlled key in the Amazon Q Business Lambda hook sample in QnABot on AWS

Part 1 – Cybersecurity journeys: I didn’t plan this

Your Windows PC can now reach other PCs through Windows App