همهٔ اخبار

CVE-2026-108096: Improper authorization in query resolvers for SQL-backed models in AWS Amplify API Category

CVE-2026-12043 - Heap double-free in AWS Common Runtime aws-c-http

CVE-2026-107783 - Insertion of sensitive information into log file in AWS Tools for PowerShell

Introducing on-demand CPU and memory profiling with flamegraphs for Workers and Durable Objects

[NEU] [hoch] Microsoft Azure: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in Microsoft Azure ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen und vertrauliche Informationen offenzulegen.

USN-8887-3: Linux kernel vulnerabilities

USN-8875-2: Linux kernel (NVIDIA) vulnerabilities

USN-8903-2: Linux kernel vulnerabilities

USN-8905-2: Linux kernel (GCP) vulnerabilities

'AgentCorruption' Puts AWS Environments At Risk With Single Prompt

Suspected TraderTraitor Group Uses Trojanized Terraform Provider to Deliver Cross-Platform Malware

CVE-2026-107608: Improper link resolution in asset bundling output handling in aws-cdk-lib

CVE-2026-107322 - OS command injection in Amazon Agent Plugins for AWS databases-on-aws

CVE-2026-107332 - Insecure default file permissions on cached credentials in AWS Toolkit for Visual Studio Code

AWS’s repeated problems with AI agent controls illustrates the autonomous agent dilemma

USN-8906-1: Linux kernel (IBM) vulnerabilities

USN-8905-1: Linux kernel (GCP) vulnerabilities

USN-8904-1: Linux kernel (Azure) vulnerabilities

USN-8903-1: Linux kernel vulnerabilities

USN-8888-2: Linux kernel (Azure) vulnerabilities

USN-8887-2: Linux kernel (AWS) vulnerabilities

AWS takes aim at runaway AI agent behavior with Strands Box

CVE-2026-107352 - Missing authorization checks in Amazon Athena engine version 3 request handling

CVE-2026-105811 - Authorization bypass through a user-controlled key in the Amazon Q Business Lambda hook sample in QnABot on AWS

Part 1 – Cybersecurity journeys: I didn’t plan this

Your Windows PC can now reach other PCs through Windows App

Atlassian Warns of Critical Flaw Affecting Eight Self-Managed Products

Issues with AWS Research and Engineering Studio (RES)

Issue with AWS Ops Wheel (CVE-2026-6911 and CVE-2026-6912

CVE-2026-7191- Arbitrary Code Execution via Sandbox Bypass in QnABot on AWS