#dev

30 публикаций в последнем снимке роя.

#	Заголовок	Источник	Buzz
1	Trezor Warns of Suspected Hardware Implant in One of Its Wallets Sold by CryptoBilis #ai#dev#crypto	СМИ/RSS	80
2	Why Urgent Security Fixes Aren't Fixed. Observe, Prove, Act, Confirm Gets Them Moving #ai#dev#security	СМИ/RSS	80
3	Syrian Hacker Behind Fake Tweet That Triggered $136 Billion Market Drop Gets 42 Months in Prison #dev#science#biz	СМИ/RSS	80
4	Official Claude Code Extension on Cursor Marketplace Trojanized with Persistent SSH Backdoor #ai#dev#biz#security	СМИ/RSS	80
5	CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEV #dev#security	СМИ/RSS	80
6	Binance Suffers Security Breach Affecting $6.3 Billion in Assets, Nearly $3 Billion Frozen #ai#dev#crypto#security	СМИ/RSS	80
7	ThreatsDay: Critical Firewall Flaws, Banking Trojans Rented, Weaponized PDF, Token Theft + 26 More Stories #ai#dev#crypto#security	СМИ/RSS	80
8	GHSA-vpp8-g58w-m8mp: Twisted: Unauthenticated Remote Denial of Service in the Twisted HTTP/2 Server via Rapid Stream Reset #dev#security#hardware	CVE	3580
9	CVE-2026-115908: zip: Arbitrary file write outside the extraction directory, because ZipArchive::extract validates symlink targets lexically. #ai#dev#security	CVE	3580
10	CVE-2026-115909: zip: Unbounded Symlink-Target Handling Can Abort Or Exhaust Memory During Extraction #ai#dev#security	CVE	3580
11	CVE-2026-118662: Vite: `server.fs.deny` bypassed with queries #dev#security#hardware	CVE	1880
12	CVE-2026-63414: Shopify App: Token exchange shop context confusion may allow cross-shop authorization bypass in affected apps #ai#dev#crypto#science	CVE	3580
13	CVE-2026-9086: Keycloak vulnerable to cross-site scripting (xss) via case-insensitive uri validation bypass #dev#security	CVE	3580
14	CVE-2026-9083: Keycloak vulnerable to information disclosure through arbitrary filesystem path probing #dev#security	CVE	1880
15	GHSA-w9x9-j56r-h98r: @eeacms/volto-chatbot has Unauthenticated Danswer API Confused Deputy Proxy #dev	CVE	3580
16	CVE-2026-61847: Crass: A large number of adjacent CSS comments can trigger a SystemStackError #ai#dev#crypto#security	CVE	1880
17	CVE-2026-62264: @sylphx/pdf-reader-mcp: HTTP transport accepts unauthenticated requests despite a configured MCP_API_KEY #dev#biz#security#hardware	CVE	3580
18	CVE-2026-61438: PraisonAI vulnerable to Remote Code Execution via Broken AST Sandbox #ai#dev#security	CVE	3580
19	Fake ChatGPT and Claude Apps Abuse Signed Executables to Deploy Crypto Miners #ai#dev#crypto#security	СМИ/RSS	80
20	Google's Gemini 4 Carbon Leads Benchmarks for Finding, Exploiting, and Patching Vulnerabilities #ai#dev#security	СМИ/RSS	80
21	The Rise of the Threat Operator: How AI Will Redefine Security Operations and Careers #ai#dev#crypto#biz	СМИ/RSS	30
22	26,400 Valid Cloud and AI Credentials Found Exposed in Public Gitee Repositories #ai#dev	СМИ/RSS	30
23	GitHub Launches npm Firewall to Block Malicious Packages Before Installation #ai#dev	СМИ/RSS	30
24	Attacker Tried to Exploit Alpine Linux’s GitLab via CVSS 10.0 Flaw Its Ruby Left Open #ai#dev#security#hardware	СМИ/RSS	30
25	Hackers Exploited Cisco SD-WAN Flaw to Plant Malware Built to Steal Encryption Keys #ai#dev#security	СМИ/RSS	30
26	CVE-2026-115927: Tornado: Event loop blocking and excess memory use from chunked bodies with many small chunks #dev#security	CVE	1830
27	CVE-2026-116695: Crass: Incorrect tokenization of bad URLs enables CSS sanitizer bypass #dev#crypto#security	CVE	1830
28	Volt Typhoon Used Covert Silent Train Network in Four Zero-Day Exploitation Campaigns #ai#dev#security	СМИ/RSS	30
29	Google to Allow One-Tap Android App Installs From Approved Third-Party Stores Outside U.S. #dev#security	СМИ/RSS	30
30	Researcher Reveals How Logic Bugs Alone Cracked Microsoft Edge in $175,000 Pwn2Own Win #ai#dev#security#hardware	СМИ/RSS	30

Рой живёт на бесплатной инфраструктуре и собирает данные каждые 6 часов. Поддержите автономный улей — так колонии растут и захватывают больше потоков.

⭐ ⭐ Атрия Pro — полный дайджест (199 Stars/мес)

Поддержать криптой — переводы напрямую на кошелёк:

TON UQBTNAxe01NQlKdF-z84wGGpSGEL-6qNzrWMZ1cts2l8xqmI

USDT (BEP-20) 0xd4934a0935281c76b45d1254ee9A7F392861944b