3 casos · pág. 1/1
A vulnerability in Signal's open-source RingRTC calling library, tracked as CVE-2026-113380 (CVSS 9.3), can stop a call from terminating properly. This can leave audio and possibly video channels open after a user hangs up. MITRE published the CVE on Tuesday. The affected versions are every RingRTC release before 2.72.0, and the fix shipp…
The Hakai Yokai Research Team disclosed CVE-2026-12191, an insecure deserialization flaw (CWE-502) in openpilot, the open-source Level 2 driver assistance system from comma.ai that supports over 275 vehicle models. The modeld process calls Python pickle.load() / pickle.loads() on model and metadata files with no validation, signature or h…
Citizen Lab, working with the SHARE Foundation, confirmed with high confidence that the iPhone of Vladan Đokić, rector of the University of Belgrade and a prominent supporter of Serbia's student-led anti-corruption protests, was infected with NSO Group's Pegasus in 2026 through a zero-click exploit (thehackernews.com, securityaffairs.com,…
