/
vendors:CISA × latest_source_host:securityaffairs.com × limpar

Resultados

2 casos · pág. 1/1

securityaffairs.com · · 4 fontes · 4 atualizações high

Signal RingRTC bug CVE-2026-113380 can leave call audio active after hangup

A vulnerability in Signal's open-source RingRTC calling library, tracked as CVE-2026-113380 (CVSS v4.0 9.3), can stop a call from terminating properly. This can leave audio, and possibly video, channels open after a user hangs up. MITRE published the CVE on October 20, 2026, classified as CWE-754, and NIST added it to the NVD on Tuesday (…

securityaffairs.com · · 8 fontes · 8 atualizações medium

DHS orders federal civilian agencies to remove DeepSeek products and third-party tools built on them, and bars new purchases under FASCSA

The Department of Homeland Security (DHS), under Secretary Markwayne Mullin, has issued an order under the Federal Acquisition Supply Chain Security Act of 2018 (FASCSA). It directs federal civilian agencies to stop buying and to remove products and services from Hangzhou DeepSeek Artificial Intelligence Co., Ltd. and its affiliates. It a…