Rubrika: Aktuálně

GitLab has released patches to address multiple flaws, including a maximum-severity security vulnerability that has witnessed in-the-wild probes within hours of public disclosure. The vulnerability in question is CVE-2026-85706 (CVSS score: 10.0), a path traversal issue in the repository commits API that could allow an unauthenticated user to read arbitrary files from the GitLab server…

Read More “GitLab CVSS 10 File-Read Flaw Draws In-the-Wild Probes After Disclosure” »

Threat actors are exploiting critical and high-severity vulnerabilities in JFrog Artifactory to bypass authentication, gain administrative privileges, and deploy a Rust backdoor on vulnerable self-hosted servers. […]

Anthropic on Thursday said it identified and disrupted industrial-scale illicit distillation attacks against Claude from seven labs based in China, including Alibaba, Moonshot, DeepSeek, Z.ai (aka Zhipu), and MiniMax. Knowledge distillation by itself is a legitimate training method. It refers to a machine learning technique where a large, powerful AI model assumes the role of…

Read More “Anthropic Says Seven China-Based AI Labs Ran Industrial-Scale Claude Distillation Attacks” »

Výrobce hardwarové kryptopeněženky Trezor, která spadá do portofolia české společnosti Satoshi Labs, vydal varování před bezpečnostním incidentem týkajícím se některých jeho zákazníků. V hlavní roli je služba Brevo, přes kterou Terzor rozesílá svůj newsletter. Zde je zdroj