CISA orders feds to patch Zimbra XSS flaw exploited in attacks

CISA has ordered U.S. government agencies to secure their servers against an actively exploited vulnerability in the Zimbra ...
腾讯网

Angular XSS漏洞致数千个Web应用面临跨站脚本攻击风险

Angular框架中被发现存在一个高危跨站脚本（XSS）漏洞（CVE-2026-32635/CWE-79），影响@angular/compiler和@angular/core组件包。由于Angular被全球无数企业和消费者Web应用采用，该漏洞可能为 ...
腾讯网

谷歌紧急修复Chrome浏览器中两个遭野外利用的0Day漏洞

威胁攻击者正在利用 Chrome 浏览器中两个高危 0Day 漏洞（CVE-2026-3909 和 CVE-2026-3910），安全专家建议企业IT团队必须立即修补。谷歌已发布紧急补丁，受影响版本为 146.0.7680.75 之前的浏览器。

Google warns of two actively exploited Chrome zero days

One allows a remote attacker to execute arbitrary code inside a sandbox, the other could result in loss of sensitive information.
搜狐

紧急！这些 JavaScript API 已经废弃！请慎用！

废弃原因：属于非标准遗留特性，参数规则和substring、slice不一致，极易混淆，已被纳入ECMA附录B，仅为兼容旧代码保留，不推荐新代码使用。 废弃原因：语义不统一，标准规范已推出语义更清晰的替代方法，部分新版浏览器已逐步移除支持。 废弃原因：编码 ...
The Caledonian-Record

Surf AI Launches with $57 Million in Funding to Help Enterprises Operationalize Security

Surf AI, the agentic operations platform for modern security teams, today announced its launch and $57 million in funding to accelerate the development of its AI-native security execution offerings.
The Caledonian-Record

monday.com Files its 2025 Annual Report on Form 20-F

Today, monday.com (NASDAQ: MNDY), the AI work platform that turns strategy into execution at scale, announced the filing of its 2025 Annual Report on Form 20-F with the Securities and Exchange ...