CVE-2026-6848 Quay: red hat quay: authentication bypass allows privileged actions without valid credentials

A flaw was found in Red Hat Quay. When Red Hat Quay requests password re-verification for sensitive operations, such as token generation or robot account creation, the re-authentication prompt can be bypassed. This allows a user with a timed-out session, or an attacker with access to an idle...

Cyber Signals: Inside the growing risk of gift card fraud

In the ever-evolving landscape of cyberthreats, staying ahead of malicious actors is a constant challenge. Microsoft Threat Intelligence has observed that gift cards are attractive targets for fraud and social engineering practices. Unlike credit or debit cards, there’s no customer name or bank...

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source Web browser from the Mozilla Foundation in the U.S. A security vulnerability exists in Mozilla Firefox, which stems from a malicious Web site that generates HTTP authentication dialogs that could trick the built-in password manager into suggesting a password for...

Google Chrome HTTP Authentication Spoofing Vulnerability (CNVD-2019-38241)

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in Google Chrome versions prior to 78.0.3904.70. A remote attacker can exploit the vulnerability to spoof HTTP authentication windows and gain unauthorized access to user credentials...

Citrix Receiver for Windows shows Authentication Window or Receiver prompts periodically

Citrix Receiver for Windows authentication prompt and/or receiver prompt pops up randomly...