Deals API: Deals API: IAB Tech Lab's standard for pushing agreed programmatic deal terms from the SSP where a deal is created to buyers' DSPs, naming curator and fee. https://ppc.land/deals-api/ #DealsAPI #IABTechLab #ProgrammaticAdvertising #SSP #DSP
Search
361 results for “ss”
-
-
『復刻ミリオンフェス』開催中です！
DAY1：SSR 松田亜利沙(CV：村川梨衣)
DAY2：SSR 永吉昴(CV：斉藤佑圭)
DAY3：SSR 二階堂千鶴(CV：野村香菜子)
DAY4：SSR 双海亜美(CV：下田麻美)以上のミリオンフェス限定カードが日替わりで出現率UP中です♪
#ミリシタ
#imas_official_bot -
The Virginia-class fast attack #submarine #USSNewHampshire, #SSN778, was commissioned OTD in 2008 https://toilet-guru.com/submarine.html?s=mb #Navy #history
-
The Virginia-class fast attack #submarine #USSNorthDakota, #SSN784, was commissioned OTD in 2014 https://toilet-guru.com/submarine.html?s=mb #Navy #history
-
Територіальне питання лише на рівні лідерів: Зеленський про пропозиції США щодо обміну територіями
Президент Володимир Зеленський заявив, що адміністрація Трампа давно порушує питання обміну територіями з Росією, але Україна нічого ні на що не обмінює. Про це Зеленський сказав в інтерв’ю ТСН.
Президент наголосив, що Україна готова до обговорення територіального питання лише на рівні лідерів. Водночас інші питання Україна може обговорити на рівні технічних груп у листопаді.
Він зазначив, що у питанні гарантій безпеки Україна розглядає кілька варіантів. Також Зеленський додав, що Україна не погодиться говорити під час переговорів про нейтральність держави.
“Ми вважаємо, що головні аспекти цього, що ми не можемо говорити про нейтральність нашої держави. І ми не повинні. Наше бачення спільне з американцями, що ми не можемо говорити про обмеження української армії. Для нас це наші червоні лінії”, — сказав глава держави.
-
https://www.europesays.com/pt/565798/ SSI monitoriza alerta jihadista a visar protestos – Observador #BreakingNews #BreakingNews #FeaturedNews #FeaturedNews #Headlines #Islu00e3o #jihadismo #LatestNews #LatestNews #MainNews #MainNews #Manifestau00e7u00f5es #Mundo #News #Notícias #NotíciasPrincipais #NotíciasPrincipais #Portugal #PrincipaisNotícias #PrincipaisNotícias #Protestos #PT #Religiu00e3o #Seguranu00e7a #Sociedade #TopStories #TopStories #Últimas #ÚltimasNotícias #ÚltimasNotícias
-
#RevueDePressive
#ExtrêmeDroite #Fascisme #Police #ViolencesPolicières
CRS, SS
Police, milices, même combat> Attaques d’extrême droite contre des cortèges du 24 octobre : à Nancy, Rouen ou Montpellier, l’attitude des forces de l’ordre en question
---
Des dizaines de descentes violentes, des manifestants pacifiques agressés, des passages à tabac et une police qui, dans certaines villes, laisse faire. Samedi 2…
https://www.liberation.fr/politique/attaques-dextreme-droite-contre-des-corteges-du-24-octobre-a-nancy-rouen-ou-montpellier-lattitude-des-forces-de-lordre-en-question-20261025_QL3NN5FSNRD6TKTY2C3ORVWOI4/Article complet : https://lesliensde.jeey.net/shaare/bRg8gA
-
🚨Initial Access: Two Corporate GlobalProtect VPN Listings
A threat actor is advertising GlobalProtect SSL/VPN access to two unnamed companies.
🌏 Asia - Engineering company with approximately 2,000 employees and $250M in revenue. The actor shared connection logs indicating the VPN tunnel successfully established.
🌎 LATAM - Manufacturing company with 50-200 employees and $50M in revenue. The actor claims the company has major technology partners and large investors.
Both accesses reportedly remain largely unexplored to avoid alerting the targets.
Claims are currently unverified.
💥 No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing
-
【崩壊3rd】超弦空間 寂滅 HL560 モルト 827 SS(Ⅲ)夢追い人、ゼーレ、SS2(Ⅲ)リタ、SSSセナディア https://www.playing-games.com/1122127/ ##honkaiimpact3rd #HonkaiImpact3rd #ほうかい3rd #ほうかい3rd攻略 #ほうかいさーど #ほうかいサード攻略 #崩壊3rd #崩壊3rd攻略
-
It's definitely safe to update my proxmox server from 8 to 9 over an ssh connection on conference wifi, right?
-
CVE-2026-93981: Hono JSX under 4.13.7 fails to HTML-escape strings in several SSR paths, letting attackers inject markup via controlled input. CVSS 4.7. Patched in 4.13.7, update now. #CVE #infosec #hono https://www.valtersit.com/cve/CVE-2026-93981/
-
https://www.fogolf.com/us/20085/ Butterfield Bermuda Championship playoff, prize money and payouts #access:metered #PGA #PGATOUR #Source:USATODAY #ssts:sports:golf:lpga #sstsn:LPGA #tag:Bermuda #Tag:FedExCup #tag:Golf #Tag:InternationalSportsCompetitions #Tag:OverallNeutral #tag:PGA #Tag:PGATour #Tag:SportsNews #type:story
-
https://www.fogolf.com/us/20074/ Rory Sabbatini shoots 62 to win Stifel Charity Classic 2026 #access:free #PGA #PGATOUR #source:Golfweek #ssts:sports:golf:champions #sstsn:Champions #tag:Golf #Tag:InternationalSportsCompetitions #Tag:OverallPositive #Tag:PGATour #Tag:PGATourChampions #Tag:SportsNews #type:story
-
Ab 21 Uhr live: AS Monaco gegen SC Freiburg https://www.sportschau.de/live-und-ergebnisse/fussball/europa-conference-league/ma12520653/as-monaco_sc-freiburg/liveticker
#sportschau #bundesliga #fussball #soccer #transfermarkt -
https://www.europesays.com/africa/490146/ Uganda: Court to Rule On Ssewungu’s Election Petition On December 8 #Africa #Business #CurrentEvents #EastAfrica #economy #news #politics #sports #trade #travel #Uganda
-
St. Francis triangle plan includes apartments, grocery store https://www.diningandcooking.com/us/62672/ #access:metered #Source:MilwaukeeJournalSentinel #ssts:communities:south #Sstsn:SouthSuburbs #type:gallery #Wisconsin #WisconsinDining #WisconsinFood #WisconsinGroceryStores #WisconsinRestaurants
-
LibreSSL 4.4.0, 4.3.4, 4.2.3 released https://www.undeadly.org/cgi?action=article;sid=20261025115016 #openbsd #libressl #ssl #tls #https #crypotography #crypto #security #networking #www #developement #freesoftware #libresoftware
-
Go Issues Emergency Update Blocking Eight CA Keys Over Undisclosed Security Concerns https://thehackernews.com/2026/10/go-issues-emergency-update-blocking.html
-
Which Nashville restaurants won Michelin stars in 2026? https://www.diningandcooking.com/us/62229/ #access:metered #Source:NashvilleTennessean #ssts:entertainment:dining #sstsn:dining #tag:Cuisines #Tag:FineDining #Tag:GeographicReference #Tag:LocalAffiliateFood #tag:Nashville #Tag:OverallPositive #Tag:RestaurantReviews&Reservations #Tag:StoryHighlightsAIEnabled #Tennessee #TennesseeDining #TennesseeFood #TennesseeGroceryStores #TennesseeRestaurants #type:story
-
Ab 21 Uhr live - VfB Stuttgart gegen Atletico Madrid https://www.sportschau.de/live-und-ergebnisse/fussball/uefa-champions-league/ma12517749/vfb-stuttgart_atletico-madrid/liveticker
#championsleague #sportschau -
Ab 21 Uhr live: TSG Hoffenheim gegen Olympique Lyon https://www.sportschau.de/live-und-ergebnisse/fussball/uefa-europa-league/ma12520275/tsg-hoffenheim_olympique-lyon/liveticker
#sportschau #bundesliga #fussball #soccer #transfermarkt -
Photos from the Michelin Guide American South Ceremony in Nashville https://www.diningandcooking.com/us/62174/ #access:metered #Source:NashvilleTennessean #ssts:news #sstsn:news #Tennessee #TennesseeDining #TennesseeFood #TennesseeGroceryStores #TennesseeRestaurants #type:gallery
-
Swords and Sausages - Grab and Go - page 12 https://www.tigerknight.com/ss/15-12 #furryart #webcomic
-
Italian court grants partial extradition in Texas capital murder case
Oct. 22, 2026, 3:41 p.m. ET Italy h…
#Italy #Europe #Europa #EU #access:free #source:USATODAY #ssts:news:crime #sstsn:crime #tag:CapitalMurder #tag:CapitalPunishment #tag:Courts&Judiciary #tag:Crime #tag:Crime&Justice #tag:Death&Tragedy #tag:DeathInvestigations #tag:Deathrow #tag:Extradition #tag:Italy #tag:Legal #tag:Murder #tag:News #tag:OverallNegative #tag:Violence&Abuse #type:story
https://www.europesays.com/italy/58036/ -
A Subdomain Field That Became a Credential Harvester: SAP Cloud SDK CVE-2026-89111
SAP scores CVE-2026-89111 at 10.0. That is an unusual number for a server-side request forgery, and the reason is scope: the bug does not merely send a request to the wrong host, it hands the attacker the credentials needed to complete that request themselves. The affected package is the SAP Cloud SDK for Python, and the fix shipped in two parts, months apart, with a regression between them.The mechanism
The SDK builds an OAuth2 token URL for the client credentials flow. Part of that URL comes from a caller-supplied value namedtenant_subdomain, which the SDK substitutes into the URL by string replacement.Whoever controls
tenant_subdomaincontrols the destination host. Whenfetch_tokenruns, it sendsgrant_type,client_idandclient_secretin the form body to whatever host that value points at. An attacker who can set the field to a host they operate receives the client secret directly, with no parsing trick required.Those credentials buy a real access token from the legitimate endpoint. The token carries whatever permissions the original client held, and the documented Destination configuration stores third-party system credentials. The blast radius runs from one subdomain parameter to the credentials of every system that SDK integrated with.
Two fixes, and a window in between
The advisory lists affected versions below 0.45.2, with the fix in 0.45.2. According to the vendor, that is the whole story.In practice it is not. Researchers tested each release and found that the module migration work in 0.53.0 reintroduced the flaw, which remained present through 0.55.0. Version 0.55.1 re-fixed it; the current release line is 0.58.5.
The per-version behaviour is reproducible. 0.45.0 and 0.45.1 send the secret to the attacker host, 0.45.2 blocks it, 0.53.0 and 0.55.0 send it again, and 0.55.1 and 0.58.5 block it. One test run against 0.53.0 captured two separate credential sets from a single request flow.
That gap is the finding worth carrying away. Anyone who patched to 0.45.2 and later upgraded to 0.53.0 for unrelated reasons became exploitable again, and no advisory said so. A version-range check driven by the vendor advisory alone would report those hosts as fixed.
Disclosure context
The issue was published at SAP Security Patch Day on 13 October 2026 alongside 19 other vulnerabilities: 4 critical, 3 high, and 4 that had been pre-published on GitHub. No in-the-wild exploitation has been reported.Other items in the same batch matter for anyone tracking SAP exposure broadly. CVE-2026-89110 is a broken access control issue in NetWeaver Visual Composer. CVE-2026-89107 is code injection in S/4HANA. CVE-2026-89108 is a missing authorization check in Manufacturing Integration and Intelligence, scored between 9.9 and 9.1 depending on the source.
What to do
- Compare the installed version against 0.45.2, 0.55.1 and 0.58.5, and treat anything in the 0.53.0 to 0.55.0 range as vulnerable regardless of what an advisory lookup reports.
- If an upgrade cannot land yet, whitelist
tenant_subdomainagainst the values your integrations actually use. It is a narrow control, but it addresses the injection point itself. - Rotate client secrets for any SDK integration that ran a version in either vulnerable range. Assume the secret was exposed.
- Review what the affected client was authorized to reach. The token the attacker obtains is the client's token, so the question becomes what that client could read, and the Destination configuration is where to look.
The lesson that outlasts the CVE
Advisories describe the versions the maintainer knew about when the advisory was written. A regression introduced later, during a refactor, is invisible to an advisory-based scanner and to any team whose remediation reads as an instruction to upgrade past the listed version.For a library that handles credentials, the durable control is a negative test in your own pipeline: point
tenant_subdomainat a host you control, run the token fetch, and assert that no secret leaves. That test survives version changes, module migrations, and advisory text nobody has updated.References
- SAP Security Patch Day, 13 October 2026, SAP Note for CVE-2026-89111
- GHSA-4mv3-jxxm-9cx2 (SAP Cloud SDK for Python, OAuth2 SSRF)
#sap #oauth2 #ssrf #credentialleak #software #coding #development #engineering #inclusive #community
A Subdomain Field That Became a Credential Harvester: SAP Cloud SDK CVE-2026-89111 -
Russian satellite stalked ICEYE spacecraft in potentially dangerous on-orbit maneuvers https://breakingdefense.com/2026/10/russian-satellite-stalked-iceye-spacecraft-in-potentially-dangerous-on-orbit-maneuvers/
-
https://www.fogolf.com/us/19315/ Tony Finau wins 1 million for foundation off Pat McAfee at Jazz game #access:free #PGA #PGATOUR #source:Golfweek #ssts:sports:golf:pga #Sstsn:PGATour #tag:Basketball #Tag:Charity&Philanthropy #Tag:ESPNInc #tag:Golf #Tag:OverallPositive #Tag:PatMcAfee #Tag:SportsNews #Tag:StoryHighlightsAIEnabled #Tag:UtahJazz #type:story
-
Following the discovery of a severe cryptographic flaw, eMudhra exits the global SSL/TLS market. Discover the details of the compromised private keys.
#eMudhra #Cybersecurity #SSLCertificates #DataSecurity #TechNews
https://dailytechnow.com/emudhra-exits-global-ssl-tls-market/
