2026-04-28 归档

今日共收录 1050 条安全情报,包含 258 个 CVE,457 篇安全通告,以及 29 篇研究论文。

← 返回归档列表
威胁情报2026-04-28 发布INFO

Guides and tutorials

Guides and tutorials

历史摘要 · 未重新核验 · Akamai Security Research

威胁情报2026-04-28 发布INFO

Start-up programs

Start-up programs

历史摘要 · 未重新核验 · Akamai Security Research

威胁情报2026-04-28 发布INFO

Events and workshops

Events and workshops

历史摘要 · 未重新核验 · Akamai Security Research

威胁情报2026-04-28 发布INFO

ISC Stormcast For Tuesday, April 28th, 2026 https://isc.sans.edu/podcastdetail/9908, (Tue, Apr 28th)

ISC Stormcast For Tuesday, April 28th, 2026 https://isc.sans.edu/podcastdetail/9908, (Tue, Apr 28th)

历史摘要 · 未重新核验 · SANS ISC

威胁情报2026-04-27 发布INFO

Mythos Changed the Math on Vulnerability Discovery. Most Teams Aren't Ready for the Remediation Side

Anthropic’s Claude Mythos Preview has dominated security discussions since its April 7 announcement. Early reporting des

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-04-27 发布INFO

PhantomCore Exploits TrueConf Vulnerabilities to Breach Russian Networks

A pro-Ukrainian hacktivist group called PhantomCore has been attributed to attacks actively targeting servers running Tr

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-04-27 发布INFO

Researchers Uncover 73 Fake VS Code Extensions Delivering GlassWorm v2 Malware

Cybersecurity researchers have flagged dozens of Microsoft Visual Studio Code (VS Code) extensions on the Open VSX repos

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-04-28 发布INFO

Medtronic Hack Confirmed After ShinyHunters Threatens Data Leak

The ShinyHunters cybercrime group claimed to have stolen 9 million records containing personal information from Medtroni

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-04-27 发布INFO

OpenSSH Flaw Allowing Full Root Shell Access Lurked for 15 Years

A code reuse issue enabled comma characters in certificate principals to be interpreted as list separators. The post Ope

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-04-27 发布INFO

Malicious AI Prompt Injection Attacks Increasing, but Sophistication Still Low: Google

The tech giant found that many indirect prompt injection attempts are harmless, but some malicious exploits have also be

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-04-27 发布INFO

Energy and Water Management Firm Itron Hacked

Itron, which serves utilities and cities around the world, discovered unauthorized access to its systems on April 13. Th

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-04-27 发布INFO

UNC6692 Uses Email Bombing, Social Engineering to Deploy ‘Snow’ Malware

The threat actor infected victims with the Snow malware family – Snowbelt, Snowglaze, and Snowbasin – for persistent acc

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-04-27 发布INFO

Easily Exploitable ‘Pack2TheRoot’ Linux Vulnerability Leads to Root Access

A race condition in PackageKit allows unprivileged users to escalate privileges when installing packages. The post Easil

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-04-27 发布INFO

US Launches Sweeping Crackdown on Southeast Asia Cyberscams and Sanctions Cambodian Senator

US conducts sweeping crackdown on Southeast Asian cyberscam operations as part of what officials say is a “new theater o

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-04-28 发布INFO

[原创]微信4.1.5.16 和4.1.4.17 字符串解密

[原创]微信4.1.5.16 和4.1.4.17 字符串解密

历史摘要 · 未重新核验 · 看雪

威胁情报2026-04-28 发布INFO

[开源] Mira: 让 AI 直接操作 Android/iOS 运行时

[开源] Mira: 让 AI 直接操作 Android/iOS 运行时

历史摘要 · 未重新核验 · 看雪

威胁情报2026-04-28 发布INFO

[原创]利用任意物理读写驱动来加载自己的驱动

[原创]利用任意物理读写驱动来加载自己的驱动

历史摘要 · 未重新核验 · 看雪

威胁情报2026-04-28 发布INFO

[原创]AI工具:个人电脑性能分析“四大名捕”,解决电脑慢上网慢问题

[原创]AI工具:个人电脑性能分析“四大名捕”,解决电脑慢上网慢问题

历史摘要 · 未重新核验 · 看雪

威胁情报2026-04-28 发布INFO

[原创]某瓣libmsaoaidsec.so Frida检测分析与绕过实战

[原创]某瓣libmsaoaidsec.so Frida检测分析与绕过实战

历史摘要 · 未重新核验 · 看雪

威胁情报2026-04-28 发布INFO

[原创]实战某 Box APP全流程分析(检测绕过/登录分析/视频解锁/native加密/广告绕过)

[原创]实战某 Box APP全流程分析(检测绕过/登录分析/视频解锁/native加密/广告绕过)

历史摘要 · 未重新核验 · 看雪