Microsoft asks iPhone users to reauthenticate after Outlook outage
After addressing a widespread outage that affected Outlook.com users worldwide on Monday, Microsoft has asked iPhone use
2026-04-29 归档
今日共收录 828 条安全情报，包含 0 个 CVE，482 篇安全通告，以及 32 篇研究论文。
← 返回归档列表VECT 2.0 Ransomware Irreversibly Destroys Files Over 131KB on Windows, Linux, ESXi
Threat hunters are warning that the cybercriminal operation known as VECT 2.0 acts more like a wiper than a ransomware d
Chinese Silk Typhoon Hacker Extradited to U.S. Over COVID Research Cyberattacks
A Chinese national accused of being a member of the Silk Typhoon hacking group has been extradited to the U.S. from Ital
Alleged Chinese State Hacker Extradited to US
A member of Silk Typhoon, Xu Zewei is accused of launching cyberattacks against universities in the US. The post Alleged
CrowdStrike Expands ChatGPT Enterprise Integration with Enhanced Audit Logging and Activity MonitoringApr 28, 2026
CrowdStrike Expands ChatGPT Enterprise Integration with Enhanced Audit Logging and Activity MonitoringApr 28, 2026
Broken VECT 2.0 ransomware acts as a data wiper for large files
Researchers are warning that the VECT 2.0 ransomware has a problem in the way it handles encryption nonces that leads to
Video service Vimeo confirms Anodot breach exposed user data
Vimeo has disclosed that data belonging to some of its customers and users has been accessed without authorization follo
AI-powered honeypots: Turning the tables on malicious AI agents
Just as AI brings time-saving advantages to our lives, it brings similar advantages to threat actors. We can take the ad
CISA orders feds to patch Windows flaw exploited as zero-day
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to secure their Windows sy
Microsoft says backend change broke Teams Free chat and calls
Microsoft is working to resolve a known issue that prevents some Microsoft Teams Free users from chatting and calling ot
Checkmarx Confirms Data Stolen in Supply Chain Attack
The hackers exfiltrated the data from Checkmarx’s GitHub environment on March 30, a week after publishing malicious code
网络安全信息与动态周报-2026年第11期
CNCERT（国家互联网应急中心）于2026年4月29日发布了第11期《网络安全信息与动态周报》。该周报为常规性安全态势监测报告，通常涵盖近期国内外网络安全漏洞预警、恶意程序传播、网络攻击事件、重点安全威胁动态以及行业安全态势等内容。本期报
CVE-2026-22738-Spring AI SimpleVectorStore 中的 SpEL 注入导致远程代码执行漏洞分析
CVE-2026-22738
CVE-2026-22738-Spring AI SimpleVectorStore 中的 SpEL 注入导致远程代码执行漏洞分析
Critical Unpatched Flaw Leaves Hugging Face LeRobot Open to Unauthenticated RCE
CVE-2026-25874
Cybersecurity researchers have disclosed details of a critical security flaw impacting LeRobot, Hugging Face's open-sour
Researchers Discover Critical GitHub CVE-2026-3854 RCE Flaw Exploitable via Single Git Push
CVE-2026-3854
Cybersecurity researchers have disclosed details of a critical security vulnerability impacting GitHub.com and GitHub En
Critical GitHub Vulnerability Exposed Millions of Repositories
CVE-2026-3854
The remote code execution flaw CVE-2026-3854 was found to impact GitHub.com and GitHub Enterprise Server. The post Criti
CISA Adds Actively Exploited ConnectWise and Windows Flaws to KEV
CVE-2024-1708
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added two security flaws impacting ConnectWi
Large Language Models for Code: Security Hardening and Adversarial Testing.
该论文研究大型语言模型（LLM）在代码生成中的安全问题。随着LLM在大量代码库上训练并用于自动生成代码，它们频繁生成不安全的代码，缺乏安全意识。为此，作者从两个维度展开工作：安全加固（增强LLM生成安全代码的可靠性）和对抗测试（从对抗视角评
Towards Agentic Investigation of Security Alerts
安全分析师每天面临大量的告警，而许多检测系统提供的上下文信息很少，导致早期调查通常需要手动关联多个日志源，非常耗时。本文提出了一种实验性的智能体工作流，利用大型语言模型（LLM）配合预定义查询和受限工具访问（对Suricata日志的结构化S
The Surprising Universality of LLM Outputs: A Real-Time Verification Primitive
本文报告了前沿大语言模型（LLM）输出中一个惊人的统计规律性，使得仅依赖CPU的评分基元（scoring primitive）能以每个token 2.6微秒的速度运行，估计延迟比现有的基于采样的检测器低五个数量级（10万倍）。研究跨越了来自