2026-05-09 归档

今日共收录 1190 条安全情报,包含 490 个 CVE,393 篇安全通告,以及 21 篇研究论文。

← 返回归档列表
威胁情报2026-05-09 发布INFO

[分享] 脱壳神器【Layout Inspect】肘爆SystemUI

[分享] 脱壳神器【Layout Inspect】肘爆SystemUI

历史摘要 · 未重新核验 · 看雪

威胁情报2026-05-08 发布INFO

TCLBANKER Banking Trojan Targets Financial Platforms via WhatsApp and Outlook Worms

Threat hunters have flagged a previously undocumented Brazilian banking trojan dubbed TCLBANKER that's capable of target

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-05-08 发布INFO

Fake Call History Apps Stole Payments From Users After 7.3 Million Play Store Downloads

Cybersecurity researchers have discovered fraudulent apps on the official Google Play Store for Android that falsely cla

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-05-08 发布INFO

One Missed Threat Per Week: What 25M Alerts Reveal About Low-Severity Risk

The dark secret of enterprise security operations is that defenders have quietly institutionalized the practice of not l

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-05-08 发布INFO

New Linux PamDOORa Backdoor Uses PAM Modules to Steal SSH Credentials

Cybersecurity researchers have disclosed details of a new Linux backdoor named PamDOORa that's being advertised on the R

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-05-08 发布INFO

In Other News: Train Hacker Arrested, PamDOORa Linux Backdoor, New CISA Director Frontrunner

Other noteworthy stories that might have slipped under the radar: US gov targets 72-hour patch cycles, malware uses Wind

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-05-08 发布INFO

Polish Security Agency Reports ICS Breaches at Five Water Treatment Plants

The hackers gained the ability to modify equipment operational parameters, creating a direct risk to the public water su

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-05-08 发布INFO

AI Firm Braintrust Prompts API Key Rotation After Data Breach

Hackers accessed one of the company’s AWS accounts and compromised AI provider secrets stored in Braintrust. The post AI

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-05-08 发布INFO

Cyberattack Hits Canvas System Used by Thousands of Schools as Finals Loom

A system that thousands of schools and universities use went offline due to a cyberattack, creating chaos as students tr

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-05-08 发布INFO

Vulnerability in Claude Extension for Chrome Exposes AI Agent to Takeover

Lax extension permissions and improper trust implementation allow attackers to inject prompts in the Claude Chrome exten

历史摘要 · 未重新核验 · SecurityWeek