2026-05-10 归档

今日共收录 706 条安全情报,包含 57 个 CVE,372 篇安全通告,以及 20 篇研究论文。

← 返回归档列表
威胁情报2026-05-10 发布INFO

Akamai Inference Cloud

Akamai Inference Cloud

历史摘要 · 未重新核验 · Akamai Security Research

威胁情报2026-05-10 发布INFO

Adaptive Media Delivery

Adaptive Media Delivery

历史摘要 · 未重新核验 · Akamai Security Research

威胁情报2026-05-10 发布INFO

Ransomware Protection

Ransomware Protection

历史摘要 · 未重新核验 · Akamai Security Research

威胁情报2026-05-10 发布INFO

Identity, Credential, and Access Management

Identity, Credential, and Access Management

历史摘要 · 未重新核验 · Akamai Security Research

威胁情报2026-05-10 发布INFO

Threat IntelligenceCoruna: The Mysterious Journey of a Powerful iOS Exploit KitBy Google Threat Intelligence Group • 25-minute read

Threat IntelligenceCoruna: The Mysterious Journey of a Powerful iOS Exploit KitBy Google Threat Intelligence Group • 25

历史摘要 · 未重新核验 · Mandiant

威胁情报2026-05-10 发布INFO

Defending Against CORDIAL SPIDER and SNARKY SPIDER with Falcon Shield

Defending Against CORDIAL SPIDER and SNARKY SPIDER with Falcon Shield

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-05-10 发布INFO

Tune In: The Future of AI-Powered Vulnerability Discovery

Tune In: The Future of AI-Powered Vulnerability Discovery

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-05-10 发布INFO

CrowdStrike Technical Risk Assessments Reveal Common Exposure Patterns

CrowdStrike Technical Risk Assessments Reveal Common Exposure Patterns

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-05-10 发布INFO

CrowdStrike Launches Falcon OverWatch for Defender

CrowdStrike Launches Falcon OverWatch for Defender

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-05-10 发布INFO

CrowdStrike Named a Leader in the First-Ever Gartner® Magic Quadrant™ for Cyberthreat Intelligence Technologies

CrowdStrike Named a Leader in the First-Ever Gartner® Magic Quadrant™ for Cyberthreat Intelligence Technologies

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-05-08 发布INFO

Active attack: Dirty Frag Linux vulnerability expands post-compromise risk

Dirty Frag is a newly disclosed Linux local privilege escalation vulnerability affecting kernel networking and memory-fr

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

威胁情报2026-05-09 发布INFO

JDownloader site hacked to replace installers with Python RAT malware

The website for the popular JDownloader download manager was compromised earlier this week to distribute malicious Windo

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-05-09 发布INFO

Fake OpenAI repository on Hugging Face pushes infostealer malware

A malicious Hugging Face repository that reached the platform's trending list impersonated OpenAI's "Privacy Filter" pro

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-05-10 发布INFO

网络安全信息与动态周报-2026年第12期

本报告为CNCERT发布的2026年第12期网络安全信息与动态周报。报告周期内,国家互联网应急中心通报了本周网络安全总体态势,包括漏洞信息、恶意程序传播、网站安全及移动互联网安全等统计数据。具体而言,本周新增信息安全漏洞若干,其中高危漏洞占

历史摘要 · 未重新核验 · CNCERT

威胁情报2026-05-10 发布INFO

网络安全信息与动态周报-2026年第14期

本报告是CNCERT发布的2026年第14期网络安全信息与动态周报,涵盖一周内国内外重要网络安全事件、漏洞威胁、恶意程序活动等动态。报告基于CNCERT监测数据,汇总了近期网络安全态势,包括但不限于漏洞预警、攻击事件通报、安全动态等。由于原

历史摘要 · 未重新核验 · CNCERT

安全公告2026-05-08 发布INFO

GitPython: Newline injection in config_writer() section parameter bypasses CVE-2026-42215 patch, enabling RCE via core.hooksPath

Summary The patch for CVE-2026-42215 (GitPython 3.1.49) validates newlines only in the value parameter of set_value().

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-08 发布INFO

in-toto-golang and in-toto-python have inconsistent negation behavior

### Impact _What kind of vulnerability is it? Who is impacted?_ in-toto-golang and in-toto-python both support glob pat

历史摘要 · 未重新核验 · GitHub Advisory

威胁情报2026-05-10 发布INFO

Apache Camel JMS 反序列化(CVE-2026-40860)漏洞分析

CVE-2026-40860

Apache Camel JMS 反序列化(CVE-2026-40860)漏洞分析

历史摘要 · 未重新核验 · 先知社区

威胁情报2026-05-09 发布INFO

cPanel, WHM Release Fixes for Three New Vulnerabilities — Patch Now

CVE-2026-29201

cPanel has released updates to address three vulnerabilities in cPanel and Web Host Manager (WHM) that could be exploite

历史摘要 · 未重新核验 · The Hacker News

漏洞预警2026-05-09 发布MEDIUM

Hex-Rays IDA Pro 9.2 and 9.3 before 9.3sp2 does not block Clang dependency-file generation (via argument injection), which allows attackers to place their code into a plugins di...

CVE-2026-45181

CVE-2026-45181 是 Hex-Rays IDA Pro 9.2 和 9.3 版本(低于 9.3sp2)中存在的一个参数注入漏洞。IDA Pro 在解析 Clang 依赖文件生成时,未阻止通过参数注入方式生成依赖文件,攻击者可以通

历史摘要 · 未重新核验 · NVD