2026-05-11 归档

今日共收录 747 条安全情报,包含 109 个 CVE,376 篇安全通告,以及 5 篇研究论文。

← 返回归档列表
安全公告2026-05-10 发布INFO

OpenCATS 0.9.4 contains a remote code execution vulnerability that allows unauthenticated...

CVE-2021-47936

OpenCATS 0.9.4 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-10 发布INFO

WordPress MStore API 2.0.6 contains an arbitrary file upload vulnerability that allows...

CVE-2021-47933

WordPress MStore API 2.0.6 contains an arbitrary file upload vulnerability that allows unauthenticated attackers to uplo

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-10 发布INFO

Slider by Soliloquy 2.6.2 contains a stored cross-site scripting vulnerability that allows...

CVE-2021-47922

Slider by Soliloquy 2.6.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to in

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-10 发布INFO

Rocket LMS 1.1 contains a persistent cross-site scripting vulnerability in the support ticket...

CVE-2021-47907

Rocket LMS 1.1 contains a persistent cross-site scripting vulnerability in the support ticket module that allows authent

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-10 发布INFO

OpenCart 3.0.3.8 contains a session fixation vulnerability that allows attackers to hijack user...

CVE-2021-47923

OpenCart 3.0.3.8 contains a session fixation vulnerability that allows attackers to hijack user sessions by injecting ar

历史摘要 · 未重新核验 · GitHub Advisory

威胁情报2026-05-11 发布INFO

Firewall for AI

Akamai 宣布推出 'Firewall for AI' 服务,这是一款专为保护人工智能应用和工作负载设计的 Web 应用防火墙(WAF)。该服务旨在应对针对 AI 系统的独特威胁,包括数据投毒、模型窃取、拒绝服务攻击以及针对 API 的

历史摘要 · 未重新核验 · Akamai Security Research

威胁情报2026-05-11 发布INFO

CrowdStrike Named a Leader in Frost & Sullivan 2026 Radar for Cloud-Native Application Protection Platforms

CrowdStrike 被 Frost & Sullivan 2026 年云原生应用保护平台雷达报告评为领导者。该报告评估了多家云原生应用保护平台(CNAPP)供应商,CrowdStrike 因其在 Falcon 平台中集成的 CNAPP

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-05-11 发布INFO

CrowdStrike Expands Real-Time Cloud Detection and Response to Google Cloud

CrowdStrike宣布将其实时云端检测与响应(CDR)能力扩展至Google Cloud平台。该集成使CrowdStrike Falcon平台能够监控和分析Google Cloud环境中的工作负载、网络流量和身份活动,从而检测威胁、提供

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-05-11 发布INFO

CrowdStrike Falcon Cloud Security Delivered 264% ROI Through Unified Cloud Protection

CrowdStrike Falcon Cloud Security Delivered 264% ROI Through Unified Cloud Protection

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-05-11 发布INFO

Security & Identity

Security & Identity

历史摘要 · 未重新核验 · Mandiant

威胁情报2026-05-11 发布INFO

SAP on Google Cloud

SAP on Google Cloud

历史摘要 · 未重新核验 · Mandiant

威胁情报2026-05-11 发布INFO

Inside Google Cloud

Inside Google Cloud

历史摘要 · 未重新核验 · Mandiant

威胁情报2026-05-11 发布INFO

Google Cloud Next & Events

Google Cloud Next & Events

历史摘要 · 未重新核验 · Mandiant

威胁情报2026-05-11 发布INFO

Google Cloud Consulting

Google Cloud Consulting

历史摘要 · 未重新核验 · Mandiant

威胁情报2026-05-11 发布INFO

Transform with Google Cloud

Transform with Google Cloud

历史摘要 · 未重新核验 · Mandiant

威胁情报2026-05-11 发布INFO

Threat IntelligenceNorth Korea-Nexus Threat Actor Compromises Widely Used Axios NPM Package in Supply Chain AttackBy Google Threat Intelligence Group • 16-minute read

Threat IntelligenceNorth Korea-Nexus Threat Actor Compromises Widely Used Axios NPM Package in Supply Chain AttackBy Goo

历史摘要 · 未重新核验 · Mandiant

威胁情报2026-05-11 发布INFO

Threat IntelligenceRansomware Under Pressure: Tactics, Techniques, and Procedures in a Shifting Threat LandscapeBy Google Threat Intelligence Group • 53-minute read

Threat IntelligenceRansomware Under Pressure: Tactics, Techniques, and Procedures in a Shifting Threat LandscapeBy Googl

历史摘要 · 未重新核验 · Mandiant

威胁情报2026-05-11 发布INFO

Google Cloud Products

Google Cloud Products

历史摘要 · 未重新核验 · Mandiant

威胁情报2026-05-11 发布INFO

Cloud & Application Security

Cloud & Application Security

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-05-11 发布INFO

From Scanner to Stealer: Inside the trivy-action Supply Chain Compromise

From Scanner to Stealer: Inside the trivy-action Supply Chain Compromise

历史摘要 · 未重新核验 · CrowdStrike