Inside CrowdStrike Automated Leads: A Transformative Approach to Threat Detections
Inside CrowdStrike Automated Leads: A Transformative Approach to Threat Detections
2026-05-18 归档
今日共收录 756 条安全情报，包含 66 个 CVE，383 篇安全通告，以及 20 篇研究论文。
← 返回归档列表May 2026 Patch Tuesday: 30 Critical Vulnerabilities Among 130 CVEsMay 12, 2026
May 2026 Patch Tuesday: 30 Critical Vulnerabilities Among 130 CVEsMay 12, 2026
Falcon AIDR Detects Threats at the Prompt Layer in Kubernetes AI Applications
Falcon AIDR Detects Threats at the Prompt Layer in Kubernetes AI Applications
Threat IntelligenceWelcome to BlackFile: Inside a Vishing Extortion OperationBy Google Threat Intelligence Group • 16-minute read
Threat IntelligenceWelcome to BlackFile: Inside a Vishing Extortion OperationBy Google Threat Intelligence Group • 16-m
Now Live: The CrowdStrike 2026 Financial Services Threat Landscape Report
Now Live: The CrowdStrike 2026 Financial Services Threat Landscape Report
Hackers earn $1,298,250 for 47 zero-days at Pwn2Own Berlin 2026
The Pwn2Own Berlin 2026 hacking contest has concluded, with security researchers collecting $1,298,250 in rewards after
New Windows 'MiniPlasma' zero-day exploit gives SYSTEM access, PoC released
A cybersecurity researcher has released a proof-of-concept exploit for a Windows privilege escalation zero-day dubbed "M
Tycoon2FA hijacks Microsoft 365 accounts via device-code phishing
The Tycoon2FA phishing kit now supports device-code phishing attacks and abuses Trustifi click-tracking URLs to hijack M
Exploit available for new DirtyDecrypt Linux root escalation flaw
A recently patched local privilege escalation vulnerability in the Linux kernel's rxgk module now has a proof-of-concept
Microsoft testing adjustable taskbar, Start menu in Windows 11
Microsoft has finally brought back the resizable taskbar and Start menu to Windows 11 in the latest preview version roll
Microsoft confirms Windows 11 security update install issues
Microsoft has confirmed that the May 2026 Windows 11 security update (KB5089549) fails to install on some systems and tr
MiniPlasma Windows 0-Day Enables SYSTEM Privilege Escalation on Fully Patched Systems
Chaotic Eclipse, the security researcher behind the recently disclosed Windows flaws, YellowKey and GreenPlasma, has rel
Graphite Has a Pickle Deserialization Vulnerability
### Impact **Type of vulnerability:** Insecure Deserialization via Python's `pickle` module. **Who is impacted:** Use
iskorotkov/avro: Denial-of-Service Vulnerability in Decoder
# Memory Exhaustion via Unbounded Map Allocations in Avro Decoder ## Summary The Avro map decoder accepted attacker-co
[分享]IDA Pro 9.3汉化补丁与破解注册机
[分享]IDA Pro 9.3汉化补丁与破解注册机
[推荐][首发]FileLocator Pro 9.3.3535.1(x64/x86)便携版补丁
[推荐][首发]FileLocator Pro 9.3.3535.1(x64/x86)便携版补丁
Apache Camel JMS 反序列化(CVE-2026-40860)漏洞分析
CVE-2026-40860
Apache Camel JMS 反序列化(CVE-2026-40860)漏洞分析
[原创]从POC到EXP：从0基础到v8 CVE-2021-38003复现
CVE-2021-38003
[原创]从POC到EXP：从0基础到v8 CVE-2021-38003复现
NGINX CVE-2026-42945 Exploited in the Wild, Causing Worker Crashes and Possible RCE
CVE-2026-42945
A newly disclosed security flaw impacting NGINX Plus and NGINX Open has come under active exploitation in the wild, days
Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13 fail to validate the Host header when constructing response URLs for custom slash commands which allows an authenticate...
CVE-2026-6333
CVE-2026-6333 是 Mattermost 的一个低危漏洞，影响版本 11.5.x 至 11.5.1 以及 10.11.x 至 10.11.13。该漏洞源于 Mattermost 在处理自定义斜杠命令时，未正确验证 Host 头，