2026-05-20 归档

今日共收录 1110 条安全情报,包含 284 个 CVE,411 篇安全通告,以及 113 篇研究论文。

← 返回归档列表
威胁情报2026-05-19 发布INFO

Trapdoor Android Ad Fraud Scheme Hit 659 Million Daily Bid Requests Using 455 Apps

Cybersecurity researchers have disclosed details of a new ad fraud and malvertising operation dubbed Trapdoor targeting

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-05-19 发布INFO

The New Phishing Click: How OAuth Consent Bypasses MFA

In February 2026, a phishing-as-a-service (PhaaS) platform called EvilTokens went live. Within five weeks, it had compro

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-05-19 发布INFO

Drupal to Release Urgent Core Security Updates on May 20, Sites Told to Prepare

Drupal has issued an alert stating that it intends to release a "core security release" for all supported branches on Ma

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-05-19 发布INFO

Compromised Nx Console 18.95.0 Targeted VS Code Developers with Credential Stealer

Cybersecurity researchers have flagged a compromised version of the Nx Console extension that was published to the Micro

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-05-19 发布INFO

Drupal to Patch Highly Critical Vulnerability at Risk of Quick Exploitation

Drupal says attackers may develop an exploit for the vulnerability within hours or days. The post Drupal to Patch Highly

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-05-19 发布INFO

Legacy Windows Tool MSHTA Fuels Surge in Silent Malware Attacks

Attackers are increasingly abusing Microsoft’s decades-old MSHTA utility to stealthily deliver stealers, loaders, and pe

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-05-19 发布INFO

Unpatched ChromaDB Vulnerability Can Lead to Server Takeover

The security defect can be exploited remotely, without authentication, to execute arbitrary code and leak sensitive info

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-05-19 发布INFO

B1ack’s Stash Marketplace Gives Away 4.6 Million Stolen Credit Cards

The stolen credit card data was released as a free download, allegedly in response to seller misconduct. The post B1ack’

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-05-19 发布INFO

201 Arrested in Crackdown on Cybercrime in Middle East, North Africa

The 13-country effort, named Operation Ramz, targeted cyber threats in the Middle East and North Africa region. The post

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-05-19 发布INFO

PoC Released for DirtyDecrypt Linux Kernel Vulnerability

Patched in April, the underlying vulnerability allows local attackers to elevate their privileges to root. The post PoC

历史摘要 · 未重新核验 · SecurityWeek