‘First VPN’ Cybercrime Service Disrupted, Administrator Arrested
2026年5月22日，美国联邦调查局（FBI）宣布捣毁了名为“First VPN”的网络犯罪服务，并逮捕了其管理员。First VPN是一个专门为网络犯罪分子提供虚拟专用网络（VPN）服务的平台，被至少数十个勒索软件组织用于进行网络侦察和入
2026-05-23 归档
今日共收录 869 条安全情报，包含 93 个 CVE，394 篇安全通告，以及 104 篇研究论文。
← 返回归档列表Ivanti Endpoint Manager Mobile代码注入漏洞
该漏洞影响Ivanti Endpoint Manager Mobile，属于代码注入类型。攻击者可能通过向受影响组件提交特制请求，注入恶意代码并执行，从而导致远程代码执行或敏感信息泄露。目前漏洞具体成因、攻击向量及利用难度等细节尚未公开。建
Yokogawa YFGW410 gateway
知道创宇 Seebug 发布了关于 Yokogawa YFGW410 网关的安全公告。YFGW410 是横河电机（Yokogawa）的工业无线现场网络网关，用于工业自动化环境。该公告指出存在安全漏洞，但未提供具体技术细节、CVE 编号或严重
BoxLite: Permission Bypass Allows Modification of Read-Only Files
CVE-2026-46695
#### Summary Boxlite is a sandbox service that allows users to create lightweight virtual machines (Boxes) and launch O
From edge appliance to enterprise compromise: Multi-stage Linux intrusion via F5 and Confluence
微软威胁情报团队报告了一起针对Linux环境的多阶段入侵攻击事件。攻击始于一台暴露在公网的F5 BIG-IP边缘设备，该设备被作为初始访问入口。攻击者利用该设备作为跳板，通过内网横向移动至Confluence服务器，并试图窃取凭证和破坏身份
First VPN Dismantled in Global Takedown Over Use by 25 Ransomware Groups
2026年5月22日，欧洲和北美执法机构联合宣布成功捣毁首个专门为网络犯罪团伙提供匿名通信服务的虚拟专用网络（VPN）——First VPN Service。该VPN被至少25个勒索软件团伙广泛使用，用于隐藏勒索软件攻击、数据窃取、扫描和分
Silence False Alarms: Identifying Anti-Reentrancy Patterns on Ethereum to Refine Smart Contract Reentrancy Detection.
以太坊智能合约的重入漏洞曾导致重大经济损失，为此社区开发了多种自动化重入检测器。然而，这些检测器由于检测规则粗糙，频繁产生大量误报，常将受抗重入模式保护的合约误判为存在漏洞。因此，迫切需要开发专门的自动化工具来辅助检测器准确识别抗重入模式。
Citrix NetScaler 内存泄漏(CVE-2025-5777)
CVE-2025-5777
Citrix NetScaler（现更名为 Citrix ADC）是一款广泛使用的应用交付控制器和负载均衡器。该设备存在内存泄漏漏洞（CVE-2025-5777），攻击者可以通过发送特制的网络请求触发该漏洞，导致 NetScaler 设备的
Chromium: CVE-2026-9123 Heap buffer overflow in Chromecast
CVE-2026-9123 · CVE-2026-9124
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-9122 Out of bounds read in GPU
CVE-2026-9123 · CVE-2026-9122
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-9121 Out of bounds read in GPU
CVE-2026-9122 · CVE-2026-9121
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-9126 Use after free in DOM
CVE-2026-9126 · CVE-2026-9121
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-9124 Insufficient validation of untrusted input in Input
CVE-2026-9126 · CVE-2026-9124
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-9120 Use after free in WebRTC
CVE-2026-9120
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-9119 Heap buffer overflow in WebRTC
CVE-2026-9119
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-9118 Use after free in XR
CVE-2026-9118
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-9117 Type Confusion in GFX
CVE-2026-9117
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-9116 Insufficient policy enforcement in ServiceWorker
CVE-2026-9116
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-9115 Insufficient policy enforcement in Service Worker
CVE-2026-9115
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-9114 Use after free in QUIC
CVE-2026-9114
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.