2026-06-08 归档

今日共收录 689 条安全情报,包含 45 个 CVE,322 篇安全通告,以及 73 篇研究论文。

← 返回归档列表
漏洞预警2026-06-08 发布CRITICAL

WordPress Theme Travelscape 1.0.3 contains an arbitrary file upload vulnerability that allows unauthenticated attackers to upload malicious files by exploiting insufficient vali...

CVE-2024-58349

WordPress 主题 Travelscape 1.0.3 存在任意文件上传漏洞(CVE-2024-58349)。该漏洞源于主题的上传功能对上传文件类型验证不足,未经身份验证的攻击者可通过向主题目录上传恶意文件(如 PHP WebShel

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-08 发布CRITICAL

WordPress Background Image Cropper version 1.2 contains a remote code execution vulnerability that allows unauthenticated attackers to upload arbitrary files by accessing the up...

CVE-2024-58348

CVE-2024-58348 是一个影响 WordPress Background Image Cropper 插件 1.2 版本的严重远程代码执行漏洞。该漏洞位于插件中的 ups.php 端点,未经身份验证的攻击者可以通过该端点的文件上传

历史摘要 · 未重新核验 · NVD

威胁情报2026-06-08 发布INFO

CrowdStrike Named a Leader in Frost & Sullivan 2026 Radar for Cloud-Native Application Protection Platforms

CrowdStrike Named a Leader in Frost & Sullivan 2026 Radar for Cloud-Native Application Protection Platforms

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-06-08 发布INFO

CrowdStrike Expands Real-Time Cloud Detection and Response to Google Cloud

CrowdStrike Expands Real-Time Cloud Detection and Response to Google Cloud

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-06-08 发布INFO

CrowdStrike Falcon Cloud Security Delivered 264% ROI Through Unified Cloud Protection

CrowdStrike Falcon Cloud Security Delivered 264% ROI Through Unified Cloud Protection

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-06-08 发布INFO

Security & Identity

Security & Identity

历史摘要 · 未重新核验 · Mandiant

威胁情报2026-06-08 发布INFO

SAP on Google Cloud

SAP on Google Cloud

历史摘要 · 未重新核验 · Mandiant

威胁情报2026-06-08 发布INFO

Inside Google Cloud

Inside Google Cloud

历史摘要 · 未重新核验 · Mandiant

威胁情报2026-06-08 发布INFO

Google Cloud Next & Events

Google Cloud Next & Events

历史摘要 · 未重新核验 · Mandiant

威胁情报2026-06-08 发布INFO

Google Cloud Consulting

Google Cloud Consulting

历史摘要 · 未重新核验 · Mandiant

威胁情报2026-06-08 发布INFO

Transform with Google Cloud

Transform with Google Cloud

历史摘要 · 未重新核验 · Mandiant

威胁情报2026-06-08 发布INFO

Threat IntelligenceNorth Korea-Nexus Threat Actor Compromises Widely Used Axios NPM Package in Supply Chain AttackBy Google Threat Intelligence Group • 16-minute read

Threat IntelligenceNorth Korea-Nexus Threat Actor Compromises Widely Used Axios NPM Package in Supply Chain AttackBy Goo

历史摘要 · 未重新核验 · Mandiant

威胁情报2026-06-08 发布INFO

Google Cloud Products

Google Cloud Products

历史摘要 · 未重新核验 · Mandiant

威胁情报2026-06-08 发布INFO

Cloud & Application Security

Cloud & Application Security

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-06-08 发布INFO

From Scanner to Stealer: Inside the trivy-action Supply Chain Compromise

From Scanner to Stealer: Inside the trivy-action Supply Chain Compromise

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-06-08 发布INFO

Next-Gen Identity Security

Next-Gen Identity Security

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-06-08 发布INFO

CrowdStrike FalconID Brings Phishing-Resistant MFA to Falcon Next-Gen Identity Security

CrowdStrike FalconID Brings Phishing-Resistant MFA to Falcon Next-Gen Identity Security

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-06-08 发布INFO

CrowdStrike Named a Leader in Identity Threat Detection and Response

CrowdStrike Named a Leader in Identity Threat Detection and Response

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-06-08 发布INFO

ISO 42001:2023 and the New Reality of Cloud AI Data RiskJun 04, 2026

ISO 42001:2023 and the New Reality of Cloud AI Data RiskJun 04, 2026

历史摘要 · 未重新核验 · CrowdStrike

学术论文2026-06-08 发布INFO

"It's Time. Time for Digital Security.": An End User Study on Actionable Security and Privacy Advice.

该论文通过一项终端用户研究,探讨了可执行的安全与隐私建议的有效性。研究招募了参与者,测试了不同形式的建议(如具体步骤、可视化指南等)对用户实际行为的影响。结果表明,提供具体、可操作的步骤能显著提升用户遵循建议的意愿和能力,而过于技术化的语言

历史摘要 · 未重新核验 · IEEE S&P