安全日报 - 2026-06-12 - Cyber Security Daily Radar

漏洞预警2026-06-12 发布CRITICAL

Argument injection vulnerability in WordPress Toolkit before 6.11.0 as used in cPanel & WHM, allows remote authenticated users to bypass cross-tenant authorization and execute a...

CVE-2026-47365

CVE-2026-47365 是 cPanel & WHM 中 WordPress Toolkit 组件（版本 < 6.11.0）存在的一个参数注入漏洞。该漏洞允许远程认证用户通过注入特制参数，绕过跨租户授权限制，以其他账户的身份执行任意

历史摘要 · 未重新核验 · NVD

#cve #cwe-88

威胁情报2026-06-12 发布INFO

CrowdStrike Named a Leader in Frost & Sullivan 2026 Radar for Cloud-Native Application Protection Platforms

历史摘要 · 未重新核验 · CrowdStrike

#crowdstrike #apt #edr

威胁情报2026-06-12 发布INFO

CrowdStrike Expands Real-Time Cloud Detection and Response to Google Cloud

历史摘要 · 未重新核验 · CrowdStrike

#crowdstrike #apt #edr

威胁情报2026-06-12 发布INFO

Security & Identity

历史摘要 · 未重新核验 · Mandiant

#report #apt #mandiant

威胁情报2026-06-12 发布INFO

SAP on Google Cloud

历史摘要 · 未重新核验 · Mandiant

#report #apt #mandiant

威胁情报2026-06-12 发布INFO

Inside Google Cloud

历史摘要 · 未重新核验 · Mandiant

#report #apt #mandiant

威胁情报2026-06-12 发布INFO

Google Cloud Next & Events

历史摘要 · 未重新核验 · Mandiant

#report #apt #mandiant

威胁情报2026-06-12 发布INFO

Google Cloud Consulting

历史摘要 · 未重新核验 · Mandiant

#report #apt #mandiant

威胁情报2026-06-12 发布INFO

Transform with Google Cloud

历史摘要 · 未重新核验 · Mandiant

#report #apt #mandiant

威胁情报2026-06-12 发布INFO

Threat IntelligenceNorth Korea-Nexus Threat Actor Compromises Widely Used Axios NPM Package in Supply Chain AttackBy Google Threat Intelligence Group • 16-minute read

Threat IntelligenceNorth Korea-Nexus Threat Actor Compromises Widely Used Axios NPM Package in Supply Chain AttackBy Goo

历史摘要 · 未重新核验 · Mandiant

#report #apt #mandiant

威胁情报2026-06-12 发布INFO

Google Cloud Products

历史摘要 · 未重新核验 · Mandiant

#report #apt #mandiant

威胁情报2026-06-12 发布INFO

Cloud & Application Security

历史摘要 · 未重新核验 · CrowdStrike

#crowdstrike #apt #edr

威胁情报2026-06-12 发布INFO

From Scanner to Stealer: Inside the trivy-action Supply Chain Compromise

历史摘要 · 未重新核验 · CrowdStrike

#crowdstrike #apt #edr

威胁情报2026-06-12 发布INFO

Next-Gen Identity Security

历史摘要 · 未重新核验 · CrowdStrike

#crowdstrike #apt #edr

威胁情报2026-06-12 发布INFO

CrowdStrike Named a Leader in Identity Threat Detection and Response

历史摘要 · 未重新核验 · CrowdStrike

#crowdstrike #apt #edr

威胁情报2026-06-11 发布INFO

Trust No Skill: Integrity Verification for AI Agent Supply Chains

Protect enterprise AI agents from supply chain risks by auditing third-party skills for hidden vulnerabilities and multi

历史摘要 · 未重新核验 · Palo Alto Unit 42

#unit42 #malware #paloalto #apt

威胁情报2026-06-12 发布INFO

CrowdStrike Named an Innovation and Growth Leader in the 2026 Frost Radar™: Cloud and Application Runtime Security

历史摘要 · 未重新核验 · CrowdStrike

#crowdstrike #apt #edr

威胁情报2026-06-12 发布INFO

CrowdStrike Expands Identity Leadership with OpenID and IDPro

历史摘要 · 未重新核验 · CrowdStrike

#crowdstrike #apt #edr

学术论文2026-06-12 发布HIGH

Discovering Blind-Trust Vulnerabilities in PLC Binaries via State Machine Recovery.

本文提出了一种通过状态机恢复技术发现可编程逻辑控制器（PLC）二进制程序中盲目信任漏洞的方法。PLC广泛应用于工业控制系统，其固件中常存在对输入数据缺乏充分校验的逻辑缺陷，导致攻击者可以通过精心构造的输入触发异常行为。现有静态分析工具难以有

历史摘要 · 未重新核验 · NDSS

#plc #ics #vulnerability-discovery #state-machine

学术论文2026-06-12 发布INFO

Phishpedia: A Hybrid Deep Learning Based Approach to Visually Identify Phishing Webpages.

Phishpedia 是一种基于混合深度学习的方法，用于视觉上识别钓鱼网页。传统钓鱼检测通常只输出二分类结果（钓鱼或正常），缺乏解释性；而钓鱼识别方法通过将网页与预定义的合法参考进行视觉对比，能同时报告钓鱼结果及其仿冒的目标品牌，从而提供可

历史摘要 · 未重新核验 · USENIX Security

#phishing #deep learning #visual identification #logo recognition #brand protection #phishpedia

2026-06-12 归档