2026-06-20 归档

今日共收录 996 条安全情报,包含 203 个 CVE,413 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
威胁情报2026-06-19 发布INFO

[转帖]JEB Decompiler 5.41.0.202606020456 mod by CXV

[转帖]JEB Decompiler 5.41.0.202606020456 mod by CXV

历史摘要 · 未重新核验 · 看雪

威胁情报2026-06-19 发布INFO

[转帖]IDM UltraFinder Enterprise 2024.0.0.16

[转帖]IDM UltraFinder Enterprise 2024.0.0.16

历史摘要 · 未重新核验 · 看雪

威胁情报2026-06-19 发布INFO

[原创]微信4.0 hook,三端(mac,windows,安卓)都可用的可行性方案,附带frida脚本

[原创]微信4.0 hook,三端(mac,windows,安卓)都可用的可行性方案,附带frida脚本

历史摘要 · 未重新核验 · 看雪

威胁情报2026-06-20 发布INFO

[原创]Android壳so/Frida检测so多线程定位大法--军书十二卷卷卷有爷名

[原创]Android壳so/Frida检测so多线程定位大法--军书十二卷卷卷有爷名

历史摘要 · 未重新核验 · 看雪

威胁情报2026-06-18 发布INFO

Close Encounters of the Human Kind

In the latest Threat Source, Hazel channels her inner Spielberg to explore why humans are delightfully irrational, remin

历史摘要 · 未重新核验 · Cisco Talos

威胁情报2026-06-19 发布INFO

Lost in relocation: analysis of a new loader distributing CASTLESTEALER

Find out how a new obfuscated loader evades static detection using .reloc section abuse, five anti-VM/language checks an

历史摘要 · 未重新核验 · Elastic Security Labs

威胁情报2026-06-20 发布INFO

[下载]CTF那些事儿配套资源下载

[下载]CTF那些事儿配套资源下载

历史摘要 · 未重新核验 · 看雪

威胁情报2026-06-20 发布INFO

[原创]个人整理的安卓逆向与安全分析思维导图(持续完善中)

[原创]个人整理的安卓逆向与安全分析思维导图(持续完善中)

历史摘要 · 未重新核验 · 看雪

威胁情报2026-06-19 发布INFO

Azure AD Graph Activity Logs: Ingestion and threat detection to close the visibility gap

Azure AD Graph Activity Logs land in Elastic with full ECS parsing. Detect ROADrecon and AADInternals enumeration with r

历史摘要 · 未重新核验 · Elastic Security Labs

威胁情报2026-06-19 发布INFO

eBanking Phishing Delivered Through IPv4-Mapped IPv6 Address, (Fri, Jun 19th)

I detected an interesting phishing email this morning. It targets a major Belgian bank:

历史摘要 · 未重新核验 · SANS ISC

威胁情报2026-06-20 发布INFO

Unpatchable 'usbliter8' Exploit Breaks Apple A12 and A13 SecureROM Boot Chain

Security researchers at Paradigm Shift have published a working exploit, dubbed usbliter8, that achieves arbitrary code

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-06-19 发布INFO

AutoJack Attack Lets One Web Page Hijack AI Agent for Host Code Execution

Microsoft researchers have detailed an exploit chain, named AutoJack, that turns an AI browsing agent into a delivery ve

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-06-19 发布INFO

From Assistive to Agentic: The AI Shift That's Redefining Threat Management

Introduction The average enterprise security team has 40 or more security tools, giving a lot of visibility into intern

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-06-19 发布INFO

Forget Data Leakage: Shadow AI's Real Threat Is Access Control

The first wave of enterprise AI concern was straightforward. It was simply employees pasting sensitive data into public

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-06-19 发布INFO

CryptoBandits Malware Doubles as a Backdoor, Abuses Tor

CryptoBandits uses a local SOCKS5 proxy for traffic routing, blending data theft with remote code execution. The post Cr

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-06-19 发布INFO

15,000 WordPress Websites Cleaned Up in SocGholish Botnet Takedown

Law enforcement and private partners took down 106 SocGholish C&C servers and domains as part of Operation Endgame. The

历史摘要 · 未重新核验 · SecurityWeek