2026-06-30 归档

今日共收录 1015 条安全情报,包含 254 个 CVE,381 篇安全通告,以及 97 篇研究论文。

← 返回归档列表
威胁情报2026-06-30 发布INFO

[原创]JS 盾(JS DUN PROTECT)加固小记

[原创]JS 盾(JS DUN PROTECT)加固小记

历史摘要 · 未重新核验 · 看雪

威胁情报2026-06-30 发布INFO

ISC Stormcast For Tuesday, June 30th, 2026 https://isc.sans.edu/podcastdetail/9988, (Tue, Jun 30th)

ISC Stormcast For Tuesday, June 30th, 2026 https://isc.sans.edu/podcastdetail/9988, (Tue, Jun 30th)

历史摘要 · 未重新核验 · SANS ISC

威胁情报2026-06-29 发布INFO

Adding some Automation to the favicon.ico method of Host Recon, (Mon, Jun 29th)

I&#;x26;#;39;m in the throes of target host recon for another pentest, and thought I&#;x26;#;39;d share some workflow /

历史摘要 · 未重新核验 · SANS ISC

威胁情报2026-06-30 发布INFO

Malicious Perplexity Chrome Extension Intercepted Searches and Address Bar Input

Microsoft has found a malicious Chrome extension that posed as the AI search engine Perplexity and quietly logged what p

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-06-29 发布INFO

WhatsApp is Finally Getting Usernames to Help Keep Phone Numbers Private

WhatsApp on Monday officially announced the start of global reservations of usernames with an aim to protect the privacy

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-06-29 发布INFO

⚡ Weekly Recap: Linux Kernel Flaws, AI Malware Tricks, Turla Backdoor, Infostealers and More

This week was a reminder that attackers do not always need big tricks. One small mistake, one old access path, one misse

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-06-29 发布INFO

Hijacked npm and Go Packages Use VS Code Tasks to Deploy Python Infostealer

Cybersecurity researchers have uncovered two hijacked npm packages and a cluster of Go packages that are designed to dep

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-06-29 发布INFO

WhatsApp Rolling Out Username Feature to Bolster Phone Number Privacy

An optional ‘username key’ adds another layer by requiring a secondary credential before someone can message users. The

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-06-29 发布INFO

Researchers Demo New Claude Code Attack Using Harmless-Looking Repositories to Hijack Developer Machines

Indirect prompts hidden in a repository can lead to Claude Code spawning a reverse shell on the developer’s machine. The

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-06-29 发布INFO

Straiker Raises $64 Million for AI Security Platform

The startup’s platform can identify AI agents and provide visibility into their access, behavior, and risks. The post St

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-06-29 发布INFO

Insurance Regulators Group NAIC Hit in Oracle PeopleSoft Hack

The ShinyHunters extortion group claims to have stolen 3.1 TB of data from the organization. The post Insurance Regulato

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-06-29 发布INFO

‘DirtyClone’ Linux Kernel Vulnerability Leads to Root Access

A variant of DirtyFrag, the flaw allows unprivileged local users to manipulate the Linux page cache and gain root privil

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-06-29 发布INFO

OpenAI and Anthropic Limit New AI Models to Trump-Approved Customers During Cybersecurity Review

ChatGPT maker OpenAI said Friday it is restricting the release of its new artificial intelligence model at the request o

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-06-29 发布INFO

US Offers $10 Million Bounty for Russian State Hackers as Messaging App Attacks Evolve

UNC5792 and UNC4221 have been targeting US government officials, military leaders, and allied personnel. The post US Off

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-06-29 发布INFO

OpenAI Unveils GPT-5.6 Sol as Its Most Advanced Cybersecurity AI

The company says Sol matches competing systems like Mythos Preview while using only a third of the output tokens. The po

历史摘要 · 未重新核验 · SecurityWeek