2026-07-17 归档

今日共收录 1302 条安全情报,包含 372 个 CVE,507 篇安全通告,以及 120 篇研究论文。

← 返回归档列表
威胁情报2026-07-17 发布INFO

[原创]facebook ios ssl pinning bypass最新版

[原创]facebook ios ssl pinning bypass最新版

历史摘要 · 未重新核验 · 看雪

威胁情报2026-07-16 发布INFO

Begun, the Patch Wars have

Long foretold, the Great Patching has begun and it’s a doozy. Buckle in as Joe takes you through the story.

历史摘要 · 未重新核验 · Cisco Talos

威胁情报2026-07-16 发布INFO

The Hunter's Paradox: Is it time to embrace automated threat hunting?

Humans can no longer keep up with the volume and velocity of security data on their own, but AI can't be fully trusted.

历史摘要 · 未重新核验 · Cisco Talos

威胁情报2026-07-16 发布INFO

UAT-11795 deploys novel Starland RAT and bespoke WLDR C2 implant in financially motivated campaign

Cisco Talos is disclosing UAT-11795, a sophisticated, Russian-speaking, financially motivated adversary that has been co

历史摘要 · 未重新核验 · Cisco Talos

威胁情报2026-07-17 发布INFO

ISC Stormcast For Friday, July 17th, 2026 https://isc.sans.edu/podcastdetail/10012, (Fri, Jul 17th)

ISC Stormcast For Friday, July 17th, 2026 https://isc.sans.edu/podcastdetail/10012, (Fri, Jul 17th)

历史摘要 · 未重新核验 · SANS ISC

威胁情报2026-07-16 发布INFO

Two Scattered Spider Hackers Get 5.5 Years Each for £29 Million TfL Hack

Owen Flowers, 18, and Thalha Jubair, 20, were each sentenced to five and a half years at Woolwich Crown Court on Thursda

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-07-16 发布INFO

New TELEPUZ Malware Spreads via ClickFix to Steal Data and Run Commands

Cybersecurity researchers have called attention to a new modular malware called TELEPUZ that's been spreading via websit

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-07-16 发布INFO

New ClickLock macOS Stealer Kills Apps Every 210ms Until Victims Type Their Password

ClickLock Stealer, a new macOS infostealer, answers a victim's refusal by killing their apps on a loop until they hand o

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-07-16 发布INFO

20+ Hijacked Government Websites Became
an Attack Channel

More than 20 Brazilian government websites were hijacked and turned into malware delivery channels in an active PhantomE

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-07-16 发布INFO

New Agent Data Injection Attack Can Make AI Agents Misclick or Run Attacker Commands

Ask an AI agent to summarize the reviews on a product page, and a single planted review can make it click "Buy Now" inst

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-07-16 发布INFO

Daxin Resurfaces in Taiwan Alongside Stupig Pre-Login SYSTEM Backdoor

An advanced malware previously attributed to a China-linked threat actor has resurfaced after more than four years withi

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-07-16 发布INFO

Unpatched Shark Vacuum Flaw Could Let Attackers Control Other Vacuums Region-Wide

Pull the certificate off the flash of a Shark RV2320EDUS robot vacuum, and you can run root commands on other people's S

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-07-16 发布INFO

OpenAI’s GPT-Red Automates Prompt Injection Testing to Harden GPT-5.6 Sol

OpenAI has disclosed details of GPT-Red, an internal automated red-teaming model that scales prompt injection vulnerabil

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-07-16 发布INFO

Legacy Systems, Real-World Impacts: The Reality of OT Security

Legacy systems, safety concerns, and critical infrastructure risks make OT vulnerability disclosure one of cybersecurity

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-07-16 发布INFO

Two Scattered Spider Hackers Sentenced to Jail in UK

Thalha Jubair and Owen Flowers were prosecuted over a 2024 cyberattack targeting Transport for London (TfL). The post Tw

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-07-16 发布INFO

AI Data Centers Are Being Built Faster Than They Can Be Secured

AI infrastructure introduces new security risks that traditional data center designs were never built to handle. The pos

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-07-16 发布INFO

‘ClickLock Stealer’ Bypasses macOS Security With Social Engineering, Process Killing

The new macOS malware has targeted at least 100 users to steal their passwords and cryptocurrency.  The post ‘ClickLock

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-07-16 发布INFO

Splunk, Zoom Patch Critical Vulnerabilities

The flaws could allow attackers to access credentials and data, take over accounts, and escalate their privileges. The p

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-07-16 发布INFO

F5 Patches Multiple NGINX, BIG-IP Vulnerabilities

Attackers could exploit the bugs to modify configurations, terminate or restart processes, cross security boundaries, le

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-07-16 发布INFO

China’s Top Cybersecurity Firms Hit by Mounting Military Procurement Bans

Chinese cybersecurity firms are facing action from the country’s military, but it’s not due to product or technical fail

历史摘要 · 未重新核验 · SecurityWeek