今日共收录 1422 条安全情报，包含 546 个 CVE，469 篇安全通告，以及 113 篇研究论文。
← 返回归档列表CVE-2026-60369
CVE-2026-60369 是 Oracle Fusion Middleware 中 Oracle Platform Security for Java 产品的一个高危漏洞，影响版本 12.2.1.4.0 和 14.1.2.0.0。该漏洞
CVE-2026-60367
CVE-2026-60367 是 Oracle Fusion Middleware 中 Oracle Platform Security for Java 产品的一个严重漏洞，影响版本 12.2.1.4.0 和 14.1.2.0.0。漏洞位
CVE-2026-60366
该漏洞存在于 Oracle Fusion Middleware 的 Oracle Platform Security for Java 产品中，具体位于 Centralized Thirdparty Jars 组件。受影响版本包括 12.2
Cloud & Application Security
From Scanner to Stealer: Inside the trivy-action Supply Chain Compromise
Next-Gen Identity Security
CrowdStrike Named an Innovation and Growth Leader in the 2026 Frost Radar™: Cloud and Application Runtime Security
CrowdStrike Expands Identity Leadership with OpenID and IDPro
cloud architecture assessment
ransomware and multifaceted extortion defense
Google Cloud Next 2026Catch-up sessions on the keynotes and select sessions are now available on demand.Explore content
The Identity Problem Hiding in AI Agent Deployments
94% of Organizations Report Cloud Breaches: CrowdStrike State of CDR Survey
Falcon Cloud Security June 2026 Release: Updates for Azure and Google Cloud
Denying the Worm: Detecting SANDWORM_MODE and the Emerging Class of AI Toolchain Supply Chain AttacksJul 21, 2026
Enterprise AI can accelerate ransomware attacks when AI assistants and agents inherit excessive permissions or compromis
Cloud storage costs tend to creep up over time, since most services charge monthly or annually for as long as you use th
The cycle is over. For years, cybersecurity followed a familiar pattern: defenses improved, attackers adapted, and the b
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerg
本文研究了针对密码管理器的注入攻击。攻击者仅控制自己的应用客户端，通过共享凭证等方式向受害者客户端“注入”精心构造的载荷，并与对某种受保护状态（如加密的保险库导出文件或应用服务器收到的网络流量）的观察交错进行，从而从中推断出机密信息。作者在