2026-07-25 归档

今日共收录 771 条安全情报,包含 0 个 CVE,408 篇安全通告,以及 82 篇研究论文。

← 返回归档列表
威胁情报2026-07-24 发布INFO

BlueNoroff Zoom Phishing Kit Profiles Crypto Wallets Before Malware Delivery

The North Korean threat actors behind the ClickFix-style campaigns that employ typosquatted Zoom and Microsoft Teams dom

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-07-24 发布INFO

Certighost Exploit Lets Low-Privileged Active Directory Users Impersonate a Domain Controller

Researchers H0j3n and Aniq Fakhrul published a working exploit on July 24 that lets a low-privileged Active Directory us

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-07-24 发布INFO

ChatGPT AgentForger Flaw Could Deploy Rogue Workspace Agents via a Phishing Link

Cybersecurity researchers have disclosed a critical vulnerability in OpenAI's ChatGPT Workspace Agents that could have a

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-07-24 发布INFO

Hacker Runs Hermes AI Agent Unattended for Post-Exploitation at Thai Finance Ministry

Someone installed a popular AI assistant on a rented server, switched off the setting that makes it ask permission befor

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-07-24 发布INFO

Golden Chickens Resurfaces With Four New Malware Families and Modular Implants

The threat actors behind the Golden Chickens malware-as-a-service (MaaS) ecosystem have resurfaced with four new malware

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-07-24 发布INFO

NodeBB Patches Eight AI-Found Flaws Exposing Admin Access and Private Chats

Eight security flaws in NodeBB went public on Wednesday, along with the code to exploit them. Aikido Security rates all

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-07-24 发布INFO

Kimi K3 Agents Found Redis Zero-Days and Built RCE Exploit, Researchers Say

Redis shipped seven security releases on July 23 after researchers published authenticated RCE PoCs for stock Redis 6.2.

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-07-24 发布INFO

Fake Notepad++ Plugin Delivers MATCHBOIL.V2 in UAC-0099 Attacks

The Computer Emergency Response Team of Ukraine (CERT-UA) has warned of a new campaign that involves the use of a malici

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-07-24 发布INFO

AegisAI Raises $36 Million for AI-Powered Email Security

The company has raised a total of $49 million in funding, including from Battery Ventures, Accel and Foundation Capital.

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-07-24 发布INFO

Industry Reactions to OpenAI Models Hacking Hugging Face: Feedback Friday

Industry professionals debate whether it represents a lab containment failure or an unprecedented agentic capability mil

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-07-24 发布INFO

Data Breach Confirmed After Australian Energy Giant Origin Is Hacked

A hacker claims to have stolen the information of 2 million Origin Energy customers and is threatening to leak it.  The

历史摘要 · 未重新核验 · SecurityWeek