Chinese-Made Zbtlink Routers Ship With Backdoor That Opens Unauthenticated Root Shells
Cybersecurity researchers have disclosed details of a "factory-shipped backdoor" implanted in at least 20 Chinese router
2026-08-07 归档
今日共收录 1483 条安全情报，包含 647 个 CVE，430 篇安全通告，以及 120 篇研究论文。
← 返回归档列表S12X Patch Diffing with QBinDiff
本文针对商用车制动ECU（电子控制单元）的固件更新进行了逆向工程分析。作者首先分析更新可执行文件以提取固件镜像，然后对基于S12X架构的固件执行差分二进制比较（使用QBinDiff工具）。研究识别出在召回（safety recall）中针对
A Survey of Adversarial Efficiency Degradation for Vision Transformer by Exploiting Input-adaptive Optimization
本文是一篇关于针对视觉Transformer（ViT）的对抗性效率降低攻击的综述。随着ViT在边缘设备上部署，为了满足能耗和延迟预算，越来越多地采用输入自适应的推理机制，如token剪枝和提前停止。这些机制根据输入复杂度动态调整计算量，但也
京公网安备 11000002002063号
本次输入来源为 beian.gov.cn 的备案信息页面，标题为“京公网安备 11000002002063号”，属于中国互联网信息服务备案公示内容，并非威胁情报报告。尽管 source_name 标注为“360CERT 安全报告”，tags
京网文〔2020〕6051-1195号
该输入并非有效的威胁情报内容。标题为『京网文〔2020〕6051-1195号』，来源URL指向360.cn的许可证页面，没有提供任何技术细节、攻击活动、漏洞或IOC信息。文章正文为空，发布日期（2026年）明显异常，无法确认任何真实威胁事件
京ICP证080047号[京ICP备08010314号-6]
输入内容仅包含一个疑似ICP备案号页面标题（“京ICP证080047号[京ICP备08010314号-6]”），来源为360CERT安全报告，但摘要或正文为空，且未提供任何CVE、威胁行为者、恶意软件家族、受影响行业或地理区域、ATT&CK
Software installed and run as a non-privileged user may conduct improper GPU system calls to cause OOB read kernel memory access and in certain cases cause GPU UAF of arbitrary ...
CVE-2026-49746
CVE-2026-49746 是一个与 GPU 相关的内核安全漏洞。根据 NVD 描述，软件以非特权用户身份安装和运行时，可能发起不当的 GPU 系统调用，导致内核内存的越界读取（OOB read），在某些情况下还可能造成 GPU 对任意页
Kernel software from a non-secure operating system on a platform with Trusted Execution Environment support, may cause GPU Firmware to boot up using data from non-secure memory....
CVE-2026-45198
CVE-2026-45198 是一个涉及 Trusted Execution Environment (TEE) 平台的安全漏洞，具体影响 GPU 固件与非安全操作系统（Rich Execution Environment, REE）之间的
A security flaw has been discovered in Power Sofware PowerISO 9.3.0.0. Affected by this issue is some unknown functionality in the library C:\Windows\System32\drivers\scdemu.sys...
CVE-2026-19189
CVE-2026-19189 是 PowerISO 9.3.0.0 软件中一个已公开披露的本地权限提升漏洞。该漏洞位于内核驱动程序文件 C:\Windows\System32\drivers\scdemu.sys 中，受影响组件为内核驱动（
Improper access control in Microsoft Purview eDiscovery allows an authorized attacker to elevate privileges over a network.
CVE-2026-65668
本漏洞涉及 Microsoft Purview eDiscovery 中的不当访问控制问题。该产品通常用于法律诉讼和合规场景中的电子数据展示（eDiscovery）。由于访问控制机制存在缺陷，一个已经获得合法授权（低权限）的攻击者可以通过网
Improper verification of cryptographic signature in Microsoft Teams allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-62918
CVE-2026-62918 是一个影响 Microsoft Teams 的高危安全漏洞，源于产品对加密签名的验证存在不当实现（Improper verification of cryptographic signature），使得未授权攻
Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-62836
CVE-2026-62836 是 Microsoft Azure SQL Managed Instance 中一个与通信通道端点限制不当相关的安全漏洞。该漏洞允许未授权的攻击者通过网络实施权限提升攻击。根据 CVSS 3.1 评分，该漏洞获
Video Highlights the 4 Key Steps to Successful Incident ResponseDec 02, 2019
Video Highlights the 4 Key Steps to Successful Incident ResponseDec 02, 2019
Cloud ManagerManage your cloud computing services
Cloud ManagerManage your cloud computing services
See all Cloud Computing
See all Cloud Computing
智利银行在勒索软件攻击后关闭所有分行
智利银行在勒索软件攻击后关闭所有分行
Helping Non-Security Stakeholders Understand ATT&CK in 10 Minutes or Less [VIDEO]Feb 21, 2019
Helping Non-Security Stakeholders Understand ATT&CK in 10 Minutes or Less [VIDEO]Feb 21, 2019
Analyzing Targeted Intrusions Through the ATT&CK Framework Lens [VIDEO]Jan 22, 2019
Analyzing Targeted Intrusions Through the ATT&CK Framework Lens [VIDEO]Jan 22, 2019
Qatar’s Commercial Bank Chooses CrowdStrike Falcon®: A Partnership Based on Trust [VIDEO]Aug 20, 2018
Qatar’s Commercial Bank Chooses CrowdStrike Falcon®: A Partnership Based on Trust [VIDEO]Aug 20, 2018
How Charlotte AI AgentWorks Fuels Security's Agentic Ecosystem
How Charlotte AI AgentWorks Fuels Security's Agentic Ecosystem