2026-08-08 归档

今日共收录 1332 条安全情报,包含 443 个 CVE,483 篇安全通告,以及 115 篇研究论文。

← 返回归档列表
威胁情报2026-08-07 发布INFO

Growing Up The Hard Way

Open Source had a great childhood. For two decades it got to be a kid. It ran around barefoot, gave everything away, tr

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-08-07 发布INFO

18-Year-Old Linux SCTP Flaw Could Let Local Users Gain Root and Escape Containers

A use-after-free bug in Linux's SCTP networking code can be turned into full root on a host, and Tencent researchers say

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-08-07 发布INFO

New NatJack Attacks Hijack TCP Sessions and Spoof DNS by Manipulating NAT Tables

Security researcher Malcolm Stagg has disclosed a new attack class called NatJack that manipulates network address trans

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-08-07 发布INFO

Microsoft 365 AitM Phishing Hijacks Accounts to Collect Payroll and Finance Emails

Cybersecurity researchers have called attention to an active "widespread email-driven phishing campaign" that employs ad

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-08-07 发布INFO

AI-Assisted HTTP Terminator Finds Novel HTTP Desync Techniques and Apache Zero-Day

PortSwigger says HTTP Terminator, an artificial intelligence (AI)-assisted research system built by James Kettle, genera

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-08-07 发布INFO

Claude Code and Gemini CLI Flaws Let a GitHub Issue Reach CI Workflow Secrets

A GitHub issue opened by an account with no repository privileges was enough to execute code on the CI runners behind An

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-08-07 发布INFO

Vishing Extortion Group UNC6671 Rebrands After Making Millions

Initially calling itself BlackFile, the group has expanded operations to the Redact, Pink, Helix, and Falcon brands. The

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-08-07 发布INFO

Truck Brake Controller’s Safety Recall Doubled as Hidden Security Fix

NMFTA research shows a Bendix EC80 brake controller safety recall also patched remote code execution and DoS vulnerabili

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-08-07 发布INFO

Black Hat USA 2026 – Summary of Vendor Announcements (Part 4)

Companies are showcasing their products and services this week at the 2026 edition of the Black Hat conference in Las Ve

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-08-07 发布INFO

Microsoft, Apple Release Fresh Security Updates

Microsoft fixed critical vulnerabilities across Azure, Entra, and SharePoint, while Apple patched a high-severity authen

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-08-07 发布INFO

3.8 Million Impacted by Unlimited Technology Systems Data Breach

Hackers stole personal, medical, and health insurance information from a company’s data center. The post 3.8 Million Imp

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-08-07 发布INFO

Critical Vulnerabilities Patched With Chrome 151 Update

The browser refresh eliminates over two dozen memory safety bugs, including critical use-after-free flaws. The post Crit

历史摘要 · 未重新核验 · SecurityWeek