2026-08-21 归档

今日共收录 1701 条安全情报,包含 827 个 CVE,444 篇安全通告,以及 120 篇研究论文。

← 返回归档列表
威胁情报2026-08-21 发布INFO

August 2026 Patch Tuesday: One Exploited Zero-Day and 62 Critical Vulnerabilities Among 415 CVEsAug 11, 2026

August 2026 Patch Tuesday: One Exploited Zero-Day and 62 Critical Vulnerabilities Among 415 CVEsAug 11, 2026

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-08-21 发布INFO

Teaching AI to Reason Through Detection Triage

Teaching AI to Reason Through Detection Triage

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-08-21 发布INFO

Benchmaxxing: When the Benchmark Becomes the TargetAug 19, 2026

Benchmaxxing: When the Benchmark Becomes the TargetAug 19, 2026

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-08-19 发布INFO

OpenAI confirms ChatGPT is down as logins and signups fail

ChatGPT is experiencing a major outage, and users are unable to sign in, create accounts, or load chats, including previ

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-08-19 发布INFO

Rogue ransomware affiliate poses as recovery firm to steal payments

A suspected ransomware affiliate is posing as a ransomware recovery service called "Ransom Busters," contacting the vict

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-08-19 发布INFO

Hackers compromise 14,500 Dahua web cameras in 35-day campaign

In a large-scale campaign that researchers dubbed CameraSwarm, hackers compromised more than 14,500 Dahua IP cameras mos

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-08-19 发布INFO

US warns of AI-powered attacks on Siemens PLCs in critical infrastructure

U.S. cybersecurity agencies warn that threat actors are using AI-generated scripts to exploit Siemens S7 Series programm

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-08-19 发布INFO

US charges Iranian hackers over $3.4 billion intellectual property theft

The U.S. has charged 17 Iranians, alleged members of a hacking-for-hire company called Mabna Institute, involved in year

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-08-20 发布INFO

Cloudflare Workers Spectre Attack Leaks JWT From Co-Located Worker at 12 Bits/Second

Cybersecurity researchers have disclosed details of a remote Spectre attack against Cloudflare Workers that leaked a JSO

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-08-19 发布INFO

OpenAI Pauses Frontier RL Training as It Tightens Defenses Against Unsafe AI Behavior

OpenAI on Tuesday revealed that it paused reinforcement learning (RL) training for its latest artificial intelligence (A

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-08-20 发布INFO

Hackers poison arrayref Rust crate to push infostealer malware

Hackers compromised the maintainer account behind the widely used Rust crate arrayref to introduce malware that executed

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-08-20 发布INFO

Critical Elementor Pro bug exposes WordPress sites to RCE attacks

A critical vulnerability in the Elementor Pro WordPress plugin could allow attackers to upload executable files for remo

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-08-20 发布INFO

CISA warns of hackers exploiting critical MLflow vulnerability

The Cybersecurity and Infrastructure Security Agency (CISA) warned federal agencies that threat actors are now exploitin

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-08-20 发布INFO

New Manic Android malware can exfiltrate data through nearby devices

A new Android malware named Manic targeting users in multiple European countries has a fallback data exfiltration mechan

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-08-20 发布INFO

Critical Zimbra RCE flaw now actively exploited in attacks

CERT Polska, the Polish Computer Emergency Response Team (CERT), warned that attackers have begun exploiting a critical

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-08-20 发布INFO

Microsoft says August Windows updates may cause gaming issues

Microsoft is investigating a potential issue with the August 2026 updates that may prevent some games from launching or

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-08-21 发布INFO

Rust Supply Chain Attack Puts Build-Time Malware in Crates with 245 Million Downloads

The Rust Project has deleted malicious versions of three widely used Rust crates from crates.io after a compromised main

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-08-21 发布INFO

Suspected Russian Hackers Abuse Google OAuth and WhatsApp Linking to Hijack Accounts

Three distinct suspected Russian cyber espionage threat clusters have been observed leveraging legitimate authentication

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-08-20 发布INFO

Manic Android Malware Exfiltrates Data From Offline Phones via Nearby Infected Devices

A new Android threat codenamed Manic has been observed actively targeting Ukrainian banks, government and identity servi

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-08-20 发布INFO

MLflow Vulnerability Exploited for Cloud Credential Theft

The critical-severity flaw allows attackers to send HTTP requests to internal endpoints and extract sensitive informatio

历史摘要 · 未重新核验 · SecurityWeek