2026-10-07 归档

今日共收录 1979 条安全情报,包含 1214 个 CVE,387 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
威胁情报2026-10-06 发布INFO

Denmark Says Attackers Accessed CPR Data for 8.8 Million People via Company Account

Unauthorized parties have gained access to the names, addresses, and personal identification numbers of about 8.8 millio

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-06 发布INFO

ClickFix Smuggles Payloads Through Browser Cache to Bypass Windows Run Limits

A new type of ClickFix attack is using compromised websites to trick users into executing a malicious payload cached in

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-07 发布INFO

[原创] 头条评论 `_signature` 逆向实战:从 `_$jsvmprt` VM 字节码到纯 Node 零 Cookie 爬取用户评论

[原创] 头条评论 `_signature` 逆向实战:从 `_$jsvmprt` VM 字节码到纯 Node 零 Cookie 爬取用户评论

历史摘要 · 未重新核验 · 看雪

威胁情报2026-10-07 发布INFO

[原创]qbdi trace工具及生成调用流程图

[原创]qbdi trace工具及生成调用流程图

历史摘要 · 未重新核验 · 看雪

威胁情报2026-10-07 发布INFO

[原创]移动安全联盟(libmsaoaidsec.so) 绕过知识

[原创]移动安全联盟(libmsaoaidsec.so) 绕过知识

历史摘要 · 未重新核验 · 看雪

威胁情报2026-10-07 发布INFO

[原创]关于某书的x-mini-gid、x-mini-sig、x-mini-mua、xy-common-params、shield、x-mini-s1的分析

[原创]关于某书的x-mini-gid、x-mini-sig、x-mini-mua、xy-common-params、shield、x-mini-s1的分析

历史摘要 · 未重新核验 · 看雪

威胁情报2026-10-07 发布INFO

ISC Stormcast For Wednesday, October 7th, 2026 https://isc.sans.edu/podcastdetail/10126, (Wed, Oct 7th)

ISC Stormcast For Wednesday, October 7th, 2026 https://isc.sans.edu/podcastdetail/10126, (Wed, Oct 7th)

历史摘要 · 未重新核验 · SANS ISC

威胁情报2026-10-06 发布INFO

ISC Stormcast For Tuesday, October 6th, 2026 https://isc.sans.edu/podcastdetail/10124, (Tue, Oct 6th)

ISC Stormcast For Tuesday, October 6th, 2026 https://isc.sans.edu/podcastdetail/10124, (Tue, Oct 6th)

历史摘要 · 未重新核验 · SANS ISC

威胁情报2026-10-06 发布INFO

Linux Backdoors Impersonate Email Security Tools to Evade Detection in Korea and Taiwan

Linux backdoors targeting telecom and network appliances in South Korea and Taiwan have been disguising their traffic as

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-06 发布INFO

LibreOffice and OpenOffice Flaws Let Malicious Spreadsheets Run Code Without Macro Warnings

A malicious spreadsheet can make LibreOffice and Apache OpenOffice run an attacker's code as soon as the file is opened,

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-06 发布INFO

Wikimedia Says OpenAI Agents Tried to Compromise Etherpad and Use Wiki Tools as Proxies

The Wikimedia Foundation, which hosts Wikipedia, has confirmed that it has discovered activity by rogue OpenAI agents on

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-06 发布INFO

Welcome to the Jungle: What We Found Inside 15,465 Public MCP Servers

In 2024, MCP (Model Context Protocol) set out to become the USB-C of AI: one standard for connecting models, agents, and

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-06 发布INFO

FBI Removes Accenture Contractor After Patch Failure Led to ShinyHunters Breach

The U.S. Federal Bureau of Investigation (FBI) has removed an Accenture contractor for their alleged role in a ShinyHunt

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-07 发布INFO

Personal Information for Over 1 Million People Stolen in a Cyberattack on Arizona’s Court System

The Arizona Supreme Court said the information was copied for people dating back as far as 30 years. The post Personal I

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-10-06 发布INFO

FBI Blames Contractor’s Missed Patch for ShinyHunters Breach

The FBI has removed an Accenture contractor over a data breach that exposed personal information of thousands of bureau

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-10-06 发布INFO

FBI Arrests ‘Most Wanted’ Developer of Ploutus ATM Malware

An alleged leader of Tren de Aragua’s ATM jackpotting activities, Canelon Aguirre was on the FBI’s top 10 most wanted li

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-10-06 发布INFO

Apple to Tighten Full Disk Access Controls in macOS Amid AI Risks

Citing growing risks posed by more capable and autonomous AI agents, Apple will introduce additional controls. The post

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-10-06 发布INFO

8.8 Million Impacted by Data Breach at Denmark’s Central Person Register

Hackers abused a company’s lawful access to the CPR system to steal the personal information of registered citizens. The

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-10-06 发布INFO

Social Engineering Detection Moves Into the Live Conversation

Companies are pouring time and dollars into security awareness training, but little evidence shows it actually works aga

历史摘要 · 未重新核验 · SecurityWeek