UK Housing Ombudsman Service investigates 'security incident'
The U.K. Housing Ombudsman Service is investigating a third-party IT security incident that impacted its case management
2026-10-15 归档
今日共收录 805 条安全情报，包含 0 个 CVE，398 篇安全通告，以及 100 篇研究论文。
← 返回归档列表Windows 11 KB5127648 & KB5126653 cumulative updates released
Microsoft has released the Patch Tuesday Windows 11 KB5127648 and KB5126653 cumulative updates for versions 26H2/25H2/24
SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theft
A flaw in SAP's Cloud SDK for Python can send an application's OAuth2 client credentials to a server an attacker control
The hidden network: Inside the phishing infrastructure ecosystem powering global cybercrime
Microsoft uncovered a Chinese-language cybercriminal ecosystem, an interconnected network of phishing kit operators (tra
web_trafficRead the guide
web_trafficRead the guide
The Blind Spots of Agentic Pentesting and How to Close Them
AI-powered penetration testing can uncover complex attack paths, but safety restrictions and network limitations leave m
Global takedown hits network behind 1 billion phishing messages
A massive cybercriminal ecosystem facilitating more than a billion malicious messages targeting over 75,000 organization
Hirudo Android malware replaces banking apps to evade security checks
A new Android malware called Hirudo steals bank account credentials by replacing legitimate banking apps with modified v
Microsoft: Recent Windows updates may trigger Remote Desktop failures
Microsoft has confirmed that non-admin users may be unable to connect to devices via Remote Desktop after installing rec
Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE App
Attackers exploited a flaw in an optional Nextcloud app, Collabora Online - Built-in CODE Server, to plant web shells on
Microsoft Disrupts 3 Phishing Kits Linked to Over 1 Billion Scam Messages
Microsoft and Health-ISAC, along with the Japan Cybercrime Control Center (JC3) and a coalition of private sector compan
U.S. Shuts Down Over 40 Laptop Farms, Charges 14 in North Korean IT Worker Fraud
The U.S. Department of Justice (DoJ) on Tuesday charged 14 people and seized about 187 computers as part of its ongoing
Virtual Event Today: Zero Trust Strategies Summit
This summit is laser-focused on the next generation of Zero Trust and Identity security, moving beyond theory to deliver
US Arrests Two in Crackdown on North Korean IT Worker Laptop Farms
Investigators stormed 40 locations in Texas and seized 187 laptops used by North Korean IT workers to hide their locatio
From Training to Escalation: Forensic Analysis and Local Recreation of RL/RLHF-Induced Privilege Escalation in AI Agents (CVE-2026-65616)
Mid-2026 reporting on autonomous AI evaluation incidents claimed that frontier large language model (LLM) agents escaped
P2Patch: Exploit-Guided Vulnerability Repair
Large language models are increasingly deployed as autonomous agents for automated program repair, patching software vul
Diagnose Before You Refine: Multi-Dimensional Judge Feedback for Query-Efficient Jailbreak Attacks
Automated jailbreak attacks rely on evaluation feedback to optimize adversarial prompts, but existing methods often lack
Did the LLM Answer the Question? A Semantic Reconstruction Game for Jailbreak Evaluation
Jailbreak attacks against large language models (LLMs) are evaluated using attack success rate (ASR), which depends on c
AgentCIScope: Grounded Contextual Integrity Evaluation for LLM Agents
LLM agents are becoming increasingly capable of handling daily workspace tasks by interacting with application environme
CyberArena: Benchmarking AI Agents in Live Symmetric Attack-and-Defense Combat
AI agents are demonstrating increasingly strong offensive and defensive cybersecurity capabilities in the real world. Cu