2026-10-15 归档

今日共收录 805 条安全情报,包含 0 个 CVE,398 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
威胁情报2026-10-13 发布INFO

Microsoft Patch Tuesday for October 2026 — Snort rules and prominent vulnerabilities

Blog post covering the vulnerabilities disclosed during Microsoft Patch Tuesday.

历史摘要 · 未重新核验 · Cisco Talos

威胁情报2026-10-15 发布INFO

Akamai Inference

Akamai Inference

历史摘要 · 未重新核验 · Akamai Security Research

威胁情报2026-10-15 发布INFO

Akamai Agent Sandbox

Akamai Agent Sandbox

历史摘要 · 未重新核验 · Akamai Security Research

威胁情报2026-10-14 发布INFO

ISC Stormcast For Wednesday, October 14th, 2026 https://isc.sans.edu/podcastdetail/10136, (Wed, Oct 14th)

ISC Stormcast For Wednesday, October 14th, 2026 https://isc.sans.edu/podcastdetail/10136, (Wed, Oct 14th)

历史摘要 · 未重新核验 · SANS ISC

威胁情报2026-10-13 发布INFO

October 2026 Microsoft Patch Tuesday, (Tue, Oct 13th)

Microsoft today released patches for 1,417 vulnerabilities. 76 of these vulnerabilities are rated critical, with 7 criti

历史摘要 · 未重新核验 · SANS ISC

威胁情报2026-10-14 发布INFO

Microsoft Patches Record 1,413 Flaws, Including Exploited Windows Shell Bug

Microsoft on Tuesday shattered its own Patch Tuesday record by shipping patches for a whopping 1,413 vulnerabilities, in

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-14 发布INFO

OpenAI Employee Arrested for Allegedly Planting Hidden Recorder in Executive Conference Room

A Saudi national and employee of OpenAI has been arrested for allegedly planting a hidden recording device in an executi

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-13 发布INFO

Anthropic Warns Small AI Models Could Soon Form Self-Propagating IoT Botnets

Small artificial intelligence (AI) models may be months away from developing capabilities to self-replicate on IoT devic

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-13 发布INFO

Docker Fixes Critical Two-Year-Old Hub Flaw That Let One User Push Images as Another

A flaw in Docker Hub, the registry where container images are published and downloaded, let one user push, pull, or dele

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-13 发布INFO

Employee Arrested After Listening Device Found in OpenAI Conference Room, FBI and the Company Say

Saudi national Abdulrahman Alfozan was arrested Friday and terminated by OpenAI. The post Employee Arrested After Listen

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-10-14 发布INFO

Break the silence: Kazakhstan-nexus UAT-6275 targets CIS government organizations

Talos and Recorded Future identified UAT-6275 activity targeting government organizations across the Commonwealth of Ind

历史摘要 · 未重新核验 · Cisco Talos

威胁情报2026-10-15 发布INFO

ISC Stormcast For Thursday, October 15th, 2026 https://isc.sans.edu/podcastdetail/10138, (Thu, Oct 15th)

ISC Stormcast For Thursday, October 15th, 2026 https://isc.sans.edu/podcastdetail/10138, (Thu, Oct 15th)

历史摘要 · 未重新核验 · SANS ISC

威胁情报2026-10-15 发布INFO

Panchan's Mining Island [Guest Diary], (Wed, Oct 14th)

[This is a Guest Diary by Zachary Norwood, an ISC intern as part of the SANS.edu BACS program]

历史摘要 · 未重新核验 · SANS ISC

威胁情报2026-10-14 发布INFO

Orphaned VBA Projects Inside DWG Files, (Wed, Oct 14th)

Years ago I wrote diary entries about VBA code stored inside AutoCAD drawing files (.dwg).

历史摘要 · 未重新核验 · SANS ISC

威胁情报2026-10-14 发布INFO

How to Run a Deepfake Readiness Drill Before a Cloned Voice Calls Your Team

Cloned voices and synthetic video calls now show up in payment fraud, help desk resets, and access requests. A structure

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-14 发布INFO

Researchers Used a Public OpenAI Model to Build a $250,000 Chrome Full-Chain Exploit in Six Days

A team at security firm XBOW chained three then-unknown Google Chrome bugs into a single attack that runs code on a Wind

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-14 发布INFO

Hirudo Android Trojan Uses Patched Banking Apps to Bypass Their Built-In Security Checks

Cybersecurity researchers have disclosed details of a new Android banking trojan called Hirudo that works by replacing l

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-14 发布INFO

An AI Agent Found a Critical OTP Bypass in Production. The Attack Was the Easy Part.

The bug was simple: the login let you choose where your sign-in code went. Proving it on a live website was the hard par

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-14 发布INFO

Four-Byte Write and Timing Bug Let Researchers Run Code in Windows SmartScreen Enclave

Security researchers ran their own code inside a protected part of Windows that is meant to stay sealed off even when th

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-14 发布INFO

AI Agents Navigate Unfamiliar OT Systems and Move Equipment in Minutes, Booz Allen Finds

In Booz Allen’s isolated OT lab, AI models met every objective across eight scenarios and reached an industrial control

历史摘要 · 未重新核验 · SecurityWeek