Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing
Next.js released an out-of-band security update on October 14 that fixes two critical flaws allowing unauthenticated rem
2026-10-16 归档
今日共收录 833 条安全情报，包含 0 个 CVE，434 篇安全通告，以及 100 篇研究论文。
← 返回归档列表Drupal Patches Critical Field UI Flaw With Unauthenticated RCE Path via Contributed Modules
Drupal core has a critical flaw in its Field UI module that could let an attacker run code on the site's server, and fix
Fake AI Attacks Spread Across US Companies: How MSSPs Can Stop Incidents Early
Attackers are impersonating popular AI products to distribute malware, steal browser sessions, and compromise business a
Why AI Confidence Is Not Validation
AI is already part of digital forensics and incident response work, with or without a policy in place to govern it. The
India Mandates Registered Caller Name Display on 4G and Newer Networks From November 1
The Indian government has directed telecom service providers (TSPs) in the country to mandatorily display callers' regis
GhostAction Compromises About 1,900 GitHub Accounts, Targets Over 30,000 Repositories
The credential-theft campaign known as GhostAction has ramped up, targeting more than 30,000 repositories across 3,000 u
Context Is King in the Fight Against Modern Cyberattacks
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they es
UK Legal Aid Agency Hack Scope Widens After Forensic Review
Most of the data is related to applications, claims, and payments submitted between 2007 and 2025. The post UK Legal Aid
Supermarket Refrigeration Attack Widens to Copeland, Dixell Controllers
Roughly 700 French supermarkets were hit by the cyberattacks, for which no group has claimed responsibility. The post Su
CikaBika Bot RAT Uses Discord for C&C
Delivered via phishing, the malware provides reconnaissance, remote execution, and data exfiltration capabilities. The p
Novel Android RAT ‘Hirudo’ Replaces Banking Apps With Trojanized Copies
The Hirudo malware combines elements of a traditional banking trojan and a full-featured RAT. The post Novel Android RAT
CenterPoint Energy Data Breach Impacts 1 Million Texans
Personal information such as names, addresses, Social Security numbers, and driver’s license numbers was compromised. Th
CISO Conversations: James Robinson – Many Jobs, One Journey to Netskope CISO
James Robinson never planned a cybersecurity career — seven companies and one deputy CISO role later, he leads security