2026-10-20 归档

今日共收录 730 条安全情报,包含 0 个 CVE,352 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
威胁情报2026-10-19 发布INFO

⚡ Weekly Recap: 98 Zero-Days, Rogue AI Agents, $100M Crypto Theft, 700 Supermarkets Hit and More

The worst problems don't always come with a warning. Sometimes they arrive through a service everyone trusts, a device s

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-19 发布INFO

From Email-to-Case to the Boardroom: How Inherited Agents Break Governance Built for Software

In Salesforce Agentforce, the recommended way to make an agent respond to events is a Flow: a record is created or a cas

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-19 发布INFO

Fake Web3 Accelerator Uses npm Packages to Spread Malware and Hijack AI Agent Traffic

A fake Web3 accelerator has been observed pushing information stealers and backdoors to Windows and macOS systems using

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-19 发布INFO

OpenCode Console Breach May Have Exposed OpenAI, Anthropic, and Google API Keys

An intruder reached a legacy system at OpenCode on the night of October 16 and may have exposed the third-party AI provi

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-19 发布INFO

Siemens Software Center Vulnerability Exploited in ClickFix Malware Attacks

Attackers paired a genuine, signed copy of Siemens Software Center with malicious DLLs to infect Windows PCs via ClickFi

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-10-19 发布INFO

Drupal Warns of Fast Exploitation Risk for Critical Core RCE Flaw

Critical flaws impact the Entity List and Field UI modules, and exploit paths exist with contributed modules. The post D

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-10-19 发布INFO

Plex2Shell Exploit Chain Weaponized Against Plex Servers Hours After Disclosure

Threat actors have been observed delivering cryptocurrency miners and proxy software. The post Plex2Shell Exploit Chain

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-10-19 发布INFO

One Compromised Login Exposed Millions of California Students’ Records

Intruders used compromised credentials to access an ETS SFTP server, copying records of California students back to 2006

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-10-19 发布INFO

MITRE ATT&CK v20 Catalogs AI Abuse, MFA Bypass, Water Utility Attacks

Defenders get 15 new detection strategies, six for Enterprise and nine for ICS, backed by 38 analytics. The post MITRE A

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-10-19 发布INFO

Anthropic Acquires Confidential AI Startup Opaque Systems

Opaque Systems has developed technology that lets AI systems use sensitive data while keeping it protected by the underl

历史摘要 · 未重新核验 · SecurityWeek