2026-10-23 归档

今日共收录 1236 条安全情报,包含 262 个 CVE,575 篇安全通告,以及 100 篇研究论文。

← 返回归档列表
威胁情报2026-10-23 发布INFO

CrowdStrike Named a Leader in the 2026 IDC MarketScape for Worldwide Modern Endpoint Security for Enterprises Vendor Assessment

CrowdStrike Named a Leader in the 2026 IDC MarketScape for Worldwide Modern Endpoint Security for Enterprises Vendor Ass

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-10-23 发布INFO

U.S. Government Disrupts FAMOUS CHOLLIMA Operation with CrowdStrike Assistance

U.S. Government Disrupts FAMOUS CHOLLIMA Operation with CrowdStrike Assistance

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-10-23 发布INFO

October 2026 Patch Tuesday: 1,413 CVEs Include Three Zero-Days and 75 Critical VulnerabilitiesOct 13, 2026

October 2026 Patch Tuesday: 1,413 CVEs Include Three Zero-Days and 75 Critical VulnerabilitiesOct 13, 2026

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-10-23 发布INFO

web_trafficRead the guide

web_trafficRead the guide

历史摘要 · 未重新核验 · Mandiant

威胁情报2026-10-23 发布INFO

CrowdStrike Achieves NCSC CIR Enhanced Level Assurance

CrowdStrike Achieves NCSC CIR Enhanced Level Assurance

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-10-23 发布INFO

CrowdStrike Uncovers New Agentic AI Campaigns

CrowdStrike Uncovers New Agentic AI Campaigns

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-10-23 发布INFO

CrowdStrike Protects Customers from Threats Delivered via PHP2Shell

CrowdStrike Protects Customers from Threats Delivered via PHP2Shell

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-10-21 发布INFO

Google Chrome adds Gemini-powered scam detection, warns users of ClickFix attacks

Chrome is getting new scam protections that use Gemini to detect deceptive websites and warn users when they copy suspic

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-10-21 发布INFO

CISA: Hackers chain Plex flaws in Plex2Shell attacks to breach servers

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning that attackers are actively exploiting four

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-10-21 发布INFO

LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor

The popular LiteLLM Python package has been compromised as part of a software supply chain attack that delivered a crede

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-22 发布INFO

EMudhra Intermediate CA Certificates Compromised

Eight compromised eMudhra intermediate CA private keys risk unauthorized TLS signing and MitM interception. Read our ana

历史摘要 · 未重新核验 · Palo Alto Unit 42

威胁情报2026-10-22 发布INFO

The Current Landscape of OAuth Attacks

Unit 42 explores modern OAuth threats and actionable steps organizations can take to protect their environments. The pos

历史摘要 · 未重新核验 · Palo Alto Unit 42

威胁情报2026-10-22 发布INFO

LiteLLM release pipeline hacked to distribute info-stealer malware

Hackers compromised the LiteLLM project's PyPI package and published malicious Docker images with a payload that steals

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-10-22 发布INFO

Machine speed attacks require machine speed detection and response

Attackers can steal credentials and begin exfiltrating data within minutes, often before security teams can respond. Exa

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-10-22 发布INFO

Amazon says PHP2Shell exploitation began 4 days before patches

Security researchers at Amazon Threat Intelligence say attackers began targeting the PHP2Shell flaws four days before se

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-10-22 发布INFO

GitLab warns of new max severity code execution vulnerability

GitLab has released security patches for a maximum-severity Regular Expression Compiler flaw that can let remote attacke

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-10-22 发布INFO

Authorities disrupt nearly 11,000 cybercrime networks in Africa

Law enforcement agencies have disrupted nearly 11,000 cybercriminal networks and arrested more than 1,400 people in Oper

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-10-23 发布INFO

The AI Agent Nobody Owns: Watch Expert Webinar On Your Newest Insider Threat

Right now, there is probably an AI agent running on a laptop somewhere in your network. It stores API keys and database

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-23 发布INFO

Arista Warns of Critical VeloCloud SQL Injection Zero-Day Exploited in Attacks

Attackers are exploiting a zero-day SQL injection flaw in Arista's VeloCloud Orchestrator (VCO), the central management

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-22 发布INFO

Meta Ordered to Pay $25 Billion After Court Finds 43 Million Privacy Violations

Social media giant Meta was ordered to pay 25 billion in penalties by a New Mexico court on Wednesday as part of a data

历史摘要 · 未重新核验 · The Hacker News