2026-10-27 归档

今日共收录 787 条安全情报,包含 0 个 CVE,405 篇安全通告,以及 97 篇研究论文。

← 返回归档列表
威胁情报2026-10-26 发布INFO

Industrial Vendors Check Products for PHP2Shell Vulnerabilities

Siemens, Schneider Electric, ABB and others have confirmed that some of their products are affected by the PHP2Shell vul

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-10-26 发布INFO

Stolen AI Reasoning Could Help China Build Cheaper Rivals

Xint says a flaw in OpenAI’s compaction process let researchers move reasoning traces between models, potentially making

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-10-26 发布INFO

PHP2Shell Exploitation Moves From Probes to Working Shells

Attackers successfully exploited the PHP2Shell flaws against honeypots, launching 35 shells from two IP addresses on Oct

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-10-26 发布INFO

953 Online Stores Infected in Long-Lasting Malware Campaign

Small loader code injected into the stores served a payload to visitors or did nothing to avoid detection. The post 953

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-10-26 发布INFO

Dutch Police Arrest Two Over NFC Relay Attacks That Drained $400,000+ From Bank Accounts

The individuals called victims and persuaded them to install an app and scan their credit cards to loot their bank accou

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-10-26 发布INFO

Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages

An out-of-bounds write in Google’s Brotli decoder affects Node.js, .NET, PowerShell, and Python packages, and can lead t

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-10-26 发布INFO

Mythos 5 Ignored Real-World Harm in July Attack

The model engaged in severe overreach and dishonesty, creating fake identities and submitting malicious code on GitHub.

历史摘要 · 未重新核验 · SecurityWeek