2026-10-29 归档

今日共收录 3209 条安全情报,包含 2330 个 CVE,388 篇安全通告,以及 93 篇研究论文。

← 返回归档列表
威胁情报2026-10-28 发布INFO

Anthropic's Unreleased AI Model Chains Flaws Into Working Chrome, Safari, Windows and Linux Exploits

An unreleased Anthropic AI model found security flaws in Chrome, Safari, Android, Windows, and Linux and chained them in

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-28 发布INFO

Tailscale Patches SSH Flaws That Could Let Hacked Devices Gain Root Access on Other Servers

Tailscale has released version 1.104.4 to fix flaws in its built-in SSH server that could let an attacker reach services

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-28 发布INFO

Upwind Security Raises $400 Million at $3.8 Billion Valuation

The massive funding round comes just days after reports emerged that Upwind had attracted acquisition interest from seve

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-10-28 发布INFO

Chrome and Firefox Updates Patch Over 200 Vulnerabilities

The Chrome 156 update fixes 52 bugs, while Firefox 159 was rolled out with 167 security patches. The post Chrome and Fir

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-10-28 发布INFO

TLS Flaws Found in GoAhead Web Server Used in Hundreds of Millions of Devices

FoxIO disclosed three GoAhead TLS bugs that can let revoked certificates through or expose some encrypted sessions to ea

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-10-28 发布INFO

Long-Hidden Flaws Patched in EPICS Research Facility Control Software

Four EPICS Base flaws found by an autonomous system could let attackers crash processes at particle accelerators and fus

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-10-28 发布INFO

Nobody Trusts the Security Questionnaire. We Rely on It Anyway.

The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There i

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-10-28 发布INFO

Secrets Management Firm Infisical Valued at $600 Million After $40 Million Raise

The company will use the Series B funds to expand its platform for securing AI agents’ access to sensitive systems. The

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-10-28 发布INFO

CISA Warns of Node2Shell Exploitation as Honeypots Log Attack Attempts

CISA added the Brotli flaw to its KEV catalog, and two honeypot operators logged attempts, including one that used a bro

历史摘要 · 未重新核验 · SecurityWeek