#conti

共收录 115 条相关情报。

← 返回所有主题
威胁情报2026-06-03 发布INFO

CISA Adds One Known Exploited Vulnerability to Catalog

CVE-2026-45247

2026年6月3日,美国网络安全与基础设施安全局(CISA)将编号为 CVE-2026-45247 的漏洞添加至其已知被利用漏洞(KEV)目录。该漏洞存在于 Mirasvit Full Page Cache Warmer 组件中,属于反序列

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-06-02 发布INFO

Gamaredon Exploits WinRAR to Deliver GammaWorm and GammaSteel Against Ukraine

CVE-2025-8088

The Russian hacking group known as Gamaredon has been attributed to the continued exploitation of a WinRAR vulnerability

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-06-02 发布INFO

CISA and Partners Urge Hardening Automatic Tank Gauge Systems

2026年6月2日,美国网络安全与基础设施安全局(CISA)联合联邦调查局(FBI)、国家安全局(NSA)、能源部(DOE)、环保署(EPA)、运输安全管理局(TSA)、交通部(DOT)及农业部(USDA)发布联合公告,指出近期观察到针对美

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-06-02 发布INFO

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CVE-2025-48595 · CVE-2022-0492

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-06-02 发布INFO

How Leading Organizations Are Turning EDR Into Operational Resilience

Most organizations now recognize that endpoint protection alone is no longer sufficient. That's why adoption of endpoin

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-06-02 发布INFO

From API key to live threat detections in minutes: how Elastic Security ingests Google Threat Intelligence

Find out how Elastic Security ingests Google Threat Intelligence for continuous detection and uses AI-driven workflows t

历史摘要 · 未重新核验 · Elastic Security Labs

威胁情报2026-06-01 发布INFO

CISA Adds One Known Exploited Vulnerability to Catalog

CVE-2024-21182

2026年6月1日,美国网络安全与基础设施安全局(CISA)将CVE-2024-21182添加到已知被利用漏洞(KEV)目录中。该漏洞是Oracle WebLogic Server中的一个未指定漏洞,根据证据已被积极利用。CISA依据具有约

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-05-29 发布INFO

CISA Adds One Known Exploited Vulnerability to Catalog

CVE-2026-0257

2026年5月29日,美国网络安全和基础设施安全局(CISA)将一个新的漏洞CVE-2026-0257添加到其已知被利用漏洞(KEV)目录中,原因是存在主动利用的证据。该漏洞是Palo Alto Networks PAN-OS的身份验证绕过

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-05-27 发布INFO

CISA Adds Three Known Exploited Vulnerabilities to Catalog

CVE-2026-48027 · CVE-2026-8398 · CVE-2026-45321

CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of acti

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-05-26 发布INFO

MuddyWater Uses DLL Side-Loading in Espionage Campaign Targeting 9 Countries

The Iranian hacking group known as MuddyWater has been linked to a new campaign affecting at least nine organizations ac

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-05-26 发布INFO

Iranian APT Targets Aviation, Software Companies With Updated Tools

Nimbus Manticore has continued its operations during and after the US military campaign against Iran. The post Iranian A

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-05-26 发布INFO

CISA Adds One Known Exploited Vulnerability to Catalog

CVE-2026-48172

CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active e

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-05-25 发布INFO

Anthropic: Mythos Detected 23,000 Potential Vulnerabilities Across 1,000 OSS Projects

Many findings have been confirmed to be critical or high-severity vulnerabilities and the number will continue to increa

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-05-22 发布INFO

CISA Adds One Known Exploited Vulnerability to Catalog

CVE-2026-9082

CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active e

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-05-21 发布INFO

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CVE-2025-34291 · CVE-2026-34926

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-05-20 发布INFO

Identity Alone Isn't Enough: Why Device Security Has to Share the Load

Identity checks alone can't stop attackers using stolen session tokens and compromised devices. Specops Software outline

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-05-20 发布INFO

CISA Adds Seven Known Exploited Vulnerabilities to Catalog

CVE-2026-45498 · CVE-2009-3459 · CVE-2010-0249 · CVE-2008-4250 · CVE-2026-41091 · CVE-2010-0806 · CVE-2009-1537

CISA于2026年5月20日将7个已知被利用的漏洞(KEV)添加到其已知被利用漏洞目录中。这些漏洞包括:CVE-2008-4250(Microsoft Windows缓冲区溢出漏洞)、CVE-2009-1537(Microsoft Dir

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-05-20 发布INFO

Verizon DBIR 2026: Vulnerability Exploitation Overtakes Credential Theft as Top Breach Vector

Verizon’s 2026 DBIR finds vulnerability exploitation has overtaken credential abuse as the leading breach vector, as AI

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-05-19 发布INFO

Cyber Resilience is the New Business Continuity Plan

The organizations best prepared to face disruption are those that align security, continuity and risk management around

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-05-19 发布INFO

From PDB strings to MaaS: Tracking a commodity BadIIS ecosystem used by Chinese-speaking threat

Cisco Talos has uncovered a BadIIS variant — identifiable by its embedded "demo.pdb" strings — that functions as commodi

历史摘要 · 未重新核验 · Cisco Talos