Critical Kirki flaw exploited to hijack WordPress admin accounts
CVE-2026-8206
Hackers are exploiting a critical privilege escalation vulnerability (CVE-2026-8206) in the Kirki plugin for WordPress t
#cybersecurity
共收录 2690 条相关情报。
← 返回所有主题Over 116,000 Minecraft systems infected in WeedHack malware campaign
A large-scale malware campaign dubbed WeedHack is targeting Minecraft players and has infected more than 116,000 systems
AI-built ransomware toolkit automates EDR evasion, AD discovery
A threat actor is using an AI-built ransomware attack toolkit that automates Active Directory discovery and helps evade
Google June 2026 Android Update Patches 124 Flaws, One Actively Exploited
CVE-2025-48595
Google on Monday released patches for 124 security vulnerabilities impacting its Android operating system for the month
Gamaredon Exploits WinRAR to Deliver GammaWorm and GammaSteel Against Ukraine
CVE-2025-8088
The Russian hacking group known as Gamaredon has been attributed to the continued exploitation of a WinRAR vulnerability
Oracle WebLogic CVE-2024-21182 Added to KEV Catalog After Active Exploitation
CVE-2024-21182
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a high-severity security flaw impacting
Microsoft Exchange Online outage causes email delays, failures
Microsoft is working to address a widespread service issue affecting the mail flow pipeline for Exchange Online customer
Instagram users locked out after Meta AI abused to steal accounts
Multiple Instagram users had their accounts hijacked after attackers convinced Meta's AI-powered support tools that they
Why the browser is now the front line for AI security
AI-powered attacks and shadow AI adoption are creating new security risks inside the browser. Push Security explains why
CISA flags two-year-old Oracle flaw as actively exploited in attacks
CISA has ordered government agencies to secure their systems against a high-severity Oracle WebLogic Server vulnerabilit
AI-Driven Exploitation is Destroying Vulnerability Management. Here’s How to Handle It.
AI-driven exploitation timelines are rapidly shrinking, and they are not going to stop shrinking. Vulnerabilities are be
Google fixes one actively exploited Android zero-day, 124 flaws
Google has released the June 2026 Android security patches to address 124 vulnerabilities, including one zero-day flaw e
How Leading Organizations Are Turning EDR Into Operational Resilience
Most organizations now recognize that endpoint protection alone is no longer sufficient. That's why adoption of endpoin
Pakistan-Linked SideCopy Targets Afghanistan Finance Ministry with Xeno RAT
Cybersecurity researchers have disclosed details of a spear-phishing campaign likely undertaken by the Pakistan-aligned
Navigating Autonomy: Unveiling Security Experts' Perspectives on Augmented Intelligence in Cybersecurity.
本文通过定性研究方法，探讨了网络安全领域专家对增强智能（即人机协作的智能系统）在自主性方面的观点。研究采用半结构化访谈，访问了多位安全分析师、渗透测试人员和管理者，旨在理解他们对自动化与人类控制平衡的信任、接受度及期望。核心发现包括：专家们
Dashlane Discloses Brute-Force Attack, Encrypted Vaults of Fewer Than 20 Users Downloaded
Password manager Dashlane has disclosed that "fewer than" 20 users on the personal subscription plan had their encrypted
Hackers hijack thousands of sites for ClickFix and FakeUpdate attacks
A threat actor tracked as DriveSurge has been operating large-scale malware distribution campaigns using ClickFix and Fa
Red Hat npm packages compromised to steal developer credentials
More than 30 npm packages under Red Hat's '@redhat-cloud-services' namespace were compromised in a supply-chain attack t
Spain arrests doxer leaking sensitive data of govt employees
The Spanish National Police has arrested an individual for leaking sensitive information related to members of various k
Human Factors in Cybersecurity in Icelandic Small and Medium-sized Enterprises
本研究通过问卷调查（N=130）探讨了冰岛公共和私营部门组织（包括关键基础设施提供商）在网络安全中面临的人为因素挑战。研究发现，从管理层视角来看，人为因素被强烈视为安全障碍，包括缺乏充分的培训或安全意识、招聘困难、网络安全文化薄弱以及时间/