Hackers exploit auth bypass flaw in Burst Statistics WordPress plugin
Hackers are leveraging a critical authentication bypass vulnerability in the WordPress plugin Burst Statistics to obtain
#cybersecurity
共收录 2713 条相关情报。
← 返回所有主题Cisco warns of new critical SD-WAN flaw exploited in zero-day attacks
CVE-2026-20182
Cisco is warning that a critical Catalyst SD-WAN Controller authentication bypass flaw, tracked as CVE-2026-20182, was a
OpenAI confirms security breach in TanStack supply chain attack
OpenAI says two employees' devices were breached in the recent TanStack supply chain attack that impacted hundreds of np
Windows 11 and Microsoft Edge hacked at Pwn2Own Berlin 2026
2026年5月14日，Pwn2Own Berlin 2026安全竞赛首日，安全研究人员成功利用24个零日漏洞攻破Windows 11和Microsoft Edge，并获得总计523,000美元奖金。本次竞赛聚焦于桌面操作系统与浏览器安全，多
Cisco Catalyst SD-WAN Controller Auth Bypass Actively Exploited to Gain Admin Access
CVE-2026-20182
Cisco has released updates to address a maximum-severity authentication bypass flaw in Catalyst SD-WAN Controller that i
Stealer Backdoor Found in 3 Node-IPC Versions Targeting Developer Secrets
Cybersecurity researchers are sounding the alarm about what has been described as "malicious activity" in newly publishe
ThreatsDay Bulletin: PAN-OS RCE, Mythos cURL Bug, AI Tokenizer Attacks, and 10+ Stories
Everything is still on fire. This week feels dumb in the worst way — bad links, weak checks, fake help desks, shady foru
18-year-old NGINX vulnerability allows DoS, potential RCE
An 18-year-old flaw in the NGINX open-source web server, discovered using an autonomous scanning system, can be exploite
Cyber-Enabled Cargo Crime: How Cybercrime Tradecraft is Used to Steal Freight
Cargo theft now starts with phishing emails and stolen credentials, not hijackings, to reroute and steal freight from su
Ghostwriter Targets Ukrainian Government With Geofenced PDF Phishing, Cobalt Strike
The Belarus-aligned threat group known as Ghostwriter has been attributed to a fresh set of attacks targeting government
KongTuke hackers now use Microsoft Teams for corporate breaches
Initial access broker KongTuke has moved to Microsoft Teams for social engineering attacks, taking as little as five min
PraisonAI CVE-2026-44338 Auth Bypass Targeted Within Hours of Disclosure
CVE-2026-44338
Threat actors have been observed attempting to exploit a recently disclosed security vulnerability in PraisonAI, an open
How AI Hallucinations Are Creating Real Security Risks
AI hallucinations are introducing serious security risks into critical infrastructure decision-making by exploiting huma
Dell confirms its SupportAssist software causes Windows BSOD crashes
Dell confirmed that its SupportAssist software is causing blue-screen crashes on some Windows systems following a wave o
Windows Zero-Days Expose BitLocker Bypasses And CTFMON Privilege Escalation
An anonymous cybersecurity researcher who disclosed three Microsoft Defender vulnerabilities has returned with two more
US charges suspected Dream Market admin arrested in Germany
The alleged main administrator of Dream Market Incognito Market, one of the largest dark web marketplaces before its shu
New Fragnesia Linux flaw lets attackers gain root privileges
CVE-2026-46300
Linux distros are rolling out patches for a new high-severity kernel privilege escalation vulnerability (known as Fragna
New Fragnesia Linux Kernel LPE Grants Root Access via Page Cache Corruption
CVE-2026-46300
Details have emerged about a new variant of the recent Dirty Frag Linux local privilege escalation (LPE) vulnerability t
18-Year-Old NGINX Rewrite Module Flaw Enables Unauthenticated RCE
CVE-2026-42945
Cybersecurity researchers have disclosed multiple security vulnerabilities impacting NGINX Plus and NGINX Open, includin
West Pharmaceutical says hackers stole data, encrypted systems
West Pharmaceutical Services disclosed that it was the target of a cyberattack that resulted in data exfiltration and sy