Palo Alto Networks warns of firewall RCE zero-day exploited in attacks
2026年5月6日，Palo Alto Networks发布紧急警告，称其PAN-OS防火墙的User-ID认证门户中存在一个关键远程代码执行（RCE）零日漏洞，且已被攻击者积极利用。该漏洞影响运行PAN-OS的部分版本，具体编号尚未分配。
#cybersecurity
共收录 2732 条相关情报。
← 返回所有主题Google's Android Apps Get Public Verification to Stop Supply Chain Attacks
Google has announced expanded Binary Transparency for Android as a way to safeguard the ecosystem from supply chain atta
Windows Phone Link Exploited by CloudZ RAT to Steal Credentials and OTPs
Cybersecurity researchers have disclosed details of an intrusion that involved the use of a CloudZ remote access tool (R
Palo Alto PAN-OS Flaw Under Active Exploitation Enables Remote Code Execution
CVE-2026-0300
Palo Alto Networks has released an advisory warning that a critical buffer overflow vulnerability in its PAN-OS software
The Adversarial Discount - AI, Signal Correlation, and the Cybersecurity Arms Race
该论文通过一个竞赛理论模型研究了AI增强的攻防投资博弈。攻击者和防御者在多个攻击表面上分配资源，其中攻击者的投资通过两个渠道发挥作用：无条件增强攻击能力，以及条件性削弱防御效能，从而产生一个随防御者自身投资而内生深化的“对手折扣”。作者推导
New stealthy Quasar Linux malware targets software developers
A previously undocumented Linux implant named Quasar Linux (QLNX) is targeting developers' systems with a mix of rootkit
Instructure hacker claims data theft from 8,800 schools, universities
The hacker behind a breach at education technology giant Instructure claims to have stolen 280 million data records for
DAEMON Tools trojanized in supply-chain attack to deploy backdoor
Hackers trojanized installers for the DAEMON Tools software and since April 8, delivered a backdoor to thousands of syst
Student hacked Taiwan high-speed rail to trigger emergency brakes
A 23-year-old university student in Taiwan was arrested for interfering with the TETRA communication system used by the
Critical Apache HTTP/2 Flaw (CVE-2026-23918) Enables DoS and Potential RCE
CVE-2026-23918
The Apache Software Foundation (ASF) has released security updates to address several security vulnerabilities in the HT
DAEMON Tools Supply Chain Attack Compromises Official Installers with Malware
A newly identified supply chain attack targeting DAEMON Tools software has compromised its installers to serve a malicio
FTC to ban data broker Kochava from selling Americans’ location data
The FTC will ban data broker Kochava and its subsidiary, Collective Data Solutions (CDS), from selling location data wit
China-Linked UAT-8302 Targets Governments Using Shared APT Malware Across Regions
A sophisticated China-nexus advanced persistent threat (APT) group has been attributed to attacks targeting government e
The EOL Blind Spot in Your CVE Feed: What SCA Tools Miss
Critical vulnerabilities can exist in open source software your scanners don't check. HeroDevs reveals how EOL software
Vimeo data breach exposes personal information of 119,000 people
The ShinyHunters extortion gang stole personal information belonging to over 119,000 people after hacking the Vimeo onli
The Back Door Attackers Know About — and Most Security Teams Still Haven’t Closed
Every AI tool, workflow automation, and productivity app your employees connected to Google or Microsoft this year left
MetInfo CMS CVE-2026-29014 Exploited for Remote Code Execution Attacks
CVE-2026-29014
Threat actors are actively exploiting a critical security flaw impacting an open-source content management system (CMS)
Google now offers up to $1.5 million for some Android exploits
Google overhauls its Android and Chrome vulnerability rewards programs, offering bounties of up to $1.5 million for the
We Scanned 1 Million Exposed AI Services. Here's How Bad the Security Actually Is
While the software industry has made genuine strides over the past few decades to deliver products securely, the furious
Karakurt extortion gang ‘cold case’ negotiator gets 8.5 years in prison
A Latvian national extradited to the United States was sentenced to 8.5 years in prison for his "cold case" negotiator r