Hackers exploit RCE flaws in Qinglong task scheduler for cryptomining
Hackers are exploiting two authentication bypass vulnerabilities in the Qinglong open-source task scheduling tool to dep
#cybersecurity
共收录 2732 条相关情报。
← 返回所有主题Hackers arrested for hijacking and selling 610,000 Roblox accounts
The Ukrainian police have arrested three individuals who hacked more than 610,000 Roblox gaming accounts and sold them f
SAP-Related npm Packages Compromised in Credential-Stealing Supply Chain Attack
Cybersecurity researchers are sounding the alarm about a new supply chain attack campaign targeting SAP-related npm Pack
cPanel, WHM emergency update fixes critical auth bypass bug
A critical vulnerability affecting all but the latest versions of cPanel and the WebHost Manager (WHM) dashboard could b
New Wave of DPRK Attacks Uses AI-Inserted npm Malware, Fake Firms, and RATs
Cybersecurity researchers have discovered malicious code in an npm package after a malicious package as a dependency to
European police dismantles €50 million crypto investment fraud ring
Austrian and Albanian authorities dismantled a criminal ring accused of running a large-scale cryptocurrency investment
Learning from the Vercel breach: Shadow AI & OAuth sprawl
A single third-party OAuth integration can become a direct path into your environment. Push explains how the Vercel brea
GitHub fixes RCE flaw that gave access to millions of private repos
CVE-2026-3854
In early March, GitHub patched a critical remote code execution vulnerability (CVE-2026-3854) that could have allowed at
Webinar: How to Automate Exposure Validation to Match the Speed of AI Attacks
In February 2026, researchers uncovered a shift that completely changed the game: threat actors are now using custom AI
What to Look for in an Exposure Management Platform (And What Most of Them Get Wrong)
Every security team has a version of the same story. The quarter ends with hundreds of vulnerabilities closed. The dashb
CISA orders feds to patch Windows flaw exploited as zero-day
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to secure their Windows sy
Critical cPanel Authentication Vulnerability Identified — Update Your Server Immediately
cPanel has released security updates to address a security issue impacting various authentication paths that could allow
CISA Adds Actively Exploited ConnectWise and Windows Flaws to KEV
CVE-2024-1708
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added two security flaws impacting ConnectWi
Microsoft says backend change broke Teams Free chat and calls
Microsoft is working to resolve a known issue that prevents some Microsoft Teams Free users from chatting and calling ot
SecMate: Multi-Agent Adaptive Cybersecurity Troubleshooting with Tri-Context Personalization
该研究提出了SecMate，一个基于多智能体架构的网络安全故障排除虚拟客户助手（VCA）。针对传统IT支持依赖人工、效率低下且缺乏个性化的问题，SecMate通过三个维度的上下文个性化来提升故障排除的准确性和用户体验：1. 设备特异性：在客
LiteLLM CVE-2026-42208 SQL Injection Exploited within 36 Hours of Disclosure
CVE-2026-42208
2026年4月29日，The Hacker News报道，BerriAI的LiteLLM Python包中存在一个严重SQL注入漏洞（CVE-2026-42208，CVSS评分9.3），该漏洞在公开披露后36小时内即被威胁行为者积极利用。L
Broken VECT 2.0 ransomware acts as a data wiper for large files
Researchers are warning that the VECT 2.0 ransomware has a problem in the way it handles encryption nonces that leads to
Hackers are exploiting a critical LiteLLM pre-auth SQLi flaw
CVE-2026-42208
Hackers are targeting sensitive information stored in the LiteLLM open-source large-language model (LLM) gateway by expl
Video service Vimeo confirms Anodot breach exposed user data
Vimeo has disclosed that data belonging to some of its customers and users has been accessed without authorization follo
Researchers Discover Critical GitHub CVE-2026-3854 RCE Flaw Exploitable via Single Git Push
CVE-2026-3854
Cybersecurity researchers have disclosed details of a critical security vulnerability impacting GitHub.com and GitHub En