#cybersecurity

共收录 2640 条相关情报。

← 返回所有主题
威胁情报2026-10-19 发布INFO

Microsoft fixes classic Outlook bug that hid Copilot buttons

Microsoft has fixed a known issue that removed the Copilot Chat and Copilot buttons in the classic Outlook desktop mail

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-10-19 发布INFO

From Email-to-Case to the Boardroom: How Inherited Agents Break Governance Built for Software

In Salesforce Agentforce, the recommended way to make an agent respond to events is a Flow: a record is created or a cas

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-19 发布INFO

Fake Web3 Accelerator Uses npm Packages to Spread Malware and Hijack AI Agent Traffic

A fake Web3 accelerator has been observed pushing information stealers and backdoors to Windows and macOS systems using

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-19 发布INFO

Microsoft: October Windows Server updates break Exchange sign-in, mail flow

Microsoft has confirmed that this month's Windows Server security updates are causing OWA sign-in and mail delivery issu

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-10-19 发布INFO

Unpatched Broadcom Wi-Fi Flaw Lets Attackers in Range Run Code as Root on Routers

A flaw in Broadcom's Wi-Fi setup software lets an attacker within radio range run code as root on Broadcom-based routers

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-19 发布INFO

OpenCode Console Breach May Have Exposed OpenAI, Anthropic, and Google API Keys

An intruder reached a legacy system at OpenCode on the night of October 16 and may have exposed the third-party AI provi

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-18 发布INFO

Hackers exploit SiteGuard WAF flaw to run commands as admins

Attackers are targeting an OS command injection vulnerability in SiteGuard Server Edition that lets them execute command

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-10-18 发布INFO

ConnectWise Suspends Cloud Backup After Attackers Compromise Microsoft 365 Tenants

ConnectWise on Saturday said it has disabled seven ConnectWise application identities as it continues its investigation

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-17 发布INFO

Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack

ConnectWise has shut down customer access to its Cloud Backup service (formerly SkyKick Cloud Backup) after hackers acce

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-10-17 发布INFO

Drupal patches critical RCE flaws, warns exploits may emerge soon

Drupal has patched two critical vulnerabilities that could allow attackers to execute code remotely on websites running

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-10-17 发布INFO

MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon

Cybersecurity researchers have discovered a malicious npm package that's part of a recently disclosed software supply ch

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-17 发布INFO

Hackers Use Compromised ConnectWise Credential to Sign In to 173 Microsoft 365 Tenants

Cybersecurity researchers are sounding the alarm related to an active campaign in which unknown threat actors are abusin

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-16 发布INFO

Critical BlockStrap flaw lets hackers run code on Magento servers

CVE-2026-103849

Researchers warn that hackers could soon exploit a maximum-severity vulnerability (CVE-2026-103849) affecting Magento an

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-10-16 发布INFO

Researchers Demonstrate OpenBSD Root Exploit Chaining 37-Year-Old Shared-Memory Bug

A local privilege escalation exploit published today gains root on OpenBSD 7.9 by chaining a roughly 37-year-old integer

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-16 发布INFO

Targeted ads installed Candiru spyware in zero-click attacks

Candiru spyware was delivered to devices at Al Jazeera Media Network via targeted online advertisements in a zero-click

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-10-15 发布INFO

Hackers exploit Collabora RCE flaw to backdoor Nextcloud servers

CVE-2026-110447

Threat actors are exploiting a critical command execution flaw, now tracked as CVE-2026-110447, in the Collabora Online

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-10-16 发布INFO

Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory

CVE-2026-99999

A newly disclosed critical flaw in the Linux kernel allows code inside a virtual machine to read memory on the host comp

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-15 发布INFO

Android gets AI defenses against messaging scams, fake calls

Google announced new AI-powered defenses against scam messages and call-forwarding abuse on Android, currently rolling o

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-10-16 发布INFO

ThreatsDay: Adobe RCE, DNS Wallet Theft, NVIDIA Container Escape, Self-Healing Backdoor + 23 More

Someone built a tool to steal data, then decided it should scare the victim for fun. Yes, that’s an actual feature. And

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-15 发布INFO

Hackers hijack D-Link, Ubiquiti devices to resell your stolen bandwidth

A proxyjacking campaign has impacted devices in 34 countries, monetizing victims' internet connections through a commerc

历史摘要 · 未重新核验 · BleepingComputer