Carbonato Botnet Compromises Docker Hosts to Deploy Telegram-Controlled Hermes AI Agent
Cybersecurity researchers have disclosed details of a new botnet malware called Carbonato that's targeting exposed Docke
#cybersecurity
共收录 2647 条相关情报。
← 返回所有主题Bitget resumes Bitcoin withdrawals after $387.5 million crypto heist
Cryptocurrency exchange Bitget has resumed Bitcoin withdrawals suspended after suspected North Korean hackers breached i
JADEPUFFER-Linked Attackers Used Compromised Service Principals to Delete Azure Resources
The threat actor known as JADEPUFFER has been observed orchestrating destructive actions within a Microsoft Azure enviro
US soldier gets 70 months in prison for extorting 10 tech, telecom firms
A former U.S. Army soldier has been sentenced to 70 months in prison for hacking and extorting at least 10 U.S. technolo
CISA Says Attackers Are Exploiting Two Critical Citrix NetScaler Flaws Globally
CVE-2026-88771
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Sunday added two critical Citrix NetScaler ADC and G
CISA orders feds to patch exploited Citrix flaws by Wednesday
The Cybersecurity and Infrastructure Security Agency (CISA) has ordered U.S. government agencies over the weekend to sec
OpenAI is preparing “o,” an always-on ChatGPT assistant that could handle email
OpenAI is testing a new always-on assistant called "o", and references to the unannounced feature briefly showed up on t
Citrix confirms two NetScaler RCE zero-days exploited in attacks
CVE-2026-88771 · CVE-2026-88772
Citrix has confirmed that two critical NetScaler remote code execution vulnerabilities, tracked as CVE-2026-88771 and CV
Cloudflare fixes Containers cross-tenant flaw exposing customer data
Cloudflare has fixed a vulnerability in Containers and Sandboxes that allowed customers with a Workers Paid account to r
Anthropic turns Claude into an AI marketplace with 2,000+ plugins and connectors
Anthropic has just announced a new Claude Marketplace, and it brings all AI-related tools into one place, including plug
Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation
Two critical vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway that allow remote code execution have been ex
Quantum Machine Learning for Cybersecurity Applications: Simulation and Hardware Validation
该论文聚焦一个此前研究覆盖不足的问题：在特征维度受限、计算预算紧张的条件下，经典威胁检测流水线在面对接近决策边界的样本时性能往往会明显退化。作者指出，虽然小型量子处理器已经可用，但现有工作很少系统性地验证量子组件能否在上述资源受限场景下真正
ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks
CVE-2026-35273
勒索与数据窃取敲诈团伙 ShinyHunters 被曝正在针对 Oracle PeopleSoft 应用发起新一轮攻击。据 BleepingComputer 报道，该团伙使用了一种基于 URL 编码的 WAF 绕过技巧，使原本用于缓解 CV
Lunex Stealer Abuses AMD Driver to Disable Security Monitoring and Steal Browser Credentials
The Psychedelic Stealer malware distributed via compromised Ukrainian websites using ClickFix-style Cloudflare verificat
Claude Opus 5.5 uses 95% fewer em dashes, but its answers are getting longer
Anthropic's Claude Opus 5.5 appears to be changing how it writes, with new analysis showing fewer obvious AI writing pat
Microsoft pauses KB5002907 update after Office license deactivations
Microsoft has paused the rollout of the KB5002907 Microsoft 365 update after users report that it deactivated, or in som
GitHub Actions re-enabled with Mini Shai-Hulud payload still active
Two third-party GitHub Actions previously compromised in a Mini Shai-Hulud campaign were re-enabled by their maintainer
OpenAI's AI agents accidentally uploaded user-provided images to third-party sites
OpenAI says its AI agents uploaded user-provided images to third-party image-hosting services while carrying out researc
Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells
CVE-2026-35273
Google is warning of renewed mass exploitation of a known security vulnerability in Oracle PeopleSoft as part of a campa
Zero Trust for AI Agents Starts With Fixing Zero Visibility
The way we talk about AI agents is shifting, and the way we implement them requires an even more fundamental shift. Whil