Critical Bifrost AI Gateway Flaw Lets Attackers Run Commands Without Credentials
CVE-2026-90898
A critical vulnerability in Bifrost, an open-source AI gateway that routes requests to more than 20 LLM providers, allow
#cybersecurity
共收录 2648 条相关情报。
← 返回所有主题Check Point warns of Management Server zero-day exploited in attacks
Check Point Software released emergency hotfixes to address a critical Security Management Server vulnerability that cou
Researcher Drops BigDiskBuster Zero-Day PoC That Blocks Microsoft Defender Updates
A zero-day proof-of-concept tool that stops Microsoft Defender from installing platform and signature updates by filling
EvilTokens PhaaS disrupted after compromising 12,000 Microsoft accounts
The EvilTokens platform that compromised more than 12,000 Microsoft accounts at over 10,000 organizations has been disru
Webinar tomorrow: Inside real-world Google Workspace breaches
Tomorrow's webinar examines real Google Workspace breaches involving social engineering and malicious OAuth applications
D-Link warns of max severity zero-day bug in DIR-822A routers
CVE-2026-86296
D-Link 发布安全公告，警告其已停止支持的旧款 DIR-822A 双频 Wi-Fi 路由器存在一个最高严重等级（Max Severity）的零日漏洞，编号 CVE-2026-86296。该漏洞目前没有官方补丁，且公开的漏洞验证代码（Po
AI Agents Are Rewriting the Rules of Lateral Movement
Security teams have spent decades asking whether an identity has too much access. AI agents raise a harder question: how
New CVSS 10.0 VeloCloud Orchestrator Flaw Actively Exploited in Certificate-Based Setups
CVE-2026-93952
Attackers are exploiting a new flaw in on-premises VeloCloud Orchestrator (VCO), the server that manages the Edge device
DORA Year Two: Can Your SOC Actually See the Attack?
When the Digital Operational Resilience Act (DORA) became enforceable across the European Union in January 2025, it trig
New Linux Kernel Flaw Gives ARM64 KVM Guests Read-Write Access to Host Memory
CVE-2026-89775
A new flaw in the Linux kernel's KVM virtualization code for ARM64 processors can leave a freed piece of host memory exp
SharePoint Flaw Initially Listed as Spoofing by Microsoft Enables Authenticated RCE
CVE-2026-65660
A SharePoint Server vulnerability that Microsoft initially classified as a spoofing flaw with a CVSS score of 6.5 actual
New Windows Defender zero-day blocks Microsoft antivirus updates
Over the weekend, security researcher Abdelhamid Naceri (also known as Nightmare Eclipse) released another Microsoft Def
Malicious npm Package indexed-btree Hid Its Loader in Runtime Code Before Removal
A malicious npm package named "indexed-btree" has been observed hiding its malicious behavior within application code ra
CISA orders feds to patch Zyxel flaw exploited for data theft
Attackers are now actively exploiting a high-severity vulnerability in Zyxel GS1900 series switches, according to the U
SideCopy Broadens India Targeting to Academia With ReverseRAT Spear-Phishing
The threat actor known as SideCopy has been observed using spear-phishing lures to target academic institutions in India
One Hidden Meta Muse Setting Could Let Attackers Turn the AI Assistant Into a Backdoor
Malware already running on a Mac can quietly take over Meta's Muse assistant and use the broad access its owner granted
WordPress Comment2Shell Flaw Can Turn Anonymous Comment XSS Into RCE via Admin Session
CVE-2026-93485
A new flaw in WordPress core let an anonymous visitor leave a comment that planted a hidden script on the page. If a log
Zyxel and Veeam Flaws Under Active Exploitation With Command and SYSTEM Access
CVE-2026-7273
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a now-patched security flaw impacting Z
BigCommerce alerts merchants of data breach linked to Ribon apps
Ecommerce platform BigCommerce has alerted multiple merchants to data breaches after attackers compromised credentials f
CISA alerts of active exploitation of three Linux kernel flaws
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning that hackers are exploiting three Linux kern