CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a critical flaw impacting Ray to its Kn
#cybersecurity
共收录 2667 条相关情报。
← 返回所有主题Critical GitLab GraphQL Flaw Could Let Unauthenticated Attackers Delete Public Projects
CVE-2026-19478
GitLab has released security updates to address a critical vulnerability impacting its Community Edition (CE) and Enterp
Hacker claims 3.6 million Azure account records stolen from major companies
A threat actor is selling employee databases allegedly stolen from the Microsoft Azure infrastructure of multiple Fortun
Pokémon Center data breach exposes customer info, cancels some orders
Pokémon Center is notifying customers in the United Kingdom and Germany that it suffered a third-party data breach after
Snowflake GitHub Actions Flaw Lets Crafted Issues Trigger Command Injection
Cybersecurity researchers at Wiz have disclosed a new GitHub Actions workflow injection vulnerability in Snowflake's pub
Forminator WordPress Flaw Can Enable Unauthenticated RCE via Malicious PHP Uploads
CVE-2026-15748
A critical security flaw has been disclosed in Forminator Forms, a WordPress plugin with more than 600,000 active instal
Cavern C2 Uses DNS and Google Apps Script to Blend Into Legitimate Traffic
Cybersecurity researchers have traced the continued evolution of the Cavern (aka Cav3rn) command-and-control (C2) framew
Topological Attribution Distance (TAD): Revealing Segment-Level RAG Influence on LLM Output Geometry for Incident Log Analysis
本文提出了一种名为拓扑归因距离（Topological Attribution Distance, TAD）的新方法，用于解决大语言模型（LLM）在网络安全运营中输出证据归因与溯源的问题。随着LLM和Agentic AI被集成到安全运维系统
Microsoft confirms GitHub is down worldwide
GitHub is down for some users as a widespread outage is causing errors across the website, API, Actions, Pull Requests,
Certighost and the Privilege Hiding in Your Certificate Authority
CVE-2026-54121
2026年8月17日，BleepingComputer报道了CVE-2026-54121，该漏洞存在于企业证书颁发机构（Enterprise CA）中，允许标准域用户利用权限提升将企业CA完全控制并使其行为类似于域控制器（Domain Co
⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Browser Hijacks and More
The expensive attacks are not always the clever ones. This week had plenty of proof. Exposed services got hit, old bugs
Windows Server 2022 reaches end of mainstream support in 60 days
Microsoft has reminded IT administrators that Windows Server 2022 is rapidly approaching its mainstream end date of Octo
How MCP Servers Can Expose Enterprise Secrets
MCP servers can expose enterprise secrets through plaintext configuration files, over-permissioned access and prompt inj
Philips and GE investigating Clop ransomware data theft claims
Tech giants General Electric (GE) and Philips have also confirmed they're investigating claims that the Clop ransomware
Unisoc VoLTE Video Call Exploit Chain Can Give Attackers Full Android Kernel Access
Security researchers at SSD Secure Disclosure have published a two-stage exploit chain that achieves full Android kernel
French tax authority data breach affects 678,000 individuals
The French Ministry of the Economy and Finance has disclosed a data breach after an attacker accessed the General Direct
Evooo1Bot Linux Botnet Exploits Known Flaws to Turn Edge Devices Into SOCKS5 Proxies
Cybersecurity researchers have flagged a previously undocumented Linux botnet family dubbed Evooo1Bot that derives its c
Microsoft working on Defender patch for ShieldBreak zero-day
CVE-2026-69414
Microsoft is working on a security patch for the "ShieldBreak" zero-day vulnerability disclosed last week by security re
Suspected China-Nexus Actor Exploits VMware vCenter Flaw, Deploys Babuk-Derived Ransomware
CVE-2026-59310
Cybersecurity researchers have attributed the exploitation of a newly patched security flaw in Broadcom VMware vCenter t
SafePal data breach impacts 39,798 customers, stolen info for sale
Cryptocurrency hardware wallet provider SafePal is warning of a data breach affecting about 39,798 customers after a fla