Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote Access
CVE-2026-59310
Threat actors have begun to actively exploit a recently patched critical security flaw in Broadcom VMware vCenter, accor
#cybersecurity
共收录 2667 条相关情报。
← 返回所有主题Malicious LiteLLM Releases Tied to Trivy Hack May Have Exposed 2,100+ Organizations
Two malicious LiteLLM releases sat on PyPI for about 40 minutes in March carrying credential-stealing code capable of ha
SAP Commerce Cloud Flaw Could Let Unauthenticated Attackers Execute Arbitrary Code
CVE-2026-58231
SAP has released patches to address a maximum-severity security flaw impacting Commerce Cloud (Data Hub Adapter) that co
ShieldBreak Zero-Day PoC Claims Microsoft Defender Patch Bypass With SYSTEM Access
CVE-2026-50656
The security researcher going by the name Chaotic Eclipse (aka INFINITE NIGHTMARE, MSNightmare, and Nightmare-Eclipse) h
Cisco ASA and FTD Flaw Exploited in the Wild Can Trigger Remote DoS
CVE-2026-20349
思科公司发布安全公告，警告其 Secure Firewall 自适应安全设备（ASA）软件和 Secure Firewall 威胁防御（FTD）软件中存在一个被在野利用的高危漏洞，编号为 CVE-2026-20349（CVSS 评分为 8.
Google says Chrome cuts 7 billion unwanted Android notifications a day to fight abuse
Google says Chrome's anti-abuse systems reduced unwanted notifications on Android by more than 7 billion per day during
DeadLock ransomware uses blockchain to resist infrastructure takedown
The DeadLock ransomware operation is using a decentralized infrastructure that relies on blockchain-backed services to p
Sandworm hackers target IT pros with trojanized WireGuard VPN client
2026年8月11日，BleepingComputer报道称，俄罗斯威胁组织Sandworm自2026年5月起，通过虚假工作邀请针对系统管理员和IT专业人员发起攻击。攻击者使用木马化的WireGuard VPN客户端作为攻击工具，利用招聘流
Microsoft Patches 398 Flaws Including a Windows Driver Zero-Day Under Active Attack
CVE-2026-68820
Microsoft released its monthly security updates on Tuesday, and one of the flaws it closed is already being used in atta
Cisco warns of ASA and FTD VPN flaw exploited to crash devices
Cisco 于 2026 年 8 月 11 日发布安全警告，指出其 Secure Firewall ASA 和 Firepower Threat Defense（FTD）软件中一个高严重性的拒绝服务（DoS）漏洞正被攻击者积极利用。该漏洞影
Kimwolf v7 Android Botnet Makes HTTP/2 DDoS Traffic Look Like Legitimate Browsing
Cybersecurity researchers have discovered a new version of the Kimwolf/AISURU Android and Internet of Things (IoT) botne
Zoom Annotation Flaws Could Let a Meeting Participant Hijack Another Attendee's Client
Anyone sharing their screen on a Zoom call could have taken over the computers of everyone watching, and anyone watching
Sandworm-Linked UAC-0145 Uses Fake Job Interviews to Push VPN That Can Run Commands
The Computer Emergency Response Team of Ukraine (CERT-UA) has disclosed details of a new social engineering campaign orc
Delta probes Wi-Fi deauth attack on flight carrying DEF CON attendees
Delta Air Lines is investigating an unauthorized Wi-Fi network that appeared aboard a flight from Las Vegas to Atlanta c
Microsoft releases Windows 10 KB5120249 extended security update
Microsoft has released Windows 10 KB5120249 Extended Security Updates for versions 22H2 and 21H2 to fix security vulnera
Microsoft August 2026 Patch Tuesday fixes 400 flaws, 3 zero-days
Today is Microsoft's August 2026 Patch Tuesday, and with it comes security updates for a massive 400 flaws, including on
Windows 11 KB5121003 & KB5120240 cumulative updates released
Microsoft has released Windows 11 KB5121003 and KB5120240 cumulative updates for versions 25H2/24H2 and 23H2 to fix secu
Researchers Disclose AI-Assisted SharePoint Exploit Chain Reaching Unauthenticated RCE
CVE-2026-55040
Security researchers found a way to enter Microsoft SharePoint servers as any user, including an administrator, with no
DeadLock Ransomware Uses Polygon Smart Contracts to Make Extortion Infra Harder to Disrupt
The ransomware group known as DeadLock has been observed using decentralized infrastructure to facilitate victim communi
Wesco confirms security incident after ExfilSquad claims data theft
Global supply chain and distribution giant Wesco has confirmed in a statement for BleepingComputer that it is investigat