LabubaRAT Masquerades as NVIDIA Software to Control Windows Hosts
Cybersecurity researchers have flagged a previously undocumented Rust-based remote access trojan (RAT) codenamed LabubaR
#cybersecurity
共收录 2667 条相关情报。
← 返回所有主题Progress confirms ShareFile zero-day flaw behind Storage Zone shutdown
Progress Software has confirmed that a high-severity zero-day vulnerability is behind the emergency shutdown of ShareFil
LastPass, Bitwarden users targeted with fake security alerts
LastPass is warning users about an ongoing phishing campaign that is using fake security notices to direct them to fraud
You Don't Have to Run an Exploit to Know If You're Vulnerable
Many vulnerabilities cannot be safely validated with live exploits, either because no exploit exists or the affected sys
RabbitMQ Flaws Could Leak OAuth Secrets and Expose Cross-Tenant Queue Metadata
Cybersecurity researchers have disclosed details of two access control-related flaws impacting the RabbitMQ message brok
Stability Buys Time: A Re-Keying Game for Encrypted Multi-Agent Control
本文针对基于近似全同态加密（FHE）的多智能体控制系统中存在的安全与性能权衡问题，提出了一种新的博弈论分析框架。在加密控制场景下，云端使用CKKS方案对智能体的状态进行全同态加密计算，但由于控制环需要解密以执行控制动作，解密过程中会泄露加密
Microsoft Entra ID gets passkeys default authentication starting September
Microsoft has announced that passkeys will become the default authentication method for the Entra ID enterprise identity
New phishing kits target Microsoft 365 accounts, evade MFA
Two new phishing kits, Jalisco and OmegaLord, have been discovered in attacks targeting Microsoft 365 accounts, using te
11 Old Microsoft-Signed Linux UEFI Shims Could Let Attackers Bypass Secure Boot
Cybersecurity researchers have discovered 11 old, Microsoft-signed, Unified Extensible Firmware Interface (UEFI) applica
Study of 85 Crypto Wallet Extensions Finds Address Leaks and Cross-Site Tracking Risks
Researchers at KU Leuven tested 85 of the most popular crypto wallets that run as browser extensions and found that the
SAP warns of critical flaws in NetWeaver and Commerce Cloud
2026年7月14日，SAP发布了月度安全更新，共修复了16个漏洞，涉及NetWeaver、Commerce Cloud、AppRouter等多个产品。其中3个被标记为严重（Critical），可能导致远程未授权代码执行。NetWeaver
How Pentera Turns AI Security Workflows into Validation Engines
AI security agents are starting to influence real security decisions. They summarize findings, prioritize remediation, r
OAuth Client ID Spoofing Lets Attackers Validate Stolen Microsoft Entra Credentials
At least two distinct threat actors are weaponizing a novel evasion technique called OAuth client ID spoofing in cloud c
Microsoft starts testing cleaner Windows Search without ads
Microsoft is now testing a cleaner and faster version of Windows Search that should prioritize relevant results over ads
US sanctions VPN, malware providers for enabling ransomware attacks
美国财政部外国资产控制办公室（OFAC）于2026年7月14日宣布对两名个人和一个实体实施制裁，指控他们为针对美国组织的勒索软件攻击提供便利。具体而言，受制裁的个人和实体涉嫌运营用于匿名化恶意流量的VPN服务以及分发恶意软件，从而帮助勒索软
Grok Build Uploaded Entire Git Repositories to xAI Storage, Not Just Files It Read
xAI's Grok Build coding CLI was uploading entire Git repositories, full commit history and all, to a Google Cloud Storag
U.S. Sanctions First VPN Service and Malware Cryptor Seller Over Ransomware Support
2026年7月14日，美国财政部外国资产控制办公室（OFAC）宣布对两名个人和一家名为First VPN Service（1VPNS）的VPN服务提供商实施制裁。这是美国首次针对直接支持勒索软件攻击的VPN服务采取此类行动。1VPNS被指控
148 npm Packages Disguised as Student Proxies Turned Browsers Into a DDoS Botnet
A campaign of 148 npm packages disguised as student web proxies turned visitors' browsers into a distributed denial-of-s
Microsoft Maps Three Salesforce Attack Paths Tied to a Year of ShinyHunters Activity
Attackers whose methods line up with the data-extortion group ShinyHunters have spent the past year walking into corpora
Japan's largest taxi operator shuts systems after cyberattack
Japan's largest taxi operator, Nihon Kotsu, announced that its systems were compromised in a cyberattack, forcing the co