#news

共收录 3793 条相关情报。

← 返回所有主题
威胁情报2026-07-27 发布INFO

Beelzebub Raises $3.4 Million for Hacker-Trapping Platform

The company plans to expand its research team, open new offices in Rome and San Francisco, and acquire new clients. The

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-07-27 发布INFO

What’s Hiding in Your Mobile Apps? Lookout MSEC Aims to Find Out

The new Mobile Security Exposure Center creates SBOMs for enterprise mobile apps to uncover vulnerable components, depen

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-07-27 发布INFO

Cruciferra Crypter Uses BYOVD and Process Ghosting to Hide Windows Malware

The China-linked cybercrime group behind the use of income tax-related phishing lures targeting Indian taxpayers, tax pr

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-07-27 发布INFO

Hacked Public Wi-Fi Gateways Used to Harvest Corporate Credentials

A threat actor has been using the compromised appliances to target the Microsoft 365 accounts of traveling corporate emp

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-07-27 发布INFO

Anthropic’s Opus 5 Nears Mythos 5 on Finding Bugs, but Falls Short on Exploits

Binary-based vulnerability scanning, penetration testing, and exploit generation are blocked in Opus 5. The post Anthrop

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-07-27 发布INFO

TELESHIM Abuses Telegram for C2 in Attacks Against Middle East Governments

Cybersecurity researchers have flagged fresh malicious cyber activity by a threat actor with ties to East Asia targeting

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-07-27 发布INFO

GitHub Adds 3-Day Dependabot Cooldown to Limit Poisoned Package Adoption

GitHub has announced a new cooldown mechanism in Dependabot, allowing the tool to wait at least three days after a relea

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-07-26 发布INFO

GitHub, PyPI add time-based defenses against supply chain attacks

GitHub and PyPI (Python Package Index) have introduced a time-based mechanism in the Dependabot dependency management to

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-07-25 发布INFO

Steam forum ClickFix attacks infect gamers with XMRig cryptominers

Steam discussion forums are being abused in ClickFix attacks that pretend to be fixes for game and computer problems but

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-07-26 发布INFO

Malvertising Sends Malware in Pieces, Then Makes the Browser Build the Executable

A malvertising operation dubbed SourTrade is making victims' browsers build the final Windows executable themselves, usi

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-07-25 发布INFO

Malicious sites use JavaScript to build malware in browser memory

A massive malvertising campaign is using fake Solana, Luno, and TradingView webpages with malicious JavaScript that inst

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-07-25 发布INFO

ShinyHunters data leaks fuel $2,000 sextortion email scam

Threat actors are using email addresses exposed in data breaches leaked by the ShinyHunters extortion group to send sext

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-07-25 发布INFO

Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patched Available

CVE-2026-16723

Security firms ThreatBook and Imperva say attackers are targeting a critical flaw in Fastjson, Alibaba's JSON library fo

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-07-25 发布INFO

Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git

Security researchers at depthfirst published working exploit code on July 24 for a GitLab flaw that GitLab patched six w

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-07-25 发布INFO

CTM360 Research Reveals How Insurance Phishing Has Evolved Into Real-Time Account Hijacking

For years, phishing campaigns targeting financial institutions followed the same playbook. Victims were tricked into ent

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-07-25 发布INFO

Cl0p Affiliates Target Internet-Exposed PTC Windchill and FlexPLM with Unauthenticated RCE

Threat actors linked to the Cl0p (aka Chubby Scorpius, FIN11, Graceful Spider, and Lace Tempest) ransomware campaign are

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-07-25 发布INFO

DevMan RaaS Portal Centralizes Payload Builds, Victim Management, and Affiliate Payouts

The operators of the DevMan ransomware-as-a-service (RaaS) scheme are maintaining a dedicated web platform that offers a

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-07-25 发布INFO

OpenAI confirms ChatGPT is down worldwide

ChatGPT, the famous artificial intelligence chatbot that allows users to converse with various personalities and topics,

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-07-25 发布INFO

Rockwell Patches Code Execution Flaws in Arena Simulation Software

A researcher has explained how an attacker could exploit these vulnerabilities to target industrial organizations. The p

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-07-24 发布INFO

OnTrac notifies customers of data breach after network hack

OnTrac parcel delivery company is informing that hackers breached its corporate network and may have accessed personal d

历史摘要 · 未重新核验 · BleepingComputer