#news

共收录 3725 条相关情报。

← 返回所有主题
威胁情报2026-10-25 发布INFO

Former Unit 8200 Officers Raise $34 Million for Agentic SecOps Startup Mave

Founded in 2025 by Unit 8200 alumni, Tel Aviv-based Mave uses AI agents to investigate alerts across existing security s

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-10-25 发布INFO

OpenAI AI Agents Demonstrate VM Escapes and Secret Cross-Sandbox Communication

OpenAI has announced plans to conduct frontier model training with no live internet access, as it resumes reinforcement

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-24 发布INFO

BlackX UEFI bootkit exploits Baton Drop flaw to bypass Secure Boot

A new UEFI bootkit named BlackX, deployed in an espionage campaign in early 2026, exploited the old Baton Drop vulnerabi

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-10-24 发布INFO

Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software

CVE-2026-111497

A memory-corruption flaw in Google's Brotli decoder sits in many programs that unpack Brotli-compressed data, among them

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-24 发布INFO

Leaked LiteLLM Master Key Let Attackers Steal GitHub Tokens and Hijack Release Pipeline

LiteLLM on Friday revealed that an Agent Platform master key accidentally published to a public GitHub repository in lat

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-24 发布INFO

Google Says Gmail and Photos Data Shared With AI Search Could Be Used for Targeted Ads

Google has updated its privacy policy to spell out that using personalized artificial intelligence (AI) features in Sear

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-24 发布INFO

Researchers Push Over 2 Million Updates to Remotely Disable Popcorn Time Updater That Could Fuel a Botnet

Between November 2025 and March 2026, the Dutch security firm Eye Security pushed more than 2 million updates to compute

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-24 发布INFO

CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud

CVE-2026-110447

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two vulnerabilities impacting Collabora

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-23 发布INFO

Abandoned Popcorn Time app exposed millions of devices to RCE attacks

Researchers remotely disabled a vulnerable updater in the abandoned Time4Popcorn app, a fork of the Popcorn Time BitTorr

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-10-23 发布INFO

Microsoft Teams to get AI-powered, context-aware phishing detection

Microsoft has announced plans to add AI-powered phishing detection to Teams messages starting in early November 2026. [.

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-10-24 发布INFO

BlackX UEFI Bootkit Bypasses Secure Boot on Patched Windows Systems Missing Revocations

Diplomatic organizations in Central Asia have been targeted by a sophisticated new Unified Extensible Firmware Interface

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-23 发布INFO

Ruby Fixes Three Regex Engine Bugs Responsible for Four Critical GitLab RCE Flaws

Ruby has released versions 4.0.9, 3.4.12, and 3.3.13 to fix three bugs in Onigmo, the regular expression engine built in

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-23 发布INFO

Exposed Infrastructure Reveals How Ransomware Affiliates Used AI Agents to Execute Intrusions

Cybersecurity researchers have discovered an artificial intelligence (AI)-driven intrusion ecosystem run by affiliates o

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-23 发布INFO

Microsoft: Windows Server 2016 reaches end of support in January

Microsoft says Windows Server 2016 will stop receiving security updates after it reaches the end of support in January 2

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-10-23 发布INFO

Quest Diagnostics confirms data breach exposed patient records

American clinical laboratory company Quest Diagnostics disclosed that patient records have been exposed after a threat a

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-10-23 发布INFO

PHP shares mitigation for new RCE vulnerability with no patch

The PHP security team has shared mitigation measures for a new remote code execution vulnerability that affects systems

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-10-23 发布INFO

In Other News: Tor Exit Relays Hijacked, Banks Spot Rogue AI Agents, Self-Rebuilding macOS Ransomware

Noteworthy stories that might have slipped under the radar: Russia’s APT28 hit NATO defense firms, PingCAP source code s

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-10-23 发布INFO

You gave your AI agent access, but who is giving it orders?

AI agents can be manipulated through malicious emails, websites, and plugins into executing commands, stealing data, or

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-10-23 发布INFO

Hackers Breach Enterprise Firewalls and VPNs, Exposing Over 70,000 Credentials

Cybersecurity researchers have disclosed details of a large-scale campaign that has targeted exposed network edge device

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-23 发布INFO

HPE patches eight max severity RCE and auth bypass AOS flaws

Hewlett Packard Enterprise (HPE) released security updates to patch 72 vulnerabilities in the Aruba Operating System (Ar

历史摘要 · 未重新核验 · BleepingComputer