Open-Source Android AI Agents Could Let Invisible Screen Text Run Code on Host PCs
An Android app that can draw over other windows and write to shared storage can slip instructions to the AI agent drivin
#news
共收录 3793 条相关情报。
← 返回所有主题New HollowGraph Malware Abuses Microsoft 365 Calendar for C&C Communication
Part of a larger toolkit, HollowGraph uses a compromised 365 account’s calendar as a two-way dead-drop. The post New Hol
N-day is Becoming N-Hour. Patching Faster Won't Save You.
Every patch is a confession. The moment a vendor ships a security fix, the diff between the old code and the new code t
CISO Conversations: Andreas Gaetje – From Economics to CISO at Körber AG
Gaetje’s story shows that you don’t need to be a ‘deep bit-crawler’ to become a Chief Information Security Officer. The
New Bit2Watt Attack Could Let Cloud Tenants Disrupt Power Grids Without an Exploit
A cloud tenant using nothing but ordinary GPU access can push a data center's power draw up and down fast enough to thre
Estée Lauder Discloses Impact From Oracle EBS Zero-Day Hack
Hackers exfiltrated personal, financial, and health information from the company’s Oracle EBS instance in August 2025. T
US seizes over 1,000 websites in FIFA World Cup piracy crackdown
The U.S. Justice Department has seized more than 1,000 websites and blocked 1,970 domains used to stream FIFA World Cup
Meta Paid $78,000 Bounty for Vulnerability Exposing Customer Support Data
A security researcher discovered a broken access control vulnerability in Meta’s support infrastructure. The post Meta P
Critical Palo Alto VPN bug now exploited by Qilin ransomware gang
2026年7月21日，安全公司Arctic Wolf披露，Qilin勒索软件团伙正在利用Palo Alto Networks PAN-OS GlobalProtect VPN中的一个关键认证绕过漏洞（CVE未公开）入侵企业网络。该漏洞允许未
Clover Health Investments Discloses Data Breach
Using social engineering, hackers compromised employee accounts with access to personal and health information. The post
Microsoft shares manual fix for WSUS sync delays and timeouts
Microsoft has shared manual mitigations to help IT administrators fix Windows Server Update Services (WSUS) servers affe
WordPress wp2shell Exploitation Grows as Public Exploit Fuels Mass Scanning
CVE-2026-63030 · CVE-2026-60137
Attackers have begun to exploit two critical vulnerabilities in WordPress that, when combined together, enable unauthent
Exploitation of ServiceNow Vulnerability Seen Days After Disclosure
CVE-2026-6875
The ServiceNow AI platform vulnerability tracked as CVE-2026-6875 can be exploited for remote code execution. The post E
Windows LegacyHive zero-day flaw gets free, unofficial patches
Free unofficial patches are available for a recently disclosed Windows zero-day flaw that allows attackers to escalate p
New ENCFORGE Ransomware Targets AI Model Files in Langflow RCE Attack
Researchers at Sysdig have linked a second attack on the same Langflow server to JADEPUFFER, the AI-agent-driven operato
Critical ServiceNow AI Platform Flaw Exploited for Unauthenticated Code Execution
CVE-2026-6875
Threat actors are now exploiting a recently disclosed critical security flaw impacting ServiceNow AI Platform, according
Estée Lauder discloses data breach via Oracle E-Business flaw
Cosmetics giant Estée Lauder is notifying employees of a data breach after hackers exploited a flaw in Oracle E-Business
SonicWall SMA1000 flaws exploited as zero-days to push custom malware
2026年7月，安全媒体BleepingComputer报道称，SonicWall SMA1000系列安全远程访问设备存在两个未公开编号的漏洞，在官方披露前已被攻击者作为零日漏洞利用数周。这些漏洞允许威胁行为者在未修复的SMA1000 VP
Hackers steal $23.7 million in crypto from Ostium in off-chain attack
The Ostium trading platform announced that an attacker stole $23.75 million from its liquidity provider vault last week,
Cursor, Codex, Gemini CLI, Antigravity hit by sandbox escapes
Researchers escaped the sandboxes in Cursor, Codex, Gemini CLI and Antigravity by having the AI agent write files that t