#news

共收录 3855 条相关情报。

← 返回所有主题
威胁情报2026-07-10 发布INFO

‘HalluSquatting’ Turns AI Hallucinations Into Botnet Delivery Mechanism

Researchers demonstrate adversarial hallucination squatting against popular AI assistants to achieve remote code executi

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-07-10 发布INFO

Former ransomware negotiator gets 4 years for BlackCat attacks

A former employee of cybersecurity incident response company DigitalMint was sentenced to 70 months in prison for target

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-07-10 发布INFO

Ransomware Negotiator Gets 70 Months in Prison for Aiding BlackCat Attacks

A 41-year-old former ransomware negotiator has been sentenced to nearly six years (i.e., 70 months) in prison in the U.S

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-07-10 发布INFO

Network of 200 GitHub Repositories Used for Malware Infection

A Go module is used to load PowerShell code that fetches a resolver from public dead drops to execute Windows malware. T

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-07-09 发布INFO

OpenMandriva Linux says contributor tried to sabotage the project

The OpenMandriva Linux project announced that it was the target of an attempted act of internal sabotage after a dispute

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-07-09 发布INFO

Injective SDK on npm infected with cryptocurrency wallet stealer

Hackers compromised the Injective Labs SDK project's GitHub repository and used it to publish a malicious package on the

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-07-10 发布INFO

Dormant GitHub Accounts Help Attackers Blend In While Mapping Corporate Orgs

Datadog Security Labs is warning of "several overlapping campaigns" that are systematically enumerating corporate GitHub

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-07-09 发布INFO

New GigaWiper Windows Backdoor Bundles Disk Wiping, Fake Ransomware, and Spyware

Microsoft has taken apart a destructive Windows backdoor it calls GigaWiper. What stands out is how it is built: not one

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-07-09 发布INFO

New Helix vishing group emerges in SharePoint data theft attacks

A new data-extortion group called Helix is using identity-focused tactics such as voice phishing (vishing), device code

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-07-09 发布INFO

Microsoft expects more Windows security updates from AI-discovered flaws

Microsoft says Windows users should expect to see an increase in security updates as the company increasingly relies on

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-07-09 发布INFO

npm 12 Disables Install Scripts by Default to Reduce Supply Chain Risk

GitHub has officially announced the release of npm version 12 with install scripts disabled by default, along with depre

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-07-09 发布INFO

ThreatsDay: Cloud Bucket Hijacking, Windows LPE Chain, Global Fraud Bust + 17 More Stories

Most security mess starts as admin work. A link gets clicked. A tool gets trusted. A bucket name gets reused. A setting

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-07-09 发布INFO

QIZ Security Raises $17 Million for Cryptographic Governance Platform

The Israeli company has developed a cryptographic posture and post-quantum cryptography management platform. The post QI

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-07-09 发布INFO

New Forg365 phishing platform uses AI to target Microsoft 365 accounts

A new phishing-as-a-service (PhaaS) operation called Forg365 focuses on stealing Microsoft 365 accounts by combining adv

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-07-09 发布INFO

UK Government Rolls Out Agentic AI Defense Plan Alongside Industry Pledge

Two announcements on July 7, 2026, demonstrate the government’s determination to improve the level of cybersecurity with

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-07-09 发布INFO

The Hidden Security Risks of Reduced Summer IT Coverage

Security operations don't slow down when IT teams take vacation, but staffing levels often do. Kaseya explains how AI-dr

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-07-09 发布INFO

Palo Alto Networks Patches 13 Vulnerabilities

Buffer overflow, DoS, command injection, SSRF, authentication bypass, and other types of vulnerabilities have been found

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-07-09 发布INFO

AI Attacks Move in Minutes. Join This Webinar on Building a Defense That Keeps Up

AI has changed how fast attacks move. Work that once took an attacker days now takes minutes. Using models like Mythos,

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-07-09 发布INFO

12 Million Impacted by Data Breach at Japanese Telco KDDI

Hackers exploited a zero-day vulnerability in a third-party system to access a KDDI email system for ISPs. The post 12 M

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-07-09 发布INFO

15-Year-Old Linux Vulnerability ‘GhostLock’ Earns Researchers $92k From Google

Affecting every major distribution since 2011, the Linux kernel vulnerability allows attackers to gain root access. The

历史摘要 · 未重新核验 · SecurityWeek