#news

共收录 3855 条相关情报。

← 返回所有主题
威胁情报2026-07-01 发布INFO

Amazon fined $2.25M for withholding evidence from fraud victims

The U.S. Federal Trade Commission (FTC) says Amazon will pay a $2.25 million civil penalty to settle charges that it blo

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-07-01 发布INFO

Apple Patches Dozens of Vulnerabilities Across iOS, macOS, and Safari

The updates fix vulnerabilities in WebKit, the kernel, WebRTC, Web Extensions, and other components affecting iPhone, iP

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-07-01 发布INFO

Dawnguard Raises $6.3 Million for Security Architecture Automation Platform

The company has publicly launched its solution to help organizations design, build, and operate secure cloud systems. Th

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-07-01 发布INFO

Massive Password Spray Campaign Targeting Azure CLI

Hackers were seen making over 81 million login attempts originating from systems associated with hosting provider LSHIY.

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-07-01 发布INFO

Adobe patches seven max severity ColdFusion, Campaign flaws

Adobe has released security patches for seven maximum-severity vulnerabilities in the ColdFusion web app development pla

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-07-01 发布INFO

Phantom Squatting Uses AI-Hallucinated Domains for Phishing and Malware

Large language models keep inventing web addresses that do not exist. Attackers have started buying those made-up domain

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-07-01 发布INFO

Anthropic Restores Claude Fable 5 After U.S. Lifts Jailbreak-Linked Export Controls

Anthropic is putting Claude Fable 5 back online worldwide. On June 30, the U.S. Commerce Department lifted the export co

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-07-01 发布INFO

Google Patches 382 Chrome Vulnerabilities

Fifteen of the newly patched flaws have been rated ‘critical’ and 67 have been rated ‘high severity’. The post Google Pa

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-07-01 发布INFO

Azure CLI Password Spray Hits at Least 78 Microsoft Accounts in 81M+ Attempts

Cybersecurity researchers have warned of a "massive, ongoing, automated password spray attack" aimed at Microsoft's Azur

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-07-01 发布INFO

Researcher Analyzes 3,000 Live ClickFix Payloads, Exposing API-Driven Malware Delivery

ClickFix, the trick that fools people into running malware by hand, has quietly grown a back office. New research shows

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-07-01 发布INFO

Citrix Patches Six NetScaler Flaws Allowing File Read and Denial-of-Service

CVE-2026-8451

Citrix on Tuesday released security updates to address multiple flaws in NetScaler ADC (formerly Citrix ADC) and NetScal

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-06-30 发布INFO

Anthropic to restore Claude Fable access on Wednesday

Anthropic has confirmed that the Department of Commerce has lifted export controls on Claude's two most powerful models,

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-06-30 发布INFO

Anthropic rolls out Sonnet 5 with near-Opus 4.8 performance at a lower price

Anthropic is now rolling out Sonnet 5, and it's almost as good as the Opus range, but it is designed to be cheaper than

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-06-30 发布INFO

New BioShocking attack manipulates AI browser into data theft

A new prompt injection attack dubbed "BioShocking" could trick AI-powered browsers into treating real-world risky action

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-06-30 发布INFO

Microsoft accelerates quantum-safe roadmap as risks grow

Microsoft announced today that it is accelerating its quantum-safe security roadmap, saying advances in quantum computin

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-06-30 发布INFO

Malicious PyPI packages give hackers control of Telegram bot servers

A campaign active since last November has been targeting Python developers building Telegram bots with trojanized Pyrogr

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-06-30 发布INFO

Microsoft Warns Poisoned MCP Tool Descriptions Can Make AI Agents Leak Data

New Microsoft research shows how attackers can hijack AI agents that act on a user's behalf, using nothing more than a p

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-06-30 发布INFO

RustDuck Botnet Rebuilds in Rust to Hijack Routers and Servers for DDoS

A new two-stage malware family called RustDuck is hijacking home routers, IP cameras, Android boxes, and poorly secured

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-06-30 发布INFO

Langflow RCE Exploited to Deploy Monero Miner on Exposed AI App Endpoints

CVE-2026-33017

Threat actors are continuing to exploit a critical Langflow vulnerability as part of fresh attacks designed to deliver a

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-06-30 发布INFO

Fake Perplexity extension on Chrome Web Store tracked searches

A malicious extension in the Chrome Web Store is masquerading as the Perplexity AI answer engine, intercepting search tr

历史摘要 · 未重新核验 · BleepingComputer