#news

共收录 3881 条相关情报。

← 返回所有主题
威胁情报2026-06-23 发布INFO

Tata Electronics confirms cyberattack as hackers leak data

Tata Electronics has confirmed in a statement to BleepingComputer that it was the target of a cyberattack that impacted

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-06-23 发布INFO

Windows 11 KB5095093 update rolls out new Point-in-Time restore feature

​​Microsoft has released the KB5095093 preview cumulative update for Windows 11 24H2 and 25H2, which fixes numerous bugs

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-06-23 发布INFO

Healthtech firm Xolis suffers data breach impacting 1.4 million people

Healthcare technology company Xsolis says that sensitive data belonging to nearly 1.4 million individuals was compromise

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-06-23 发布INFO

New macOS ClickFix attack silently mounts DMGs to push infostealer

A new macOS ClickFix campaign is using Terminal commands to silently download, mount, and launch info-stealing malware f

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-06-23 发布INFO

FortiBleed Targeted FortiGate Firewalls in 110 Million-Credential Harvesting Operation

A Russian-speaking initial access broker (IAB) driven by financial gain is assessed to be behind a large-scale credentia

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-06-23 发布INFO

OpenAI Expands Daybreak With GPT-5.5-Cyber to Help Defenders Patch Security Flaws

OpenAI on Monday said it's releasing an improved version of its GPT‑5.5‑Cyber model to trusted defenders as part of the

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-06-22 发布INFO

WhatsApp phishing attack uses fake business docs to hack PCs

An ongoing malware campaign is targeting WhatsApp users in multiple countries with deceptive messages that push VBScript

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-06-22 发布INFO

JaredFromSubway MEV bot hacked in $15 million crypto theft

The JaredFromSubway Ethereum MEV (Maximal Extractable Value) bot suffered a $15 million loss after an attacker manipulat

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-06-22 发布INFO

FFmpeg fixes PixelSmash flaw in widely used video decoder

A newly disclosed FFmpeg flaw dubbed 'PixelSmash' could be exploited for remote code execution on Jellyfin servers under

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-06-22 发布INFO

FortiBleed campaign used custom FortiGate sniffer to steal credentials

SOCRadar 披露了一起名为 FortiBleed 的大规模攻击活动,该活动针对 Fortinet FortiGate 防火墙设备。攻击者通过利用 FortiGate 中的未知漏洞(可能是已知但未修复的漏洞或配置弱点)获得初始访问权限,

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-06-22 发布INFO

ShapedPlugin WordPress Pro Plugins Backdoored in Supply Chain Attack

Multiple WordPress plugins from ShapedPlugin were compromised in a supply chain attack after unknown threat actors manag

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-06-22 发布INFO

Microsoft says Windows 11 26H2 is coming soon, details upgrade process

Microsoft has confirmed that Windows 11 version 26H2 will be the next feature update and that devices running Windows 11

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-06-22 发布INFO

Microsoft fixes AutoGen Studio flaw that enabled code execution

A vulnerability chain dubbed AutoJack in Microsoft's AutoGen Studio interface for prototyping AI agents could let attack

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-06-22 发布INFO

Researchers Detail DifyTap Flaws in Dify That Could Expose AI Chats Across Tenants

Cybersecurity researchers have disclosed details of four vulnerabilities in Dify, an open-source agentic workflow platfo

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-06-22 发布INFO

29-Year-Old Squid Proxy Bug 'Squidbleed' Can Leak Cleartext HTTP Requests

A heap over-read in the Squid web proxy can leak another user's cleartext HTTP request, including any credentials or ses

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-06-22 发布INFO

A Glimpse into the “Search Your Target” Market for Stolen Credentials

Attackers no longer need to sift through massive credential dumps. They can pay others to do it for them. Flare explores

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-06-22 发布INFO

Decades-Old Squid Proxy Flaw ‘Squidbleed’ Can Expose User Data

Squidbleed, discovered with the aid of Claude Mythos Preview, has been described as a Heartbleed-style vulnerability.  T

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-06-22 发布INFO

New OXLOADER Loader Uses Malicious Google Ads to Deliver CastleStealer

Cybersecurity researchers have disclosed details of a new campaign that delivers CastleStealer by means of a previously

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-06-22 发布INFO

Google Sets Sept. 30 Deadline for Android Developer Verification in Four Countries

Google has set September 30, 2026, as the day it begins enforcing Android developer verification in the first four count

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-06-22 发布INFO

Stop Your Legacy Infrastructure from Hijacking Your AI Agents

Earlier this month, I spoke at the Gartner Security & Risk Management Summit about a blind spot most security programs a

历史摘要 · 未重新核验 · The Hacker News