#news

共收录 3885 条相关情报。

← 返回所有主题
威胁情报2026-06-02 发布INFO

Instagram users locked out after Meta AI abused to steal accounts

Multiple Instagram users had their accounts hijacked after attackers convinced Meta's AI-powered support tools that they

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-06-02 发布INFO

Exclusive: How One Line of Code Put Billions of Microsoft Android App Downloads at Risk

A simple development setting bypassed protections designed to prevent unauthorized Android apps from accessing Microsoft

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-06-02 发布INFO

Android Update Patches Exploited Zero-Day, 123 Other Vulnerabilities

CVE-2025-48595

Google says the Android vulnerability CVE-2025-48595 has been exploited in limited, targeted attacks. The post Android U

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-06-02 发布INFO

Why the browser is now the front line for AI security

AI-powered attacks and shadow AI adoption are creating new security risks inside the browser. Push Security explains why

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-06-02 发布INFO

Anthropic Expanding Mythos Access to 150 New Organizations

Only approximately 50 companies have had access to Mythos until now and they have found thousands of vulnerabilities in

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-06-02 发布INFO

CISA flags two-year-old Oracle flaw as actively exploited in attacks

CISA has ordered government agencies to secure their systems against a high-severity Oracle WebLogic Server vulnerabilit

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-06-02 发布INFO

The Zero-Knowledge Threat Actor and the End of Responsible Disclosure

AI can help attackers generate malware, create malicious payloads, bypass simple security checks, and convert vague mali

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-06-02 发布INFO

Critical Vulnerability in HP VoIP Phones Enables Enterprise Network Breaches

A stack-based buffer overflow bug can be exploited for remote code execution on a vulnerable device. The post Critical V

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-06-02 发布INFO

AI-Driven Exploitation is Destroying Vulnerability Management. Here’s How to Handle It.

AI-driven exploitation timelines are rapidly shrinking, and they are not going to stop shrinking. Vulnerabilities are be

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-06-02 发布INFO

Oracle WebLogic Vulnerability Exploited in the Wild

CVE-2024-21182

The vulnerability is CVE-2024-21182 and it can be exploited without authentication to hack affected WebLogic servers. Th

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-06-02 发布INFO

Google fixes one actively exploited Android zero-day, 124 flaws

Google has released the June 2026 Android security patches to address 124 vulnerabilities, including one zero-day flaw e

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-06-02 发布INFO

Meta AI Hands Over High-Profile Instagram Accounts to Hackers

Exploiting a confused deputy weakness, the hackers simply asked the chatbot to link the account to a new email address.

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-06-02 发布INFO

How Leading Organizations Are Turning EDR Into Operational Resilience

Most organizations now recognize that endpoint protection alone is no longer sufficient. That's why adoption of endpoin

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-06-02 发布INFO

Supply Chain Attack Hits 32 Red Hat NPM Packages

Hackers published 96 malicious package versions, injected with a credential-stealing worm similar to Mini Shai-Hulud. Th

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-06-02 发布INFO

Pakistan-Linked SideCopy Targets Afghanistan Finance Ministry with Xeno RAT

Cybersecurity researchers have disclosed details of a spear-phishing campaign likely undertaken by the Pakistan-aligned

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-06-02 发布INFO

Dashlane Discloses Brute-Force Attack, Encrypted Vaults of Fewer Than 20 Users Downloaded

Password manager Dashlane has disclosed that "fewer than" 20 users on the personal subscription plan had their encrypted

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-06-01 发布INFO

Hackers hijack thousands of sites for ClickFix and FakeUpdate attacks

A threat actor tracked as DriveSurge has been operating large-scale malware distribution campaigns using ClickFix and Fa

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-06-01 发布INFO

Red Hat npm packages compromised to steal developer credentials

More than 30 npm packages under Red Hat's '@redhat-cloud-services' namespace were compromised in a supply-chain attack t

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-06-01 发布INFO

Spain arrests doxer leaking sensitive data of govt employees

The Spanish National Police has arrested an individual for leaking sensitive information related to members of various k

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-06-01 发布INFO

WP Maps Pro Vulnerability Exploited to Take Over WordPress Sites

CVE-2026-8732

The security defect (CVE-2026-8732) allows unauthenticated attackers to create administrative accounts on the affected i

历史摘要 · 未重新核验 · SecurityWeek