#news

共收录 3885 条相关情报。

← 返回所有主题
威胁情报2026-04-29 发布INFO

38 Vulnerabilities Found in OpenEMR Medical Software

Some of the vulnerabilities discovered by Aisle can be exploited to access and alter sensitive patient information. The

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-04-29 发布INFO

Critical cPanel Authentication Vulnerability Identified — Update Your Server Immediately

cPanel has released security updates to address a security issue impacting various authentication paths that could allow

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-04-29 发布INFO

Chrome 147, Firefox 150 Security Updates Rolling Out

The browser refreshes resolve critical and high-severity vulnerabilities that could lead to arbitrary code execution. Th

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-04-29 发布INFO

CISA Adds Actively Exploited ConnectWise and Windows Flaws to KEV

CVE-2024-1708

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added two security flaws impacting ConnectWi

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-04-29 发布INFO

Microsoft says backend change broke Teams Free chat and calls

Microsoft is working to resolve a known issue that prevents some Microsoft Teams Free users from chatting and calling ot

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-04-29 发布INFO

Critical GitHub Vulnerability Exposed Millions of Repositories

CVE-2026-3854

The remote code execution flaw CVE-2026-3854 was found to impact GitHub.com and GitHub Enterprise Server. The post Criti

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-04-29 发布INFO

LiteLLM CVE-2026-42208 SQL Injection Exploited within 36 Hours of Disclosure

CVE-2026-42208

2026年4月29日,The Hacker News报道,BerriAI的LiteLLM Python包中存在一个严重SQL注入漏洞(CVE-2026-42208,CVSS评分9.3),该漏洞在公开披露后36小时内即被威胁行为者积极利用。L

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-04-28 发布INFO

Broken VECT 2.0 ransomware acts as a data wiper for large files

Researchers are warning that the VECT 2.0 ransomware has a problem in the way it handles encryption nonces that leads to

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-04-28 发布INFO

Hackers are exploiting a critical LiteLLM pre-auth SQLi flaw

CVE-2026-42208

Hackers are targeting sensitive information stored in the LiteLLM open-source large-language model (LLM) gateway by expl

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-04-28 发布INFO

Video service Vimeo confirms Anodot breach exposed user data

Vimeo has disclosed that data belonging to some of its customers and users has been accessed without authorization follo

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-04-28 发布INFO

Cyber Insurance Data Gives CISOs New Ammo for Budget Talks

Boards may ignore alerts, but they listen to losses: new data from Resilience links security gaps directly to financial

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-04-28 发布INFO

Researchers Discover Critical GitHub CVE-2026-3854 RCE Flaw Exploitable via Single Git Push

CVE-2026-3854

Cybersecurity researchers have disclosed details of a critical security vulnerability impacting GitHub.com and GitHub En

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-04-28 发布INFO

Brazilian LofyGang Resurfaces After Three Years With Minecraft LofyStealer Campaign

A cybercrime group of Brazilian origin has resurfaced after more than three years to orchestrate a campaign that targets

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-04-28 发布INFO

Vimeo Confirms User and Customer Data Breach

The ShinyHunters group is threatening to leak stolen files unless Vimeo agrees to pay a ransom. The post Vimeo Confirms

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-04-28 发布INFO

The Mythos Moment: Enterprises Must Fight Agents with Agents

Only with the right platform and an agentic, AI-driven defense, will enterprises be able to protect themselves in the ag

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-04-28 发布INFO

US reportedly charges Scattered Spider hacker arrested in Finland

A 19-year-old dual United States and Estonian citizen arrested in Finland earlier this month faces federal charges in th

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-04-28 发布INFO

Webinar Today: A Step-by-Step Approach to AI Governance

Join the webinar to explore a practical, multi-layered roadmap to transition from fragmented AI usage to a governed, sca

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-04-28 发布INFO

Checkmarx confirms LAPSUS$ hackers leaked its stolen GitHub data

Application security company Checkmarx has confirmed that the LAPSUS$ threat group leaked data stolen from its private G

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-04-28 发布INFO

Robinhood Vulnerability Exploited for Phishing Attacks

Legitimate-looking emails coming from Robinhood systems lured recipients to phishing websites. The post Robinhood Vulner

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-04-28 发布INFO

VECT 2.0 Ransomware Irreversibly Destroys Files Over 131KB on Windows, Linux, ESXi

Threat hunters are warning that the cybercriminal operation known as VECT 2.0 acts more like a wiper than a ransomware d

历史摘要 · 未重新核验 · The Hacker News