#news

共收录 3725 条相关情报。

← 返回所有主题
威胁情报2026-10-14 发布INFO

Microsoft fixes VPN issues caused by September Windows updates

Microsoft has resolved a known issue that caused Always On VPN connection issues after installing the September 2026 Win

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-10-14 发布INFO

Harmonic Security Raises $50 Million for Workforce AI Protection

The cybersecurity startup plans to expand engineering and go-to-market teams in the US and UK. The post Harmonic Securit

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-10-14 发布INFO

The Blind Spots of Agentic Pentesting and How to Close Them

AI-powered penetration testing can uncover complex attack paths, but safety restrictions and network limitations leave m

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-10-14 发布INFO

Global takedown hits network behind 1 billion phishing messages

A massive cybercriminal ecosystem facilitating more than a billion malicious messages targeting over 75,000 organization

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-10-14 发布INFO

Microsoft Disrupts Chinese-Language Phishing Market Behind 1B+ Messages

Backed by a federal court order, Microsoft and Health-ISAC seized domains powering YAM Store, CoGUI, and Iron Man. The p

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-10-14 发布INFO

CISA warns admins to immediately fix Ivanti flaw exploited as zero-day

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) urged security teams to immediately patch an Ivanti Con

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-10-14 发布INFO

CISA Urges Immediate Ivanti Connect Secure Updates as Honeypots Log 105 Exploit Attempts

CVE-2026-104935

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday urged organizations to take steps to immedia

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-14 发布INFO

curl Patches HTTP/2 Upload Flaw After PoC Demonstrates Client-Side Code Execution

A flaw in how curl handles HTTP/2 uploads lets a malicious server receiving an upload corrupt the client's memory, and t

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-14 发布INFO

How to Run a Deepfake Readiness Drill Before a Cloned Voice Calls Your Team

Cloned voices and synthetic video calls now show up in payment fraud, help desk resets, and access requests. A structure

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-14 发布INFO

Hirudo Android malware replaces banking apps to evade security checks

A new Android malware called Hirudo steals bank account credentials by replacing legitimate banking apps with modified v

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-10-14 发布INFO

Researchers Used a Public OpenAI Model to Build a $250,000 Chrome Full-Chain Exploit in Six Days

A team at security firm XBOW chained three then-unknown Google Chrome bugs into a single attack that runs code on a Wind

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-14 发布INFO

Hirudo Android Trojan Uses Patched Banking Apps to Bypass Their Built-In Security Checks

Cybersecurity researchers have disclosed details of a new Android banking trojan called Hirudo that works by replacing l

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-14 发布INFO

An AI Agent Found a Critical OTP Bypass in Production. The Attack Was the Easy Part.

The bug was simple: the login let you choose where your sign-in code went. Proving it on a live website was the hard par

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-14 发布INFO

US Arrests Two in Crackdown on North Korean IT Worker Laptop Farms

Investigators stormed 40 locations in Texas and seized 187 laptops used by North Korean IT workers to hide their locatio

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-10-14 发布INFO

Microsoft: Recent Windows updates may trigger Remote Desktop failures

Microsoft has confirmed that non-admin users may be unable to connect to devices via Remote Desktop after installing rec

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-10-14 发布INFO

AI-Found Linux Kernel Flaw Gives Local Users Root, and Can Break a Guest Out to the Host

CVE-2026-74580

A flaw in Linux's vhost subsystem lets a local user read and write kernel memory at will and become root across nearly a

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-14 发布INFO

Chrome, Firefox Updates Patch 114 Flaws as Mozilla Unveils Firefox Enterprise

Mozilla has introduced Firefox Enterprise for organizations with strict compliance, governance, and security requirement

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-10-14 发布INFO

Citrix, Fortinet, Ivanti Patch 29 Vulnerabilities Across Their Products

Critical-severity flaws could lead to authentication bypass, code execution, and sensitive authentication information le

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-10-14 发布INFO

Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day

CVE-2026-96951

The most important is CVE-2026-96951, a security feature bypass flaw in Windows that has been exploited in the wild. The

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-10-14 发布INFO

SAP Patches Critical NetWeaver, S/4HANA Vulnerabilities

The bugs could allow attackers to invoke internal operations and execute code, completely compromising the system. The p

历史摘要 · 未重新核验 · SecurityWeek