#news

共收录 3734 条相关情报。

← 返回所有主题
威胁情报2026-09-28 发布INFO

Google Warns of ShinyHunters’ Fresh Oracle PeopleSoft Campaign

CVE-2026-35273

The extortion group has modified its exploit in new attacks targeting the PeopleSoft vulnerability CVE-2026-35273. The p

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-09-28 发布INFO

New Mexico Jury Finds Facebook Liable for Deceiving Users About Privacy Protections

A New Mexico jury has found Facebook liable for deceiving users about privacy protections on the platform. The post New

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-09-28 发布INFO

Nvidia Unveils AI Agent Safety Platform With Hardware-Based Watchdog

The platform combines open source software and a reference system design to keep AI agents within set boundaries. The po

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-09-28 发布INFO

Kiteworks Urges Server Shutdown, Finds Advanced Forms Vulnerability

The company says the measure was precautionary and that it has no evidence of Kiteworks or customer systems being compro

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-09-28 发布INFO

Bitget resumes Bitcoin withdrawals after $387.5 million crypto heist

Cryptocurrency exchange Bitget has resumed Bitcoin withdrawals suspended after suspected North Korean hackers breached i

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-09-28 发布INFO

JADEPUFFER-Linked Attackers Used Compromised Service Principals to Delete Azure Resources

The threat actor known as JADEPUFFER has been observed orchestrating destructive actions within a Microsoft Azure enviro

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-09-28 发布INFO

US soldier gets 70 months in prison for extorting 10 tech, telecom firms

A former U.S. Army soldier has been sentenced to 70 months in prison for hacking and extorting at least 10 U.S. technolo

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-09-28 发布INFO

Citrix Confirms 2 NetScaler Zero-Days After Admins Pulled the Plug

CVE-2026-88771 · CVE-2026-88772

Citrix has released patches for the critical NetScaler vulnerabilities tracked as CVE-2026-88771 and CVE-2026-88772. The

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-09-28 发布INFO

CISA Says Attackers Are Exploiting Two Critical Citrix NetScaler Flaws Globally

CVE-2026-88771

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Sunday added two critical Citrix NetScaler ADC and G

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-09-28 发布INFO

CISA orders feds to patch exploited Citrix flaws by Wednesday

The Cybersecurity and Infrastructure Security Agency (CISA) has ordered U.S. government agencies over the weekend to sec

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-09-27 发布INFO

OpenAI is preparing “o,” an always-on ChatGPT assistant that could handle email

OpenAI is testing a new always-on assistant called "o", and references to the unannounced feature briefly showed up on t

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-09-27 发布INFO

Citrix confirms two NetScaler RCE zero-days exploited in attacks

CVE-2026-88771 · CVE-2026-88772

Citrix has confirmed that two critical NetScaler remote code execution vulnerabilities, tracked as CVE-2026-88771 and CV

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-09-27 发布INFO

Cloudflare fixes Containers cross-tenant flaw exposing customer data

Cloudflare has fixed a vulnerability in Containers and Sandboxes that allowed customers with a Workers Paid account to r

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-09-27 发布INFO

Anthropic turns Claude into an AI marketplace with 2,000+ plugins and connectors

Anthropic has just announced a new Claude Marketplace, and it brings all AI-related tools into one place, including plug

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-09-27 发布INFO

Microsoft SharePoint Flaw CVE-2026-65660 Now Exploited in Attacks

CVE-2026-65660

CISA added CVE-2026-65660 to its KEV catalog, giving federal agencies a patching deadline of September 28. The post Micr

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-09-27 发布INFO

Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation

Two critical vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway that allow remote code execution have been ex

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-09-26 发布INFO

ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks

CVE-2026-35273

勒索与数据窃取敲诈团伙 ShinyHunters 被曝正在针对 Oracle PeopleSoft 应用发起新一轮攻击。据 BleepingComputer 报道,该团伙使用了一种基于 URL 编码的 WAF 绕过技巧,使原本用于缓解 CV

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-09-26 发布INFO

Lunex Stealer Abuses AMD Driver to Disable Security Monitoring and Steal Browser Credentials

The Psychedelic Stealer malware distributed via compromised Ukrainian websites using ClickFix-style Cloudflare verificat

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-09-26 发布INFO

China and US Agree to Establish AI Safety Channel and Continue Trade and Military Talks

The US and China agreed to set up a communication mechanism for artificial intelligence-related incidents. The post Chin

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-09-26 发布INFO

Claude Opus 5.5 uses 95% fewer em dashes, but its answers are getting longer

Anthropic's Claude Opus 5.5 appears to be changing how it writes, with new analysis showing fewer obvious AI writing pat

历史摘要 · 未重新核验 · BleepingComputer