#news

共收录 3734 条相关情报。

← 返回所有主题
威胁情报2026-09-23 发布INFO

Anthropic and OpenAI Models Still Attempt Restricted Actions in Safety Tests

Anthropic and OpenAI on Tuesday announced new models, with both artificial intelligence (AI) companies noting that they

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-09-23 发布INFO

Adobe Patches Critical Flaws in Connect, AEM Forms

The nine critical security defects could be exploited for arbitrary code execution and privilege escalation. The post Ad

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-09-23 发布INFO

AI-Powered Phishing Platform EvilTokens Disrupted by Microsoft

The cybercrime platform leveraged AI at every step of the attack chain, including writing social engineering messages an

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-09-23 发布INFO

Microsoft: September Windows updates break Always On VPN connections

BleepingComputer 报道,微软就 2026 年 9 月批次的 Windows 安全更新发出新的已知问题警告:该批补丁可能在部分 Windows 11 系统上破坏 Always On VPN(AOVPN)连接。Always On

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-09-23 发布INFO

Exploit Released for Unpatched Ubuntu Linux Flaw Enabling Host-Root Container Escape

CVE-2026-80521

A use-after-free in the Linux kernel's AF_UNIX socket subsystem can be used to escape a container and gain root on the h

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-09-23 发布INFO

Chrome 154 Patches 108 Vulnerabilities

The browser update resolves several critical-severity memory safety and memory corruption flaws. The post Chrome 154 Pat

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-09-23 发布INFO

A Look at AI Doomsday Scenarios That Researchers Say Could Put Humanity at Risk

Debates over the plausibility of these doomsday scenarios have heated up since several executives endorsed slowing the t

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-09-23 发布INFO

Outerlimit Raises $16 Million to Stop Rogue AI Agents From Causing Harm

Emerging from stealth with $16 million in pre-seed funding, Outerlimit offers a decentralized authorization layer design

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-09-23 发布INFO

Arista Urges Immediate Patching of Exploited VCO Zero-Day

Remote attackers could trigger the critical-severity flaw to access privileged internal functionality. The post Arista U

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-09-23 发布INFO

F5 Patches Critical BIG-IP APM Zero-Day Exploited for Unauthenticated RCE on OAuth Servers

CVE-2026-94127

Attackers are exploiting a critical flaw in F5 BIG-IP Access Policy Manager (APM) that lets them run code on a BIG-IP sy

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-09-23 发布INFO

Chinese Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malware

CVE-2026-85880 · CVE-2026-87491 · CVE-2026-85046

A Chinese threat actor codenamed UTA0565 has been observed exploiting the recently disclosed Google Chrome-Microsoft Win

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-09-23 发布INFO

Ryuk ransomware member sentenced to 24 months in prison

An Armenian man was sentenced to 24 months in prison and 3 years of supervised release for hacking U.S. companies and en

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-09-23 发布INFO

Critical F5 BIG-IP Vulnerability Exploited as Zero-Day

Unauthenticated attackers could send malicious traffic to BIG-IP to achieve remote code execution. The post Critical F5

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-09-23 发布INFO

F5 patches BIG-IP APM zero-day flaw exploited in RCE attacks

F5 has released security updates to address a critical BIG-IP APM zero-day vulnerability being exploited in remote code

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-09-23 发布INFO

Critical Next.js ImageResponse Flaw Can Lead to Server Code Execution via Crafted SVG Input

A new security vulnerability in Next.js could allow attackers to run code on a server via ImageResponse, the feature tha

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-09-23 发布INFO

ShinyHunters Claims FBI Breach, Says It Stole Data on Agents and Job Applicants

The cyber extortion group known as ShinyHunters on Tuesday claimed it had breached the U.S. Federal Bureau of Investigat

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-09-22 发布INFO

Rogue external MFA providers can steal passwords during logins

Security researchers developed an attack that lets hackers with privileged access register a rogue external MFA provider

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-09-22 发布INFO

Sweden fines Miljödata $183,000 over breach affecting 2.2 million

Sweden's data privacy regulator, IMY, has imposed a $183,000 (SEK 1.8 million) fine on IT systems provider Miljödata for

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-09-22 发布INFO

Chinese hackers exploit WordPress, Zyxel flaws to steal govt data

A Chinese-speaking threat actor has been exploiting vulnerabilities in ZyXEL GS1900 Smart Managed Switches and WordPress

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-09-22 发布INFO

ShinyHunters claims FBI hack, data theft in PeopleSoft zero-day breach

The ShinyHunters extortion gang claims it breached FBI systems using a new Oracle PeopleSoft zero-day vulnerability, gai

历史摘要 · 未重新核验 · BleepingComputer