#news

共收录 3763 条相关情报。

← 返回所有主题
威胁情报2026-09-01 发布INFO

Critical JFrog Artifactory Vulnerability Reportedly Exploited in the Wild

CVE-2026-82329

Exploitation of the authentication bypass vulnerability CVE-2026-82329 started just days after its public disclosure. Th

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-09-01 发布INFO

Five Venezuelans plead guilty to ATM jackpotting attacks in US

Five Venezuelan nationals pleaded guilty to attempting to empty automated teller machines (ATMs) using malware in a seri

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-09-01 发布INFO

9.5 Million Impacted by Aesto Health Data Breach

Hackers stole personal and health information from the healthcare technology company’s AWS infrastructure. The post 9.5

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-09-01 发布INFO

Attackers Steal METR API Key and Consume AI Credits Worth About $600,000

METR (short for Model Evaluation and Threat Research and pronounced "Meter"), a research non-profit that evaluates front

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-09-01 发布INFO

Russia-Aligned UAC-0099 Plants Nuclear Weapon Prompt in Malware to Disrupt AI Analysis

Cybersecurity researchers have disclosed a new technique dubbed GuardBreaker that's been put to use by a Russia-aligned

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-09-01 发布INFO

Recently patched PaperCut zero-days used in data theft attacks

Two security vulnerabilities in the PaperCut NG and MF print management software, patched last week after being exploite

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-09-01 发布INFO

Attackers Exploit Critical Langflow and Rails Flaws in Credential-Probing and C2 Activity

CVE-2026-0768 · CVE-2026-66066

Threat actors are exploiting two critical flaws impacting Langflow and Ruby on Rails, according to new findings from Vul

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-09-01 发布INFO

PaperCut Exploitation Escalates to Active Intrusions

CVE-2026-82078 · CVE-2026-81578

CISA has added the vulnerabilities tracked as CVE-2026-82078 and CVE-2026-81578 to its KEV catalog. The post PaperCut Ex

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-08-31 发布INFO

Cronos blockchain restarts after $74 million Tectonic exploit

The Cronos blockchain network has resumed trading activity after a price-manipulation attack on the Tectonic cryptocurre

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-08-31 发布INFO

Microsoft warns of TerminalFix attacks deploying reverse tunnels

A new ClickFix variant dubbed TerminalFix uses fake Cloudflare CAPTCHA prompts on compromised websites to trick victims

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-08-31 发布INFO

North Korean Job Fraud Expands Beyond IT Into Healthcare and Sales

Threat actors with ties to the Democratic People's Republic of Korea (aka DPRK or North Korea) have been observed seekin

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-08-31 发布INFO

Microsoft Exchange Online outage causes email failures, auth issues

Microsoft is investigating a widespread service issue causing authentication issues, email delays and failures, and vari

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-08-31 发布INFO

OpenAI confirms ChatGPT outage as users report errors

ChatGPT Work is experiencing a partial outage, and users across multiple subscription plans may be unable to start or co

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-08-31 发布INFO

Chinese Fire Ant hackers turn Cisco routers into spying platforms

The researchers discovered Fire Ant's new tactic after finding an active GRE (Generic Routing Encapsulation) tunnel inte

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-08-31 发布INFO

Nightmare Eclipse Drops ‘HardBreacher’ Kaspersky Product Exploit

Kaspersky told SecurityWeek that it patched the vulnerability affecting its Endpoint Security product. The post Nightmar

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-08-31 发布INFO

File servers are here to stay. Here’s how to manage them securely

File servers remain a critical part of many IT environments, but managing access securely can become complex as permissi

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-08-31 发布INFO

ServiceNow Patches 3 Critical Code Injection Vulnerabilities

Attackers could exploit the security defects to execute arbitrary code and access or tamper with data. The post ServiceN

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-08-31 发布INFO

⚡ Weekly Recap: Chinese Spy Proxy, AI Agents Go Off-Task, Router Backdoors and More

The boring parts caused most of the trouble. A router shipped ready to listen. A fake check turned the user into the in

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-08-31 发布INFO

Berlin confirms data theft after Rhysida ransomware attack claims

Berlin's city administration has confirmed that cybercriminals are attempting to extort the city after the Rhysida ranso

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-08-31 发布INFO

McKesson Confirms Data Breach as Attacker Deadline Looms

The ShinyHunters extortion group has claimed the theft of 284 million records from the company’s systems. The post McKes

历史摘要 · 未重新核验 · SecurityWeek