Three CVSS 10.0 ServiceNow Flaws Could Let Unauthenticated Attackers Execute Code and SQL
ServiceNow has released patches for four security flaws impacting the ServiceNow AI Platform, three of them rated 10.0 o
#news
共收录 3763 条相关情报。
← 返回所有主题Tech, Cybersecurity Giants Unite Behind OpenAI-Led Cyber Defense Pledge
Nearly 130 tech and cybersecurity companies back a collective call to boost cyber defenses as AI-enabled attacks grow mo
China-Made ZBT Routers Ship With Two Implants Giving Unauthenticated Attackers Root Access
CVE-2026-74233 · CVE-2026-74232
VulnCheck has disclosed two previously undocumented factory implants in firmware for routers built by Shenzhen Zhibotong
Think You’ve Eliminated Chinese AI? Check the Model’s Lineage, Cisco Says
New research shows that country-of-origin labels can obscure an AI model’s upstream dependencies, inherited behaviors an
ServiceNow warns of three max severity security vulnerabilities
ServiceNow released security patches for three new maximum-severity AI Platform vulnerabilities that can be exploited in
Critical cPanel Flaw Could Let One Hosting Customer Take Root Control of a Whole Server
CVE-2026-65643
cPanel has released patches for a security flaw affecting domain parking and addon domain functionality in cPanel and We
Windows 11 KB5120998 update released with 35 changes and fixes
Microsoft released the KB5120998 preview cumulative update for Windows 11 versions 25H2 and 24H2, which comes with 35 ch
PaperCut Releases Emergency Patch for Exploited Zero-Day
A CVE identifier has not yet been assigned, but PaperCut is urging NG/MF users to install patches and implement mitigati
PaperCut Zero-Day Exploited in Attacks, Affecting All NG and MF Versions
PaperCut has alerted customers that bad actors are actively exploiting a vulnerability impacting all versions of its Pap
APT28-Linked HOOKEDGE Backdoor Targets European Government and Diplomatic Organizations
根据The Hacker News报道，Recorded Future Insikt Group的研究人员披露了一起针对欧洲政府与外交组织的网络间谍活动。攻击主要瞄准罗马尼亚、西班牙和土耳其的政府机构与外交部门，活动时间从2025年9月底持
Nearly 700 rogue AI agents coordinated in the Hugging Face attack
New details about the July attack on Hugging Face reveal that hundreds of AI agents driven by OpenAI's internal IM1 mode
OpenAI Says Reward Hacking Drove AI Agents to Exploit Zero-Days and Breach Hugging Face
OpenAI on Wednesday revealed that reward hacking was a key driver behind the artificial intelligence (AI)-powered hack o
PaperCut warns of NG, MF flaw exploited in zero-day attacks
PaperCut is warning that hackers are actively exploiting a vulnerability in all versions of its PaperCut NG and PaperCut
Manchester Airports Group says hackers stole travelers' data
The Manchester Airports Group (MAG) disclosed that hackers breached its systems and stole customer data, including Wi-Fi
Next.js Patches Critical AVIF and Windows Flaws Enabling Unauthenticated RCE
CVE-2026-75604
Credit: Hacktron Vercel has released security patches for two critical-severity vulnerabilities in the Next.js web frame
ThreatsDay: 296K IoT Botnet, 100+ Water Systems Targeted, SharePoint RCE Chain + 27 New Stories
A fake login page. A fake security scan. A fake productivity app. Apparently, pretending to be useful is still one of th
Trump Order Aims to Block Foreign Backdoors in US Power Grid Gear
The White House’s new executive order 14420 widens scrutiny of industrial control systems over cyber sabotage concerns.
How Threat Research and MDR Help SMBs Build a Defensive Edge
2026年8月27日，BleepingComputer发布了一篇面向中小型企业（SMB）的防御性文章，由ESET公司阐述威胁研究与托管检测与响应（MDR）服务如何协同增强企业安全能力。文章核心观点是：威胁研究能够帮助企业安全团队了解攻击者的
Android 17 adds ECH support to make web browsing harder to track
Google is introducing new network security protections in Android 17 to strengthen connection privacy, address cellular
Amazon Kiro Prompt Injection Can Exfiltrate Sensitive Data Through Kiro Powers
Cybersecurity researchers have disclosed details of a vulnerability in Amazon Kiro, an artificial intelligence (AI)-powe