#news

共收录 3725 条相关情报。

← 返回所有主题
威胁情报2026-10-27 发布INFO

CyberStrikeAI Uses 44 AI Agents to Automate Hacking Operations Against Japan Targets

Cybersecurity researchers have disclosed details of three cyber attacks targeting organizations in Japan in which artifi

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-27 发布INFO

Microsoft releases Windows OOB updates to distrust eMudhra certificates

Microsoft has released out-of-band (OOB) Windows updates to remove trust in certificates tied to compromised eMudhra cer

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-10-27 发布INFO

Warp discloses breach exposing AI agent logs, user telemetry data

Agent decision logs and telemetry data belonging to Warp agentic development environment users were exposed in an attack

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-10-27 发布INFO

Tailscale Rushes Patches After Uncoordinated Disclosure of ‘Tailworm’ Flaws

Tailscale is preparing a patch for Tailscale SSH flaws whose details went public over the weekend, before any fixes had

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-10-27 发布INFO

Tailscale warns of SSH flaws allowing root privilege escalation

The Tailscale security team is working to patch almost a dozen security vulnerabilities that could be exploited to steal

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-10-27 发布INFO

The Huntress Tragic Quadrant: Ranking Threats Hitting Businesses Hardest

Attackers are increasingly abusing legitimate IT tools, Microsoft 365 sessions, and everyday workflows to compromise bus

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-10-27 发布INFO

GoAhead TLS Flaws Allow Revoked Client Certificates and Enable Session Decryption

The GoAhead embedded web server loaded a certificate revocation list into its default TLS backend but never turned revoc

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-27 发布INFO

Apple Backports Fix for Exploited CoreGraphics Flaw to Older iPhones and iPads

CVE-2026-86950

Apple on Monday backported fixes for a high-severity security flaw that was exploited in real-world cyber attacks to old

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-27 发布INFO

Vendor Key Leak Puts Data of 238,000 Denver Health Plan Members at Risk

A leaked SquareML access key could have been used to access a database containing personal and health information. The p

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-10-27 发布INFO

HPE Patches Dozens of Critical Flaws in Networking Products

Eight max-severity security defects could lead to remote code execution and authentication bypass. The post HPE Patches

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-10-27 发布INFO

Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account Tokens

CVE-2026-80097

Microsoft has fixed a flaw in its Authenticator app for Android that let a malicious app with no permissions pose as a t

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-27 发布INFO

Unexplained DreamHost Incident Prompts Email, FTP Password Resets

The company says it reacted to an issue affecting some of its systems, including DreamHost webmail. The post Unexplained

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-10-27 发布INFO

iOS, macOS 27.2 Patch 286 Bugs; Fix for Exploited Flaw Backported to iOS 18

Apple patched 286 vulnerabilities in iOS and macOS 27.2 and brought the fix for an exploited CoreGraphics zero-day to ol

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-10-27 发布INFO

Keystone to Destroy 18,835 Hardware Wallets After Hackers Steal Device Verification Key

An attacker who gained access to Keystone's website obtained the key that its hardware wallets use to prove they are gen

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-27 发布INFO

AI-Generated Fake Login Pages Are Making Account Takeovers Easier

Fake login pages are nothing new, but generative AI is making them easier to build and more convincing. Attackers can re

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-27 发布INFO

Lazarus Abuses South Korean Security Software to Deploy Malware Using Post-Quantum Encryption

The North Korea-linked Lazarus Group has been attributed to a cyber espionage campaign dubbed Operation FlashHole target

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-27 发布INFO

Risks Spelled Out for Anthropic Investors Include Possible Harms From Runaway AI

Anthropic presents its own initial public offering as a step toward mitigating the risks it believes AI poses. The post

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-10-27 发布INFO

Apple backports CoreGraphics zero-day patches to older iPhones

​Apple has backported security patches released last month to older iPhones and iPads, addressing a zero-day bug exploit

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-10-27 发布INFO

This is Fine: What NetScaler Zero-Days Tell Us About the New Normal

Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon. The pos

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-10-27 发布INFO

Dead Popcorn Time Updater Put Millions of Computers at Risk of Takeover

Running at system boot, it periodically polled the update domain to execute any code served, with full privileges. The p

历史摘要 · 未重新核验 · SecurityWeek