Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote Access
CVE-2026-59310
Threat actors have begun to actively exploit a recently patched critical security flaw in Broadcom VMware vCenter, accor
#news
共收录 3792 条相关情报。
← 返回所有主题Fresh Windows Zero-Day Exploited in North Korean Cyberattacks
The bug allowed attackers to gain full control of the victims’ systems and deploy the ForestTiger backdoor. The post Fre
Ivanti EPM Update Patches Remotely Exploitable Flaws
The vulnerabilities could be exploited to leak credentials for external SQL connections or crash an agent service. The p
Malicious LiteLLM Releases Tied to Trivy Hack May Have Exposed 2,100+ Organizations
Two malicious LiteLLM releases sat on PyPI for about 40 minutes in March carrying credential-stealing code capable of ha
ICS Patch Tuesday: Vulnerabilities Fixed by Siemens, Schneider, Phoenix Contact
CISA has also published several advisories describing vulnerabilities in ICS and other OT products. The post ICS Patch T
SAP Commerce Cloud Flaw Could Let Unauthenticated Attackers Execute Arbitrary Code
CVE-2026-58231
SAP has released patches to address a maximum-severity security flaw impacting Commerce Cloud (Data Hub Adapter) that co
ShieldBreak Zero-Day PoC Claims Microsoft Defender Patch Bypass With SYSTEM Access
CVE-2026-50656
The security researcher going by the name Chaotic Eclipse (aka INFINITE NIGHTMARE, MSNightmare, and Nightmare-Eclipse) h
Cisco ASA and FTD Flaw Exploited in the Wild Can Trigger Remote DoS
CVE-2026-20349
思科公司发布安全公告，警告其 Secure Firewall 自适应安全设备（ASA）软件和 Secure Firewall 威胁防御（FTD）软件中存在一个被在野利用的高危漏洞，编号为 CVE-2026-20349（CVSS 评分为 8.
Google says Chrome cuts 7 billion unwanted Android notifications a day to fight abuse
Google says Chrome's anti-abuse systems reduced unwanted notifications on Android by more than 7 billion per day during
DeadLock ransomware uses blockchain to resist infrastructure takedown
The DeadLock ransomware operation is using a decentralized infrastructure that relies on blockchain-backed services to p
Sandworm hackers target IT pros with trojanized WireGuard VPN client
2026年8月11日，BleepingComputer报道称，俄罗斯威胁组织Sandworm自2026年5月起，通过虚假工作邀请针对系统管理员和IT专业人员发起攻击。攻击者使用木马化的WireGuard VPN客户端作为攻击工具，利用招聘流
Microsoft Patches 398 Flaws Including a Windows Driver Zero-Day Under Active Attack
CVE-2026-68820
Microsoft released its monthly security updates on Tuesday, and one of the flaws it closed is already being used in atta
Cisco warns of ASA and FTD VPN flaw exploited to crash devices
Cisco 于 2026 年 8 月 11 日发布安全警告，指出其 Secure Firewall ASA 和 Firepower Threat Defense（FTD）软件中一个高严重性的拒绝服务（DoS）漏洞正被攻击者积极利用。该漏洞影
Kimwolf v7 Android Botnet Makes HTTP/2 DDoS Traffic Look Like Legitimate Browsing
Cybersecurity researchers have discovered a new version of the Kimwolf/AISURU Android and Internet of Things (IoT) botne
Zoom Annotation Flaws Could Let a Meeting Participant Hijack Another Attendee's Client
Anyone sharing their screen on a Zoom call could have taken over the computers of everyone watching, and anyone watching
August 2026 Patch Tuesday: Microsoft Fixes 421 CVEs, One Exploited Zero-Day
A use-after-free in the afd.sys Windows kernel-mode driver has been exploited to gain SYSTEM privileges. The post August
Sandworm-Linked UAC-0145 Uses Fake Job Interviews to Push VPN That Can Run Commands
The Computer Emergency Response Team of Ukraine (CERT-UA) has disclosed details of a new social engineering campaign orc
Delta probes Wi-Fi deauth attack on flight carrying DEF CON attendees
Delta Air Lines is investigating an unauthorized Wi-Fi network that appeared aboard a flight from Las Vegas to Atlanta c
Microsoft releases Windows 10 KB5120249 extended security update
Microsoft has released Windows 10 KB5120249 Extended Security Updates for versions 22H2 and 21H2 to fix security vulnera
Microsoft August 2026 Patch Tuesday fixes 400 flaws, 3 zero-days
Today is Microsoft's August 2026 Patch Tuesday, and with it comes security updates for a massive 400 flaws, including on