#news

共收录 3793 条相关情报。

← 返回所有主题
威胁情报2026-08-05 发布INFO

How a $50,000 Exploit Chain Turned Bixby Against Samsung Phones

The chain involved the exploitation of several vulnerabilities in the Samsung Members and Samsung Account applications.

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-08-06 发布INFO

Over 250 ClickFix Domains Use Browser Fingerprinting to Hide macOS Malware Lures

A macOS ClickFix operation spanning more than 250 front-end domains now fingerprints visitors before deciding whether to

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-08-06 发布INFO

OpenAI Disrupts Poipet Scam Network Using ChatGPT Across Multiple Fraud Schemes

OpenAI said it disrupted a Cambodia-based scam operation that used its generative artificial intelligence (AI) chatbot C

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-08-05 发布INFO

COLDCARD security audit phishing attack installs remote access tool

A phishing campaign is exploiting fears surrounding the recently disclosed COLDCARD wallet vulnerability and suspected $

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-08-05 发布INFO

CISA warns of hackers exploiting Langflow, N-central, Apache Tomcat flaws

The U.S. Cybersecurity and Infrastructure Security Agency is giving federal agencies three days to mitigate vulnerabilit

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-08-04 发布INFO

OpenAI, Anthropic AI agents targeted real people and systems in cyber tests

OpenAI and Anthropic have confirmed that their AI models were involved in separate, newly disclosed third-party cybersec

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-08-04 发布INFO

TP-Link patches Omada ZTP flaws allowing hackers to breach networks

TP-Link has patched 15 vulnerabilities in the zero-touch provisioning (ZTP) mechanism of its Omada network devices that

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-08-04 发布INFO

Phishing service spoofs RingCentral to steal Microsoft 365 accounts

The Greatness phishing-as-a-service (PhaaS) platform has expanded from credential phishing to adversary-in-the-middle at

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-08-04 发布INFO

New XCSSET variant targets macOS devs via compromised Xcode projects

A new version of the XCSSET malware is targeting thousands of macOS users through compromised Xcode projects and GitHub

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-08-04 发布INFO

77 Open VSX extensions found harvesting developer info

77 extensions on the Open VSX marketplace impersonated legitimate developer tools while transmitting information about t

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-08-04 发布INFO

Greatness PhaaS Adds Device Code Phishing to Bypass MFA and Steal Tokens

The commercial phishing-as-a-service (PhaaS) toolkit known as Greatness has become the latest crimeware solution to add

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-08-04 发布INFO

Black Hat USA 2026 – Summary of Vendor Announcements (Part 2)

Many companies are showcasing their products and services this week at the 2026 edition of the Black Hat conference in L

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-08-04 发布INFO

Rethinking AI Security: Why CASB and DLP Need an Interaction-Aware Layer

Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive dat

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-08-04 发布INFO

Massive ChainDrop npm supply-chain attack infects hundreds of packages

Self-propagating malware named 'ChainDrop' has compromised more than 1,300 packages with a combined 2 billion monthly do

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-08-04 发布INFO

Oligo Raises $60 Million for Runtime Security

The company will use the investment to accelerate product innovation and expand go-to-market operations. The post Oligo

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-08-04 发布INFO

CISO Conversations: Russ Kirby – Passion Is the Antidote to Burnout

Russ Kirby, CISO at Ping Identity, shares how passion, courage, and “good enough” thinking shaped his path from HP to th

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-08-04 发布INFO

Varonis Agent IBAC keeps AI agents within their intended boundaries

AI agents need broad access to be useful, but traditional access controls cannot determine whether an action aligns with

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-08-04 发布INFO

Weaponized Email AI Assistants Could Help Attackers Hijack Accounts

Researchers demonstrate how attackers could abuse built-in email chatbots to evade detection, impersonate trusted employ

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-08-04 发布INFO

Zenity Raises $125 Million in Series C Funding

The AI security company will invest in product innovation, global expansion, and customer experience. The post Zenity Ra

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-08-04 发布INFO

Keyv-Linked npm Worm Poisons Hundreds of Packages, Plants Claude Code and VS Code Hooks

A credential-stealing npm worm that first appeared in keyv@6.0.0 spread beyond the Keyv and Cacheable namespaces into hu

历史摘要 · 未重新核验 · The Hacker News