Critical VMware vCenter RCE flaw exploited for reverse SSH access
CVE-2026-59310
A recently patched critical vulnerability (CVE-2026-59310) in VMware vCenter Syslog Server is being exploited in an acti
#ransomware
共收录 1361 条相关情报。
← 返回所有主题Trezor discloses data breach affecting nearly 14,000 customers
Hardware wallet manufacturer Trezor disclosed a data breach affecting nearly 14,000 of its customers after ShipMonk, its
Who Vets AI’s Code? The Scale Challenge Facing Open Source Ingestion
AI coding tools can introduce unvetted or hallucinated open source dependencies faster than traditional security reviews
White House taps security firms for offensive hack-back operations
A new White House memo signed by U.S. President Donald Trump instructs the National Coordination Center (NCC) to establi
WhatsApp rolls out new feature that flags potential scam messages
WhatsApp has begun rolling out a new optional "Scam Alert" feature, which uses a local machine learning model to warn us
"City-Forum" data-theft attacks target Salesforce, ServiceNow portals
An ongoing data theft campaign uses custom tools to steal data exposed to anonymous users through Salesforce Experience
Android malware combo takes out loans and relays victims' credit cards
A new Android NFC relay malware called WindRelay is being used alongside the SpyNote remote administration tool (RAT) to
Hackers exploit critical Adobe Commerce flaw to hijack customer accounts
CVE-2026-71362
Attempts to exploit a critical vulnerability (CVE-2026-71362) in Adobe's Commerce and Magento e-commerce platforms have
Hundreds of fake Chrome VPN extensions route traffic through a proxy
2026年8月12日，BleepingComputer报道称Chrome网上应用商店中出现了超过737个假冒知名VPN和代理服务的浏览器扩展。这些恶意扩展会将用户的浏览流量通过由同一供应商运营的SOCKS5代理服务器进行路由，从而可能截获、
Plug and Pwn attack uses fake USB devices for Windows SYSTEM access
Security researchers have disclosed new "Plug and Pwn" attacks that abuse the Windows Plug and Play feature to trigger W
Lazarus hackers exploited Windows zero-day to target defense firms
CVE-2026-68820
North Korean hackers have been exploiting a Windows zero-day vulnerability (CVE-2026-68820) to target defense-sector com
FBI: Hackers target online accounts to steal nude photos
The FBI warns that cybercriminals are targeting adults' and children's social media and other online accounts to steal s
The Threat Hiding in Your Hiring Process: How Fake Remote Workers Get In
Fake remote workers can exploit gaps between hiring checks, device delivery, and account access to enter organizations u
Hackers leverage new Microsoft SharePoint exploit in attacks
Hackers have already begun using a proof-of-concept (PoC) exploit for a critical Microsoft SharePoint vulnerability, pub
Signal adds new security feature to thwart man-in-the-middle attacks
Signal has introduced Automatic Key Verification, a new security feature that gives users a new way to ensure their enc
New Microsoft Defender 'ShieldBreak' zero-day grants SYSTEM privileges
Nightmare Eclipse has released a new Microsoft Defender zero-day exploit named "ShieldBreak" after Microsoft released th
Google says Chrome cuts 7 billion unwanted Android notifications a day to fight abuse
Google says Chrome's anti-abuse systems reduced unwanted notifications on Android by more than 7 billion per day during
DeadLock ransomware uses blockchain to resist infrastructure takedown
The DeadLock ransomware operation is using a decentralized infrastructure that relies on blockchain-backed services to p
Sandworm hackers target IT pros with trojanized WireGuard VPN client
2026年8月11日，BleepingComputer报道称，俄罗斯威胁组织Sandworm自2026年5月起，通过虚假工作邀请针对系统管理员和IT专业人员发起攻击。攻击者使用木马化的WireGuard VPN客户端作为攻击工具，利用招聘流
Cisco warns of ASA and FTD VPN flaw exploited to crash devices
Cisco 于 2026 年 8 月 11 日发布安全警告，指出其 Secure Firewall ASA 和 Firepower Threat Defense（FTD）软件中一个高严重性的拒绝服务（DoS）漏洞正被攻击者积极利用。该漏洞影