#securityweek

共收录 1122 条相关情报。

← 返回所有主题
威胁情报2026-05-07 发布INFO

Worries About AI’s Risks to Humanity Loom Over the Trial Pitting Musk Against OpenAI’s Leaders

Musk said that he could have founded OpenAI as a for-profit company, just like the other companies he started or took ov

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-05-07 发布INFO

Palo Alto Zero-Day Exploited in Campaign Bearing Hallmarks of Chinese State Hacking

The cybersecurity firm has not explicitly accused China of being behind the attack, but the evidence suggests it was.  T

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-05-07 发布INFO

Boost Security Raises $4 Million for SDLC Defense Platform

The company is expanding its platform’s capabilities with the acquisition of SecureIQx and Korbit.ai. The post Boost Sec

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-05-07 发布INFO

Claude Code OAuth Tokens Can Be Stolen Through Stealthy MCP Hijacking

Mitiga researchers say attackers can silently redirect Claude Code MCP traffic, intercept OAuth tokens, and maintain per

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-05-07 发布INFO

Chrome 148 Rolls Out With 127 Security Fixes

The fresh browser update resolves critical-severity integer overflow and use-after-free vulnerabilities. The post Chrome

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-05-07 发布INFO

Attackers Could Exploit AI Vision Models Using Imperceptible Image Changes

Cisco’s AI security researchers have analyzed ways to target vision-language models (VLMs) using pixel-level perturbatio

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-05-07 发布INFO

Vendor Says Daemon Tools Supply Chain Attack Contained

The software developer has identified the impacted systems, removed potentially compromised files, and validated install

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-05-07 发布INFO

AI Coding Agents Could Fuel Next Supply Chain Crisis

“TrustFall” attack shows how AI coding agents can be manipulated into launching stealthy supply chain compromises. The p

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-05-07 发布INFO

Webinar Today: Securing Identity Across Humans, Machines and AI

From service accounts to AI-driven processes, identity is evolving faster than most security programs can adapt. Discove

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-05-07 发布INFO

Cisco Patches High-Severity Vulnerabilities in Enterprise Products

Successful exploitation of the flaws could lead to code execution, server-side request forgery attacks, and denial-of-se

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-05-06 发布INFO

Autonomous Offensive Security Firm XBOW Raises $35 Million

The company raised another $35 million as an extension to its previously announced Series C funding round. The post Auto

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-05-06 发布INFO

Herd Security Raises $3 Million for AI-Powered Training Platform

The startup will invest in expanding its training categories, optimizing video generation, and growing its partnership e

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-05-06 发布INFO

Iranian APT Intrusion Masquerades as Chaos Ransomware Attack

Likely perpetrated by MuddyWater, the attack combined social engineering, persistence, credential harvesting, and data t

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-05-06 发布INFO

Romanian Man Extradited to US for Role in Hacking Scheme 17 Years Ago

Gavril Sandu, 53, was indicted in 2017, but was arrested and extradited to the United States only in 2026. The post Roma

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-05-06 发布INFO

CISA Launches ‘CI Fortify’ to Prepare Critical Infrastructure for Geopolitical Cyber Conflict

Agency issued guidance and calls on operators to build resilient OT environments capable of surviving extended isolation

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-05-06 发布INFO

Sophisticated Quasar Linux RAT Targets Software Developers

The persistent, evasive implant provides remote access, surveillance, and credential exfiltration capabilities. The post

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-05-06 发布INFO

Government, Scientific Entities Hit via Daemon Tools Supply Chain Attack

While trojanized Daemon Tools versions were installed worldwide, a sophisticated backdoor was dropped only on a dozen sy

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-05-06 发布INFO

Oracle Debuts Monthly Critical Security Patch Updates

Containing fixes for critical-severity vulnerabilities, the monthly rollouts will focus on addressing priority issues fa

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-05-06 发布INFO

Palo Alto Networks to Patch Zero-Day Exploited to Hack Firewalls

CVE-2026-0300

Palo Alto Networks 计划修复一个被野外利用的零日漏洞 CVE-2026-0300,该漏洞影响 PAN-OS 软件中的 Captive Portal 服务,涉及 PA 和 VM 系列防火墙。根据 SecurityWeek 报

历史摘要 · 未重新核验 · SecurityWeek

威胁情报2026-05-05 发布INFO

Microsoft Warns of Sophisticated Phishing Campaign Targeting US Organizations

The malicious emails claim to contain a conduct report and lure victims to a Microsoft phishing website that leverages A

历史摘要 · 未重新核验 · SecurityWeek