#thn

共收录 1290 条相关情报。

← 返回所有主题
威胁情报2026-10-29 发布INFO

The Rise of the Threat Operator: How AI Will Redefine Security Operations and Careers

AI is beginning to take over much of the work that has traditionally defined the security analyst's job. Investigating a

来源摘录 · The Hacker News

威胁情报2026-10-29 发布INFO

26,400 Valid Cloud and AI Credentials Found Exposed in Public Gitee Repositories

26,400 credentials that developers left in public code on Gitee, a Chinese code-hosting service, still worked when a res

来源摘录 · The Hacker News

威胁情报2026-10-29 发布INFO

Cisco Patches Actively Exploited ASA and FTD VPN Flaw That Can Crash Firewalls

CVE-2026-76418

Cisco has released patches to address a high-severity security flaw in Secure Firewall Adaptive Security Appliance (ASA)

来源摘录 · The Hacker News

威胁情报2026-10-29 发布INFO

GitHub Launches npm Firewall to Block Malicious Packages Before Installation

GitHub has announced that it's introducing a new package firewall as a preview to block installation of suspicious npm p

来源摘录 · The Hacker News

威胁情报2026-10-29 发布INFO

Attacker Tried to Exploit Alpine Linux’s GitLab via CVSS 10.0 Flaw Its Ruby Left Open

CVE-2026-97229

An attacker tried to exploit a critical GitLab vulnerability on the Alpine Linux project's own GitLab server a week afte

来源摘录 · The Hacker News

威胁情报2026-10-29 发布INFO

Hackers Exploited Cisco SD-WAN Flaw to Plant Malware Built to Steal Encryption Keys

Hackers exploited a critical Cisco Catalyst SD-WAN flaw, fixed in February, to plant custom malware inside the systems t

来源摘录 · The Hacker News

威胁情报2026-10-29 发布INFO

China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility

CVE-2026-41709

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a security flaw impacting Broadcom V

来源摘录 · The Hacker News

威胁情报2026-10-29 发布INFO

Attackers Exploit PHP2Shell Flaws in Internet-Exposed Palo Alto Networks Management Interfaces

Palo Alto Networks on Wednesday warned that threat actors are exploiting the recently patched PHP2Shell vulnerabilities

来源摘录 · The Hacker News

威胁情报2026-10-28 发布INFO

Volt Typhoon Used Covert Silent Train Network in Four Zero-Day Exploitation Campaigns

The China-nexus cyber espionage group known as Volt Typhoon has been attributed to a now-disrupted covert access network

来源摘录 · The Hacker News

威胁情报2026-10-28 发布INFO

Volt Typhoon Used Covert Silent Train Network in Four Zero-Day Exploitation Campaigns

The China-nexus cyber espionage group known as Volt Typhoon has been attributed to a now-disrupted covert access network

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-28 发布INFO

Google to Allow One-Tap Android App Installs From Approved Third-Party Stores Outside U.S.

Third-party Android app stores can now apply to Google for permission to install apps with one tap, without Android's us

来源摘录 · The Hacker News

威胁情报2026-10-28 发布INFO

Google to Allow One-Tap Android App Installs From Approved Third-Party Stores Outside U.S.

Third-party Android app stores can now apply to Google for permission to install apps with one tap, without Android's us

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-28 发布INFO

Researcher Reveals How Logic Bugs Alone Cracked Microsoft Edge in $175,000 Pwn2Own Win

A chain of logic flaws, with no memory corruption, can turn a malicious web page into code running on a Windows computer

来源摘录 · The Hacker News

威胁情报2026-10-28 发布INFO

Researcher Reveals How Logic Bugs Alone Cracked Microsoft Edge in $175,000 Pwn2Own Win

A chain of logic flaws, with no memory corruption, can turn a malicious web page into code running on a Windows computer

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-28 发布INFO

PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated Network

Cybersecurity researchers have disclosed details of what appears to be an artificial intelligence (AI)-assisted attack o

来源摘录 · The Hacker News

威胁情报2026-10-28 发布INFO

PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated Network

Cybersecurity researchers have disclosed details of what appears to be an artificial intelligence (AI)-assisted attack o

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-28 发布INFO

Hackers Target Critical Oracle E-Business Suite RCE Flaw Days After Security Patch

CVE-2026-101767

Threat actors are beginning to probe for a newly patched critical vulnerability in Oracle E-Business Suite (EBS), accord

来源摘录 · The Hacker News

威胁情报2026-10-28 发布INFO

Hackers Target Critical Oracle E-Business Suite RCE Flaw Days After Security Patch

CVE-2026-101767

Threat actors are beginning to probe for a newly patched critical vulnerability in Oracle E-Business Suite (EBS), accord

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-10-28 发布INFO

Critical 16-Year-Old UEFI Flaw Can Run Code Before Secure Boot on Network-Booting Servers

A critical 16-year-old flaw in EDK II, the open-source code that most hardware makers use to build UEFI firmware, can al

来源摘录 · The Hacker News

威胁情报2026-10-28 发布INFO

Critical 16-Year-Old UEFI Flaw Can Run Code Before Secure Boot on Network-Booting Servers

A critical 16-year-old flaw in EDK II, the open-source code that most hardware makers use to build UEFI firmware, can al

历史摘要 · 未重新核验 · The Hacker News