Enterprise Defenses Recovered at the Edge and Collapsed Inside
Enterprise defenses are tuned to catch the attacks that make noise. This year's data shows attackers winning by making n
#thn
共收录 1295 条相关情报。
← 返回所有主题Adobe Patches Three CVSS 10.0 ColdFusion and Campaign Classic Flaws
CVE-2026-48362
Adobe has shipped updates to address multiple critical security vulnerabilities impacting ColdFusion, Commerce, and Camp
Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote Access
CVE-2026-59310
Threat actors have begun to actively exploit a recently patched critical security flaw in Broadcom VMware vCenter, accor
Malicious LiteLLM Releases Tied to Trivy Hack May Have Exposed 2,100+ Organizations
Two malicious LiteLLM releases sat on PyPI for about 40 minutes in March carrying credential-stealing code capable of ha
SAP Commerce Cloud Flaw Could Let Unauthenticated Attackers Execute Arbitrary Code
CVE-2026-58231
SAP has released patches to address a maximum-severity security flaw impacting Commerce Cloud (Data Hub Adapter) that co
ShieldBreak Zero-Day PoC Claims Microsoft Defender Patch Bypass With SYSTEM Access
CVE-2026-50656
The security researcher going by the name Chaotic Eclipse (aka INFINITE NIGHTMARE, MSNightmare, and Nightmare-Eclipse) h
Cisco ASA and FTD Flaw Exploited in the Wild Can Trigger Remote DoS
CVE-2026-20349
思科公司发布安全公告，警告其 Secure Firewall 自适应安全设备（ASA）软件和 Secure Firewall 威胁防御（FTD）软件中存在一个被在野利用的高危漏洞，编号为 CVE-2026-20349（CVSS 评分为 8.
Microsoft Patches 398 Flaws Including a Windows Driver Zero-Day Under Active Attack
CVE-2026-68820
Microsoft released its monthly security updates on Tuesday, and one of the flaws it closed is already being used in atta
Kimwolf v7 Android Botnet Makes HTTP/2 DDoS Traffic Look Like Legitimate Browsing
Cybersecurity researchers have discovered a new version of the Kimwolf/AISURU Android and Internet of Things (IoT) botne
Zoom Annotation Flaws Could Let a Meeting Participant Hijack Another Attendee's Client
Anyone sharing their screen on a Zoom call could have taken over the computers of everyone watching, and anyone watching
Sandworm-Linked UAC-0145 Uses Fake Job Interviews to Push VPN That Can Run Commands
The Computer Emergency Response Team of Ukraine (CERT-UA) has disclosed details of a new social engineering campaign orc
Researchers Disclose AI-Assisted SharePoint Exploit Chain Reaching Unauthenticated RCE
CVE-2026-55040
Security researchers found a way to enter Microsoft SharePoint servers as any user, including an administrator, with no
DeadLock Ransomware Uses Polygon Smart Contracts to Make Extortion Infra Harder to Disrupt
The ransomware group known as DeadLock has been observed using decentralized infrastructure to facilitate victim communi
OpenAI Launches GPT-5.6-Cyber with Reduced Safeguards for Exploit Development
OpenAI on Monday unveiled a new cybersecurity-focused model called GPT‑5.6‑Cyber that it said is focused on vulnerabilit
A Malicious SIM Card Can Run Attacker Code Inside the Modems Behind Cellular IoT Devices
A malicious SIM card can order the device it sits in to run commands of the attacker's choosing. On the cellular modules
Mozilla Revokes Firefox and Thunderbird Linux Signing Key After Key Lands in Private Repo
Mozilla has scrapped the cryptographic key behind Firefox and Thunderbird downloads for Linux after an unencrypted copy
Researchers Built a Fake Crypto Startup and Hired Three Suspected North Korean IT Workers
Security researchers invented a cryptocurrency startup, advertised developer jobs, and hired three people they believe w
Researchers Turn USB Auto-Install Into a Full SYSTEM Takeover on Windows 11
Windows Plug and Play can be abused to fetch signed vendor software for an emulated USB device and execute privileged in
Malicious MCP Servers Can Split Instructions to Make AI Coding Agents Exfiltrate Secrets
A malicious tool server connected to an AI coding assistant can quietly walk off with SSH keys, environment secrets, sou
Gunra Ransomware Exploits Fortinet and Schneider Electric Flaws to Breach Networks
Cybersecurity and intelligence agencies from South Korea and the U.S. warned of Gunra ransomware attacks targeting criti