Researchers Show a Single Malicious Webpage Visit Can Compromise Tor Browser
CVE-2026-10702
Nebula Security says a patched Firefox JIT flaw could be triggered by simply visiting a malicious webpage and was also u
#thn
共收录 1295 条相关情报。
← 返回所有主题73% of Organizations Say They Are Not Fully Ready for a Major Cyberattack
Most organizations have incident response plans, security tools, and technical teams in place. Yet new research suggests
Russia Charges Telegram Founder Pavel Durov With Aiding Terrorist Activity
The Federal Security Service of the Russian Federation (FSB) on Wednesday said it charged Telegram founder Pavel Durov f
Public PoC Released for Exploited Check Point SmartConsole Authentication Bypass
CVE-2026-16232
Cybersecurity researchers have shared additional technical details about a recently patched critical security flaw impac
OpenAI Agent Used Exposed Credentials Across Four Services During Hugging Face Breach
OpenAI on Tuesday revealed the rogue artificial intelligence (AI) agent that escaped its sealed evaluation environment a
New Gitea RCE Lets Repository Writers Plant a Git Hook to Run Shell Commands
CVE-2026-60004
Gitea, the self-hosted Git platform, has patched a critical remote code execution vulnerability. A user with ordinary re
Flying Eagle Android RAT Traces Found on 170 Servers as Source Code Circulates
Source code for the Flying Eagle Android remote access trojan (RAT) framework is circulating through criminal Telegram c
Two Compromised joyfill npm Packages Run RAT When Imported Into Node.js
Beta release versions of two npm packages in the @joyfill namespace have been compromised to deliver a remote access tro
Claude AI Just Cracked a Post-Quantum Test Scheme and Found a Faster 7-Round AES Attack
Anthropic says Claude Mythos Preview helped derive an end-to-end key-recovery attack against HAWK-256 and a 200- to 800-
Tengu Botnet Reboots Compromised Linux Devices When Defenders Kill Its Process
A new Mirai-derived botnet called Tengu can use a compromised Linux device's hardware watchdog to trigger a reboot when
24,650 Internet-Exposed BMCs Disclose IPMI Password Hashes Before Login
Cybersecurity researchers have sounded an alert after finding more than 36,000 Baseboard Management Controller (BMC) man
JFrog Confirms OpenAI Models Exploited Artifactory Zero-Day Before Hugging Face Breach
JFrog has confirmed that OpenAI models exploited a zero-day in self-hosted Artifactory while trying to reach the open in
Critical OpenWrt DHCPv6 Flaw Could Let Unauthenticated Attackers Run Code as Root
CVE-2026-53921
OpenWrt has shipped version 24.10.8 to close a critical DHCPv6 stack overflow and a wider set of remotely triggerable fl
Nimbus Manticore Deploys NightLedger and Turns Victim Systems Into Covert Relays
The Iranian state-backed hacking group tracked as Nimbus Manticore (aka GalaxyGato, Mirage Kitten, Smoke Sandstorm, Subt
Critical TeamCity Flaw Could Let Attackers Run OS Commands Without Logging In
CVE-2026-63077
JetBrains is urging customers of on-premise versions of TeamCity to update to the latest version following the discovery
Researcher Says AI Helped Develop Linux Traffic-Control Race Into Root Exploit
CVE-2026-53264
STAR Labs has published a Linux kernel exploit that turns an ordinary local user into root on the CentOS Stream 9 build
Microsoft Says New Cybersecurity AI Model Helps MDASH Score 95.95% at Half the Cost
Microsoft has launched its first cybersecurity-specific model inside MDASH, its multi-model vulnerability identification
Attackers Exploit Arista VeloCloud Orchestrator Command Injection Flaw
CVE-2026-16812
A maximum-severity security flaw impacting on-premises versions of Arista VeloCloud Orchestrator (VCO) has come under ac
NVIDIA Forms 37-Member Open Secure AI Alliance and Open-Sources NOOA Framework
NVIDIA and 36 other organizations have formed the Open Secure AI Alliance to develop and share open technologies, techni
Dysphoria IoT Botnet Adds Blockchain C2 and Victim Relays After JackSkid Disruption
Dysphoria, an Internet of Things (IoT) botnet line tracked by CNCERT and XLab, has adopted blockchain-based name service