The Alert Firehose Finally Meets Its Match
Ask a cybersecurity pro about Network Detection and Response (NDR) and you might still hear "Noisy," "Too much data." Bu
#thn
共收录 1302 条相关情报。
← 返回所有主题Lazarus Deploys RemotePE Memory-Only RAT Against Financial and Crypto Firms
Cybersecurity researchers have shed light on a cross-platform malware called RemotePE that has been put to use by the No
TrapDoor Supply Chain Attack Spreads Credential-Stealing Malware via npm, PyPI, and CratesIO
A new coordinated cross-ecosystem software supply chain attack campaign has targeted npm, PyPI, and Crates.io to distrib
npm Adds 2FA-Gated Publishing and Package Install Controls Against Supply Chain Attacks
GitHub has rolled out new controls for npm to improve the security of the software supply chain, giving maintainers the
Packagist Supply Chain Attack Infects 8 Packages Using GitHub-Hosted Linux Malware
A new "coordinated" supply chain attack campaign has impacted eight packages on Packagist including malicious code desig
Claude Mythos AI Finds 10,000 High-Severity Flaws in Widely Used Software
Anthropic on Friday disclosed that Project Glasswing has helped uncover more than 10,000 high- or critical-severity vuln
Laravel-Lang PHP Packages Compromised to Deliver Cross-Platform Credential Stealer
Cybersecurity researchers have flagged a fresh software supply chain attack campaign that has targeted multiple PHP pack
LiteSpeed cPanel Plugin CVE-2026-48172 Exploited to Run Scripts as Root
CVE-2026-48172
A maximum-severity security vulnerability impacting LiteSpeed User-End cPanel Plugin has come under active exploitation
Drupal Core SQL Injection Bug Actively Exploited, Added to CISA KEV
CVE-2026-9082
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a recently patched critical security flaw imp
First VPN Dismantled in Global Takedown Over Use by 25 Ransomware Groups
2026年5月22日，欧洲和北美执法机构联合宣布捣毁名为First VPN的犯罪虚拟专用网络服务。该服务被至少25个勒索软件团伙用于隐藏勒索软件攻击、数据窃取、扫描和拒绝服务攻击的源头。此次行动代号为“Operation Saffron”，
Ghostwriter Targets Ukraine Government Entities with Prometheus Phishing Malware
The Belarus-aligned threat actor known as Ghostwriter (aka UAC-0057 and UNC1151Ukraine's National Security and Defense C
Megalodon GitHub Attack Targets 5,561 Repos with Malicious CI/CD Workflows
Cybersecurity researchers have disclosed details of a new automated campaign called Megalodon that has pushed 5,718 mali
Making Vulnerable Drivers Exploitable Without Hardware - The BYOVD Perspective
1 Introduction This article provides a technical analysis of how many Windows kernel mode drivers can be interacted wit
Kimwolf DDoS Botnet Operator Arrested in Canada Over DDoS-for-Hire Attacks
The U.S. Department of Justice (DoJ) on Thursday announced the arrest of a Canadian man in connection with allegedly ope
CISA Adds Exploited Langflow and Trend Micro Apex One Vulnerabilities to KEV
CVE-2025-34291
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added two security flaws impacting Langflow
Cisco Patches CVSS 10.0 Secure Workload REST API Flaw Enabling Data Access
CVE-2026-20223
Cisco has rolled out updates for a maximum-severity security flaw impacting Secure Workload that could allow an unauthen
Showboat Linux Malware Hits Middle East Telecom with SOCKS5 Proxy Backdoor
Cybersecurity researchers have disclosed details of a new Linux malware dubbed Showboat that has been put to use in a ca
ThreatsDay Bulletin: Linux Rootkits, Router 0-Day, AI Intrusions, Scam Kits and 25 New Stories
This week starts small. A token leaks. A bad package slips in. A login trick works. An old tool shows up again. At firs
Microsoft Warns of Two Actively Exploited Defender Vulnerabilities
CVE-2026-41091
Microsoft has disclosed that a privilege escalation and a denial-of-service flaw in Defender has come under active explo
When Identity is the Attack Path
Consider a cached access key on a single Windows machine. It got there the way most cached credentials do - a user logge