AiRedTeam - 我当黑客那几年(AiRedTeam) (Page 34)

One Million Passports Leaked Online

📡 Schneier on Security · 2026-06-26 One Million Passports Leaked Online One Million Passports Leaked Online - Schneier on Security Schneier on Security Menu Blog Newsletter Books Essays News Talks Academic About Me Search Powered by DuckDuckGo Blog Essays Whole site Subscribe Home Blog One Million Passports Leaked Online A database of

安全情报

Meta Is Testing Facial Recognition for Police and Military

📡 Schneier on Security · 2026-06-26 Meta Is Testing Facial Recognition for Police and Military Meta Is Testing Facial Recognition for Police and Military - Schneier on Security Schneier on Security Menu Blog Newsletter Books Essays News Talks Academic About Me Search Powered by DuckDuckGo Blog Essays Whole site Subscribe Home Blog

安全情报

The Chinese Control the Majority of Argentina’s Squid Fleet

📡 Schneier on Security · 2026-06-26 The Chinese Control the Majority of Argentina’s Squid Fleet The Chinese Control the Majority of Argentina's Squid Fleet - Schneier on Security Schneier on Security Menu Blog Newsletter Books Essays News Talks Academic About Me Search Powered by DuckDuckGo Blog Essays Whole

安全情报

Robot Police Officers

📡 Schneier on Security · 2026-06-29 Robot Police Officers Robot Police Officers - Schneier on Security Schneier on Security Menu Blog Newsletter Books Essays News Talks Academic About Me Search Powered by DuckDuckGo Blog Essays Whole site Subscribe Home Blog Robot Police Officers We’ve taken one small step towards

安全情报

Factoring RSA Keys with Many Zeros

📡 Schneier on Security · 2026-06-29 Factoring RSA Keys with Many Zeros Factoring RSA Keys with Many Zeros - Schneier on Security Schneier on Security Menu Blog Newsletter Books Essays News Talks Academic About Me Search Powered by DuckDuckGo Blog Essays Whole site Subscribe Home Blog Factoring RSA Keys with Many Zeros

安全情报

📊 2026-07-10 漏洞情报日报 · 4 条 · 高危 3

每日漏洞情报汇总 · 2026-07-10 📊 2026-07-10 漏洞情报日报 📋 共 4 条 🔥 高危/严重 3 条 🐙 GitHub-Advisory 4 条 🔥3 🤖 今日安全态势分析 🎯 今日重点关注 * CVE-2026-48594 (Tesla 解压炸弹)：影响 Tesla HTTP 客户端。攻击者可利用服务器响应或重定向返回特制压缩数据，造成服务端内存耗尽，导致拒绝服务。无需认证，远程触发。 * CVE-2026-48595 (Tesla 认证头泄露)：影响 Tesla 的重定向中间件。由于大小写校验缺陷，跨域重定向时可能未清除 Authorization 头，导致敏感凭证泄露给第三方恶意服务器。 * CVE-2026-48597 (Tesla BEAM 原子耗尽)：影响 Tesla Mint 适配器。通过构造恶意的 URL

APT情报

2026中小企业威胁报告：AI工具滥用与暗网初始访问售卖成最大风险

卡巴斯基2026年SMB威胁报告揭示：伪装成AI工具的攻击量激增近5倍，暗网初始访问售卖成供应链攻击突破口。了解攻击手法、IOC及缓解建议，保护中小企业安全。

APT情报

Vidar窃密木马新变种：滥用代码签名、Go加载器与文件膨胀技术剖析

Palo Alto Unit42深度分析Vidar窃密木马新变种，揭示攻击者如何利用恶意广告、Factory-v3框架、伪造代码签名、文件膨胀（最大491MB）和AMSI绕过技术，向美国和欧盟用户投放Vidar和XMRig。了解攻击链、IOC及缓解措施，保护企业免受此类金融动机攻击。

漏洞分析

CVE-2026-40047 (CVSS 9.1) - Improper Neutralization of Argument Delimiters in a Command ('Argument Injection

CVE-2026-40047是Apache Camel camel-docling组件中的参数注入与目录遍历漏洞（CVSS 9.1）。攻击者可通过构造恶意CamelDoclingCustomArguments头部，绕过硬编码黑名单，执行任意docling标志或读取任意文件。影响4.15.0至4.18.2版本，建议升级至4.18.3或4.19.0以上。

安全情报

The Realities of AI Video Surveillance

📡 Schneier on Security · 2026-06-30 The Realities of AI Video Surveillance The Realities of AI Video Surveillance - Schneier on Security Schneier on Security Menu Blog Newsletter Books Essays News Talks Academic About Me Search Powered by DuckDuckGo Blog Essays Whole site Subscribe Home Blog The Realities of AI Video Surveillance

安全情报

Papa Johns Surveillance-Based Advertising

📡 Schneier on Security · 2026-07-01 Papa Johns Surveillance-Based Advertising Papa Johns Surveillance-Based Advertising - Schneier on Security Schneier on Security Menu Blog Newsletter Books Essays News Talks Academic About Me Search Powered by DuckDuckGo Blog Essays Whole site Subscribe Home Blog Papa Johns Surveillance-Based Advertising Papa Johns is spying on people&

安全情报

Cybersecurity Mission Creep in the US

📡 Schneier on Security · 2026-07-02 Cybersecurity Mission Creep in the US Cybersecurity Mission Creep in the US - Schneier on Security Schneier on Security Menu Blog Newsletter Books Essays News Talks Academic About Me Search Powered by DuckDuckGo Blog Essays Whole site Subscribe Home Blog Cybersecurity Mission Creep in the US

安全情报

Flock Cameras Can Surveil Cars Without License Plates

📡 Schneier on Security · 2026-07-03 Flock Cameras Can Surveil Cars Without License Plates Flock Cameras Can Surveil Cars Without License Plates - Schneier on Security Schneier on Security Menu Blog Newsletter Books Essays News Talks Academic About Me Search Powered by DuckDuckGo Blog Essays Whole site Subscribe Home Blog Flock Cameras

安全情报

Linux Process Name Masquerading, (Wed, Jun 24th)

📡 SANS ISC · 2026-06-24 Linux Process Name Masquerading, (Wed, Jun 24th) Linux Process Name Masquerading - SANS Internet Storm Center --> Internet Storm Center Sign In Sign Up Handler on Duty: Xavier Mertens Threat Level: green previous next Click HERE to learn more about classes Xavier is teaching for SANS

安全情报

What do Ports Hear When Nobody's Listening? An Assessment of Automated Cybercrime [Guest Diary], (Wed, Jun 24th)

📡 SANS ISC · 2026-06-25 What do Ports Hear When Nobody's Listening? An Assessment of Automated Cybercrime [Guest Diary], (Wed, Jun 24th) What do Ports Hear When Nobody's Listening? An Assessment of Automated Cybercrime [Guest Diary] --> Internet Storm Center

安全情报

YARA-X 1.18.0 and 1.19.0 Release, (Sun, Jun 28th)

📡 SANS ISC · 2026-06-28 YARA-X 1.18.0 and 1.19.0 Release, (Sun, Jun 28th) YARA-X 1.18.0 and 1.19.0 Release - SANS Internet Storm Center --> Internet Storm Center Sign In Sign Up Handler on Duty: Xavier Mertens Threat Level: green previous next Click HERE

安全情报

ISC Stormcast For Monday, June 29th, 2026 https://isc.sans.edu/podcastdetail/9986, (Mon, Jun 29th)

📡 SANS ISC · 2026-06-29 ISC Stormcast For Monday, June 29th, 2026 https://isc.sans.edu/podcastdetail/9986, (Mon, Jun 29th) ISC Stormcast For Monday, June 29th, 2026 https://isc.sans.edu/podcastdetail/9986 --> Internet Storm Center Sign In Sign Up Handler on Duty: Xavier Mertens Threat Level: green previous

安全情报

📊 2026-07-09 漏洞情报日报 · 200 条 · 高危 99

每日漏洞情报汇总 · 2026-07-09 📊 2026-07-09 漏洞情报日报 📋 共 200 条 🔥 高危/严重 99 条 💣 Exploit-DB-RSS 12 条 🔥2 🐙 GitHub-Advisory 58 条 🔥27 🛡️ NVD-Latest 70 条 🔥70 ⚔️ Sploitus 60 条 🤖 今日安全态势分析 🎯 今日重点关注 * Discuz! X5.0 - 认证绕过 (CVE-2026-49952, CVSS 9.1)：影响广泛使用的开源论坛系统，攻击者无需凭证即可绕过身份验证，直接接管管理员权限或访问敏感数据。利用公开可用，风险极高。 * Nuclio & Coolify - 多组件RCE链：Nuclio 的 cron

APT情报

本周安全速递：代理僵尸网络、浏览器勒索软件与AI驱动攻击

本周安全事件综述：NetNut代理僵尸网络利用家庭设备隐匿恶意流量，ChocoPoC RAT通过伪造PoC仓库诱捕研究人员，AI生成浏览器勒索软件展示新型攻击路径。安全分析师深度解读攻击手法与防御建议。

APT情报

伪装成免费软件的ScreenConnect：一场大规模远程控制攻击的深度解析

卡巴斯基MDR团队揭露一场大规模攻击：攻击者通过仿冒OBS Studio等免费软件的虚假下载站，利用ScreenConnect远程管理工具和DLL侧加载技术部署AsyncRAT后门。本文深入分析攻击链、C2基础设施及90多个恶意域名，并提供检测与防御建议。

漏洞分析

CVE-2026-14762 (CVSS 7.3) - A vulnerability was detected in code-projects Hotel and Tourism Reservation 1.0.

CVE-2026-14762 影响 Hotel and Tourism Reservation 1.0，其 /admin/rooms.php 的 delete 参数存在 SQL 注入（CVSS 7.3）。攻击者可远程利用时间盲注泄露所有数据库数据，并在高权限下写入 webshell 获取服务器控制权。PoC 已公开，建议立即升级或实施临时缓解措施。

漏洞分析

Exploit for CVE-2026-14762 exploit

CVE-2026-14762影响Hotel & Tourism Reservation 1.0，位于/admin/rooms.php?delete参数存在时间盲注漏洞，CVSS 7.3。攻击者可提取数据库内容、读取文件并上传webshell。PoC已公开，建议立即升级或应用临时缓解措施。

漏洞分析

CVE-2026-48282 - Adobe ColdFusion Path Traversal Vulnerability

CVE-2026-48282是Adobe ColdFusion中的一个关键路径遍历漏洞，CVSS评分9.8。攻击者可利用路径遍历读取任意敏感文件，并进一步实现远程代码执行（RCE）。本文提供详细的技术分析、攻击场景、检测方法和修复指南，帮助企业立即采取缓解措施。

安全情报

Adding some Automation to the favicon.ico method of Host Recon, (Mon, Jun 29th)

📡 SANS ISC · 2026-06-29 Adding some Automation to the favicon.ico method of Host Recon, (Mon, Jun 29th) Adding some Automation to the favicon.ico method of Host Recon --> Internet Storm Center Sign In Sign Up Handler on Duty: Xavier Mertens Threat Level: green previous next Click HERE to

安全情报

ISC Stormcast For Tuesday, June 30th, 2026 https://isc.sans.edu/podcastdetail/9988, (Tue, Jun 30th)

📡 SANS ISC · 2026-06-30 ISC Stormcast For Tuesday, June 30th, 2026 https://isc.sans.edu/podcastdetail/9988, (Tue, Jun 30th) ISC Stormcast For Tuesday, June 30th, 2026 https://isc.sans.edu/podcastdetail/9988 --> Internet Storm Center Sign In Sign Up Handler on Duty: Xavier Mertens Threat Level: green previous