📡 Kaspersky Securelist · 2026-07-01 OpenClaw: risks for the users and how to mitigate them Security risks for OpenClaw users and how to mitigate these risks | Securelist Solutions for: Home Products Small Business 1-50 employees Medium Business 51-999 employees Enterprise 1000+ employees by Kaspersky CompanyAccount Get In Touch Dark mode off English

📡 Kaspersky Securelist · 2026-07-01 The SOC Files: ScreenConnect masked as freeware. An inside look at a large-scale campaign How a single ScreenConnect incident exposed a massive campaign | Securelist Solutions for: Home Products Small Business 1-50 employees Medium Business 51-999 employees Enterprise 1000+ employees by Kaspersky CompanyAccount Get In Touch Dark mode

📡 Kaspersky Securelist · 2026-07-02 Missed incidents, persistent threats, and response gaps: Insights from compromise assessment projects How to improve your organization’s security based on compromise assessment findings | Securelist Solutions for: Home Products Small Business 1-50 employees Medium Business 51-999 employees Enterprise 1000+ employees by Kaspersky CompanyAccount Get In Touch Dark

📡 Kaspersky Securelist · 2026-07-03 Armored Likho digging a snake pit: inside the covert BusySnake Stealer campaign Armored Likho’s new weapon: BusySnake Stealer | Securelist Solutions for: Home Products Small Business 1-50 employees Medium Business 51-999 employees Enterprise 1000+ employees by Kaspersky CompanyAccount Get In Touch Dark mode off English Russian Spanish

📡 Krebs on Security · 2026-06-23 Scattered Spider Hackers Plead Guilty on Day 1 of Trial Scattered Spider Hackers Plead Guilty on Day 1 of Trial – Krebs on Security --> Advertisement Advertisement --> Skip to content Home About the Author Advertising/Speaking Scattered Spider Hackers Plead Guilty on

📡 Krebs on Security · 2026-07-02 FBI Seizes NetNut Proxy Platform, Popa Botnet FBI Seizes NetNut Proxy Platform, Popa Botnet – Krebs on Security --> Advertisement Advertisement --> Skip to content Home About the Author Advertising/Speaking FBI Seizes NetNut Proxy Platform, Popa Botnet July 2, 2026 17 Comments

每日漏洞情报汇总 · 2026-07-06 📊 2026-07-06 漏洞情报日报 📋 共 200 条 🔥 高危/严重 119 条 🛡️ NVD-Latest 119 条 🔥119 ⚔️ Sploitus 81 条 🤖 今日安全态势分析 🎯 今日重点关注 * CVE-2026-13768 (CVSS 10.0) - Gardyn 智能花园设备：暴露了高权限的 IoTHub 所有者密钥，攻击者利用该密钥可调用 IoTHub 注册表管理功能，获取所有 Gardyn Home Kit 及 Studio 设备的连接信息，进而实施远程代码执行与内网横向移动。PoC 已公开，利用条件极低。 * CVE-2026-27419 (CVSS 9.9) - Zegen

每日漏洞情报汇总 · 2026-07-05 📊 2026-07-05 漏洞情报日报 📋 共 200 条 🔥 高危/严重 99 条 🐙 GitHub-Advisory 42 条 🔥22 🛡️ NVD-Latest 77 条 🔥77 ⚔️ Sploitus 81 条 🤖 今日安全态势分析 🎯 今日重点关注 * CVE-2026-13768 (CVSS 10.0)： Gardyn智能家居设备暴露了具备完全权限的IoTHub所有者密钥。攻击者利用该密钥可枚举所有连接设备、远程执行命令，并获取内部网络访问权限，导致从云到家庭网络的彻底沦陷。 * CVE-2026-9558 / CVE-2026-9559 (CVSS 9.9)： Mautic营销自动化平台存在服务端模板注入（SSTI）与路径遍历漏洞。攻击者可通过上传恶意ZIP文件或Twig模板实现远程代码执行与任意文件读写，威胁业务数据和服务器安全。 * 9router 未授权RCE (Critical)： 9router npm包的`/api/tunnel/

每日漏洞情报汇总 · 2026-07-04 📊 2026-07-04 漏洞情报日报 📋 共 200 条 🔥 高危/严重 121 条 🐙 GitHub-Advisory 50 条 🔥29 🛡️ NVD-Latest 92 条 🔥92 ⚔️ Sploitus 58 条 🤖 今日安全态势分析 🎯 今日重点关注 * CVE-2026-9558 (Mautic，CVSS 9.9)： 服务端模板注入(SSTI)漏洞，位于主题引擎中。拥有上传权限的认证用户可通过上传恶意Twig模板实现远程代码执行，直接威胁CMS平台安全。 * CVE-2026-9559 (Mautic，CVSS 9.9)： 路径遍历漏洞，位于活动导入功能中。攻击者通过构造恶意ZIP文件，可在解压过程中实现目录穿越，导致任意文件写入或代码执行。 * CVE-2026-11387 (WordPress SMS Alert插件，CVSS

每日漏洞情报汇总 · 2026-07-03 📊 2026-07-03 漏洞情报日报 📋 共 200 条 🔥 高危/严重 103 条 🐙 GitHub-Advisory 100 条 🔥49 🛡️ NVD-Latest 54 条 🔥54 ⚔️ Sploitus 46 条 🤖 今日安全态势分析 🎯 今日重点关注 * Adobe ColdFusion 双漏洞链 (CVE-2026-48277, CVE-2026-48276, CVSS 10.0)： 影响 ColdFusion 2025.9/2023.20 及更早版本。攻击者无需认证即可通过输入验证缺陷和危险文件上传漏洞实现远程代码执行，利用难度极低，极易形成蠕虫式攻击。 * Mautic 服务器端模板注入与路径遍历 (CVE-2026-9558, CVE-2026-9559, Critical)： 影响 Mautic 开源营销自动化平台。