我当黑客那几年(AiRedTeam) (Page 12)

Supply Chain Security Incident Update

📡 Checkmarx · 2026-04-26 Supply Chain Security Incident Update Supply Chain Security Incident Update ← Blog Supply Chain Security Incident Update Udi-Yehuda Tamar VP of Platform Engineering and Global CISO April 27, 2026 5 min. read For All Related Updates: Date Post Link 27-Apr-26 Checkmarx Security Update: April 27 https://checkmarx.com/blog/

安全情报

Checkmarx Security Update: April 26

📡 Checkmarx · 2026-04-26 Checkmarx Security Update: April 26 Checkmarx Security Update: April 26 ← Blog Checkmarx Security Update: April 26 Udi-Yehuda Tamar VP of Platform Engineering and Global CISO Updated: April 26, 2026 2 min. read For All Related Updates: Date Post Link 27-Apr-26 Checkmarx Security Update: April 27 https://checkmarx.com/

安全情报

Guardrails for Agentic Development

📡 Checkmarx · 2026-04-23 Guardrails for Agentic Development Guardrails for Agentic Development ← Blog Guardrails for Agentic Development Securing AI-generated code at machine speed without slowing the business. Rebecca Spiegel April 23, 2026 10 min. read Software used to be written in sprints. Now it is generated continuously, reviewed in minutes, and deployed

安全情报

Checkmarx Security Update: April 22

📡 Checkmarx · 2026-04-22 Checkmarx Security Update: April 22 Checkmarx Security Update: April 22 ← Blog Checkmarx Security Update: April 22 Udi-Yehuda Tamar VP of Platform Engineering and Global CISO Updated: April 22, 2026 8 min. read For All Related Updates: Date Post Link 27-Apr-26 Checkmarx Security Update: April 27 https://checkmarx.com/

安全情报

Securing Your AI Supply Chain: Your AI Is Running, But You Don’t Know What It’s Doing

📡 Checkmarx · 2026-04-19 Securing Your AI Supply Chain: Your AI Is Running, But You Don’t Know What It’s Doing Securing Your AI Supply Chain: Your AI Is Running, But You Don't Know What It's Doing ← Blog Securing Your AI Supply Chain: Your AI Is Running,

安全情报

Checkmarx Application Security Guide to Claude Mythos

📡 Checkmarx · 2026-04-13 Checkmarx Application Security Guide to Claude Mythos Checkmarx Application Security Guide to Claude Mythos ← Blog Checkmarx Application Security Guide to Claude Mythos Claude Mythos highlights a new era of dynamic, AI-driven applications, and the growing security blind spots they create. Securing them requires agentic AppSec that combines deterministic

安全情报

📊 2026-05-14 漏洞情报日报 · 200 条 · 高危 110

每日漏洞情报汇总 · 2026-05-14 📊 2026-05-14 漏洞情报日报 📋 共 200 条 🔥 高危/严重 110 条 💣 Exploit-DB-RSS 4 条 🐙 GitHub-Advisory 54 条 🔥35 🛡️ NVD-Latest 75 条 🔥75 ⚔️ Sploitus 67 条 🤖 今日安全态势分析 🎯 今日重点关注 * 供应链投毒（Critical）：CVE-2026-45321 影响 @tanstack/* 系列42个npm包。攻击者通过窃取GitHub Actions OIDC凭据，在2026-05-11短时间内发布84个恶意版本，旨在窃取云凭证与GitHub Token，影响面极广。 * 未授权远程代码执行（Critical）：CVE-2026-45087 影响 Dalfox Server模式。服务默认监听 0.0.0.

漏洞分析

Exploit for CVE-2026-45185 exploit

漏洞分析

Exploit for CVE-2026-6664 exploit

漏洞分析

Exploit for CVE-2024-12912 exploit

安全情报

Stop Manual Triaging, Start Agentic Fixing

📡 Checkmarx · 2026-04-07 Stop Manual Triaging, Start Agentic Fixing Stop Manual Triaging, Start Agentic Fixing ← Blog Stop Manual Triaging, Start Agentic Fixing Why execution, not detection, is now the defining AppSec challenge. Rebecca Spiegel April 7, 2026 8 min. read Most security leaders are not struggling because they lack visibility. They

安全情报

RSAC 2026 Marked a Turning Point for AppSec. The Reason – Agentic Security

📡 Checkmarx · 2026-03-26 RSAC 2026 Marked a Turning Point for AppSec. The Reason – Agentic Security RSAC 2026 Marked a Turning Point for AppSec. The Reason – Agentic Security ← Blog RSAC 2026 Marked a Turning Point for AppSec. The Reason – Agentic Security Eran Kinsbruner March 26, 2026 7 min. read RSAC 2026 Marked

安全情报

Why Vulnerability Detection Doesn’t Scale

📡 Checkmarx · 2026-03-25 Why Vulnerability Detection Doesn’t Scale Why Vulnerability Detection Doesn’t Scale ← Blog Why Vulnerability Detection Doesn’t Scale The execution gap that is quietly breaking modern AppSec programs. Rebecca Spiegel March 25, 2026 8 min. read Most AppSec teams are not failing to detect risk. They’re

安全情报

Attackability: Why Context, Not Reachability, Should Drive Remediation

📡 Acunetix · 2026-03-24 Attackability: Why Context, Not Reachability, Should Drive Remediation Attackability: Why Context, Not Reachability, Should Drive Remediation ← Blog Attackability: Why Context, Not Reachability, Should Drive Remediation Reachability is not exploitability. Modern software development requires more than execution analysis. Rebecca Spiegel March 24, 2026 5 min. read For years, reachability

安全情报

Today's Odd Web Requests, (Wed, Apr 29th)

📡 SANS ISC · 2026-04-29 Today's Odd Web Requests, (Wed, Apr 29th) Today's Odd Web Requests Today, two different "new" requests hit our honeypots. Both appear to be recon requests and not associated with specific vulnerabilities. But as always, please let me know if you have

安全情报

Bad Bot Report 2026: The Internet Is No Longer Human and It’s Changing How Business Works

📡 Tenable Blog · 2026-04-29 Bad Bot Report 2026: The Internet Is No Longer Human and It’s Changing How Business Works As you were browsing something about your browser made us think you were a bot. There are a few reasons this might happen: You're a power user moving

安全情报

Danger of Libredtail [Guest Diary], (Wed, Apr 29th)

📡 Krebs on Security · 2026-04-30 Danger of Libredtail [Guest Diary], (Wed, Apr 29th) CVE-2024-4577 Danger of Libredtail [Guest Diary] Published: 2026-04-29. Last Updated: 2026-04-30 00:07:03 UTC byJames Roberts, SANS.edu BACS Student (Version: 1) [This is a Guest Diary by James Roberts, an ISC intern

安全情报

Imperva Customers Protected Against CVE-2026-41940 in cPanel & WHM

📡 Tenable Blog · 2026-04-30 Imperva Customers Protected Against CVE-2026-41940 in cPanel & WHM CVE-2026-41940 As you were browsing something about your browser made us think you were a bot. There are a few reasons this might happen: You're a power user moving through this website with super-human speed. You&

安全情报

SSL.com rotates their root certificate today, (Tue, May 5th)

📡 SANS ISC · 2026-05-05 SSL.com rotates their root certificate today, (Tue, May 5th) SSL.com rotates their root certificate today I just got an email from SSL.com last night, they are rotating out their root certificate today (May 5,2026). This is normal, business as usual stuff for a

安全情报

Vimeo confirms breach via third-party vendor impacts 119K users

📡 Security Affairs · 2026-05-05 Vimeo confirms breach via third-party vendor impacts 119K users Vimeo confirmed a data breach after the ShinyHunters gang stole personal information of 119,000 users in April 2026. According to Have I Been Pwned, the attackers accessed user data through a compromise at Anodot, a third‑party

安全情报

Malicious Ad for Homebrew Leads to MacSync Stealer, (Fri, May 1st)

📡 SANS ISC · 2026-05-01 Malicious Ad for Homebrew Leads to MacSync Stealer, (Fri, May 1st) Malicious Ad for Homebrew Leads to MacSync Stealer Introduction As macbooks and mac minis become more popular, we're seeing more campaigns targeting these macOS hosts. Malicious ads have popped up in search results that

安全情报

DShield Honeypot Update, (Mon, May 4th)

📡 SANS ISC · 2026-05-04 DShield Honeypot Update, (Mon, May 4th) DShield Honeypot Update This week, I will release a few updates to our DShield honeypot. The update should happen automatically if you have "automatic updates" enabled on your system. There will be two major changes: Compatibility with Ubuntu 26.

安全情报

Article #4387

📡 Security Blog · Article #4387 Cleartext Passwords in MS Edge? In 2026? Yup, that is for real. For me, this started with a post in X at hxxps://x.com/intcyberdigest/status/2051406295828250963?s=61 , which highlighted research by @L1v1ng0ffTh3L4N that found exactly this issue. Edge stores all of your browser

安全情报

CVE-2026-44681 - Authlib OIDC Implicit/Hybrid Authorization Vulnerable to Open Redirect

📡 GitHub-Advisory · 2026-05-13 CVE-2026-44681 - Authlib OIDC Implicit/Hybrid Authorization Vulnerable to Open Redirect CVE-2026-44681 GHSA-r95x-qfjj-fjj2 MEDIUM pip/authlib CVE: CVE-2026-44681 Summary An unauthenticated open redirect in Authlib's OpenIDImplicitGrant and OpenIDHybridGrant authorization endpoint lets a remote attacker cause the authorization server to issue an HTTP 302 to an attacker-chosen

漏洞分析