APT情报 AI双引擎驱动：Claude Code与DeepSeek联手发起国家级网络间谍攻击 Hunt.io发现一场由Claude Code和DeepSeek驱动的中国背景APT攻击，通过香港C2服务器入侵泰国、阿富汗及台湾政府与供应链企业。攻击者利用AI自动化执行SQL注入、Laravel反序列化漏洞和钓鱼页面创建，窃取政府员工数据与云凭证。本文深度分析攻击链、技术细节与防御建议。
安全情报 📊 2026-07-27 漏洞情报日报 · 200 条 · 高危 100 每日漏洞情报汇总 · 2026-07-27 📊 2026-07-27 漏洞情报日报 📋 共 200 条 🔥 高危/严重 100 条 🐙 GitHub-Advisory 35 条 🔥24 🛡️ NVD-Latest 76 条 🔥76 ⚔️ Sploitus 89 条 🤖 今日安全态势分析 🎯 今日重点关注 * OpenDJ 未认证 SSRF / 文件读取 / DoS（GHSA‑68r5）：影响 OpenIdentityPlatform OpenDJ ≤5.1.1，DSMLv2 SOAP 网关无需认证即可发起 SSRF、读取本地文件并导致无界读取 DoS，属关键基础设施风险。 * sm‑crypto SM2 密钥可预测（GHSA‑vh45）
APT情报 黑客服务器暴露：WP-SHELLSTORM批量植入后门，上万WordPress站点沦陷 WP-SHELLSTORM组织因服务器配置错误暴露其攻击内幕：利用Breeze缓存插件等27个漏洞，大规模植入webshell后门上万个WordPress站点。本文深度分析攻击链、工具技术、IOCs及应急缓解建议，帮助防守方防御此类批量网站入侵。
APT情报 实时账户劫持：保险行业钓鱼攻击的新进化 保险行业成网络钓鱼新目标：攻击者利用谷歌广告投放虚假比价链接，通过InsureOTP工具包实时劫持账户。本文深入分析实时OTP绕过技术、攻击链及防御建议，帮助安全团队应对这种新型实时账户接管威胁。
安全情报 📊 2026-07-26 漏洞情报日报 · 200 条 · 高危 106 每日漏洞情报汇总 · 2026-07-26 📊 2026-07-26 漏洞情报日报 📋 共 200 条 🔥 高危/严重 106 条 🐙 GitHub-Advisory 50 条 🔥33 🛡️ NVD-Latest 73 条 🔥73 ⚔️ Sploitus 77 条 🤖 今日安全态势分析 🎯 今日重点关注 * OpenDJ 双重高危漏洞：GHSA-68r5 (未认证SSRF/本地文件读取/DoS) 与 GHSA-p279 (SASL PLAIN认证绕过)。攻击者无需认证即可利用网关进行内网扫描、读取任意文件或绕过代理权限检查，实现权限提升。 * sm-crypto SM2密钥可预测（GHSA-vh45）：Node.js密码学库sm-crypto 0.4.0因使用模块级单例RNG，导致SM2私钥和签名随机数可被预测，严重威胁基于SM2的加密通信安全。 * Azure 多服务权限提升链（CVE-2026-58630、
APT情报 AI成攻击者“力量倍增器”：Unit 42 2026事件响应报告深度解读 Unit 42 2026全球事件响应报告揭示：AI已成为攻击者的力量倍增器，压缩攻击生命周期但未引入全新向量。防御者需加强预防控制，警惕Token Jacking等新兴威胁，并培养兼具AI素养与技术基础的网络安全人才。
APT情报 AI加速但未颠覆攻击：Unit 42 2026全球事件响应报告深度解读 Palo Alto Unit 42发布2026全球事件响应报告，深度剖析AI如何成为攻击者力量倍增器：加速攻击周期但未改变基础手法。报告揭示智能体勒索、token劫持等新威胁，并给出防御建议。安全团队无需重新设计策略，强化预防控制与AI素养是关键。
漏洞分析 CVE-2026-9558 - Mautic has Server-Side Template Injection (SSTI) in Theme Templates CVE-2026-9558 - Mautic has Server-Side Template Injection (SSTI) in Theme Templates
漏洞分析 [webapps] KNX visualisering - Broken Access Control 未分配CVE 漏洞 High · CVSS N/A 📋 漏洞基础信息 CVE未分配CVE漏洞类型漏洞受影响版本详见原文危害等级High · CVSS N/A发布日期2026-07-06提交者parsa rezaie khiabanloo来源Exploit-DB 原文 ↗ ⚔️ 原始 PoC # Exploit Author: parsa rezaie khiabanloo Step 1 : Attacker can using these dorks then can find the KNX panel . Shodan : title:"KNX visualisering" OR https://www.shodan.io/search?query=title%3A%22KNX+
漏洞分析 [webapps] KeepInMind 0.8.4.2 - Stored XSS CVE-2026-9271 漏洞 High · CVSS N/A 📋 漏洞基础信息 CVECVE-2026-9271漏洞类型漏洞受影响版本详见原文危害等级High · CVSS N/A发布日期2026-07-06提交者Pavan N来源Exploit-DB 原文 ↗ ⚔️ 原始 PoC # Exploit Author: Pavan N # CVSS Score: 9.0 (Critical) 1. Technical Description: The KeepInMind - Dashboard Notes plugin (version 0.8.4.2 and below) fails to properly restrict dangerous CSS properties within the '
漏洞分析 [local] MEmu Android Emulator 9.2.7.0 - Local Privilege Escalation CVE-2026-36213 漏洞 High · CVSS N/A 📋 漏洞基础信息 CVECVE-2026-36213漏洞类型漏洞受影响版本详见原文危害等级High · CVSS N/A发布日期2026-07-06提交者Mohammad来源Exploit-DB 原文 ↗ ⚔️ 原始 PoC # Exploit Author: Mohammad ############################################### # Vulnerability Description ############################################### # # MEmu Android Emulator 9.2.7.0 installs a Windows # service named "MEmuSVC" that runs with # NT AUTHORITY\SYSTEM (LocalSystem) privileges. # # The service binary located at: #
漏洞分析 [webapps] Pulpy 0.1.1-Beta - Filesystem Sandbox Bypass CVE-2026-44225 漏洞 High · CVSS N/A 📋 漏洞基础信息 CVECVE-2026-44225漏洞类型漏洞受影响版本详见原文危害等级High · CVSS N/A发布日期2026-07-06提交者Onur BILICI @basekill来源Exploit-DB 原文 ↗ ⚔️ 原始 PoC # Exploit Author: Onur BILICI @basekill Description: Pulpy injects a 'pulpy.fs' JavaScript API into every packaged web application,granting it access to the host filesystem. A 'validateFsPath()' function is implemented
漏洞分析 [webapps] Joomla Extension 4.1.4 - PHP Object injection CVE-2026-48909 漏洞 High · CVSS N/A 📋 漏洞基础信息 CVECVE-2026-48909漏洞类型漏洞受影响版本详见原文危害等级High · CVSS N/A发布日期2026-07-06来源Exploit-DB 原文 ↗ ⚔️ Nuclei Exploit 模板 以下为标准 Nuclei v3 格式的利用模板，可直接用于漏洞验证： id: CVE-2026-48909-exploit info: name: JoomShaper SP LMS <= 4.1.3 PHP Object Injection RCE author: yours severity: critical description: Exploits PHP Object Injection via lmsOrders cookie to write webshell
漏洞分析 CVE-2026-50522 - Microsoft SharePoint Deserialization of Untrusted Data Vulnerability CVE-2026-50522 - Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
漏洞分析 CVE-2026-16232 (CVSS 9.1) - An authentication bypass vulnerability in the Check Point SmartConsole login pro CVE-2026-16232 (CVSS 9.1) - An authentication bypass vulnerability in the Check Point SmartConsole login pro
漏洞分析 CVE-2026-16232 - Check Point SmartConsole Improper Authentication Vulnerability CVE-2026-16232 - Check Point SmartConsole Improper Authentication Vulnerability
安全情报 Lessons Learned from CISA’s Recent GitHub Leak 📡 Krebs on Security · 2026-07-13 Lessons Learned from CISA’s Recent GitHub Leak Lessons Learned from CISA’s Recent GitHub Leak – Krebs on Security --> Advertisement Advertisement --> Skip to content Home About the Author Advertising/Speaking Lessons Learned from CISA’s Recent
安全情报 Wireshark 4.6.7 Released, (Sat, Jul 11th) 📡 SANS ISC · 2026-07-11 Wireshark 4.6.7 Released, (Sat, Jul 11th) Wireshark 4.6.7 Released - SANS Internet Storm Center --> Internet Storm Center Sign In Sign Up Handler on Duty: Didier Stevens Threat Level: green previous Click HERE to learn more about classes Didier is teaching for
安全情报 ISC Stormcast For Friday, July 10th, 2026 https://isc.sans.edu/podcastdetail/10002, (Fri, Jul 10th) 📡 SANS ISC · 2026-07-10 ISC Stormcast For Friday, July 10th, 2026 https://isc.sans.edu/podcastdetail/10002, (Fri, Jul 10th) ISC Stormcast For Friday, July 10th, 2026 https://isc.sans.edu/podcastdetail/10002 --> Internet Storm Center Sign In Sign Up Handler on Duty: Jan Kopriva Threat Level: green previous
安全情报 "Comment stuffing" in an HTML phishing attachment as a mechanism for evading AI-based detection?, (Fri, Jul 10th) 📡 SANS ISC · 2026-07-10 "Comment stuffing" in an HTML phishing attachment as a mechanism for evading AI-based detection?, (Fri, Jul 10th) "Comment stuffing" in an HTML phishing attachment as a mechanism for evading AI-based detection? --> Internet Storm Center Sign In Sign
安全情报 AI Surveillance and Social Progress 📡 Schneier on Security · 2026-07-10 AI Surveillance and Social Progress AI Surveillance and Social Progress - Schneier on Security Schneier on Security Menu Blog Newsletter Books Essays News Talks Academic About Me Search Powered by DuckDuckGo Blog Essays Whole site Subscribe Home Blog AI Surveillance and Social Progress In the near
安全情报 Friday Squid Blogging: “Squidbleed” Vulnerability 📡 Schneier on Security · 2026-07-10 Friday Squid Blogging: “Squidbleed” Vulnerability Friday Squid Blogging: "Squidbleed" Vulnerability - Schneier on Security Schneier on Security Menu Blog Newsletter Books Essays News Talks Academic About Me Search Powered by DuckDuckGo Blog Essays Whole site Subscribe Home Blog Friday Squid Blogging: “Squidbleed”
安全情报 No Manners Here: The Ruthless Rise of The Gentlemen Ransomware 📡 Palo Alto Unit42 · 2026-07-10 No Manners Here: The Ruthless Rise of The Gentlemen Ransomware No Manners Here: The Ruthless Rise of The Gentlemen Ransomware Menu Tools ATOMs Security Consulting About Us Under Attack? Threat Research Center Insights Hospitality Hacks and Retail Reality Checks Hospitality Hacks and Retail Reality Checks No
安全情报 _HELP_ME_ESCAPE_FROM_BELARUS_PLEASE_ [Guest Diary], (Tue, Jul 7th) 📡 SANS ISC · 2026-07-09 _HELP_ME_ESCAPE_FROM_BELARUS_PLEASE_ [Guest Diary], (Tue, Jul 7th) _HELP_ME_ESCAPE_FROM_BELARUS_PLEASE_ [Guest Diary] --> Internet Storm Center Sign In Sign Up Handler
安全情报 📊 2026-07-25 漏洞情报日报 · 200 条 · 高危 109 每日漏洞情报汇总 · 2026-07-25 📊 2026-07-25 漏洞情报日报 📋 共 200 条 🔥 高危/严重 109 条 🐙 GitHub-Advisory 70 条 🔥43 🛡️ NVD-Latest 66 条 🔥66 ⚔️ Sploitus 64 条 🤖 今日安全态势分析 （今日数据暂无足够信息生成分析） 🐙 GitHub-Advisory（70 条） Critical (7 条) * GHSA-68r5-9hpg-7qw9 - OpenDJ unauthenticated SSRF, local file read and unbounded-read DoS in the DSMLv Critical The DSMLv2 SOAP gateway (opendj-dsml-servlet)
