📡 The Hacker News · 2026-07-03 Unpatched Flaws Disclosed in Filesystem Bundled Into Millions of Embedded Devices Unpatched Flaws Disclosed in Filesystem Bundled Into Millions of Embedded Devices --> #1 Trusted Cybersecurity News Platform Followed by 5.70+ million      

📡 The Hacker News · 2026-07-03 North Korea-Linked npm Packages Mimic Rollup Polyfills to Steal Developer Secrets North Korea-Linked npm Packages Mimic Rollup Polyfills to Steal Developer Secrets --> #1 Trusted Cybersecurity News Platform Followed by 5.70+ million      

每日漏洞情报汇总 · 2026-07-21 📊 2026-07-21 漏洞情报日报 📋 共 200 条 🔥 高危/严重 104 条 🐙 GitHub-Advisory 50 条 🔥20 🛡️ NVD-Latest 84 条 🔥84 ⚔️ Sploitus 66 条 🤖 今日安全态势分析 🎯 今日重点关注 * CVE-2026-59873 (Critical) - node-tar 解压拒绝服务: 影响所有使用 npm tar 库的 Node.js 应用。由于库未对解压数据总量设硬上限，攻击者可构造恶意压缩包，导致服务器磁盘空间与 CPU 资源耗尽。 * CVE-2026-63795 (CVSS 10.0) - Linux 内核 9p 文件系统漏洞:

📡 Vulhub · 2026-07-18 Vulhub PoC: CVE-2026-63030 - Add WordPress CVE-2026-63030 pre-auth RCE (wp2shell) environment (#791) * Add W CVE-2026-63030CVE-2026-60137 Vulhub Docker 复现环境 CVE: CVE-2026-63030, CVE-2026-60137 Add WordPress CVE-2026-63030 pre-auth RCE (wp2shell) environment (#791) * Add WordPress CVE-2026-63030 pre-auth RCE (wp2shell) environment Chains the REST API batch route confusion (CVE-2026-63030) with the WP_Query

📡 The Hacker News · 2026-06-30 Silent Swap Crypto Clipper Uses Fake Google Notes Extension to Replace Wallet Addresses Silent Swap Crypto Clipper Uses Fake Google Notes Extension to Replace Wallet Addresses --> #1 Trusted Cybersecurity News Platform Followed by 5.70+ million    

📡 The Hacker News · 2026-07-01 Unpatched Argo CD Repo-Server Flaw Could Let Attackers Take Over Kubernetes Clusters Unpatched Argo CD Repo-Server Flaw Could Let Attackers Take Over Kubernetes Clusters --> #1 Trusted Cybersecurity News Platform Followed by 5.70+ million     

📡 The Hacker News · 2026-06-30 Silent Swap Crypto Clipper Uses Fake Google Notes Extension to Replace Wallet Addresses Silent Swap Crypto Clipper Uses Fake Google Notes Extension to Replace Wallet Addresses --> #1 Trusted Cybersecurity News Platform Followed by 5.70+ million    

📡 The Hacker News · 2026-06-30 Microsoft Warns Poisoned MCP Tool Descriptions Can Make AI Agents Leak Data Microsoft Warns Poisoned MCP Tool Descriptions Can Make AI Agents Leak Data --> #1 Trusted Cybersecurity News Platform Followed by 5.70+ million     

每日漏洞情报汇总 · 2026-07-20 📊 2026-07-20 漏洞情报日报 📋 共 200 条 🔥 高危/严重 96 条 🐙 GitHub-Advisory 26 条 🔥12 🛡️ NVD-Latest 84 条 🔥84 ⚔️ Sploitus 90 条 🤖 今日安全态势分析 🎯 今日重点关注 * CVE-2026-16117 (CVSS 10.0) - Fastify HTTP代理： @fastify/http-proxy ≤11.5.0 因未正确处理URL编码的前缀路径，导致请求路由绕过，可被用于SSRF或访问内部资源。利用条件：攻击者能够发送特制HTTP请求到代理服务。 * CVE-2026-45695 (CVSS 9.8) - Kopia备份工具： Kopia HTTP服务器以`--without-password`

📡 The Hacker News · 2026-06-30 Silent Swap Crypto Clipper Uses Fake Google Notes Extension to Replace Wallet Addresses Silent Swap Crypto Clipper Uses Fake Google Notes Extension to Replace Wallet Addresses --> #1 Trusted Cybersecurity News Platform Followed by 5.70+ million    

📡 The Hacker News · 2026-07-03 North Korea-Linked npm Packages Mimic Rollup Polyfills to Steal Developer Secrets North Korea-Linked npm Packages Mimic Rollup Polyfills to Steal Developer Secrets --> #1 Trusted Cybersecurity News Platform Followed by 5.70+ million      

📡 The Hacker News · 2026-07-04 North Korean Hackers Publish 108 Malicious Packages and Extensions in PolinRider Campaign North Korean Hackers Publish 108 Malicious Packages and Extensions in PolinRider Campaign --> #1 Trusted Cybersecurity News Platform Followed by 5.70+ million     

📡 The Hacker News · 2026-06-30 Silent Swap Crypto Clipper Uses Fake Google Notes Extension to Replace Wallet Addresses Silent Swap Crypto Clipper Uses Fake Google Notes Extension to Replace Wallet Addresses --> #1 Trusted Cybersecurity News Platform Followed by 5.70+ million    

每日漏洞情报汇总 · 2026-07-19 📊 2026-07-19 漏洞情报日报 📋 共 200 条 🔥 高危/严重 89 条 🐙 GitHub-Advisory 35 条 🔥14 🛡️ NVD-Latest 75 条 🔥75 ⚔️ Sploitus 90 条 🤖 今日安全态势分析 🎯 今日重点关注 * CVE-2026-9810 (CVSS 9.8)：WordPress AI Copilot 插件认证绕过漏洞。未绑定 OAuth 令牌至用户，攻击者可通过公共 OAuth 流程获取有效令牌直接获取管理员权限。 * CVE-2026-45695 (CVSS 9.8)：Kopia 备份工具 HTTP 服务无需密码启动时，存在未授权API访问风险。远程攻击者可利用该漏洞读取或操作备份数据。 * CVE-2026-53713 (Critical)