漏洞分析 CVE-2026-58644 - Microsoft SharePoint Deserialization of Untrusted Data Vulnerability CVE-2026-58644 是Microsoft SharePoint中的反序列化未信任数据漏洞，CVSS 9.8，允许未经授权的攻击者远程执行代码。影响多个SharePoint版本，微软已发布补丁。本文提供技术根因、攻击场景及紧急缓解措施。
安全情报 Public GitHub Issue Could Trick GitHub Agentic Workflows Into Leaking Private Repo Data 📡 The Hacker News · 2026-07-07 Public GitHub Issue Could Trick GitHub Agentic Workflows Into Leaking Private Repo Data Public GitHub Issue Could Trick GitHub Agentic Workflows Into Leaking Private Repo Data --> #1 Trusted Cybersecurity News Platform Followed by 5.70+ million    
安全情报 AI-Generated Malware Powers New Armored Likho APT Campaign 📡 Security Affairs · 2026-07-07 AI-Generated Malware Powers New Armored Likho APT Campaign AI-Generated Malware Powers New Armored Likho APT Campaign Home Cyber Crime Cyber warfare APT Data Breach Deep Web Hacking Hacktivism Intelligence Artificial Intelligence Internet of Things Laws and regulations Malware Mobile Reports Security Social Networks Terrorism ICS-SCADA Crypto POLICIES
安全情报 Silent Swap Crypto Clipper Uses Fake Google Notes Extension to Replace Wallet Addresses 📡 The Hacker News · 2026-06-30 Silent Swap Crypto Clipper Uses Fake Google Notes Extension to Replace Wallet Addresses Silent Swap Crypto Clipper Uses Fake Google Notes Extension to Replace Wallet Addresses --> #1 Trusted Cybersecurity News Platform Followed by 5.70+ million    
安全情报 North Korea-Linked npm Packages Mimic Rollup Polyfills to Steal Developer Secrets 📡 The Hacker News · 2026-07-03 North Korea-Linked npm Packages Mimic Rollup Polyfills to Steal Developer Secrets North Korea-Linked npm Packages Mimic Rollup Polyfills to Steal Developer Secrets --> #1 Trusted Cybersecurity News Platform Followed by 5.70+ million      
安全情报 📊 2026-07-18 漏洞情报日报 · 200 条 · 高危 96 每日漏洞情报汇总 · 2026-07-18 📊 2026-07-18 漏洞情报日报 📋 共 200 条 🔥 高危/严重 96 条 🚨 CISA-KEV 3 条 🐙 GitHub-Advisory 52 条 🔥27 🛡️ NVD-Latest 69 条 🔥69 ⚔️ Sploitus 76 条 🤖 今日安全态势分析 🎯 今日重点关注 * CVE-2026-56699 (CVSS 10.0，Wazuh Manager)： 严重级别最高。未转义字段导致NDJSON注入，已注册代理可任意删除/索引数据，直接威胁SIEM日志完整性。 * CVE-2026-45695 (CVSS 9.8，Kopia备份工具)： 无密码启动HTTP服务时，攻击者可未经认证直接访问备份仓库，导致敏感数据全量泄露。 * CVE-2026-55579 (Pheditor编辑器)： 硬编码默认密码“admin”
APT情报 一周威胁速报：游戏作弊变身间谍软件，24小时极速勒索与Chrome同步追踪 2026年7月安全威胁综述：NuGet恶意包伪装游戏作弊投递间谍软件、Spirals勒索软件24小时内加密全网络、Chrome同步功能被用于用户追踪。CISA新增Oracle和KNX漏洞至已知利用目录。提供详细攻击链、IOC和缓解措施。
APT情报 HelloNet行动：利用ViPNet更新系统植入后门，APT攻击瞄准俄罗斯关键基础设施 卡巴斯基披露HelloNet APT行动：攻击者利用ViPNet更新系统DLL劫持漏洞，植入HelloInjector、HelloProxy和HelloBackdoor模块，持续攻击俄罗斯政府、能源等关键基础设施。本文详解攻击链、IoC及防御建议。
安全情报 DEBULL Tooling Abuses Microsoft Device-Code Flow to Target M365 Accounts 📡 The Hacker News · 2026-07-07 DEBULL Tooling Abuses Microsoft Device-Code Flow to Target M365 Accounts DEBULL Tooling Abuses Microsoft Device-Code Flow to Target M365 Accounts --> #1 Trusted Cybersecurity News Platform Followed by 5.70+ million       Get the
安全情报 North Korea-Linked npm Packages Mimic Rollup Polyfills to Steal Developer Secrets 📡 The Hacker News · 2026-07-03 North Korea-Linked npm Packages Mimic Rollup Polyfills to Steal Developer Secrets North Korea-Linked npm Packages Mimic Rollup Polyfills to Steal Developer Secrets --> #1 Trusted Cybersecurity News Platform Followed by 5.70+ million      
安全情报 📊 2026-07-17 漏洞情报日报 · 200 条 · 高危 106 每日漏洞情报汇总 · 2026-07-17 📊 2026-07-17 漏洞情报日报 📋 共 200 条 🔥 高危/严重 106 条 🚨 CISA-KEV 3 条 🐙 GitHub-Advisory 71 条 🔥40 🛡️ NVD-Latest 66 条 🔥66 ⚔️ Sploitus 60 条 🤖 今日安全态势分析 🎯 今日重点关注 * CVE-2026-56699 (CVSS 10.0)：Wazuh Manager < 5.0.0-beta3 存在NDJSON注入漏洞。已注册的Agent可构造恶意DataValue.index字段，向OpenSearch Bulk API注入删除或写入操作，威胁日志系统完整性与可用性。 * CVE-2026-62422 (CVSS 10.0)：JetBrains YouTrack（
APT情报 OkoBot：新型加密货币窃密框架，GitHub伪装软件传播 卡巴斯基披露OkoBot新型恶意软件框架，通过GitHub伪装软件和ClickFix攻击感染用户，利用SSH隧道协调20+模块窃取加密货币钱包内容。本文详细分析攻击链、IOC和防御建议，适用于安全分析师和加密货币用户。
APT情报 TuxBot v3进化：LLM辅助开发的物联网僵尸网络框架深度分析 Unit42深度分析TuxBot v3 Evolution物联网僵尸网络框架，揭示攻击者利用LLM辅助开发、遗留安全免责声明和功能缺陷。框架支持17种架构，通过Telnet暴力破解和30+漏洞传播，具备DDoS能力。提供IOC、攻击链和缓解建议，助力物联网安全防护。
漏洞分析 CVE-2026-15410 - SonicWall SMA1000 Appliances Code Injection Vulnerability CVE-2026-15410 是影响 SonicWall SMA1000 设备的关键代码注入漏洞，允许远程已认证管理员执行任意OS命令。此漏洞可能导致设备完全失陷及内网横向移动，建议立即应用厂商补丁并实施临时缓解措施。
漏洞分析 CVE-2026-15409 - SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability CVE-2026-15409 是SonicWall SMA1000 设备中的服务端请求伪造（SSRF）漏洞，CVSS 8.6，高危。未认证远程攻击者可通过恶意URL请求发起内网探测，获取云元数据凭证等敏感信息。本文提供深度分析、攻击场景与修复建议。
漏洞分析 CVE-2026-56164 - Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability CVE-2026-56164 是 Microsoft SharePoint Server 中的关键功能认证缺失漏洞，CVSS 9.8，允许未授权攻击者远程提权。本文提供深度技术分析、攻击场景、检测方法和修复建议，帮助安全团队有效应对此高风险漏洞。
安全情报 GitHub 'Verified' Commits Can Be Rewritten Into New Hashes Without Breaking Signatures 📡 The Hacker News · 2026-07-08 GitHub 'Verified' Commits Can Be Rewritten Into New Hashes Without Breaking Signatures GitHub 'Verified' Commits Can Be Rewritten Into New Hashes Without Breaking Signatures --> #1 Trusted Cybersecurity News Platform Followed by 5.70+ million  
安全情报 North Korea-Linked npm Packages Mimic Rollup Polyfills to Steal Developer Secrets 📡 The Hacker News · 2026-07-03 North Korea-Linked npm Packages Mimic Rollup Polyfills to Steal Developer Secrets North Korea-Linked npm Packages Mimic Rollup Polyfills to Steal Developer Secrets --> #1 Trusted Cybersecurity News Platform Followed by 5.70+ million      
安全情报 GitHub 'Verified' Commits Can Be Rewritten Into New Hashes Without Breaking Signatures 📡 The Hacker News · 2026-07-08 GitHub 'Verified' Commits Can Be Rewritten Into New Hashes Without Breaking Signatures GitHub 'Verified' Commits Can Be Rewritten Into New Hashes Without Breaking Signatures --> #1 Trusted Cybersecurity News Platform Followed by 5.70+ million  
安全情报 📊 2026-07-16 漏洞情报日报 · 200 条 · 高危 103 每日漏洞情报汇总 · 2026-07-16 📊 2026-07-16 漏洞情报日报 📋 共 200 条 🔥 高危/严重 103 条 🚨 CISA-KEV 2 条 🐙 GitHub-Advisory 88 条 🔥53 🛡️ NVD-Latest 50 条 🔥50 ⚔️ Sploitus 60 条 🤖 今日安全态势分析 🎯 今日重点关注 * CVE-2026-62422 (YouTrack, CVSS 10.0)：JetBrains YouTrack 存在认证绕过漏洞，攻击者通过直接数据库访问即可获取管理员权限。影响范围广，危害评级最高。 * CVE-2026-56451 (Opcenter X, CVSS 10.0)：西门子 Opcenter X 未正确验证 JWT 算法，
APT情报 URL检查失效：通过微软官网进行的设备代码钓鱼攻击分析 卡巴斯基安全分析师揭示一种新型钓鱼攻击：攻击者利用微软OAuth 2.0设备代码流程，在合法微软域上诱导用户输入代码，窃取访问令牌。本文解析攻击原理、真实案例及防御策略，帮助安全团队防范无需伪造URL的高级身份欺诈。
APT情报 2026年7月微软补丁日：AI灾难降临，622个漏洞创历史之最 2026年7月微软补丁日发布622个漏洞，包括62个严重漏洞和2个已遭利用的提权漏洞。AD FS、SharePoint Server、DHCP客户端及RMCAST驱动存在重大风险。本文深度分析攻击面、缓解措施及优先修补策略，帮助安全团队应对这场“AI灾难”级别的补丁浪潮。
漏洞分析 CVE-2026-57830 (CVSS 9.1) - The Joomla extension Helix Ultimate is vulnerable to an unauthenticated arbitrar CVE-2026-57830 是 Joomla Helix Ultimate 扩展中的高危未授权任意文件删除漏洞（CVSS 9.1），影响版本 ≤ 2.2.6。攻击者可远程删除配置文件等敏感文件，导致网站崩溃。本文深入分析漏洞成因、攻击场景与修复建议。
安全情报 The Language of AI Could Change How Humans Speak 📡 Schneier on Security · 2026-07-09 The Language of AI Could Change How Humans Speak The Language of AI Could Change How Humans Speak - Schneier on Security Schneier on Security Menu Blog Newsletter Books Essays News Talks Academic About Me Search Powered by DuckDuckGo Blog Essays Whole site Subscribe Home Blog
安全情报 Cybersecurity and the Gap Between Skill and Ability 📡 Schneier on Security · 2026-07-08 Cybersecurity and the Gap Between Skill and Ability Cybersecurity and the Gap Between Skill and Ability - Schneier on Security Schneier on Security Menu Blog Newsletter Books Essays News Talks Academic About Me Search Powered by DuckDuckGo Blog Essays Whole site Subscribe Home Blog Cybersecurity and
