安全情报 ISC Stormcast For Wednesday, July 8th, 2026 https://isc.sans.edu/podcastdetail/9998, (Wed, Jul 8th) 📡 SANS ISC · 2026-07-08 ISC Stormcast For Wednesday, July 8th, 2026 https://isc.sans.edu/podcastdetail/9998, (Wed, Jul 8th) ISC Stormcast For Wednesday, July 8th, 2026 https://isc.sans.edu/podcastdetail/9998 --> Internet Storm Center Sign In Sign Up Handler on Duty: Guy Bruneau Threat Level: green previous
安全情报 My Stack Simulator, (Wed, Jul 8th) 📡 SANS ISC · 2026-07-08 My Stack Simulator, (Wed, Jul 8th) My Stack Simulator - SANS Internet Storm Center --> Internet Storm Center Sign In Sign Up Handler on Duty: Guy Bruneau Threat Level: green previous Click HERE to learn more about classes Xavier is teaching for SANS My Stack Simulator
安全情报 AI-Generated Browser Ransomware Abuses Chromium API on Windows, Linux, macOS, Android 📡 The Hacker News · 2026-07-01 AI-Generated Browser Ransomware Abuses Chromium API on Windows, Linux, macOS, Android AI-Generated Browser Ransomware Abuses Chromium API on Windows, Linux, macOS, Android --> #1 Trusted Cybersecurity News Platform Followed by 5.70+ million      
安全情报 Ousaban Banking Trojan Targets Iberian Bank Users with Fake PDF Lures 📡 The Hacker News · 2026-07-01 Ousaban Banking Trojan Targets Iberian Bank Users with Fake PDF Lures Ousaban Banking Trojan Targets Iberian Bank Users with Fake PDF Lures --> #1 Trusted Cybersecurity News Platform Followed by 5.70+ million      
安全情报 📊 2026-07-15 漏洞情报日报 · 200 条 · 高危 100 每日漏洞情报汇总 · 2026-07-15 📊 2026-07-15 漏洞情报日报 📋 共 200 条 🔥 高危/严重 100 条 🚨 CISA-KEV 5 条 🐙 GitHub-Advisory 72 条 🔥43 🛡️ NVD-Latest 57 条 🔥57 ⚔️ Sploitus 66 条 🤖 今日安全态势分析 🎯 今日重点关注 * CVE-2026-47677 (FacturaScripts): 关键身份认证绕过漏洞。攻击者可对2FA验证接口进行暴力破解，无需密码即可接管任何启用了双因素认证的用户账户，且接口缺乏CSRF保护，利用条件极低。 * CVE-2026-52824 (Kimai Docker): 关键默认密钥漏洞。官方Docker镜像使用了硬编码的默认`APP_SECRET`，攻击者可轻易伪造会话Cookie，直接接管整个实例，影响所有未修改此配置的容器化部署。 * CVE-2026-45262 (FacturaScripts): 关键SQL注入漏洞。即使API密钥被限制为仅可读访问，攻击者仍可通过REST
APT情报 警惕许可证管理器：施耐德电气高危漏洞直击工业设施命脉 CVE-2024-2658是施耐德电气浮点许可证管理器(FLM)中的高危漏洞，允许低权限用户通过替换硬编码路径下的openssl.cnf文件加载恶意DLL，进而在工业控制系统（ICS）中实现权限提升至SYSTEM。本文详解攻击链、检测方法及缓解措施，帮助工业安全团队防范该漏洞对PLC、HMI和SCADA环境的威胁。
APT情报 每周安全速递：ShareFile紧急关停、Citrix Bleed 2勒索软件、AI编程助手投毒攻击 本周安全速递涵盖Progress ShareFile紧急关停、Citrix Bleed勒索软件、AI编程助手HalluSquatting攻击、Jscrambler npm投毒及SHELLSTORM大规模WordPress入侵。专家分析攻击链、IOC及缓解措施，帮助安全团队应对快速演变的威胁。
漏洞分析 CVE-2026-11964 (CVSS 9.1) - The User Registration & Membership WordPress plugin before 5.2.2 does not verif CVE-2026-11964 (CVSS 9.1): User Registration & Membership WordPress插件低于5.2.2版本存在Webhook验证缺失漏洞，未认证攻击者可伪造支付成功事件激活付费会员，导致收入损失与内容泄露。立即升级修复。
漏洞分析 CVE-2008-4128 - Cisco IOS Cross-Site Request Forgery Vulnerability CVE-2008-4128 是 Cisco IOS 12.4 中的跨站请求伪造漏洞，允许远程攻击者在没有凭证的情况下以管理员权限执行任意 IOS 命令。攻击者通过诱骗已登录的管理员访问恶意页面，即可触发设备执行'privilege'或'alias exec'等命令，导致设备完全被控。该漏洞影响网络核心设备，修复需升级至12.4(20)T以上版本，并建议临时禁用HTTP服务。
安全情报 Felons, Fraudsters Flog Offensive Cybersecurity Startup 📡 Krebs on Security · 2026-07-08 Felons, Fraudsters Flog Offensive Cybersecurity Startup Felons, Fraudsters Flog Offensive Cybersecurity Startup – Krebs on Security --> Advertisement Advertisement --> Skip to content Home About the Author Advertising/Speaking Felons, Fraudsters Flog Offensive Cybersecurity Startup July 8, 2026 8 Comments A cybersecurity startup
安全情报 Rogue Agent Flaw Could Have Let Attackers Hijack Google Dialogflow CX Chatbots 📡 The Hacker News · 2026-07-07 Rogue Agent Flaw Could Have Let Attackers Hijack Google Dialogflow CX Chatbots Rogue Agent Flaw Could Have Let Attackers Hijack Google Dialogflow CX Chatbots --> #1 Trusted Cybersecurity News Platform Followed by 5.70+ million     
安全情报 ISC Stormcast For Tuesday, July 7th, 2026 https://isc.sans.edu/podcastdetail/9996, (Tue, Jul 7th) 📡 SANS ISC · 2026-07-07 ISC Stormcast For Tuesday, July 7th, 2026 https://isc.sans.edu/podcastdetail/9996, (Tue, Jul 7th) ISC Stormcast For Tuesday, July 7th, 2026 https://isc.sans.edu/podcastdetail/9996 --> Internet Storm Center Sign In Sign Up Handler on Duty: Xavier Mertens Threat Level: green previous
安全情报 New TrojPix Attack Leaks Data From Air-Gapped Systems via Video Cable Emissions 📡 The Hacker News · 2026-07-06 New TrojPix Attack Leaks Data From Air-Gapped Systems via Video Cable Emissions New TrojPix Attack Leaks Data From Air-Gapped Systems via Video Cable Emissions --> #1 Trusted Cybersecurity News Platform Followed by 5.70+ million     
安全情报 Writer AI Flaw Could Let Agent Previews Leak Session Tokens Across Tenants 📡 The Hacker News · 2026-07-07 Writer AI Flaw Could Let Agent Previews Leak Session Tokens Across Tenants Writer AI Flaw Could Let Agent Previews Leak Session Tokens Across Tenants --> #1 Trusted Cybersecurity News Platform Followed by 5.70+ million     
安全情报 RedWing MaaS Packages Android Bank Fraud as a Telegram Rental Service 📡 The Hacker News · 2026-07-07 RedWing MaaS Packages Android Bank Fraud as a Telegram Rental Service RedWing MaaS Packages Android Bank Fraud as a Telegram Rental Service --> #1 Trusted Cybersecurity News Platform Followed by 5.70+ million      
安全情报 ISC Stormcast For Tuesday, July 7th, 2026 https://isc.sans.edu/podcastdetail/9996, (Tue, Jul 7th) 📡 SANS ISC · 2026-07-07 ISC Stormcast For Tuesday, July 7th, 2026 https://isc.sans.edu/podcastdetail/9996, (Tue, Jul 7th) ISC Stormcast For Tuesday, July 7th, 2026 https://isc.sans.edu/podcastdetail/9996 --> Internet Storm Center Sign In Sign Up Handler on Duty: Xavier Mertens Threat Level: green previous
安全情报 📊 2026-07-14 漏洞情报日报 · 1 条 · 高危 0 每日漏洞情报汇总 · 2026-07-14 📊 2026-07-14 漏洞情报日报 📋 共 1 条 🔥 高危/严重 0 条 🐙 GitHub-Advisory 1 条 🤖 今日安全态势分析 🎯 今日重点关注 * CVE-2026-52821 (Kimai, 中危): 影响 Kimai 2.56.0，属于授权不当漏洞。拥有通用`create_activity`权限但无权访问特定项目的用户，可通过预设项目（Preset Project）的活动创建流程，绕过项目级访问控制。利用条件：需要已持有的低权限账号。 * (注意，今日仅收录一条有效漏洞数据，以下为基于此数据的补充分析): 考虑到漏洞存在于项目管理软件中，需警惕攻击者利用此漏洞创建与敏感项目相关联的虚假活动，进而收集项目内部信息或破坏计时数据的完整性。 * 潜在影响场景: 攻击者可将恶意活动关联至机密项目，导致项目进度、耗时等敏感信息通过正常的活动报告机制意外泄露给非授权人员。 * 利用复杂度: 漏洞利用路径较为清晰，仅需通过应用程序预设的活动创建功能即可触发，无需复杂的逆向或权限
APT情报 浏览器内RDP客户端突破：逆向微软未公开协议，实现WebAuthn重定向 Unit42研究员在Prisma Browser中实现首个浏览器内RDP客户端的WebAuthn重定向功能，通过逆向微软未公开代码路径和构建自定义Chromium扩展API，解决了远程会话中安全密钥认证的兼容性问题。本文深入分析[MS-RDPEWA]协议缺陷、clientDataHash限制绕过技术及对浏览器安全的影响，提供检测与缓解建议。
APT情报 当无人倾听时，端口在“听”什么？——自动化网络犯罪深度剖析 SANS ISC实习研究员通过蜜罐日志，分析了Terrabot和r00ts3c两个Mirai变种僵尸网络的自动化攻击行为。报告揭示了攻击者如何利用历史漏洞和低技术缺陷入侵物联网设备，并提供了相应的缓解建议和威胁狩猎指标。
漏洞分析 [webapps] Joomla Extension 4.1.4 - PHP Object injection CVE-2026-48909 漏洞 High · CVSS N/A 📋 漏洞基础信息 CVECVE-2026-48909漏洞类型漏洞受影响版本详见原文危害等级High · CVSS N/A发布日期2026-07-06来源Exploit-DB 原文 ↗ ⚔️ Nuclei Exploit 模板 以下为标准 Nuclei v3 格式的利用模板，可直接用于漏洞验证： id: CVE-2026-48909-exploit info: name: JoomShaper SP LMS <= 4.1.3 PHP Object Injection RCE author: yours severity: critical description: Exploits PHP Object Injection via lmsOrders cookie to write webshell
漏洞分析 CVE-2026-48939 - iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability CVE-2026-48939是iCagenda Joomla扩展中一个严重的无限制文件上传漏洞（CVSS 10.0），允许未认证攻击者上传任意文件（包括PHP webshell）并实现远程代码执行。受影响版本低于4.0.8，PoC已公开。立即升级或采用WAF缓解措施可防御此漏洞。
漏洞分析 Exploit for CVE-2026-14894 exploit CVE-2026-14894：WordPress Super Forms插件6.3.313及之前版本存在任意文件上传漏洞，CVSS 9.8，未认证攻击者可利用nonce绕过机制上传PHP文件实现远程代码执行。本文提供修复方案与检测建议。
漏洞分析 Exploit for CVE-2026-15282 exploit CVE-2026-15282 是 WordPress Instant Appointment 插件 <=1.2 版本的严重任意文件上传漏洞，CVSS 9.8。未经身份验证的攻击者可上传恶意 PHP 文件实现远程代码执行，完全控制网站。已存在公开 PoC，建议立即升级或采取缓解措施。
安全情报 More Odd DNS Records: NIMLOC, (Tue, Jul 7th) 📡 SANS ISC · 2026-07-07 More Odd DNS Records: NIMLOC, (Tue, Jul 7th) More Odd DNS Records: NIMLOC - SANS Internet Storm Center --> Internet Storm Center Sign In Sign Up Handler on Duty: Xavier Mertens Threat Level: green previous Click HERE to learn more about classes Johannes is teaching for
安全情报 Google Is Suing Chinese Scammers Who Are Using Gemini 📡 Schneier on Security · 2026-07-07 Google Is Suing Chinese Scammers Who Are Using Gemini Google Is Suing Chinese Scammers Who Are Using Gemini - Schneier on Security Schneier on Security Menu Blog Newsletter Books Essays News Talks Academic About Me Search Powered by DuckDuckGo Blog Essays Whole site Subscribe Home Blog
