安全情报 282 iOS AI Apps Leak API Keys and Open AI Proxy Access in Network Traffic Study 📡 The Hacker News · 2026-06-30 282 iOS AI Apps Leak API Keys and Open AI Proxy Access in Network Traffic Study 282 iOS AI Apps Leak API Keys and Open AI Proxy Access in Network Traffic Study --> #1 Trusted Cybersecurity News Platform Followed by 5.70+ million 
安全情报 Researcher Analyzes 3,000 Live ClickFix Payloads, Exposing API-Driven Malware Delivery 📡 The Hacker News · 2026-07-01 Researcher Analyzes 3,000 Live ClickFix Payloads, Exposing API-Driven Malware Delivery Researcher Analyzes 3,000 Live ClickFix Payloads, Exposing API-Driven Malware Delivery --> #1 Trusted Cybersecurity News Platform Followed by 5.70+ million      
安全情报 New ChocoPoC RAT Targets Vulnerability Researchers via Fake PoC Exploit Repos 📡 The Hacker News · 2026-07-02 New ChocoPoC RAT Targets Vulnerability Researchers via Fake PoC Exploit Repos New ChocoPoC RAT Targets Vulnerability Researchers via Fake PoC Exploit Repos --> #1 Trusted Cybersecurity News Platform Followed by 5.70+ million      
安全情报 VEIL#DROP Malware Chain Uses Blogger Platform to Deliver PureLogs Stealer 📡 The Hacker News · 2026-07-01 VEIL#DROP Malware Chain Uses Blogger Platform to Deliver PureLogs Stealer VEIL#DROP Malware Chain Uses Blogger Platform to Deliver PureLogs Stealer --> #1 Trusted Cybersecurity News Platform Followed by 5.70+ million      
安全情报 SEO-Poisoned Software Sites Abuse ScreenConnect to Deploy AsyncRAT 📡 The Hacker News · 2026-07-01 SEO-Poisoned Software Sites Abuse ScreenConnect to Deploy AsyncRAT SEO-Poisoned Software Sites Abuse ScreenConnect to Deploy AsyncRAT --> #1 Trusted Cybersecurity News Platform Followed by 5.70+ million       Get the Latest News Home Newsletter
安全情报 FortiBleed Credential Theft Linked to INC and Lynx Ransomware Operations 📡 The Hacker News · 2026-07-02 FortiBleed Credential Theft Linked to INC and Lynx Ransomware Operations FortiBleed Credential Theft Linked to INC and Lynx Ransomware Operations --> #1 Trusted Cybersecurity News Platform Followed by 5.70+ million       Get the
安全情报 PamStealer Uses Fake Maccy Sites and PAM Checks to Steal Mac Login Passwords 📡 The Hacker News · 2026-07-03 PamStealer Uses Fake Maccy Sites and PAM Checks to Steal Mac Login Passwords PamStealer Uses Fake Maccy Sites and PAM Checks to Steal Mac Login Passwords --> #1 Trusted Cybersecurity News Platform Followed by 5.70+ million    
安全情报 📊 2026-07-11 漏洞情报日报 · 200 条 · 高危 101 每日漏洞情报汇总 · 2026-07-11 📊 2026-07-11 漏洞情报日报 📋 共 200 条 🔥 高危/严重 101 条 🚨 CISA-KEV 2 条 🐙 GitHub-Advisory 82 条 🔥45 🛡️ NVD-Latest 56 条 🔥56 ⚔️ Sploitus 60 条 🤖 今日安全态势分析 🎯 今日重点关注 * CVE-2026-54088 (Critical)： File Browser 认证钩子中的命令注入漏洞。攻击者若为管理员，可通过在用户名或密码中插入 shell 字符，利用该特性执行任意系统命令，实现远程代码执行。 * CVE-2026-54089 (Critical)： File Browser 代理认证绕过漏洞。未授权的攻击者若可直接访问配置了代理认证的服务器，只需伪造一个特定的 HTTP 请求头即可伪装成任意用户（包括管理员），完全接管系统。 * CVE-2026-56291
APT情报 WhatsApp恶意VBScript攻击链：通过社交工程部署RMM远控软件 卡巴斯基发现一场通过WhatsApp私信传播的恶意VBScript活动，攻击者伪装成财务文件诱导用户执行，多阶段感染链最终部署合法RMM软件实现远程控制。受影响用户遍布马来西亚、巴西、印度等多国，建议用户警惕即时消息中的可执行附件并加强端点防护。
APT情报 全球命名空间风险：一种通用云存储桶劫持技术可悄无声息窃取数据 Palo Alto Unit42揭示一种利用云存储桶名称全局唯一性缺陷的通用劫持技术。攻击者删除目标桶并以同名重建，即可将日志、Pub/Sub消息等数据流重定向至攻击者账户，实现隐蔽数据窃取。本文详解攻击原理、影响范围（AWS/GCP/Azure）及缓解建议，帮助组织防范这一高危云安全风险。
漏洞分析 Exploit for CVE-2026-23698 exploit CVE-2026-23698 影响 Vtiger CRM 8.4.0及之前版本，管理员通过ModuleManager上传恶意zip包可致任意文件上传和远程代码执行。攻击者放置的webshell直接以PHP文件形式存储在modules/目录下，绕过认证层。本文提供完整技术分析、攻击场景与修复指南。
漏洞分析 Exploit for CVE-2026-23697 exploit CVE-2026-23697 是 Vtiger CRM 8.4.0 之前版本中的高危文件上传漏洞。低权限用户可通过 Documents 模块上传 .phar 文件，绕过不完整的扩展名黑名单和 Apache 2.4 不兼容的 .htaccess 规则，实现远程代码执行。CVSS 8.8，建议立即升级至 8.4.0 并修复 .htaccess 配置。
漏洞分析 CVE-2026-56290 - Joomlack Page Builder Improper Access Control Vulnerability CVE-2026-56290是Joomla Page Builder CK插件（版本≤3.5.10）中的一个高危未授权任意文件上传漏洞，攻击者可通过CSRF令牌绕过访问控制，上传恶意PHP文件实现远程代码执行，危害严重。立即升级至3.6.0修复。
安全情报 ToddyCat-Linked Umbrij Malware Abuses OAuth to Access Gmail via Google API 📡 The Hacker News · 2026-07-02 ToddyCat-Linked Umbrij Malware Abuses OAuth to Access Gmail via Google API ToddyCat-Linked Umbrij Malware Abuses OAuth to Access Gmail via Google API --> #1 Trusted Cybersecurity News Platform Followed by 5.70+ million      
安全情报 New Avalon Malware Framework Packs CrownX Ransomware Capabilities 📡 The Hacker News · 2026-07-03 New Avalon Malware Framework Packs CrownX Ransomware Capabilities New Avalon Malware Framework Packs CrownX Ransomware Capabilities --> #1 Trusted Cybersecurity News Platform Followed by 5.70+ million       Get the Latest News Home Newsletter
安全情报 AI and Liability 📡 Schneier on Security · 2026-06-25 AI and Liability AI and Liability - Schneier on Security Schneier on Security Menu Blog Newsletter Books Essays News Talks Academic About Me Search Powered by DuckDuckGo Blog Essays Whole site Subscribe Home Blog AI and Liability Earlier this month, a German court ruled that Google
安全情报 One Million Passports Leaked Online 📡 Schneier on Security · 2026-06-26 One Million Passports Leaked Online One Million Passports Leaked Online - Schneier on Security Schneier on Security Menu Blog Newsletter Books Essays News Talks Academic About Me Search Powered by DuckDuckGo Blog Essays Whole site Subscribe Home Blog One Million Passports Leaked Online A database of
安全情报 Meta Is Testing Facial Recognition for Police and Military 📡 Schneier on Security · 2026-06-26 Meta Is Testing Facial Recognition for Police and Military Meta Is Testing Facial Recognition for Police and Military - Schneier on Security Schneier on Security Menu Blog Newsletter Books Essays News Talks Academic About Me Search Powered by DuckDuckGo Blog Essays Whole site Subscribe Home Blog
安全情报 The Chinese Control the Majority of Argentina’s Squid Fleet 📡 Schneier on Security · 2026-06-26 The Chinese Control the Majority of Argentina’s Squid Fleet The Chinese Control the Majority of Argentina's Squid Fleet - Schneier on Security Schneier on Security Menu Blog Newsletter Books Essays News Talks Academic About Me Search Powered by DuckDuckGo Blog Essays Whole
安全情报 Robot Police Officers 📡 Schneier on Security · 2026-06-29 Robot Police Officers Robot Police Officers - Schneier on Security Schneier on Security Menu Blog Newsletter Books Essays News Talks Academic About Me Search Powered by DuckDuckGo Blog Essays Whole site Subscribe Home Blog Robot Police Officers We’ve taken one small step towards
安全情报 Factoring RSA Keys with Many Zeros 📡 Schneier on Security · 2026-06-29 Factoring RSA Keys with Many Zeros Factoring RSA Keys with Many Zeros - Schneier on Security Schneier on Security Menu Blog Newsletter Books Essays News Talks Academic About Me Search Powered by DuckDuckGo Blog Essays Whole site Subscribe Home Blog Factoring RSA Keys with Many Zeros
安全情报 📊 2026-07-10 漏洞情报日报 · 4 条 · 高危 3 每日漏洞情报汇总 · 2026-07-10 📊 2026-07-10 漏洞情报日报 📋 共 4 条 🔥 高危/严重 3 条 🐙 GitHub-Advisory 4 条 🔥3 🤖 今日安全态势分析 🎯 今日重点关注 * CVE-2026-48594 (Tesla 解压炸弹)：影响 Tesla HTTP 客户端。攻击者可利用服务器响应或重定向返回特制压缩数据，造成服务端内存耗尽，导致拒绝服务。无需认证，远程触发。 * CVE-2026-48595 (Tesla 认证头泄露)：影响 Tesla 的重定向中间件。由于大小写校验缺陷，跨域重定向时可能未清除 Authorization 头，导致敏感凭证泄露给第三方恶意服务器。 * CVE-2026-48597 (Tesla BEAM 原子耗尽)：影响 Tesla Mint 适配器。通过构造恶意的 URL
APT情报 2026中小企业威胁报告：AI工具滥用与暗网初始访问售卖成最大风险 卡巴斯基2026年SMB威胁报告揭示：伪装成AI工具的攻击量激增近5倍，暗网初始访问售卖成供应链攻击突破口。了解攻击手法、IOC及缓解建议，保护中小企业安全。
APT情报 Vidar窃密木马新变种：滥用代码签名、Go加载器与文件膨胀技术剖析 Palo Alto Unit42深度分析Vidar窃密木马新变种，揭示攻击者如何利用恶意广告、Factory-v3框架、伪造代码签名、文件膨胀（最大491MB）和AMSI绕过技术，向美国和欧盟用户投放Vidar和XMRig。了解攻击链、IOC及缓解措施，保护企业免受此类金融动机攻击。
漏洞分析 CVE-2026-40047 (CVSS 9.1) - Improper Neutralization of Argument Delimiters in a Command ('Argument Injection CVE-2026-40047是Apache Camel camel-docling组件中的参数注入与目录遍历漏洞（CVSS 9.1）。攻击者可通过构造恶意CamelDoclingCustomArguments头部，绕过硬编码黑名单，执行任意docling标志或读取任意文件。影响4.15.0至4.18.2版本，建议升级至4.18.3或4.19.0以上。
