安全情报 The Realities of AI Video Surveillance 📡 Schneier on Security · 2026-06-30 The Realities of AI Video Surveillance The Realities of AI Video Surveillance - Schneier on Security Schneier on Security Menu Blog Newsletter Books Essays News Talks Academic About Me Search Powered by DuckDuckGo Blog Essays Whole site Subscribe Home Blog The Realities of AI Video Surveillance
安全情报 Papa Johns Surveillance-Based Advertising 📡 Schneier on Security · 2026-07-01 Papa Johns Surveillance-Based Advertising Papa Johns Surveillance-Based Advertising - Schneier on Security Schneier on Security Menu Blog Newsletter Books Essays News Talks Academic About Me Search Powered by DuckDuckGo Blog Essays Whole site Subscribe Home Blog Papa Johns Surveillance-Based Advertising Papa Johns is spying on people&
安全情报 Cybersecurity Mission Creep in the US 📡 Schneier on Security · 2026-07-02 Cybersecurity Mission Creep in the US Cybersecurity Mission Creep in the US - Schneier on Security Schneier on Security Menu Blog Newsletter Books Essays News Talks Academic About Me Search Powered by DuckDuckGo Blog Essays Whole site Subscribe Home Blog Cybersecurity Mission Creep in the US
安全情报 Flock Cameras Can Surveil Cars Without License Plates 📡 Schneier on Security · 2026-07-03 Flock Cameras Can Surveil Cars Without License Plates Flock Cameras Can Surveil Cars Without License Plates - Schneier on Security Schneier on Security Menu Blog Newsletter Books Essays News Talks Academic About Me Search Powered by DuckDuckGo Blog Essays Whole site Subscribe Home Blog Flock Cameras
安全情报 Linux Process Name Masquerading, (Wed, Jun 24th) 📡 SANS ISC · 2026-06-24 Linux Process Name Masquerading, (Wed, Jun 24th) Linux Process Name Masquerading - SANS Internet Storm Center --> Internet Storm Center Sign In Sign Up Handler on Duty: Xavier Mertens Threat Level: green previous next Click HERE to learn more about classes Xavier is teaching for SANS
安全情报 What do Ports Hear When Nobody's Listening? An Assessment of Automated Cybercrime [Guest Diary], (Wed, Jun 24th) 📡 SANS ISC · 2026-06-25 What do Ports Hear When Nobody's Listening? An Assessment of Automated Cybercrime [Guest Diary], (Wed, Jun 24th) What do Ports Hear When Nobody's Listening? An Assessment of Automated Cybercrime [Guest Diary] --> Internet Storm Center
安全情报 YARA-X 1.18.0 and 1.19.0 Release, (Sun, Jun 28th) 📡 SANS ISC · 2026-06-28 YARA-X 1.18.0 and 1.19.0 Release, (Sun, Jun 28th) YARA-X 1.18.0 and 1.19.0 Release - SANS Internet Storm Center --> Internet Storm Center Sign In Sign Up Handler on Duty: Xavier Mertens Threat Level: green previous next Click HERE
安全情报 ISC Stormcast For Monday, June 29th, 2026 https://isc.sans.edu/podcastdetail/9986, (Mon, Jun 29th) 📡 SANS ISC · 2026-06-29 ISC Stormcast For Monday, June 29th, 2026 https://isc.sans.edu/podcastdetail/9986, (Mon, Jun 29th) ISC Stormcast For Monday, June 29th, 2026 https://isc.sans.edu/podcastdetail/9986 --> Internet Storm Center Sign In Sign Up Handler on Duty: Xavier Mertens Threat Level: green previous
安全情报 📊 2026-07-09 漏洞情报日报 · 200 条 · 高危 99 每日漏洞情报汇总 · 2026-07-09 📊 2026-07-09 漏洞情报日报 📋 共 200 条 🔥 高危/严重 99 条 💣 Exploit-DB-RSS 12 条 🔥2 🐙 GitHub-Advisory 58 条 🔥27 🛡️ NVD-Latest 70 条 🔥70 ⚔️ Sploitus 60 条 🤖 今日安全态势分析 🎯 今日重点关注 * Discuz! X5.0 - 认证绕过 (CVE-2026-49952, CVSS 9.1)：影响广泛使用的开源论坛系统，攻击者无需凭证即可绕过身份验证，直接接管管理员权限或访问敏感数据。利用公开可用，风险极高。 * Nuclio & Coolify - 多组件RCE链：Nuclio 的 cron
APT情报 本周安全速递：代理僵尸网络、浏览器勒索软件与AI驱动攻击 本周安全事件综述：NetNut代理僵尸网络利用家庭设备隐匿恶意流量，ChocoPoC RAT通过伪造PoC仓库诱捕研究人员，AI生成浏览器勒索软件展示新型攻击路径。安全分析师深度解读攻击手法与防御建议。
APT情报 伪装成免费软件的ScreenConnect：一场大规模远程控制攻击的深度解析 卡巴斯基MDR团队揭露一场大规模攻击：攻击者通过仿冒OBS Studio等免费软件的虚假下载站，利用ScreenConnect远程管理工具和DLL侧加载技术部署AsyncRAT后门。本文深入分析攻击链、C2基础设施及90多个恶意域名，并提供检测与防御建议。
漏洞分析 CVE-2026-14762 (CVSS 7.3) - A vulnerability was detected in code-projects Hotel and Tourism Reservation 1.0. CVE-2026-14762 影响 Hotel and Tourism Reservation 1.0，其 /admin/rooms.php 的 delete 参数存在 SQL 注入（CVSS 7.3）。攻击者可远程利用时间盲注泄露所有数据库数据，并在高权限下写入 webshell 获取服务器控制权。PoC 已公开，建议立即升级或实施临时缓解措施。
漏洞分析 Exploit for CVE-2026-14762 exploit CVE-2026-14762影响Hotel & Tourism Reservation 1.0，位于/admin/rooms.php?delete参数存在时间盲注漏洞，CVSS 7.3。攻击者可提取数据库内容、读取文件并上传webshell。PoC已公开，建议立即升级或应用临时缓解措施。
漏洞分析 CVE-2026-48282 - Adobe ColdFusion Path Traversal Vulnerability CVE-2026-48282是Adobe ColdFusion中的一个关键路径遍历漏洞，CVSS评分9.8。攻击者可利用路径遍历读取任意敏感文件，并进一步实现远程代码执行（RCE）。本文提供详细的技术分析、攻击场景、检测方法和修复指南，帮助企业立即采取缓解措施。
安全情报 Adding some Automation to the favicon.ico method of Host Recon, (Mon, Jun 29th) 📡 SANS ISC · 2026-06-29 Adding some Automation to the favicon.ico method of Host Recon, (Mon, Jun 29th) Adding some Automation to the favicon.ico method of Host Recon --> Internet Storm Center Sign In Sign Up Handler on Duty: Xavier Mertens Threat Level: green previous next Click HERE to
安全情报 ISC Stormcast For Tuesday, June 30th, 2026 https://isc.sans.edu/podcastdetail/9988, (Tue, Jun 30th) 📡 SANS ISC · 2026-06-30 ISC Stormcast For Tuesday, June 30th, 2026 https://isc.sans.edu/podcastdetail/9988, (Tue, Jun 30th) ISC Stormcast For Tuesday, June 30th, 2026 https://isc.sans.edu/podcastdetail/9988 --> Internet Storm Center Sign In Sign Up Handler on Duty: Xavier Mertens Threat Level: green previous
安全情报 June 2026 Apple Updates, (Tue, Jun 30th) 📡 SANS ISC · 2026-06-30 June 2026 Apple Updates, (Tue, Jun 30th) June 2026 Apple Updates - SANS Internet Storm Center --> Internet Storm Center Sign In Sign Up Handler on Duty: Xavier Mertens Threat Level: green previous next Click HERE to learn more about classes Johannes is teaching for SANS
安全情报 ISC Stormcast For Wednesday, July 1st, 2026 https://isc.sans.edu/podcastdetail/9990, (Wed, Jul 1st) 📡 SANS ISC · 2026-07-01 ISC Stormcast For Wednesday, July 1st, 2026 https://isc.sans.edu/podcastdetail/9990, (Wed, Jul 1st) ISC Stormcast For Wednesday, July 1st, 2026 https://isc.sans.edu/podcastdetail/9990 --> Internet Storm Center Sign In Sign Up Handler on Duty: Xavier Mertens Threat Level: green previous
安全情报 Why Ask Credentials If There Are Secret Codes?, (Wed, Jul 1st) 📡 SANS ISC · 2026-07-01 Why Ask Credentials If There Are Secret Codes?, (Wed, Jul 1st) Why Ask Credentials If There Are Secret Codes? - SANS ISC --> Internet Storm Center Sign In Sign Up Handler on Duty: Xavier Mertens Threat Level: green previous Click HERE to learn more
安全情报 ISC Stormcast For Thursday, July 2nd, 2026 https://isc.sans.edu/podcastdetail/9992, (Thu, Jul 2nd) 📡 SANS ISC · 2026-07-02 ISC Stormcast For Thursday, July 2nd, 2026 https://isc.sans.edu/podcastdetail/9992, (Thu, Jul 2nd) ISC Stormcast For Thursday, July 2nd, 2026 https://isc.sans.edu/podcastdetail/9992 --> Internet Storm Center Sign In Sign Up Handler on Duty: Xavier Mertens Threat Level: green previous
安全情报 The Global Namespace Risk: Universal Bucket Hijacking Technique for Cloud Data Exfiltration 📡 Palo Alto Unit42 · 2026-06-22 The Global Namespace Risk: Universal Bucket Hijacking Technique for Cloud Data Exfiltration The Global Namespace Risk: Universal Bucket Hijacking Technique for Cloud Data Exfiltration Menu Tools ATOMs Security Consulting About Us Under Attack? Threat Research Center Threat Research Cloud Cybersecurity Research Cloud Cybersecurity Research The Global
安全情报 OpenClaw’s Skill Marketplace and the Emerging AI Supply Chain Threat 📡 Palo Alto Unit42 · 2026-06-23 OpenClaw’s Skill Marketplace and the Emerging AI Supply Chain Threat OpenClaw’s Skill Marketplace and the Emerging AI Supply Chain Threat Menu Tools ATOMs Security Consulting About Us Under Attack? Threat Research Center Threat Research Malware Malware OpenClaw’s Skill Marketplace and the Emerging AI
安全情报 📊 2026-07-08 漏洞情报日报 · 200 条 · 高危 91 每日漏洞情报汇总 · 2026-07-08 📊 2026-07-08 漏洞情报日报 📋 共 200 条 🔥 高危/严重 91 条 🚨 CISA-KEV 4 条 💣 Exploit-DB-RSS 8 条 🔥2 🐙 GitHub-Advisory 74 条 🔥35 🛡️ NVD-Latest 54 条 🔥54 ⚔️ Sploitus 60 条 🤖 今日安全态势分析 🎯 今日重点关注 * Apache Camel 多组件高危链 (CVE-2026-56140, CVE-2026-53913, CVE-2026-48204 等): 今日集中披露7个CVSS 9.8的严重漏洞，覆盖AWS SNS/SQS、Keycloak、MongoDB Gridfs等多个组件。攻击者可通过输入验证缺陷或认证绕过，远程执行代码或窃取凭据，利用难度低，
APT情报 “绅士”勒索软件崛起：定制后门与横向移动战术深度分析 The Gentlemen勒索软件团伙利用定制Go后门和C勒索软件，通过漏洞利用和凭证窃取入侵企业。本文深度分析其内网侦察（SharpADWS、NetScan）、横向移动（GPO部署、PsExec）及加密流程，提供IOC和缓解建议，帮助安全团队防御该RaaS威胁。
APT情报 ToddyCat APT组织新招：Umbrij工具利用OAuth漏洞窃取Gmail邮件 卡巴斯基深度分析ToddyCat APT组织新工具Umbrij，利用OAuth 2.0和远程调试端口（STRD技术）窃取Gmail邮件。本文详解攻击链、DLL侧加载技术及缓解措施，帮助企业防御高级持续性威胁。
