每日漏洞情报汇总 · 2026-07-26 📊 2026-07-26 漏洞情报日报 📋 共 200 条 🔥 高危/严重 106 条 🐙 GitHub-Advisory 50 条 🔥33 🛡️ NVD-Latest 73 条 🔥73 ⚔️ Sploitus 77 条 🤖 今日安全态势分析 🎯 今日重点关注 * OpenDJ 双重高危漏洞：GHSA-68r5 (未认证SSRF/本地文件读取/DoS) 与 GHSA-p279 (SASL PLAIN认证绕过)。攻击者无需认证即可利用网关进行内网扫描、读取任意文件或绕过代理权限检查，实现权限提升。 * sm-crypto SM2密钥可预测（GHSA-vh45）：Node.js密码学库sm-crypto 0.4.0因使用模块级单例RNG，导致SM2私钥和签名随机数可被预测，严重威胁基于SM2的加密通信安全。 * Azure 多服务权限提升链（CVE-2026-58630、

📡 Krebs on Security · 2026-07-13 Lessons Learned from CISA’s Recent GitHub Leak Lessons Learned from CISA’s Recent GitHub Leak – Krebs on Security --> Advertisement Advertisement --> Skip to content Home About the Author Advertising/Speaking Lessons Learned from CISA’s Recent

📡 SANS ISC · 2026-07-11 Wireshark 4.6.7 Released, (Sat, Jul 11th) Wireshark 4.6.7 Released - SANS Internet Storm Center --> Internet Storm Center Sign In Sign Up Handler on Duty: Didier Stevens Threat Level: green previous Click HERE to learn more about classes Didier is teaching for

📡 SANS ISC · 2026-07-10 ISC Stormcast For Friday, July 10th, 2026 https://isc.sans.edu/podcastdetail/10002, (Fri, Jul 10th) ISC Stormcast For Friday, July 10th, 2026 https://isc.sans.edu/podcastdetail/10002 --> Internet Storm Center Sign In Sign Up Handler on Duty: Jan Kopriva Threat Level: green previous

📡 SANS ISC · 2026-07-10 "Comment stuffing" in an HTML phishing attachment as a mechanism for evading AI-based detection?, (Fri, Jul 10th) "Comment stuffing" in an HTML phishing attachment as a mechanism for evading AI-based detection? --> Internet Storm Center Sign In Sign

📡 Schneier on Security · 2026-07-10 AI Surveillance and Social Progress AI Surveillance and Social Progress - Schneier on Security Schneier on Security Menu Blog Newsletter Books Essays News Talks Academic About Me Search Powered by DuckDuckGo Blog Essays Whole site Subscribe Home Blog AI Surveillance and Social Progress In the near

📡 Schneier on Security · 2026-07-10 Friday Squid Blogging: “Squidbleed” Vulnerability Friday Squid Blogging: "Squidbleed" Vulnerability - Schneier on Security Schneier on Security Menu Blog Newsletter Books Essays News Talks Academic About Me Search Powered by DuckDuckGo Blog Essays Whole site Subscribe Home Blog Friday Squid Blogging: “Squidbleed”

📡 Palo Alto Unit42 · 2026-07-10 No Manners Here: The Ruthless Rise of The Gentlemen Ransomware No Manners Here: The Ruthless Rise of The Gentlemen Ransomware Menu Tools ATOMs Security Consulting About Us Under Attack? Threat Research Center Insights Hospitality Hacks and Retail Reality Checks Hospitality Hacks and Retail Reality Checks No

📡 SANS ISC · 2026-07-09 _HELP_ME_ESCAPE_FROM_BELARUS_PLEASE_ [Guest Diary], (Tue, Jul 7th) _HELP_ME_ESCAPE_FROM_BELARUS_PLEASE_ [Guest Diary] --> Internet Storm Center Sign In Sign Up Handler

每日漏洞情报汇总 · 2026-07-25 📊 2026-07-25 漏洞情报日报 📋 共 200 条 🔥 高危/严重 109 条 🐙 GitHub-Advisory 70 条 🔥43 🛡️ NVD-Latest 66 条 🔥66 ⚔️ Sploitus 64 条 🤖 今日安全态势分析 （今日数据暂无足够信息生成分析） 🐙 GitHub-Advisory（70 条） Critical (7 条) * GHSA-68r5-9hpg-7qw9 - OpenDJ unauthenticated SSRF, local file read and unbounded-read DoS in the DSMLv Critical The DSMLv2 SOAP gateway (opendj-dsml-servlet)

📡 The Hacker News · 2026-07-07 Public GitHub Issue Could Trick GitHub Agentic Workflows Into Leaking Private Repo Data Public GitHub Issue Could Trick GitHub Agentic Workflows Into Leaking Private Repo Data --> #1 Trusted Cybersecurity News Platform Followed by 5.70+ million    

📡 The Hacker News · 2026-06-30 Silent Swap Crypto Clipper Uses Fake Google Notes Extension to Replace Wallet Addresses Silent Swap Crypto Clipper Uses Fake Google Notes Extension to Replace Wallet Addresses --> #1 Trusted Cybersecurity News Platform Followed by 5.70+ million    

📡 The Hacker News · 2026-07-03 North Korea-Linked npm Packages Mimic Rollup Polyfills to Steal Developer Secrets North Korea-Linked npm Packages Mimic Rollup Polyfills to Steal Developer Secrets --> #1 Trusted Cybersecurity News Platform Followed by 5.70+ million      

📡 The Hacker News · 2026-07-08 SCMBANKER Malware Uses ClickFix Lures to Target Mexican Banking Users SCMBANKER Malware Uses ClickFix Lures to Target Mexican Banking Users --> #1 Trusted Cybersecurity News Platform Followed by 5.70+ million       Get the

📡 The Hacker News · 2026-07-07 Public GitHub Issue Could Trick GitHub Agentic Workflows Into Leaking Private Repo Data Public GitHub Issue Could Trick GitHub Agentic Workflows Into Leaking Private Repo Data --> #1 Trusted Cybersecurity News Platform Followed by 5.70+ million    

📡 The Hacker News · 2026-07-06 New Java-Based QuimaRAT MaaS Built to Run on Windows, Linux, and macOS New Java-Based QuimaRAT MaaS Built to Run on Windows, Linux, and macOS --> #1 Trusted Cybersecurity News Platform Followed by 5.70+ million     

📡 The Hacker News · 2026-06-30 Silent Swap Crypto Clipper Uses Fake Google Notes Extension to Replace Wallet Addresses Silent Swap Crypto Clipper Uses Fake Google Notes Extension to Replace Wallet Addresses --> #1 Trusted Cybersecurity News Platform Followed by 5.70+ million    

每日漏洞情报汇总 · 2026-07-24 📊 2026-07-24 漏洞情报日报 📋 共 200 条 🔥 高危/严重 97 条 🐙 GitHub-Advisory 70 条 🔥27 🛡️ NVD-Latest 70 条 🔥70 ⚔️ Sploitus 60 条 🤖 今日安全态势分析 🎯 今日重点关注 * CVE-2026-16367 (CVSS 10.0) – Mozilla Firefox/Thunderbird 沙箱逃逸：影响 Firefox 及 Thunderbird 核心组件（Disability Access APIs），攻击者可利用无效指针实现完全沙箱逃逸。无需用户交互即可远程利用。 * Auth.js 多项严重漏洞 (GHSA-7rqj-j65f-68wh,GHSA-8fpg-xm3f-6cx3)：包含邮件认证绕过（Unicode 标准化缺陷）

📡 SANS ISC · 2026-07-09 ISC Stormcast For Thursday, July 9th, 2026 https://isc.sans.edu/podcastdetail/10000, (Thu, Jul 9th) ISC Stormcast For Thursday, July 9th, 2026 https://isc.sans.edu/podcastdetail/10000 --> Internet Storm Center Sign In Sign Up Handler on Duty: Jan Kopriva Threat Level: green previous

📡 The Hacker News · 2026-07-08 New HalluSquatting Attack Could Trick AI Coding Assistants Into Installing Botnet Malware New HalluSquatting Attack Could Trick AI Coding Assistants Into Installing Botnet Malware --> #1 Trusted Cybersecurity News Platform Followed by 5.70+ million     

📡 The Hacker News · 2026-06-30 GuardFall Exposes Open-Source AI Coding Agents to Decades-Old Shell Injection Risks GuardFall Exposes Open-Source AI Coding Agents to Decades-Old Shell Injection Risks --> #1 Trusted Cybersecurity News Platform Followed by 5.70+ million      

📡 The Hacker News · 2026-07-03 New "Bad Epoll" Linux Kernel Flaw Lets Unprivileged Users Gain Root, Hits Android New "Bad Epoll" Linux Kernel Flaw Lets Unprivileged Users Gain Root, Hits Android --> #1 Trusted Cybersecurity News Platform Followed by 5.70+ million 

每日漏洞情报汇总 · 2026-07-22 📊 2026-07-22 漏洞情报日报 📋 共 200 条 🔥 高危/严重 84 条 🚨 CISA-KEV 4 条 🐙 GitHub-Advisory 94 条 🔥42 🛡️ NVD-Latest 42 条 🔥42 ⚔️ Sploitus 60 条 🤖 今日安全态势分析 🎯 今日重点关注 * CVE-2026-44359 (CVSS 10.0) - Meshtastic GitHub CI/CD 投毒：Mesh网络开源项目。攻击者可利用 pull_request_target 工作流触发恶意代码执行，获取仓库密钥。利用条件低，仅需提交含恶意载荷的PR即可触发。 * CVE-2026-58426 / CVE-2026-58443 (Critical) -

📡 The Hacker News · 2026-07-08 New HalluSquatting Attack Could Trick AI Coding Assistants Into Installing Botnet Malware New HalluSquatting Attack Could Trick AI Coding Assistants Into Installing Botnet Malware --> #1 Trusted Cybersecurity News Platform Followed by 5.70+ million     

📡 The Hacker News · 2026-07-06 Opera GX Flaw Let Malicious Sites Auto-Install Mods to Steal Data From Visited Pages Opera GX Flaw Let Malicious Sites Auto-Install Mods to Steal Data From Visited Pages --> #1 Trusted Cybersecurity News Platform Followed by 5.70+ million   