📡 Schneier on Security · 2026-06-29 Factoring RSA Keys with Many Zeros Factoring RSA Keys with Many Zeros - Schneier on Security Schneier on Security Menu Blog Newsletter Books Essays News Talks Academic About Me Search Powered by DuckDuckGo Blog Essays Whole site Subscribe Home Blog Factoring RSA Keys with Many Zeros

每日漏洞情报汇总 · 2026-07-10 📊 2026-07-10 漏洞情报日报 📋 共 4 条 🔥 高危/严重 3 条 🐙 GitHub-Advisory 4 条 🔥3 🤖 今日安全态势分析 🎯 今日重点关注 * CVE-2026-48594 (Tesla 解压炸弹)：影响 Tesla HTTP 客户端。攻击者可利用服务器响应或重定向返回特制压缩数据，造成服务端内存耗尽，导致拒绝服务。无需认证，远程触发。 * CVE-2026-48595 (Tesla 认证头泄露)：影响 Tesla 的重定向中间件。由于大小写校验缺陷，跨域重定向时可能未清除 Authorization 头，导致敏感凭证泄露给第三方恶意服务器。 * CVE-2026-48597 (Tesla BEAM 原子耗尽)：影响 Tesla Mint 适配器。通过构造恶意的 URL

📡 Schneier on Security · 2026-06-30 The Realities of AI Video Surveillance The Realities of AI Video Surveillance - Schneier on Security Schneier on Security Menu Blog Newsletter Books Essays News Talks Academic About Me Search Powered by DuckDuckGo Blog Essays Whole site Subscribe Home Blog The Realities of AI Video Surveillance

📡 Schneier on Security · 2026-07-01 Papa Johns Surveillance-Based Advertising Papa Johns Surveillance-Based Advertising - Schneier on Security Schneier on Security Menu Blog Newsletter Books Essays News Talks Academic About Me Search Powered by DuckDuckGo Blog Essays Whole site Subscribe Home Blog Papa Johns Surveillance-Based Advertising Papa Johns is spying on people&

📡 Schneier on Security · 2026-07-02 Cybersecurity Mission Creep in the US Cybersecurity Mission Creep in the US - Schneier on Security Schneier on Security Menu Blog Newsletter Books Essays News Talks Academic About Me Search Powered by DuckDuckGo Blog Essays Whole site Subscribe Home Blog Cybersecurity Mission Creep in the US

📡 Schneier on Security · 2026-07-03 Flock Cameras Can Surveil Cars Without License Plates Flock Cameras Can Surveil Cars Without License Plates - Schneier on Security Schneier on Security Menu Blog Newsletter Books Essays News Talks Academic About Me Search Powered by DuckDuckGo Blog Essays Whole site Subscribe Home Blog Flock Cameras

📡 SANS ISC · 2026-06-24 Linux Process Name Masquerading, (Wed, Jun 24th) Linux Process Name Masquerading - SANS Internet Storm Center --> Internet Storm Center Sign In Sign Up Handler on Duty: Xavier Mertens Threat Level: green previous next Click HERE to learn more about classes Xavier is teaching for SANS

📡 SANS ISC · 2026-06-25 What do Ports Hear When Nobody's Listening? An Assessment of Automated Cybercrime [Guest Diary], (Wed, Jun 24th) What do Ports Hear When Nobody's Listening? An Assessment of Automated Cybercrime [Guest Diary] --> Internet Storm Center

📡 SANS ISC · 2026-06-28 YARA-X 1.18.0 and 1.19.0 Release, (Sun, Jun 28th) YARA-X 1.18.0 and 1.19.0 Release - SANS Internet Storm Center --> Internet Storm Center Sign In Sign Up Handler on Duty: Xavier Mertens Threat Level: green previous next Click HERE

📡 SANS ISC · 2026-06-29 ISC Stormcast For Monday, June 29th, 2026 https://isc.sans.edu/podcastdetail/9986, (Mon, Jun 29th) ISC Stormcast For Monday, June 29th, 2026 https://isc.sans.edu/podcastdetail/9986 --> Internet Storm Center Sign In Sign Up Handler on Duty: Xavier Mertens Threat Level: green previous

每日漏洞情报汇总 · 2026-07-09 📊 2026-07-09 漏洞情报日报 📋 共 200 条 🔥 高危/严重 99 条 💣 Exploit-DB-RSS 12 条 🔥2 🐙 GitHub-Advisory 58 条 🔥27 🛡️ NVD-Latest 70 条 🔥70 ⚔️ Sploitus 60 条 🤖 今日安全态势分析 🎯 今日重点关注 * Discuz! X5.0 - 认证绕过 (CVE-2026-49952, CVSS 9.1)：影响广泛使用的开源论坛系统，攻击者无需凭证即可绕过身份验证，直接接管管理员权限或访问敏感数据。利用公开可用，风险极高。 * Nuclio & Coolify - 多组件RCE链：Nuclio 的 cron

📡 SANS ISC · 2026-06-29 Adding some Automation to the favicon.ico method of Host Recon, (Mon, Jun 29th) Adding some Automation to the favicon.ico method of Host Recon --> Internet Storm Center Sign In Sign Up Handler on Duty: Xavier Mertens Threat Level: green previous next Click HERE to

📡 SANS ISC · 2026-06-30 ISC Stormcast For Tuesday, June 30th, 2026 https://isc.sans.edu/podcastdetail/9988, (Tue, Jun 30th) ISC Stormcast For Tuesday, June 30th, 2026 https://isc.sans.edu/podcastdetail/9988 --> Internet Storm Center Sign In Sign Up Handler on Duty: Xavier Mertens Threat Level: green previous

📡 SANS ISC · 2026-06-30 June 2026 Apple Updates, (Tue, Jun 30th) June 2026 Apple Updates - SANS Internet Storm Center --> Internet Storm Center Sign In Sign Up Handler on Duty: Xavier Mertens Threat Level: green previous next Click HERE to learn more about classes Johannes is teaching for SANS

📡 SANS ISC · 2026-07-01 ISC Stormcast For Wednesday, July 1st, 2026 https://isc.sans.edu/podcastdetail/9990, (Wed, Jul 1st) ISC Stormcast For Wednesday, July 1st, 2026 https://isc.sans.edu/podcastdetail/9990 --> Internet Storm Center Sign In Sign Up Handler on Duty: Xavier Mertens Threat Level: green previous

📡 SANS ISC · 2026-07-01 Why Ask Credentials If There Are Secret Codes?, (Wed, Jul 1st) Why Ask Credentials If There Are Secret Codes? - SANS ISC --> Internet Storm Center Sign In Sign Up Handler on Duty: Xavier Mertens Threat Level: green previous Click HERE to learn more

📡 SANS ISC · 2026-07-02 ISC Stormcast For Thursday, July 2nd, 2026 https://isc.sans.edu/podcastdetail/9992, (Thu, Jul 2nd) ISC Stormcast For Thursday, July 2nd, 2026 https://isc.sans.edu/podcastdetail/9992 --> Internet Storm Center Sign In Sign Up Handler on Duty: Xavier Mertens Threat Level: green previous

📡 Palo Alto Unit42 · 2026-06-22 The Global Namespace Risk: Universal Bucket Hijacking Technique for Cloud Data Exfiltration The Global Namespace Risk: Universal Bucket Hijacking Technique for Cloud Data Exfiltration Menu Tools ATOMs Security Consulting About Us Under Attack? Threat Research Center Threat Research Cloud Cybersecurity Research Cloud Cybersecurity Research The Global

📡 Palo Alto Unit42 · 2026-06-23 OpenClaw’s Skill Marketplace and the Emerging AI Supply Chain Threat OpenClaw’s Skill Marketplace and the Emerging AI Supply Chain Threat Menu Tools ATOMs Security Consulting About Us Under Attack? Threat Research Center Threat Research Malware Malware OpenClaw’s Skill Marketplace and the Emerging AI

每日漏洞情报汇总 · 2026-07-08 📊 2026-07-08 漏洞情报日报 📋 共 200 条 🔥 高危/严重 91 条 🚨 CISA-KEV 4 条 💣 Exploit-DB-RSS 8 条 🔥2 🐙 GitHub-Advisory 74 条 🔥35 🛡️ NVD-Latest 54 条 🔥54 ⚔️ Sploitus 60 条 🤖 今日安全态势分析 🎯 今日重点关注 * Apache Camel 多组件高危链 (CVE-2026-56140, CVE-2026-53913, CVE-2026-48204 等): 今日集中披露7个CVSS 9.8的严重漏洞，覆盖AWS SNS/SQS、Keycloak、MongoDB Gridfs等多个组件。攻击者可通过输入验证缺陷或认证绕过，远程执行代码或窃取凭据，利用难度低，

📡 Palo Alto Unit42 · 2026-06-25 CL-STA-1062 Targets Southeast Asian Governments and Critical Infrastructure CL-STA-1062 Targets Southeast Asian Governments and Critical Infrastructure Menu Tools ATOMs Security Consulting About Us Under Attack? Threat Research Center Threat Research Malware Malware CL-STA-1062 Targets Southeast Asian Governments and Critical Infrastructure 10 min read Related Products Advanced

📡 Palo Alto Unit42 · 2026-06-26 Threat Brief: Mitigating Large-Scale Credential Attacks Threat Brief: Mitigating Large-Scale Credential Attacks Menu Tools ATOMs Security Consulting About Us Under Attack? Threat Research Center High Profile Threats General General Threat Brief: Mitigating Large-Scale Credential Attacks 5 min read Related Products Next-Generation Firewall Unit 42 Incident Response

📡 Palo Alto Unit42 · 2026-07-01 Phantom Squatting: AI-Hallucinated Domains as a Software Supply Chain Vector Phantom Squatting: AI-Hallucinated Domains as a Software Supply Chain Vector Menu Tools ATOMs Security Consulting About Us Under Attack? Threat Research Center Threat Research Malware Malware Phantom Squatting: AI-Hallucinated Domains as a Software Supply Chain Vector

📡 Palo Alto Unit42 · 2026-07-02 How We Added WebAuthn to a Browser-Based RDP Client How We Added WebAuthn to a Browser-Based RDP Client Menu Tools ATOMs Security Consulting About Us Under Attack? Threat Research Center Insights General General How We Added WebAuthn to a Browser-Based RDP Client 8 min read Related

📡 Kaspersky Securelist · 2026-06-22 A VBScript campaign distributed through WhatsApp deploying RMM software An unknown actor distributes malicious VBS scripts via WhatsApp | Securelist Solutions for: Home Products Small Business 1-50 employees Medium Business 51-999 employees Enterprise 1000+ employees by Kaspersky CompanyAccount Get In Touch Dark mode off English Russian Spanish Brazil