📡 Kaspersky Securelist · 2026-06-24 StrikeShark: investigating a new campaign delivering Cobalt Strike through SharkLoader StrikeShark: a new campaign involving a custom SharkLoader and Cobalt Strike Beacon | Securelist Solutions for: Home Products Small Business 1-50 employees Medium Business 51-999 employees Enterprise 1000+ employees by Kaspersky CompanyAccount Get In Touch Dark mode off

📡 Kaspersky Securelist · 2026-06-25 Inside the 2026 SMB threat landscape: From phishing and scams to fake AI tools Threat landscape for SMBs in 2026: fake AI tools, phishing and more | Securelist Solutions for: Home Products Small Business 1-50 employees Medium Business 51-999 employees Enterprise 1000+ employees by Kaspersky CompanyAccount Get In

📡 Kaspersky Securelist · 2026-06-26 Beware of the license manager: how a Schneider Electric software vulnerability puts industrial facilities at risk CVE-2024-2658 vulnerability in Schneider Electric software: risks to industrial control systems | Securelist Solutions for: Home Products Small Business 1-50 employees Medium Business 51-999 employees Enterprise 1000+ employees by Kaspersky CompanyAccount Get

每日漏洞情报汇总 · 2026-07-07 📊 2026-07-07 漏洞情报日报 📋 共 200 条 🔥 高危/严重 97 条 💣 Exploit-DB-RSS 7 条 🐙 GitHub-Advisory 50 条 🔥25 🛡️ NVD-Latest 72 条 🔥72 ⚔️ Sploitus 71 条 🤖 今日安全态势分析 🎯 今日重点关注 * CVE-2026-53486 (Critical)：影响 Decompress 库（Tar/Zip 等多种格式）。漏洞存在于解压写入文件逻辑中，构造的恶意压缩包可导致目录穿越，实现越界写入或读取任意文件。 * CVE-2026-54769、CVE-2026-55615、CVE-2026-54760 (Critical)：影响 Langroid 框架。SQLChatAgent 与 Neo4jChatAgent 因正则绕过或无验证执行，导致

📡 Kaspersky Securelist · 2026-06-29 The Gentlemen are knocking: сustom backdoors and evolving tactics The Gentlemen RaaS: rapid growth and a new ransomware variant | Securelist Solutions for: Home Products Small Business 1-50 employees Medium Business 51-999 employees Enterprise 1000+ employees by Kaspersky CompanyAccount Get In Touch Dark mode off English Russian Spanish

📡 Kaspersky Securelist · 2026-06-30 ToddyCat: your hidden email assistant. Part 2 How the ToddyCat APT group gains access to Gmail accounts | Securelist Solutions for: Home Products Small Business 1-50 employees Medium Business 51-999 employees Enterprise 1000+ employees by Kaspersky CompanyAccount Get In Touch Dark mode off English Russian Spanish Brazil Solutions

📡 Kaspersky Securelist · 2026-07-01 OpenClaw: risks for the users and how to mitigate them Security risks for OpenClaw users and how to mitigate these risks | Securelist Solutions for: Home Products Small Business 1-50 employees Medium Business 51-999 employees Enterprise 1000+ employees by Kaspersky CompanyAccount Get In Touch Dark mode off English

📡 Kaspersky Securelist · 2026-07-01 The SOC Files: ScreenConnect masked as freeware. An inside look at a large-scale campaign How a single ScreenConnect incident exposed a massive campaign | Securelist Solutions for: Home Products Small Business 1-50 employees Medium Business 51-999 employees Enterprise 1000+ employees by Kaspersky CompanyAccount Get In Touch Dark mode

📡 Kaspersky Securelist · 2026-07-02 Missed incidents, persistent threats, and response gaps: Insights from compromise assessment projects How to improve your organization’s security based on compromise assessment findings | Securelist Solutions for: Home Products Small Business 1-50 employees Medium Business 51-999 employees Enterprise 1000+ employees by Kaspersky CompanyAccount Get In Touch Dark

📡 Kaspersky Securelist · 2026-07-03 Armored Likho digging a snake pit: inside the covert BusySnake Stealer campaign Armored Likho’s new weapon: BusySnake Stealer | Securelist Solutions for: Home Products Small Business 1-50 employees Medium Business 51-999 employees Enterprise 1000+ employees by Kaspersky CompanyAccount Get In Touch Dark mode off English Russian Spanish

📡 Krebs on Security · 2026-06-23 Scattered Spider Hackers Plead Guilty on Day 1 of Trial Scattered Spider Hackers Plead Guilty on Day 1 of Trial – Krebs on Security --> Advertisement Advertisement --> Skip to content Home About the Author Advertising/Speaking Scattered Spider Hackers Plead Guilty on

📡 Krebs on Security · 2026-07-02 FBI Seizes NetNut Proxy Platform, Popa Botnet FBI Seizes NetNut Proxy Platform, Popa Botnet – Krebs on Security --> Advertisement Advertisement --> Skip to content Home About the Author Advertising/Speaking FBI Seizes NetNut Proxy Platform, Popa Botnet July 2, 2026 17 Comments

每日漏洞情报汇总 · 2026-07-06 📊 2026-07-06 漏洞情报日报 📋 共 200 条 🔥 高危/严重 119 条 🛡️ NVD-Latest 119 条 🔥119 ⚔️ Sploitus 81 条 🤖 今日安全态势分析 🎯 今日重点关注 * CVE-2026-13768 (CVSS 10.0) - Gardyn 智能花园设备：暴露了高权限的 IoTHub 所有者密钥，攻击者利用该密钥可调用 IoTHub 注册表管理功能，获取所有 Gardyn Home Kit 及 Studio 设备的连接信息，进而实施远程代码执行与内网横向移动。PoC 已公开，利用条件极低。 * CVE-2026-27419 (CVSS 9.9) - Zegen

每日漏洞情报汇总 · 2026-07-05 📊 2026-07-05 漏洞情报日报 📋 共 200 条 🔥 高危/严重 99 条 🐙 GitHub-Advisory 42 条 🔥22 🛡️ NVD-Latest 77 条 🔥77 ⚔️ Sploitus 81 条 🤖 今日安全态势分析 🎯 今日重点关注 * CVE-2026-13768 (CVSS 10.0)： Gardyn智能家居设备暴露了具备完全权限的IoTHub所有者密钥。攻击者利用该密钥可枚举所有连接设备、远程执行命令，并获取内部网络访问权限，导致从云到家庭网络的彻底沦陷。 * CVE-2026-9558 / CVE-2026-9559 (CVSS 9.9)： Mautic营销自动化平台存在服务端模板注入（SSTI）与路径遍历漏洞。攻击者可通过上传恶意ZIP文件或Twig模板实现远程代码执行与任意文件读写，威胁业务数据和服务器安全。 * 9router 未授权RCE (Critical)： 9router npm包的`/api/tunnel/

每日漏洞情报汇总 · 2026-07-04 📊 2026-07-04 漏洞情报日报 📋 共 200 条 🔥 高危/严重 121 条 🐙 GitHub-Advisory 50 条 🔥29 🛡️ NVD-Latest 92 条 🔥92 ⚔️ Sploitus 58 条 🤖 今日安全态势分析 🎯 今日重点关注 * CVE-2026-9558 (Mautic，CVSS 9.9)： 服务端模板注入(SSTI)漏洞，位于主题引擎中。拥有上传权限的认证用户可通过上传恶意Twig模板实现远程代码执行，直接威胁CMS平台安全。 * CVE-2026-9559 (Mautic，CVSS 9.9)： 路径遍历漏洞，位于活动导入功能中。攻击者通过构造恶意ZIP文件，可在解压过程中实现目录穿越，导致任意文件写入或代码执行。 * CVE-2026-11387 (WordPress SMS Alert插件，CVSS

每日漏洞情报汇总 · 2026-07-03 📊 2026-07-03 漏洞情报日报 📋 共 200 条 🔥 高危/严重 103 条 🐙 GitHub-Advisory 100 条 🔥49 🛡️ NVD-Latest 54 条 🔥54 ⚔️ Sploitus 46 条 🤖 今日安全态势分析 🎯 今日重点关注 * Adobe ColdFusion 双漏洞链 (CVE-2026-48277, CVE-2026-48276, CVSS 10.0)： 影响 ColdFusion 2025.9/2023.20 及更早版本。攻击者无需认证即可通过输入验证缺陷和危险文件上传漏洞实现远程代码执行，利用难度极低，极易形成蠕虫式攻击。 * Mautic 服务器端模板注入与路径遍历 (CVE-2026-9558, CVE-2026-9559, Critical)： 影响 Mautic 开源营销自动化平台。

📡 Elastic Security Labs · 0 Monitoring Claude Code/Cowork at scale with OTel in Elastic As AI coding assistants become standard tools in engineering workflows, security teams face a new challenge: how do you maintain visibility into what an AI agent is doing (and why) across your organization? When those agents

每日漏洞情报汇总 · 2026-07-02 📊 2026-07-02 漏洞情报日报 📋 共 200 条 🔥 高危/严重 96 条 🐙 GitHub-Advisory 42 条 🔥22 🛡️ NVD-Latest 74 条 🔥74 ⚔️ Sploitus 84 条 🤖 今日安全态势分析 （今日数据暂无足够信息生成分析） 🐙 GitHub-Advisory（42 条） Critical (4 条) * CVE-2026-50545 - Fission Environment CRD PodSpec Injection Leading to Node Escape and Cluster Tak CVE-2026-50545Critical Summary A stronger framing of

每日漏洞情报汇总 · 2026-07-02 📊 2026-07-02 漏洞情报日报 📋 共 200 条 🔥 高危/严重 96 条 🐙 GitHub-Advisory 42 条 🔥22 🛡️ NVD-Latest 74 条 🔥74 ⚔️ Sploitus 84 条 🤖 今日安全态势分析 （今日数据暂无足够信息生成分析） 🐙 GitHub-Advisory（42 条） Critical (4 条) * CVE-2026-50545 - Fission Environment CRD PodSpec Injection Leading to Node Escape and Cluster Tak CVE-2026-50545Critical Summary A stronger framing of

每日漏洞情报汇总 · 2026-07-02 📊 2026-07-02 漏洞情报日报 📋 共 200 条 🔥 高危/严重 96 条 🐙 GitHub-Advisory 42 条 🔥22 🛡️ NVD-Latest 74 条 🔥74 ⚔️ Sploitus 84 条 🤖 今日安全态势分析 （今日数据暂无足够信息生成分析） 🐙 GitHub-Advisory（42 条） Critical (4 条) * CVE-2026-50545 - Fission Environment CRD PodSpec Injection Leading to Node Escape and Cluster Tak CVE-2026-50545Critical Summary A stronger framing of

每日漏洞情报汇总 · 2026-06-29 📊 2026-06-29 漏洞情报日报 📋 共 200 条 🔥 高危/严重 87 条 🐙 GitHub-Advisory 53 条 🔥24 🛡️ NVD-Latest 63 条 🔥63 ⚔️ Sploitus 84 条 🤖 今日安全态势分析 🎯 今日重点关注 * CVE-2026-46716 (Nezha) - 跨租户会话劫持： 影响 Nezha v1.14.13-v1.14.14 及 v2.0.0-v2.0.9。WebSocket 终端/文件管理器端点仅通过有效UUID认证，未校验所有权，导致攻击者可劫持其他租户的会话。无需交互即可利用，危害极高。 * CVE-2026-53519 (Nezha

每日漏洞情报汇总 · 2026-06-28 📊 2026-06-28 漏洞情报日报 📋 共 200 条 🔥 高危/严重 104 条 🐙 GitHub-Advisory 53 条 🔥24 🛡️ NVD-Latest 80 条 🔥80 ⚔️ Sploitus 67 条 🤖 今日安全态势分析 🎯 今日重点关注 * GeoVision GV-LPC 系列设备 (CVE-2026-57878/79/80/81)： 多个未认证栈缓冲区溢出漏洞（CVSS 9.8），攻击者可通过特殊构造的RTSP请求或Web请求实现远程代码执行，相关设备（V1.12及更早版本）暴露在公网时危害极大。 * Nezha 监控系统 (CVE-2026-53519 & CVE-2026-46716)： 两个严重漏洞：路径遍历漏洞允许未授权访问管理前端资源；WebSocket会话劫持漏洞允许跨租户终端/文件管理。利用链可导致完全控制监控代理。

每日漏洞情报汇总 · 2026-06-27 📊 2026-06-27 漏洞情报日报 📋 共 200 条 🔥 高危/严重 97 条 🐙 GitHub-Advisory 55 条 🔥24 🛡️ NVD-Latest 73 条 🔥73 ⚔️ Sploitus 72 条 🤖 今日安全态势分析 🎯 今日重点关注 * OpenAM 预授权远程代码执行 (CVE-2026-45051, CVSS 9.8)： 影响 OpenAM WebAuthn 模块。攻击者可通过发送特制的序列化数据，在无需认证的情况下触发反序列化漏洞，导致任意代码执行。利用条件低，可直接威胁服务器安全。 * Flowise 多重OS命令注入 (CVE-2026-56274, CVSS 9.9)： 影响 Flowise 低于 3.1.

每日漏洞情报汇总 · 2026-06-25 📊 2026-06-25 漏洞情报日报 📋 共 200 条 🔥 高危/严重 95 条 🚨 CISA-KEV 4 条 🐙 GitHub-Advisory 55 条 🔥20 🛡️ NVD-Latest 75 条 🔥75 ⚔️ Sploitus 66 条 🤖 今日安全态势分析 🎯 今日重点关注 * CVE-2026-10561 (CVSS 10.0) - IBM Langflow OSS：未认证远程代码执行漏洞。结合Python执行隔离缺陷与身份认证绕过，攻击者可完全控制主机。影响版本1.0.0至1.9.3，利用条件低，危害极高。 * CVE-2026-45051 - OpenAM WebAuthn：预认证远程代码执行。

每日漏洞情报汇总 · 2026-06-24 📊 2026-06-24 漏洞情报日报 📋 共 200 条 🔥 高危/严重 86 条 🚨 CISA-KEV 4 条 🐙 GitHub-Advisory 50 条 🔥17 🛡️ NVD-Latest 69 条 🔥69 ⚔️ Sploitus 77 条 🤖 今日安全态势分析 🎯 今日重点关注 * CVE-2026-52813 (Gogs，CVSS 未评但社区定为严重): 路径遍历漏洞。组织名称允许包含../序列，导致仓库文件被写入任意路径，组合利用可实现远程代码执行 (RCE)。无需认证即可触发。 * CVE-2026-10561 (IBM Langflow OSS 1.0.0-1.9.3，CVSS 10.0)