unSafe.sh - 不安全
我的收藏
今日热榜
公众号文章
导航
Github CVE
Github Tools
编码/解码
文件传输
Twitter Bot
Telegram Bot
Search
Rss
黑夜模式
Microsoft Copilot for Word Can Copy Hidden Prompts Into New Documents
Vulnerability / AI SecurityHidden instructions in a Word document can make Microsoft 365 Copilot r...
2026-7-30 11:54:49 | 阅读: 22 |
收藏
|
The Hacker News - thehackernews.com
copilot
microsoft
måløy
malicious
payload
The Network Has Become the Control Plane for AI Security
Network firewalls are the workhorses of modern cybersecurity. They are trusted to protect the netwo...
2026-7-30 11:32:46 | 阅读: 22 |
收藏
|
The Hacker News - thehackernews.com
security
network
agents
firewalls
Hackers Exploit AnySign4PC via Hacked Korean Sites to Install Backdoors Without Prompts
South Korean authorities and four security firms have disclosed a state-sponsored campaign that com...
2026-7-30 10:33:15 | 阅读: 18 |
收藏
|
The Hacker News - thehackernews.com
ahnlab
software
security
anysign4pc
attackers
SilverFox Targets Japanese Manufacturer with 3-Driver BYOVD Chain and ValleyRAT
The Chinese cybercrime group known as Silver Fox has been observed using new drivers as part of bri...
2026-7-30 10:32:59 | 阅读: 24 |
收藏
|
The Hacker News - thehackernews.com
loader
byovd
payload
watchdog
valleyrat
Russian Hackers Exploit Microsoft OWA Flaw to Keep Mailbox Access After Credential Rotation
The Russian threat actors recently linked to the exploitation of a now-patched vulnerability in Zim...
2026-7-30 07:40:48 | 阅读: 34 |
收藏
|
The Hacker News - thehackernews.com
2026
owa
ta488
owareaper
victim
FCC Blocks New Foreign-Produced Robots and Power Inverters Over Cyber Risks
Regulation / Supply Chain SecurityThe Federal Communications Commission (FCC) added foreign-produc...
2026-7-30 07:28:43 | 阅读: 29 |
收藏
|
The Hacker News - thehackernews.com
fcc
remote
security
inverters
Amazon Links Debug and Chalk npm Hijack to North Korea’s Sapphire Sleet
Amazon has tied the September 2025 hijack of the npm packages debug and chalk to North Korea. For t...
2026-7-30 06:5:17 | 阅读: 26 |
收藏
|
The Hacker News - thehackernews.com
axios
chalk
typo
maintainer
attribution
Cisco FMC Zero-Day Actively Exploited, Static Credentials Could Expose Sensitive Data
Vulnerability / Network SecurityThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) o...
2026-7-30 05:8:39 | 阅读: 22 |
收藏
|
The Hacker News - thehackernews.com
hotfix
mgmt
fmc
security
fw
Critical Rails Flaw Could Let Unauthenticated Attackers Read Server Files via Image Uploads
Vulnerability / Software SecurityRuby on Rails has released fixes for a critical Active Storage...
2026-7-29 18:10:0 | 阅读: 22 |
收藏
|
The Hacker News - thehackernews.com
rails
vips
libvips
2026
security
Ruflo MCP Flaw Lets Unauthenticated Attackers Run Commands and Poison AI Memory
Cybersecurity researchers have flagged a maximum-severity security flaw in Ruflo, an open-source ag...
2026-7-29 15:39:30 | 阅读: 20 |
收藏
|
The Hacker News - thehackernews.com
ruflo
mcp
network
memory
attacker
Three Critical VMware Flaws Allow Auth Bypass, Code Execution, and VM Escape
Vulnerability / Enterprise SecurityBroadcom has released security updates to address multiple secu...
2026-7-29 15:31:15 | 阅读: 24 |
收藏
|
The Hacker News - thehackernews.com
esx
cloud
2026
vsphere
vcenter
Coordinated Cyberattack Targets 30+ Minnesota Water Systems as One Plant Goes Offline
Critical Infrastructure / Threat IntelligenceA coordinated cyberattack targeted operational techn...
2026-7-29 13:48:36 | 阅读: 17 |
收藏
|
The Hacker News - thehackernews.com
mnit
water
minnesota
operational
coordinated
Nine-Year Fraud Campaign Clones Russian Company Sites to Steal Advance Payments
Cybersecurity researchers have disclosed details of a large-scale fraud campaign that involves crea...
2026-7-29 13:42:57 | 阅读: 19 |
收藏
|
The Hacker News - thehackernews.com
fraudulent
f6
victim
attackers
Mythos Asks the Right Question. It Doesn't Answer It.
AI is compressing exploit timelines. The real question isn't whether your vulnerability management...
2026-7-29 12:15:0 | 阅读: 20 |
收藏
|
The Hacker News - thehackernews.com
security
mythos
playbook
asset
prioritize
Researchers Show a Single Malicious Webpage Visit Can Compromise Tor Browser
Vulnerability / Browser SecurityNebula Security says a patched Firefox JIT flaw could be triggered...
2026-7-29 11:57:0 | 阅读: 18 |
收藏
|
The Hacker News - thehackernews.com
nebula
2026
zou
151
mozilla
73% of Organizations Say They Are Not Fully Ready for a Major Cyberattack
Most organizations have incident response plans, security tools, and technical teams in place. Yet...
2026-7-29 11:13:10 | 阅读: 18 |
收藏
|
The Hacker News - thehackernews.com
readiness
cloud
operational
security
Russia Charges Telegram Founder Pavel Durov With Aiding Terrorist Activity
Cybercrime / Law EnforcementThe Federal Security Service of the Russian Federation (FSB) on Wedn...
2026-7-29 11:0:0 | 阅读: 14 |
收藏
|
The Hacker News - thehackernews.com
durov
men
terrorist
citizens
ukrainian
Public PoC Released for Exploited Check Point SmartConsole Authentication Bypass
Vulnerability / Enterprise SecurityCybersecurity researchers have shared additional technical deta...
2026-7-29 08:58:27 | 阅读: 19 |
收藏
|
The Hacker News - thehackernews.com
dn
remote
attacker
security
New Gitea RCE Lets Repository Writers Plant a Git Hook to Run Shell Commands
Gitea, the self-hosted Git platform, has patched a critical remote code execution vulnerability. A...
2026-7-29 07:47:19 | 阅读: 31 |
收藏
|
The Hacker News - thehackernews.com
gitea
repository
security
attacker
bare
Flying Eagle Android RAT Traces Found on 170 Servers as Source Code Circulates
Mobile Security / Threat IntelligenceSource code for the Flying Eagle Android remote access trojan...
2026-7-29 07:7:23 | 阅读: 20 |
收藏
|
The Hacker News - thehackernews.com
flying
eagle
dragon
hunt
night
Previous
5
6
7
8
9
10
11
12
Next