Aggregator

CVE-2026-30457 漏洞复现：FuelCMS Dwoo 安全策略绕过导致远程代码执行

先知技术社区
2 weeks 2 days ago
FuelCMS 是一款基于 PHP CodeIgniter 框架的开源内容管理系统。2026 年 3 月，该 CMS v1.5.2 被披露存在一个 CVSS 9.8 的严重漏洞（CVE-2026-30457），其核心组件 `/parser/dwoo` 中的安全策略实现存在缺陷，攻击者登录后台后可通过 Dwoo 模板引擎执行任意 PHP 代码，最终获取服务器权限。 本文将从代码审计角度出发，完整复

从 开源项目JustSoc 学习态势感知的原理

先知技术社区
2 weeks 2 days ago
本文以轻量级开源态势感知平台 JustSoc 为例，拆解一条安全告警从流量采集、规则初筛、二次分析、消息传输、存储检索到平台展示和研判的完整链路，帮助读者从工程链路角度理解态势感知平台如何真正运转。

Qilin Ransomware Affiliates Abuse CVE-2026-0257 to Gain Unauthorized VPN Access

Security Affairs
2 weeks 2 days ago
Qilin ransomware exploits the PAN-OS GlobalProtect flaw CVE-2026-0257 to gain unauthorized VPN access to unpatched networks. Arctic Wolf researchers warn that the Qilin ransomware gang is exploiting the critical PAN-OS GlobalProtect vulnerability CVE-2026-0257 to compromise corporate networks. CVE-2026-0257 is a PAN-OS authentication bypass vulnerability affecting GlobalProtect portals and gateways. Palo Alto Networks addressed the vulnerability on May […]
Pierluigi Paganini

AWS Kiro Flaw Let a Poisoned Web Page Rewrite Its Config and Run Code

The Hackers News
2 weeks 2 days ago
Hidden text on a web page was enough to make Kiro, AWS's agentic coding IDE, rewrite its own configuration file and run an attacker's code on a developer's machine, with no approval step able to stop it. Intezer, in research with Kodem Security, found that a request as ordinary as asking Kiro to summarize a page could end in remote code execution. AWS has patched the issue and says it is
The Hacker News

Hackers Abuse GitHub Actions to Backdoor AsyncAPI npm Packages With Miasma RAT

Cyber Security News
2 weeks 2 days ago

A supply chain attack has pushed Miasma malware into trusted AsyncAPI npm packages, putting developer systems and automated build environments at risk. Attackers used a compromised release process to publish malicious code through the project’s legitimate npm namespace. The affected packages had a combined reach of about 2.9 million weekly downloads, although download figures do […]

The post Hackers Abuse GitHub Actions to Backdoor AsyncAPI npm Packages With Miasma RAT appeared first on Cyber Security News.

Tushar Subhra Dutta

Managed ad