Aggregator

Новые образцы выкладывают на VirusTotal быстрее, чем их успевают распознать и заблокировать.

Currently trending CVE - Hype Score: 1

Currently trending CVE - Hype Score: 11 - Integer underflow (wrap or wraparound) in Windows NT OS Kernel allows an authorized attacker to elevate privileges locally.

Currently trending CVE - Hype Score: 9 - In the Linux kernel, the following vulnerability has been resolved: rtmutex: Use waiter::task instead of current in remove_waiter() remove_waiter() is used by the slowlock paths, but it is also used for proxy-lock rollback in rt_mutex_start_proxy_lock() when invoked ...

Currently trending CVE - Hype Score: 7 - Post-authentication improper control of generation of code ('Code Injection') vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute ...

Currently trending CVE - Hype Score: 7 - A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A remote unauthenticated attacker could potentially cause the appliance to make requests to unintended location.

复旦钟教授星球「科研论」值得了解

Threat actors have been observed exploiting a now-patched high-severity Palo Alto Networks PAN-OS vulnerability as an entry point to deploy Qilin (aka Agenda) ransomware on victim environments. Arctic Wolf Labs said it investigated multiple intrusions in June 2026 that began with the exploitation of CVE-2026-0257 (CVSS score: 7.8), an authentication bypass flaw affecting the portal and gateway

Банковский счёт ребёнку без родителей уже не открыть. Теперь такое же правило хотят ввести для электронных кошельков.

Critical infrastructure attacks often begin with stolen credentials, compromised devices, or trusted accounts. Specops Software explains why Zero Trust should verify both user identities and device trust before granting access to critical systems. [...]

Russian-speaking actor Trim built a commercial offensive AI pentest tool on jailbroken Claude models

结合jadx进行二进制逆向分析

APT42, an Iran-linked cyber espionage group, has expanded its phishing operations with AI-assisted research, convincing personas, and a more resilient version of its TAMECAT malware. The campaign has targeted senior government and defense officials, policy experts, and, in some cases, family members connected to high-value individuals. Rather than relying on large volumes of suspicious emails, […]

The post APT42 Uses AI-Assisted Phishing and TAMECAT Malware to Target Government and Defense Officials appeared first on Cyber Security News.

A newly disclosed vulnerability, tracked as CVE-2026-50522, is rattling enterprise IT teams as it allows unauthenticated attackers to remotely execute code on on-premises Microsoft SharePoint servers. The flaw carries a critical CVSS score of 9.8 and stems from deserialization of untrusted data, a bug class that has repeatedly plagued SharePoint in 2026. CVE-2026-50522 affects on-premises […]

The post Critical SharePoint Remote Code Execution Vulnerability Actively Exploited in the Wild appeared first on Cyber Security News.

Причина поломки оказалась предсказуемой, но никто не спешил её устранять.

The speed of 5G and 4G networks across much of Taiwan will be temporarily reduced to 1 percent of capacity as the island holds annual civilian and military exercises.

Cybercriminals continued to lean on a familiar arsenal of malware last week, with information stealers and remote access trojans (RATs) dominating the threat landscape as the primary tools for initial access, credential theft, and long-term system control. Topping the list is Vidar, an infostealer that logged 282 detections, narrowly edging out AsyncRAT, a widely abused […]

The post Top 10 Malware Used by Hackers Last Week to Launch Cyberattacks appeared first on Cyber Security News.