从5700条告警到11条真实威胁：默安智能体降噪与研判实践
4个实景验证降噪效果与研判准确性
Aggregator
CISA warns admins to patch actively exploited SharePoint flaws
1 day 7 hours ago
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned Tuesday that attackers are actively exploiting three vulnerabilities to hack Internet-exposed on-premises SharePoint Server instances. [...]
Sergiu Gatlan
Молодые мужчины 18–24 лет — главные жертвы. Кто попадает в лапы вымогателей и почему платформы могли, но не стали их останавливать
1 day 7 hours ago
Регулятор eSafety обвинил крупнейшие платформы в неэффективной борьбе с секс-шантажом.
疑似APT-C-26（Lazarus）组织升级监控程序的攻击行动分析
1 day 7 hours ago
APT-C-26（Lazarus）是高危活跃 APT 组织，针对金融、政企、军工、航空航天等行业攻击，以牟利和窃取机密为目的，攻击手段多样、可跨系统运作，隐蔽性极强。其定制远程监控程序，近期新增键盘记录组件。
CVE-2026-57833 | weeblr 4Analytics Plugin up to 5.0.1 AI Analysis Feature cross site scripting
1 day 7 hours ago
A vulnerability, which was classified as problematic, has been found in weeblr 4Analytics Plugin up to 5.0.1. This affects an unknown part of the component AI Analysis Feature. The manipulation leads to cross site scripting.
This vulnerability is referenced as CVE-2026-57833. Remote exploitation of the attack is possible. No exploit is available.
vuldb.com
重磅招募｜南开大学2026 DataCon AI安全夏令营正式开启！顶尖高校+头部大厂大咖齐聚！
1 day 7 hours ago
讲师阵容夯爆了！报名从速！！
CVE-2026-53565 | Citrix Secure Access Client for Windows prior 26.6.1.20/26.5.1.7 improper authentication (WID-SEC-2026-2339)
1 day 7 hours ago
A vulnerability was found in Citrix Secure Access Client for Windows and Endpoint Analysis Client for Windows. It has been classified as problematic. This impacts an unknown function. The manipulation leads to improper authentication.
This vulnerability is traded as CVE-2026-53565. An attack has to be approached locally. There is no exploit available.
vuldb.com
CVE-2026-53566 | Citrix Secure Access Client for Windows 26.5.1.7 out-of-bounds (WID-SEC-2026-2339)
1 day 7 hours ago
A vulnerability labeled as problematic has been found in Citrix Secure Access Client for Windows 26.5.1.7. This vulnerability affects unknown code. Executing a manipulation can lead to out-of-bounds read.
The identification of this vulnerability is CVE-2026-53566. The attack can only be executed locally. There is no exploit available.
vuldb.com
CVE-2025-11698 | Rockwell Automation CompactLogix 5380 Recovery Image Compact GuardLogix 5380 Recovery Image CompactLogix 5480 Recovery Image ControlLogix 5580 Recovery Image GuardLogix 5580 Recovery Image buffer overflow (WID-SEC-2026-2338)
1 day 7 hours ago
A vulnerability labeled as critical has been found in Rockwell Automation CompactLogix 5380 Recovery Image Compact GuardLogix 5380 Recovery Image CompactLogix 5480 Recovery Image ControlLogix 5580 Recovery Image GuardLogix 5580 Recovery Image 1.072. Affected is an unknown function. Executing a manipulation can lead to buffer overflow.
This vulnerability appears as CVE-2025-11698. The attack may be performed from remote. There is no available exploit.
vuldb.com
CVE-2026-15719 | Mozilla Firefox up to 152.0.5 Remote Code Execution (WID-SEC-2026-2340)
1 day 7 hours ago
A vulnerability, which was classified as critical, has been found in Mozilla Firefox up to 152.0.5. Impacted is an unknown function. This manipulation causes Remote Code Execution.
This vulnerability is registered as CVE-2026-15719. Remote exploitation of the attack is possible. No exploit is available.
vuldb.com
【奖励公告】2026年6月及Q3
1 day 7 hours ago
2026年5月OSRC奖励公告
安全 419 | 一周国际网安资讯：AI代理成新攻击面 OAuth滥用席卷企业云
1 day 7 hours ago
Salesforce；MemGhost向AI代理植入虚假记忆；埃森哲35GB数据遭窃；NCSC警告勒索软件应急准备成董事会要务。
TG 账号失守、钱包被调包，macOS 木马如何突破防线？
1 day 7 hours ago
这款木马偷走的不是几个孤立的密码或文件，而是用户在一台 Mac 上逐渐建立起来的整套本地信任关系。
2026端午节活动积分兑换公告
1 day 7 hours ago
LYSRC感谢大家在端午活动中倾注的热情与专业，每一份漏洞报告都是大家对lysrc安全生态最坚
Microsoft Patches 570 CVEs in Record Patch Tuesday
1 day 7 hours ago
Microsoft released fixes for a record 570 CVEs in its July Patch Tuesday update, as experts warn AI is dramatically accelerating vulnerability discovery and increasing patch volumes
Linux 内核不反对使用 AI 工具
1 day 7 hours ago
Linus Torvalds 在内核邮件列表上强调，Linux 内核项目不是一个反 AI 的项目，也从来不是一个“社会正义战士”项目。AI 因为对社会产生越来越大的影响而日益受到争议，Linux 内核作为一个大型开源项目，参与者中也有不少人持反 AI 立场。Linus 说，如果有人想要在内核推动反 AI 议题，那么他们最好创建分支或离开。AI 是一种有用的工具，AI 相关问题不涉及它是否“有用”，它确实也可能会对维护者带来痛苦，但解决方法不是像鸵鸟那样将头埋在沙里，而是确保 AI 工具能真正帮助维护者。内核不会阻止开发者使用 AI 工具，而 AI 和人类的自然智能一样都不完美。开源项目的社会意义从来都是附带的，参与开源项目主要是为了获得更好的技术，不是出于宗教信仰。内核项目的决策主要基于技术优势，而非对新工具的恐惧。
Compromised AsyncAPI npm Packages Deliver Multi-Stage Botnet Malware
1 day 7 hours ago
Four compromised npm packages in the @asyncapi namespace have been observed distributing a multi-stage botnet loader, according to findings from OX Security, SafeDep, Socket, and StepSecurity.
The affected packages are listed below -
@asyncapi/[email protected]
@asyncapi/[email protected]
@asyncapi/[email protected]
@asyncapi/specs(v6.11.2, v6.11.2-alpha.1)
"The
The Hacker News
Ловили одного хакера — поймали 500 аккаунтов в придачу. Случайная находка раскрыла масштабную утечку GitHub
1 day 7 hours ago
Забыл отозвать токен — получи Интерпол на пороге.
Qilin
1 day 8 hours ago
You must login to view this content
cohenido
SheetAgent RAT Runs 14 Virtual Machine Checks and Self-Deletes When Analysis Is Detected
1 day 8 hours ago
A threat campaign targeting Indian government job seekers is using a recruitment notice for Senior Field Officer positions in the Cabinet Secretariat as a lure to deploy a custom remote access Trojan, SheetAgent RAT. The campaign begins with a ZIP archive named Approved Documents 2026.pdf.zip, which masquerades as a document-verification package. Its contents include a […]
The post SheetAgent RAT Runs 14 Virtual Machine Checks and Self-Deletes When Analysis Is Detected appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
Mayura Kathir