Aggregator

报告编号：TIC-202609-AI02

报告周期：2026年9月5日—9月11日

一、报告概述

基于360威胁情报中心对本期公开网络安全素材的整

A threat actor built a working exploit for PaperCut print management software, then handed the job of breaking into hundreds of organizations to AI agents that did most of the work on their own, according to GreyNoise. The result was at least 440 compromised PaperCut instances across 395 identified organizations in 48 countries. Attacker, believed to be Russian-speaking, first built a private lab environment with a vulnerable copy of PaperCut NG/MF and an Active Directory … More →

The post AI agents exploited PaperCut flaws to breach 395 organizations appeared first on Help Net Security.

关注高级攻防对抗技术热点，研究对手技术进行高级威胁模拟，研判攻击安全发展方向。

Threat actors are actively exploiting three vulnerabilities in JFrog Artifactory, CVE-2026-42016, CVE-2026-42018, and CVE-2026-82329, to bypass authentication, escalate privileges, and gain administrative control of exposed instances. Wiz Research reports that multiple attackers are targeting self-hosted Artifactory deployments in the wild, using both a two-bug token escalation chain and a separate critical authentication-bypass flaw. A successful […]

The post Hackers Exploit JFrog Artifactory Flaws to Bypass Authentication and Gain Admin Access appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

技术岗直投

很多人的智能手机上可能仍然安装了约会软件，但打开频率日益下降。2026 年的一项 Harris 民调显示，三分之二的单身人士没有使用过约会软件，而八成美国人将现实生活中认识某个人视为“可爱”或“酷”。约会软件承诺提供丰富的选择：成百上千的潜在伴侣，足不出户即可触达。但这种丰富性也带来了新的负担。每次使用都需要用户做出一系列繁琐的决定——是否滑动屏幕、发起对话、维持对话、安排约会，还是继续寻找更合适的人。研究表明，这个过程会让人精疲力竭。亚利桑那州立大学 Relationships and Technology Lab 主任 Liesel Sharabi 领导的一项纵向研究，追踪了约会软件用户 12 周，发现随着时间的推移，他们的情绪耗竭和无力感都在加剧。巴斯大学心理学博士后研究员 Samuel Hipkiss 认为约会软件让接触到的潜在伴侣数量远超过线下，这要求我们对几乎一无所知的人做出数百项判断，最终结果会是决策疲劳和愤世嫉俗。被拒绝一直是约会的一部分，但约会软件大幅增加了遭遇拒绝的机会。

Okta has released security updates for three high-severity vulnerabilities affecting the Auth0 AD/LDAP Connector and Okta Access Gateway. These vulnerabilities could allow authenticated attackers to trigger stored cross-site scripting (XSS), bypass Protected Rule authorization controls, or execute unintended SQL commands against configured backend databases under specific deployment conditions. All three vulnerabilities were disclosed on September […]

The post Okta Patches Auth0 and Access Gateway Vulnerabilities Let Attackers Enable XSS, Authentication Bypass and SQL Injection appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Разработчик Claude создаёт систему, способную замечать протесты ещё до начала.

Microsoft has fixed a bug that prevented Teams and Outlook from launching on ARM-based Windows devices after installing updates released since the August 2026 Patch Tuesday. [...]

Русский установщик GTA VI ведет пользователя прямо в ловушку.

A new Syskit study has shown that only 43% of organizations with AI agents deployed in Microsoft 365 environments completed a permission review before doing so

🛡️ OSRC 9月众测专项营销代理商专场严重 / 高危漏洞深度挖掘📅 活动时间|9月4日 — 9月18日

【火绒安全周报】国家网络安全宣传周即将举办/英国三大机场遭黑客攻击

火绒小问答——「企业版」终端发现

游戏资源站暗藏钓鱼陷阱  黑产盗取账号信息流入暗网

AI与云安全事件案例分析周报｜2026.09.07 - 2026.09.11