#Security

安全攻防 None

NGINX CVE-2026-42945 被广泛利用，导致 Worker 崩溃和可能的 RCE

A newly disclosed security flaw impacting NGINX Plus and NGINX Open has come under active exploitation in the wild, days

NGINX security the

2026-05-17 info@thehackernews.com (The Hacker News)

安全攻防 None

漏斗构建器缺陷被积极利用，导致 WooCommerce 结帐窃取

A critical security vulnerability impacting the Funnel Builder plugin for WordPress has come under active exploitation i

the vulnerability critical

2026-05-16 info@thehackernews.com (The Hacker News)

安全攻防 None

Turla 将 Kazuar 后门转变为模块化 P2P 僵尸网络以实现持久访问

The Russian state-sponsored hacking group known as Turla has transformed its custom backdoor Kazuar into a modular peer-

Turla peer and

2026-05-15 info@thehackernews.com (The Hacker News)

数码硬件 None

Rocky Linux 推出可选安全存储库以更快获得重要修复

In response to the likes of the Dirty Frag and Fragnesia vulnerabilities, Rocky Linux is introducing an optional securit

the security response

2026-05-15 Michael Larabel

开发者生态 None

欢迎来到 OSS 安全的露天采矿时代

All posts May 14, 2026 in Engineering ‧ 8 min read Welcome to the strip mining era of open source security Sameer Al-Sak

the and you

2026-05-15 salsakran

开发者生态 None

神秘的微软漏洞泄露者让零日漏洞不断到来

Security Mystery Microsoft bug leaker keeps the zero-days coming Security pros warn YellowKey claim could make stolen la

the YellowKey BitLocker

2026-05-14 e12e

开发者生态 None

Nginx.org/En/Changes

Changes with nginx 1。0 13 May 2026 *) Security: when using the "proxy_set_body" directive, an attacker might inject data

worker the process

2026-05-13 qwertox

数码硬件 None

发布用于英特尔硅安全引擎接口“ISSEI”的 Linux 驱动程序

Since Intel Meteor Lake has been the Intel Silicon Security Engine to serve as a silicon root-of-trust for secure firmwa

Intel Lake Silicon

2026-05-13 Michael Larabel

安全攻防 None

新的 Exim BDAT 漏洞使 GnuTLS 构建暴露于潜在的代码执行

Exim has released security updates to address a severe security issue affecting certain configurations that could enable

Exim has security

2026-05-12 info@thehackernews.com (The Hacker News)

开发者生态 None

FreeBSD – 不良默认设置的教训

FreeBSD - a lesson in poor defaults by @blakkheim Last updated 04/05/2026。Send any feedback/corrections here。

the FreeBSD security

2026-05-10 jruohonen

开发者生态 None

90 天披露政策已失效

the 90 day disclosure policy is dead 2026-05-09 :: [Updated :: 2026-05-09] Himanshu Anand :: 14 min read (2846 words) #

the and bug

2026-05-09 unknownhad

安全攻防 None

每周漏掉一个威胁：2500 万个警报揭示了低严重性风险的哪些内容

The dark secret of enterprise security operations is that defenders have quietly institutionalized the practice of not l

The enterprise security

2026-05-08 info@thehackernews.com (The Hacker News)