#cybersecurity

安全攻防 None

被劫持的npm和Go包使用VS Code任务部署Python Infostealer

Cybersecurity researchers have uncovered two hijacked npm packages and a cluster of Go packages that are designed to dep

npm packages and

2026-06-29 info@thehackernews.com (The Hacker News)

安全攻防 None

CISA 警告 Lantronix EDS5000 的严重缺陷正在被积极利用

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday warned of active exploitation of a critical

The flaw the

2026-06-25 info@thehackernews.com (The Hacker News)

安全攻防 None

冬虫夏草 CI/CD 缺陷使 300 多个 GitHub 存储库遭受供应链攻击

Cybersecurity researchers have flagged a new class of CI/CD workflow weakness that allows attackers to hijack workflows

and The Cybersecurity

2026-06-24 info@thehackernews.com (The Hacker News)

智能AI None

OpenAI 全面致力于修补开源漏洞，挑战 Anthropic 的神话

Amid concerns about AI models’ cybersecurity capabilities, OpenAI revealed an improved version of GPT-5。5-Cyber and its

Amid concerns about

2026-06-22 Lily Hay Newman

安全攻防 None

新的 OXLOADER 加载程序使用恶意 Google 广告来传播 CastleStealer

Cybersecurity researchers have disclosed details of a new campaign that delivers CastleStealer by means of a previously

the campaign that

2026-06-22 info@thehackernews.com (The Hacker News)

安全攻防 None

研究人员详细介绍了 Dify 中的 DifyTap 缺陷，该缺陷可能会暴露跨租户的 AI 聊天

Cybersecurity researchers have disclosed details of four vulnerabilities in Dify, an open-source agentic workflow platfo

have vulnerabilities Cybersecurity

2026-06-22 info@thehackernews.com (The Hacker News)

智能AI None

从 PGP 到神话：没有阻止任何人的出口管制简史

For the last 30 years, stopping the flow of cybersecurity-related software has proven to be ineffective。It's unclear why

the cybersecurity For

2026-06-20 Lorenzo Franceschi-Bicchierai

安全攻防 None

随着 FortiBleed 的 FortiGate 设备数量达到 86,644 台，CISA 向 Fortinet 客户发出警告

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday urged Fortinet customers with FortiGate app

The devices Cybersecurity

2026-06-19 info@thehackernews.com (The Hacker News)

安全攻防 None

INC 勒索软件将成为 2026 年主要的 RaaS 威胁，自 2023 年以来已有 830 多名受害者

Cybersecurity researchers have charted the evolution of INC from an nascent ransomware-as-a-service (RaaS) operation to

the INC ransomware

2026-06-18 info@thehackernews.com (The Hacker News)

安全攻防 None

恶意 JetBrains 插件通过 Chrome 扩展捕获聊天机器人聊天窃取 AI API 密钥

Cybersecurity researchers have flagged a "coordinated malware campaign" on the JetBrains Marketplace that has published

and Cybersecurity researchers

2026-06-17 info@thehackernews.com (The Hacker News)

安全攻防 None

ClickFix 活动通过新加载程序和虚假更新诱饵扩大恶意软件传播范围

Cybersecurity researchers have flagged multiple ClickFix campaigns that deliver three malware loaders called BabaDeda Lo

BabaDeda Loader and

2026-06-17 info@thehackernews.com (The Hacker News)

安全攻防 None

CISA 警告 Joomla JCE 漏洞被积极利用，允许 PHP 代码执行

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a maximum-severity security flaw impac

The Cybersecurity and

2026-06-17 info@thehackernews.com (The Hacker News)

安全攻防 None

朝鲜黑客正在将开发人员工具变成恶意软件传播渠道

Cybersecurity researchers have flagged two malicious cyber campaigns that exhibit similarities with a persistent North K

campaigns threat Cybersecurity

2026-06-16 info@thehackernews.com (The Hacker News)

安全攻防 None

CISA 标记 LiteSpeed cPanel 插件漏洞用于 Root 权限升级

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a security flaw impacting LiteSpeed cPanel Pl

The has Cybersecurity

2026-06-16 info@thehackernews.com (The Hacker News)

智能AI None

网络安全专家抗议美国政府对 Anthropic 最强大模型的“危险”禁令

A group made up of dozens of cybersecurity experts urged the White House to remove export control restrictions on Anthro

the cybersecurity and

2026-06-15 Lorenzo Franceschi-Bicchierai

安全攻防 None

Sniper Dz 诈骗通过虚假 Facebook 优惠和浏览器警报瞄准 MENA 用户

Cybersecurity researchers have disclosed details of fraudulent activity targeting users across the Middle East and North

and fraudulent accounts

2026-06-15 info@thehackernews.com (The Hacker News)

安全攻防 None

LangGraph 缺陷链使自托管 AI 代理面临远程代码执行

Cybersecurity researchers have disclosed details of three now-patched security flaws impacting LangGraph, including a cr

LangGraph could Cybersecurity

2026-06-12 info@thehackernews.com (The Hacker News)

安全攻防 None

代理劫持攻击诱骗人工智能编码代理运行恶意代码

Cybersecurity researchers have described what they say is a new class of attack that can trick artificial intelligence (

attack can error

2026-06-12 info@thehackernews.com (The Hacker News)

安全攻防 None

2026 年网络安全明星奖：95 个类别的获奖者公布

Most good security work is invisible by design。Today is the exception。The 2026 Cybersecurity Stars Awards winners are an

that work the

2026-06-11 info@thehackernews.com (The Hacker News)

智能AI None

网络安全研究人员对《人类寓言》的护栏并不满意

Cybersecurity researchers are complaining that Anthropic's new model Fable has guardrails that are too strict for any cy

are that Cybersecurity

2026-06-10 Lorenzo Franceschi-Bicchierai