#security

智能AI None

本周安全新闻：LastPass 用户数据再次被盗

Plus: Former national security advisor John Bolton pleads guilty in classified-materials case, Microsoft helps take down

Plus Former national

2026-06-27 Lily Hay Newman

安全攻防 None

乌克兰称俄罗斯情报机构使用虚假支持文本窃取消息凭证

The Security Service of Ukraine (SSU) said it, together with the U。

the The Ukraine

2026-06-27 info@thehackernews.com (The Hacker News)

开发者生态 None

事件 CVE-2026-LGTM

Report filed: 04:13 UTC Status: Resolved (by treaty) Severity: Informational → Critical → Withdrawn → Critical → Negotia

the security UTC

2026-06-26 mooreds

安全攻防 None

阻止您的遗留基础设施劫持您的人工智能代理

Earlier this month, I spoke at the Gartner Security & Risk Management Summit about a blind spot most security programs a

security programs are

2026-06-22 info@thehackernews.com (The Hacker News)

安全攻防 None

不可修补的“usbliter8”漏洞破坏了 Apple A12 和 A13 SecureROM 启动链

Security researchers at Paradigm Shift have published a working exploit, dubbed usbliter8, that achieves arbitrary code

code the Security

2026-06-20 info@thehackernews.com (The Hacker News)

安全攻防 None

从辅助到代理：人工智能的转变正在重新定义威胁管理

Introduction The average enterprise security team has 40 or more security tools, giving a lot of visibility into interna

and security tools

2026-06-19 info@thehackernews.com (The Hacker News)

安全攻防 None

F5 修补了两个关键的 NGINX 开源缺陷，从而实现远程代码执行

F5 has released security updates to address two critical security flaws in NGINX Open Source that could be exploited to

security NGINX Open

2026-06-19 info@thehackernews.com (The Hacker News)

智能AI None

FIFA 世界杯内部系统中的错误使任何人都可以修改电视流

A security researcher said a flaw in FIFA’s online platforms allowed her to access several internal systems, including o

allowed her security

2026-06-17 Lorenzo Franceschi-Bicchierai

安全攻防 None

CISA 警告 Joomla JCE 漏洞被积极利用，允许 PHP 代码执行

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a maximum-severity security flaw impac

The Cybersecurity and

2026-06-17 info@thehackernews.com (The Hacker News)

安全攻防 None

用于部署朝鲜 NarwhalRAT 恶意软件的虚假 Microsoft 警报

The North Korean state-sponsored hacking group known as ScarCruft (aka APT37) has been observed using spear-phishing mes

The impersonating security

2026-06-16 info@thehackernews.com (The Hacker News)

安全攻防 None

调查：94% 的事件涉及匿名基础设施。团队仍处于反应状态

Security teams have never had more IP data at their disposal。

and data Security

2026-06-16 info@thehackernews.com (The Hacker News)

安全攻防 None

新的 Rokarolla Android 恶意软件窃取 PIN、短信代码和加密钱包资金

Security researchers at Zimperium's zLabs have documented a new Android banking trojan, Rokarolla, that targets 217 bank

and banking Security

2026-06-16 info@thehackernews.com (The Hacker News)

安全攻防 None

思科发布针对主动利用的 SD-WAN Manager 漏洞的安全更新

Cisco has released security updates for a medium-severity security flaw in Catalyst SD-WAN Manager that has come under a

WAN Cisco has

2026-06-16 info@thehackernews.com (The Hacker News)

安全攻防 None

Splunk Enterprise 的严重缺陷可让攻击者在未经身份验证的情况下运行代码

Splunk has released security updates to address a critical security flaw in Splunk Enterprise that could be exploited to

Splunk security Enterprise

2026-06-13 info@thehackernews.com (The Hacker News)

安全攻防 None

新攻击诱骗 OpenClaw AI 代理运行代码并泄露秘密

Two security teams have shown, in separate research published this week, that OpenClaw, the popular self-hosted AI agent

the agent that

2026-06-12 info@thehackernews.com (The Hacker News)

安全攻防 None

ServiceNow 漏洞被利用以获取对客户实例的未经授权的访问

ServiceNow has warned about a security incident in which unknown threat actors exploited a flaw to obtain deeper unautho

security ServiceNow access

2026-06-10 info@thehackernews.com (The Hacker News)

安全攻防 None

微软补丁记录了 206 个缺陷，包括三个零日漏洞和关键 RCE 漏洞

Microsoft on Tuesday released fixes for a record 206 security vulnerabilities impacting its software portfolio, includin

security flaws the

2026-06-10 info@thehackernews.com (The Hacker News)

安全攻防 None

未修补的 Langflow 缺陷 CVE-2026-5027 用于未经身份验证的 RCE

A high-severity unpatched security flaw in Langflow, an open-source low-code platform to build artificial intelligence (

The high severity

2026-06-10 info@thehackernews.com (The Hacker News)

安全攻防 None

Ivanti、Fortinet 和 SAP 发布针对多个严重漏洞的补丁

Fortinet, Ivanti, and SAP have released security updates to address multiple critical security vulnerabilities that coul

and security FortiSandbox

2026-06-10 info@thehackernews.com (The Hacker News)

安全攻防 None

Linux 内核单字符缺陷可实现本地根访问，漏洞现已公开

Security researchers have published a detailed, working exploit for a Linux kernel use-after-free that lets an unprivile

and kernel Security

2026-06-09 info@thehackernews.com (The Hacker News)