#security

安全攻防 None

AI Agent 发现 FFmpeg 中的 21 个零日漏洞； Chrome补丁记录429个Bug

Two things landed within days of each other this week。

the week security

2026-06-07 info@thehackernews.com (The Hacker News)

安全攻防 None

严重的 Gogs RCE 漏洞可让任何经过身份验证的用户执行任意代码

A critical security vulnerability has been disclosed in Gogs, a popular open-source self-hosted Git service, that allows

security vulnerability allows

2026-05-28 info@thehackernews.com (The Hacker News)

数码硬件 None

Arm 宣布 Metis：代理人工智能安全框架

Arm today announced the open-sourcing of Metis, an agentic AI security framework that delivers context AI-powered securi

security Arm today

2026-05-28 Michael Larabel

开发者生态 None

VibeSec 的清算

The VibeSec Reckoning Why prompting your AI to “be secure” is not enough, and what actually is “Vibe coding” - the pract

and the security

2026-05-27 HieronymusBosch

科技头条 None

经过数十次测试后，7款最佳户外监控摄像头（2026年）

These weatherproof outdoor security cams keep a watchful eye on your property while you get on with life。Our list includ

These weatherproof outdoor

2026-05-26 Simon Hill

开发者生态 None

CVE-2026-28952：Claude 发现 Apple macOS 26.5 内核漏洞

About the security content of macOS Tahoe 26。5 This document describes the security content of macOS Tahoe 26。

macOS Tahoe CVE

2026-05-26 dragonsenseiguy

智能AI None

消息称 Anthropic 酝酿公开现现最强模型神话，短暂身 Claude Code

IT之家 5 月 26 日消息，科技媒体 Testingcatalog 于 5 月 24 日发布博文， 报道称 Anthropic 似乎准备公开上线 Claude Mythos 预览版。

Claude Anthropic Mythos

2026-05-26 IT之家

数码硬件 None

每个人都在实时应对人工智能安全问题——甚至谷歌

I recently had the opportunity to sit down with Francis de Souza, COO of Google Cloud, backstage at an event in Los Ange

that the and

2026-05-24 Connie Loizos

安全攻防 None

LiteSpeed cPanel 插件 CVE-2026-48172 被利用以 root 身份运行脚本

A maximum-severity security vulnerability impacting LiteSpeed User-End cPanel Plugin has come under active exploitation

cPanel attacker maximum

2026-05-23 info@thehackernews.com (The Hacker News)

数码硬件 None

FreeBSD 15.1-RC1 发布：修复了更多人工智能发现的安全问题

In addition to the recent influx of Linux security vulnerabilities affecting Linux, FreeBSD has also begun receiving sec

security the Linux

2026-05-23 Michael Larabel

安全攻防 None

高度严重的 Drupal 核心缺陷使 PostgreSQL 站点遭受 RCE 攻击

Drupal has released security updates for a "highly critical" security vulnerability in Drupal Core that could be exploit

Drupal vulnerability security

2026-05-21 info@thehackernews.com (The Hacker News)

安全攻防 None

Microsoft 开源 RAMPART 和 Clarity，以在开发过程中保护 AI 代理

Microsoft has unveiled two new open-source tools called RAMPART and Clarity to assist developers in better testing the s

and for security

2026-05-20 info@thehackernews.com (The Hacker News)

智能AI None

从青少年黑客到 Iron Dome 研究员，这位创始人筹集了 2800 万美元来对抗 AI 网络钓鱼

Ocean, an agentic email security platform, raised funding from Lightspeed Venture Partners。

Ocean agentic email

2026-05-19 Marina Temkin

安全攻防 None

针对 Linux 内核 CVE-2026-31635 LPE 漏洞的 DirtyDecrypt PoC 发布

Proof-of-concept (PoC) exploit code has now been released for a recently patched security flaw in the Linux kernel that

the that for

2026-05-19 info@thehackernews.com (The Hacker News)

安全攻防 None

SEPPMail 安全电子邮件网关漏洞导致 RCE 和邮件流量访问

Critical security vulnerabilities have been disclosed in SEPPMail Secure E-Mail Gateway, an enterprise-grade email secur

security vulnerabilities have

2026-05-19 info@thehackernews.com (The Hacker News)

数码硬件 None

出于安全考虑，Linux AF_ALG 加密代码删除了零拷贝支持

Given all the recent Linux kernel security concerns and new bugs being discovered, the Linux cryptographic subsystem is

the Linux security

2026-05-18 Michael Larabel

安全攻防 None

MiniPlasma Windows 0-Day 可在完全修补的系统上实现系统权限升级

Chaotic Eclipse, the security researcher behind the recently disclosed Windows flaws, YellowKey and GreenPlasma, has rel

the Windows Chaotic

2026-05-18 info@thehackernews.com (The Hacker News)

安全攻防 None

NGINX CVE-2026-42945 被广泛利用，导致 Worker 崩溃和可能的 RCE

A newly disclosed security flaw impacting NGINX Plus and NGINX Open has come under active exploitation in the wild, days

NGINX security the

2026-05-17 info@thehackernews.com (The Hacker News)

安全攻防 None

漏斗构建器缺陷被积极利用，导致 WooCommerce 结帐窃取

A critical security vulnerability impacting the Funnel Builder plugin for WordPress has come under active exploitation i

the vulnerability critical

2026-05-16 info@thehackernews.com (The Hacker News)

安全攻防 None

Turla 将 Kazuar 后门转变为模块化 P2P 僵尸网络以实现持久访问

The Russian state-sponsored hacking group known as Turla has transformed its custom backdoor Kazuar into a modular peer-

Turla peer and

2026-05-15 info@thehackernews.com (The Hacker News)