#threat

安全攻防 None

中文 APT 在东南亚部署新的 TinyRCT 后门活动

A Chinese-speaking advanced persistent threat (APT) actor has been linked to a new custom backdoor called TinyRCT as par

threat actor has

2026-06-26 info@thehackernews.com (The Hacker News)

安全攻防 None

Cisco Catalyst SD-WAN 零日漏洞 CVE-2026-20245 被利用以获得根访问权限

An unknown threat actor exploited a recently disclosed high-severity security flaw impacting Cisco Catalyst SD-WAN as a

disclosed unknown threat

2026-06-25 info@thehackernews.com (The Hacker News)

安全攻防 None

PoC 揭示文件写入根路径后 Cisco Unified CM 漏洞被利用

Threat actors have begun to exploit a recently disclosed critical security flaw impacting Cisco Unified Communications M

Unified Communications Manager

2026-06-24 info@thehackernews.com (The Hacker News)

安全攻防 None

黑客利用 Gravity SMTP WordPress 插件漏洞暴露 API 密钥

Threat actors are exploiting a recently patched security flaw impacting Gravity SMTP, a WordPress plugin that's installe

flaw that data

2026-06-20 info@thehackernews.com (The Hacker News)

安全攻防 None

DragonForce 黑客滥用 Microsoft Teams 中继来隐藏后门。转向 C2 流量

Threat actors associated with the DragonForce ransomware have been observed using a custom Go-based remote access trojan

the and was

2026-06-18 info@thehackernews.com (The Hacker News)

安全攻防 None

Crypto Clipper 活动滥用虚假评论、人工智能解说员和 VirusTotal 评论

An unknown threat actor has been observed leveraging paid or promoted posts on legitimate news websites to drum up buzz

threat actor has

2026-06-18 info@thehackernews.com (The Hacker News)

安全攻防 None

朝鲜黑客正在将开发人员工具变成恶意软件传播渠道

Cybersecurity researchers have flagged two malicious cyber campaigns that exhibit similarities with a persistent North K

campaigns threat Cybersecurity

2026-06-16 info@thehackernews.com (The Hacker News)

安全攻防 None

威胁行为者利用 FortiClient EMS 的关键缺陷来部署凭证窃取程序

Threat actors are continuing to exploit a critical, now-patched security flaw impacting FortiClient Endpoint Management

Threat actors deliver

2026-05-28 info@thehackernews.com (The Hacker News)

安全攻防 None

Ghost CMS CVE-2026-26980 被利用劫持 700 多个站点进行 ClickFix 攻击

Threat actors are exploiting a recently disclosed critical security flaw in Ghost CMS to inject malicious JavaScript cod

the Ghost Threat

2026-05-25 info@thehackernews.com (The Hacker News)

安全攻防 None

PraisonAI CVE-2026-44338 身份验证绕过目标在披露后数小时内

Threat actors have been observed attempting to exploit a recently disclosed security vulnerability in PraisonAI, an open

vulnerability Threat actors

2026-05-14 info@thehackernews.com (The Hacker News)

安全攻防 None

cPanel CVE-2026-41940 正在被积极利用以部署 Filemanager 后门

A threat actor named Mr_Rot13 has been attributed to the exploitation of a recently disclosed critical cPanel flaw to de

the cPanel and

2026-05-11 info@thehackernews.com (The Hacker News)

安全攻防 None

黑客利用 AI 开发首个已知的零日 2FA 绕过技术进行大规模利用

Google on Monday disclosed that it identified an unknown threat actor using a zero-day exploit that it said was likely d

the that threat

2026-05-11 info@thehackernews.com (The Hacker News)

安全攻防 None

TCLBANKER 银行木马通过 WhatsApp 和 Outlook 蠕虫攻击金融平台

Threat hunters have flagged a previously undocumented Brazilian banking trojan dubbed TCLBANKER that's capable of target

banking The the

2026-05-08 info@thehackernews.com (The Hacker News)