ARCHIVE
按时间、分类、严重程度检索全部安全漏洞与安全信息。当前共收录 18 条记录。
American blockchain analysis firm Chainalysis said it was the target of a cybersecurity incident in which an external actor accessed non-sensitive customer data. However, the company noted that the breach did not result…
Cryptocurrency giant Binance said on Thursday that a "security incident" on its platform has impacted about $6.3 billion worth of assets. The world's biggest cryptocurrency exchange said nearly $3 billion of those assets…
Some attacks take real skill. Others just need someone to leave a door open. This week has both. Exposed passwords, old bugs still getting exploited, and trusted software doing things it shouldn't. There's a strange mix…
全球最大加密交易所币安疑似遭黑客入侵，被盗金额或超57亿美元，若核实将成加密史上最大窃案，已暂停充提服务，承诺全额赔付，正联动多方冻结涉案资金。
攻击者可利用该漏洞通过网络触发内核内存损坏、信息泄露（绕过 KASLR）、拒绝服务，或在特定条件下（如 MPTCP...
Phishing remained the leading initial access technique, while percentage of ransomware and pre-ransomware cases increased. Finance and public administration tied as the top-targeted industries.
国家背景黑客利用思科SD-WAN无认证满分0Day漏洞植入KeyDrift，窃取加密密钥入侵航天国防等机构，需立即打补丁排查。
JeecgBoot 近期被披露存在“权限绕过 + SQL注入”组合漏洞（QVD-2026-56312 / LDYVUL-2026-00170236），CVSS 3.1 评分为 8.6（高危）。该漏洞允许未授权的远程攻击者绕过系统鉴权，通过 SQL 盲注窃取数据库敏感信息，甚至接管系统。
近期，公安部网安局在护网专项工作中发布提醒文章，文中明确点名Sorry、Weax两个勒索家族近期攻击十分活跃，制造、商贸、医疗、教育、科技等行业的企业接连中招。作为长期奋战在一线的应急响应团队，我们对这个提醒的感受比大多数人都要直接，因为我们就身处这些案例的现场。
Cisco Talos is aware of eight intermediate certificates belonging to the intermediate certificate authority, eMudhra.
这是一篇快报，长话短说。 近日我们收到一起企业应急求助，上机排查后发现，受害服务器上的文件被批量加密，扩展名被追加为一个此前从未见过的新后缀 .ths，每个目录下均留有名为hello.txt 的勒索信。经过比对分析，我们确认这不是新家族，而是我们长期跟踪的 Sorry 勒索病毒（TellYouThePass 勒索家族）卷土重来，换了一个新名字继续作案。 考虑到该家族惯用 0day 发起攻击，传播速
U.S. federal investigators pursuing the ShinyHunters hacking group that recently stole highly sensitive data from the FBI have identified executives at two different ransomware negotiation firms who maintained unusually…
