Aggregator

零网络影响，灵活适配安全合规。

Threat hunting has become one of the most important capabilities within modern security operations. Organizations collect more telemetry than ever […]

The post Common Threat Hunting Mistakes That Leave Attackers Undetected appeared first on HawkEye.

A security researcher has released a new Microsoft Defender zero-day exploit named "RoguePlanet" just hours after Microsoft fixed two previously disclosed flaws during June 2026 Patch Tuesday. [...]

Britain has weakened proposed cybersecurity protections for its telecoms networks that were developed in response to the Salt Typhoon espionage campaign, after the companies responsible for implementing the measures lobbied against them.

Microsoft Patch Tuesday security updates for June 2026 fix a record 208 CVEs, including one actively exploited zero-day and multiple critical RCE flaws. Microsoft Patch Tuesday security updates for June 2026 mark a record. Microsoft shipped fixes for 208 CVEs across Windows, Office, Azure, Exchange, Hyper-V, Secure Boot, BitLocker, and a range of AI tooling. […]

Microsoft today released software updates to plug nearly 200 security holes across its Windows operating systems and supported software, a record number of fixes for the company's monthly Patch Tuesday cycle. Nearly three dozen of those bugs earned Microsoft's most dire "critical" rating, and exploit code for at least three of the weaknesses is now publicly available.

2026年6月2日，安全初创公司depthfirst宣布其自主AI安全代理在FFmpeg多媒体框架中发现了21个已确认的零日漏洞。这一发现标志着AI驱动的安全研究已经进入实战阶段。 关键数据：约1,000美元成本，扫描约150万行C代码，发现21个零日漏洞，每个都附带可复现的PoC。部分漏洞潜伏时间长达15-20年，涉及堆溢出、栈溢出、整数溢出等多种内存安全漏洞。 FFmpeg作为全球使用最广泛的多媒体处理库之一，被应用于浏览器、流媒体平台、监控系统、移动应用和嵌入式设备。这意味着这些漏洞的影响范围极大，全球数百万应用和设备可能受到影响。 从安全专家视角来看，这一事件带来三重启示： 其一，AI代理的安全研究效率远超传统人工审计，但攻击者同样可以使用相同技术； 其二，开源软件供应链安全需要更系统的管理和监测机制； 其三，安全团队需要升级能力，学习AI安全技术，建立人机协作的新范式。 FFmpeg安全团队已确认漏洞存在并着手修复。作为企业安全负责人，建议立即盘点内部FFmpeg使用情况，建立SBOM清单，升级到最新版本，并持续关注官方安全公告。 AI时代的安全形势正在加速演变，唯有主动拥抱技术变革，才能在这场攻防博弈中占据先机。

Former National Cyber Director Chris Inglis warns that cyberattacks threaten hospitals, utilities, and essential services.

Voluminous patch updates could soon be the norm, as artificial intelligence accelerates the speed and scale of vulnerability discovery.

ServiceNow is warning about a security incident after attackers exploited an unauthenticated access flaw through a vulnerable API endpoint, allowing them to query data from customer instances. [...]

Phishing simulation on an OpenClaw email agent with various configuration profiles showed that it was susceptible to tactics commonly used to compromise human users. [...]

“Ghost-Sender" is the result of a widespread misconfiguration, according to researchers, and evidence indicates it's being actively abused in the wild.

Fears and warnings about a roaring flood of error-riddled software have materialized. And the disease is spreading.

The post Microsoft breaks Patch Tuesday record with 206 vulnerabilities appeared first on CyberScoop.

A vulnerability was found in Netgear CAX30, RAX30, RAX5 and RAXE300. It has been rated as critical. Affected by this vulnerability is an unknown functionality. This manipulation causes improper authorization. This vulnerability is registered as CVE-2026-9211. The attack requires access to the local network. No exploit is available. Upgrading the affected component is advised.

A vulnerability was found in Pure Storage FlashArray up to 6.5.8/6.10.5. It has been declared as very critical. Affected is an unknown function. The manipulation results in improper authorization in handler for custom url scheme. This vulnerability is cataloged as CVE-2026-6445. The attack may be launched remotely. There is no exploit available.

A vulnerability was found in Netgear LBR1020, LBR20, R6700AX, R7800, R9000, RAX10, RAX10v2, RAX120, RAX120v1, RAX120v2, RAX36S, RAX70, RAX78, RBR10, RBR20, RBR350, RBR40, RBR50, RBS10, RBS20, RBS350, RBS40, RBS50, XR450 and XR500. It has been classified as critical. This impacts an unknown function. The manipulation leads to missing authentication. This vulnerability is listed as CVE-2026-9212. The attack must be carried out from within the local network. There is no available exploit. Upgrading the affected component is recommended.