unSafe.sh - 不安全
我的收藏
今日热榜
公众号文章
导航
Github CVE
Github Tools
编码/解码
文件传输
Twitter Bot
Telegram Bot
Search
Rss
黑夜模式
Attackers Breached JetBrains Cadence via Unpatched TeamCity, Extracting AWS Credentials
Data Breach / Identity SecurityJetBrains is urging Cadence users to revoke and rotate all credenti...
2026-9-5 16:52:33 | 阅读: 2 |
收藏
|
The Hacker News - thehackernews.com
cadence
jetbrains
cloud
2026
executions
Critical VMware Workstation and Fusion Flaw Lets VM Admins Execute Host Code
Vulnerability / Server SecurityBroadcom has released security updates for two security flaws impac...
2026-9-5 16:5:8 | 阅读: 5 |
收藏
|
The Hacker News - thehackernews.com
privileges
security
2026
broadcom
Trezor Says ShipMonk Breach Exposed 67,000 U.S. Customers' Data It Said Was Deleted
Data Breach / VulnerabilityHardware wallet manufacturer Trezor on Friday disclosed that another 67...
2026-9-5 14:17:2 | 阅读: 2 |
收藏
|
The Hacker News - thehackernews.com
trezor
shipmonk
security
exposure
shipping
Thousands of OpenAI Agents Quietly Turned an Abandoned Wiki Into Their Coordination Channel
A group of AI safety researchers says a fleet of autonomous agents that identified themselves as Op...
2026-9-5 07:55:10 | 阅读: 8 |
收藏
|
The Hacker News - thehackernews.com
agents
openai
wiki
hugging
security
Attackers Exploit PaperCut Flaws to Steal Credentials From Schools and Universities
Vulnerability / Web SecurityThreat actors are exploiting the newly disclosed PaperCut flaws to fac...
2026-9-5 07:31:53 | 阅读: 10 |
收藏
|
The Hacker News - thehackernews.com
papercut
arctic
wolf
lsa
whoami
Phishing Campaign Sends Millions of Emails Using Invisible Unicode to Evade Filters
Microsoft is alerting of a "high-volume phishing campaign" that's using invisible Unicode tag chara...
2026-9-4 15:57:15 | 阅读: 9 |
收藏
|
The Hacker News - thehackernews.com
phishing
invisible
microsoft
funding
PostgreSQL Fixes 12-Year-Old Logical Decoding Flaw Enabling Replication-Role Code Execution
PostgreSQL has released updates to address a security flaw that allows an account with the REPLICAT...
2026-9-4 15:20:19 | 阅读: 8 |
收藏
|
The Hacker News - thehackernews.com
replication
pg
cyera
library
slots
New Ted Backdoor Hides Inside Victims' Own HAProxy Builds to Intercept Web Traffic
A previously undocumented Linux toolkit has been found compiled directly into the trojanized HAPro...
2026-9-4 14:51:13 | 阅读: 4 |
收藏
|
The Hacker News - thehackernews.com
rapid7
haproxy
korean
maltrail
apt37
Over 440,000 Exploit Attempts Target Super Forms and Elementor Pro RCE Flaws
Vulnerability / Web SecurityThreat actors are exploiting two critical security flaws in WordPress...
2026-9-4 08:48:45 | 阅读: 8 |
收藏
|
The Hacker News - thehackernews.com
php
2026
attacker
32475
14894
Plex Urges Immediate Updates After Patching Multiple Undisclosed Security Flaws
Vulnerability / Network SecurityPlex is urging users to update their instances to the latest versi...
2026-9-4 07:35:14 | 阅读: 10 |
收藏
|
The Hacker News - thehackernews.com
plex
security
exposing
network
attackers
Google Releases Chrome Update to Patch Actively Exploited V8 Zero-Day
Vulnerability / Browser SecurityGoogle on Thursday released security updates to patch 12 vulnerabi...
2026-9-4 07:18:47 | 阅读: 14 |
收藏
|
The Hacker News - thehackernews.com
2026
chrome
7977
security
152
GPT-6 Astra Scores 100% on ExploitBench as OpenAI Blocks PoC Exploit Requests
OpenAI on Thursday officially unveiled GPT‑6 Astra, which it described as the "world's most intel...
2026-9-4 06:47:52 | 阅读: 7 |
收藏
|
The Hacker News - thehackernews.com
astra
openai
defenders
daybreak
ThreatsDay: CEO Phishing Kits, 5K Dropbox Account Hacks, OAuth Traps + 17 More Stories
The worst part is how normal these attacks look. A call from IT. A shared file. A trusted app. A sim...
2026-9-3 18:2:47 | 阅读: 6 |
收藏
|
The Hacker News - thehackernews.com
ransomware
malicious
remote
security
software
Critical Cisco Nexus 9000 Flaw Lets Unauthenticated Remote Attackers Run Code as Root
Cisco has released patches to address a critical security flaw affecting 10 Silicon One-based Nexus...
2026-9-3 15:52:7 | 阅读: 8 |
收藏
|
The Hacker News - thehackernews.com
2026
nexus
routers
smus
cscwv19171
BraZetsu Malware Turns Compromised Windows Hosts Into Criminal Marketplace Inventory
Cybersecurity researchers have disclosed details of a sophisticated Python-based Windows malware...
2026-9-3 15:26:47 | 阅读: 3 |
收藏
|
The Hacker News - thehackernews.com
brazetsu
marketplace
cnab
ib
2026
Thomson Reuters Court Software Breach May Have Exposed SSNs and Sealed Data
Thomson Reuters disclosed on Wednesday that an unauthorized party obtained files from C-Track, the...
2026-9-3 14:39:5 | 阅读: 7 |
收藏
|
The Hacker News - thehackernews.com
court
courts
supreme
reuters
thomson
US Becomes Top Target in RMM Phishing Campaign Spanning 46 Countries
Social Engineering / MalwareAn RMM phishing campaign initially associated with Canadian targeting...
2026-9-3 11:58:0 | 阅读: 18 |
收藏
|
The Hacker News - thehackernews.com
rmm
disposable
lures
phishing
software
Attackers Turn Trusted Node.js Runtime Into Malware Delivery Tool in Targeted Attacks
Threat actors are leveraging the trusted Node.js JavaScript runtime in multiple cyber attacks as a...
2026-9-3 10:43:1 | 阅读: 15 |
收藏
|
The Hacker News - thehackernews.com
clickfix
attackers
attacker
malicious
symantec
Shai-Hulud's Reach Just Grew to 469 Credential Locations. Here's What That Means
In early August, GitGuardian researchers found that a recent Shai-Hulud infostealer worm variant ha...
2026-9-3 10:36:39 | 阅读: 30 |
收藏
|
The Hacker News - thehackernews.com
publishing
security
developer
cloud
hulud
Pegasus Zero-Click Spyware Exploit Infects Serbian Student Movement Member's iPhone
Spyware / Mobile SecurityThe iPhone belonging to a member of Serbia's student protest movement w...
2026-9-3 08:43:17 | 阅读: 8 |
收藏
|
The Hacker News - thehackernews.com
spyware
2026
novispy
security
serbian
Previous
-547
-546
-545
-544
-543
-542
-541
-540
Next