实时热榜
SecurityOnline
- 01Meta Seller App Brings Pro Tools and Meta AI to MarketplaceMeta launches the Seller App for Facebook Marketplace, pairing Meta AI listing tools with a unified inbox, inventory management, and analytics. Related Posts: 25 Tech Firms Sign Open-Weight AI Letter Backing US Leadership Facebook Verified Adds Free Real-Person Badge to Fight AI Fakes Anthropic Claude Opus 5 Rivals Fable 5 at Half the Price The post Meta Seller App Brings Pro Tools and Meta AI to Marketplace appeared first on Daily CyberSecurity .Do Son
- 0225 Tech Firms Sign Open-Weight AI Letter Backing US LeadershipNVIDIA, Microsoft, and Meta lead 25 firms signing an open-weight AI letter urging US policymakers to avoid premature limits on open models. Related Posts: Meta Seller App Brings Pro Tools and Meta AI to Marketplace Facebook Verified Adds Free Real-Person Badge to Fight AI Fakes Anthropic Claude Opus 5 Rivals Fable 5 at Half the Price The post 25 Tech Firms Sign Open-Weight AI Letter Backing US Leadership appeared first on Daily CyberSecurity .Do Son
- 03Facebook Verified Adds Free Real-Person Badge to Fight AI FakesFacebook Verified is a free real-person badge using a face-scan selfie to prove a user is human, rolling out across Marketplace, Dating, and more. Related Posts: Meta Seller App Brings Pro Tools and Meta AI to Marketplace 25 Tech Firms Sign Open-Weight AI Letter Backing US Leadership Anthropic Claude Opus 5 Rivals Fable 5 at Half the Price The post Facebook Verified Adds Free Real-Person Badge to Fight AI Fakes appeared first on Daily CyberSecurity .Do Son
- 04Anthropic Claude Opus 5 Rivals Fable 5 at Half the PriceAnthropic Claude Opus 5 nearly matches Fable 5 on performance at roughly half the price, with relaxed safety limits and a new effort control. Related Posts: Meta Seller App Brings Pro Tools and Meta AI to Marketplace 25 Tech Firms Sign Open-Weight AI Letter Backing US Leadership Facebook Verified Adds Free Real-Person Badge to Fight AI Fakes The post Anthropic Claude Opus 5 Rivals Fable 5 at Half the Price appeared first on Daily CyberSecurity .Do Son
- 05FastJson RCE CVE-2026-16723 Exploited in the Wild as Details and PoC Exploit Code Go PublicFastJson RCE vulnerability CVE-2026-16723 is exploited in the wild. Details and PoC exploit code are public for this critical remote code execution flaw. Related Posts: CVE-2026-50454: Public PoC Shows Windows AppResolver Elevation of Privilege to SYSTEM Konnectivity Vulnerability Lets Unauthenticated Attackers Intercept Control-Plane Traffic Tycon Power Monitor Authentication Bypass CVE-2026-61884 Rated CVSS 9.8 The post FastJson RCE CVE-2026-16723 Exploited in the Wild as Details and PoC ExploDo Son
- 06NadMesh Botnet Targets AI Services and Cloud EnvironmentsThe NadMesh botnet targets cloud environments. This AI infrastructure threat harvests cloud credentials and exploits open services for autonomous spreading. Related Posts: TAG-150 Attack Chain Deploys DenoRAT Malware ACR Stealer Spreads Through ClickFix Lures in Two Attack Chains GST Phishing Campaign Distributes Remcos RAT Malware The post NadMesh Botnet Targets AI Services and Cloud Environments appeared first on Daily CyberSecurity .Do Son
- 07CVE-2026-50454: Public PoC Shows Windows AppResolver Elevation of Privilege to SYSTEMA public proof-of-concept details the Windows AppResolver LPE (CVE-2026-50454), a UAC bypass that chains an admin token to a SYSTEM shell. Related Posts: FastJson RCE CVE-2026-16723 Exploited in the Wild as Details and PoC Exploit Code Go Public Konnectivity Vulnerability Lets Unauthenticated Attackers Intercept Control-Plane Traffic Tycon Power Monitor Authentication Bypass CVE-2026-61884 Rated CVSS 9.8 The post CVE-2026-50454: Public PoC Shows Windows AppResolver Elevation of Privilege to SYSTDo Son
- 08Konnectivity Vulnerability Lets Unauthenticated Attackers Intercept Control-Plane TrafficA Konnectivity vulnerability (CVE-2026-16242, CVSS 9.4) lets unauthenticated attackers proxy and modify control-plane traffic. See the fix and mitigation. Related Posts: FastJson RCE CVE-2026-16723 Exploited in the Wild as Details and PoC Exploit Code Go Public CVE-2026-50454: Public PoC Shows Windows AppResolver Elevation of Privilege to SYSTEM Tycon Power Monitor Authentication Bypass CVE-2026-61884 Rated CVSS 9.8 The post Konnectivity Vulnerability Lets Unauthenticated Attackers Intercept ConDo Son
- 09Tycon Power Monitor Authentication Bypass CVE-2026-61884 Rated CVSS 9.8CVE-2026-61884 is a Tycon authentication bypass rated CVSS 9.8 in TPDIN-Monitor-WEB2. No vendor fix exists, so isolate the devices now. Related Posts: FastJson RCE CVE-2026-16723 Exploited in the Wild as Details and PoC Exploit Code Go Public CVE-2026-50454: Public PoC Shows Windows AppResolver Elevation of Privilege to SYSTEM Konnectivity Vulnerability Lets Unauthenticated Attackers Intercept Control-Plane Traffic The post Tycon Power Monitor Authentication Bypass CVE-2026-61884 Rated CVSS 9.8Do Son
- 10GoSerpent Backdoor Drives a Patient Cyber Espionage Campaign Against Southeast Asian GovernmentsGoSerpent backdoor drives a patient cyber espionage campaign against Southeast Asian governments, stealing files and credentials since at least 2021. Related Posts: TA488 and TA458 Steal Government Email Using Half-Click Webmail Exploits Project CAV3RN Hides Its C2 in Outlook Calendar Events to Spy on Israel FSB Center 16 Targets Routers Across Critical Sectors The post GoSerpent Backdoor Drives a Patient Cyber Espionage Campaign Against Southeast Asian Governments appeared first on Daily CyberSDo Son
- 11Tego AI Discloses Second Claude Flaw in a Week: Hidden Link Silently Sends Files to AttackersTel Aviv, Israel, 24th July 2026, CyberNewswire Related Posts: AppViewX Arms Enterprise CLM Teams for Post-Quantum Migration and AI Adoption in Latest Product Release AccuKnox Wins Best AI Startup Award for Enterprise Agentic AI Security at BSides Bangalore Pulse Security Debuts Operational Management Platform Built for Security Leaders The post Tego AI Discloses Second Claude Flaw in a Week: Hidden Link Silently Sends Files to Attackers appeared first on Daily CyberSecurity .cybernewswire
- 12Google Gemini Spark Expands Access to Pro and Ultra SubscribersGoogle Gemini Spark now reaches AI Pro users in the US and AI Ultra subscribers worldwide, bringing agentic automation into Workspace. Related Posts: Meta Seller App Brings Pro Tools and Meta AI to Marketplace 25 Tech Firms Sign Open-Weight AI Letter Backing US Leadership Facebook Verified Adds Free Real-Person Badge to Fight AI Fakes The post Google Gemini Spark Expands Access to Pro and Ultra Subscribers appeared first on Daily CyberSecurity .Do Son
- 13Google DMA Fine of €890 Million Lands in BrusselsThe Google DMA fine of €890 million covers search self-preferencing and Play Store steering rules, the first such penalty under the EU law. Related Posts: Meta Seller App Brings Pro Tools and Meta AI to Marketplace 25 Tech Firms Sign Open-Weight AI Letter Backing US Leadership Facebook Verified Adds Free Real-Person Badge to Fight AI Fakes The post Google DMA Fine of €890 Million Lands in Brussels appeared first on Daily CyberSecurity .Do Son
- 14TAG-150 Attack Chain Deploys DenoRAT MalwareThe new TAG-150 attack chain uses ClickFix to deploy DenoRAT malware and NightshadeC2. Learn how this threat targets financial sectors and crypto wallets. Related Posts: NadMesh Botnet Targets AI Services and Cloud Environments ACR Stealer Spreads Through ClickFix Lures in Two Attack Chains GST Phishing Campaign Distributes Remcos RAT Malware The post TAG-150 Attack Chain Deploys DenoRAT Malware appeared first on Daily CyberSecurity .Do Son
- 15North Korean Contagious Interview Campaign Hides Malware in Fake Coding TestsElastic found a Contagious Interview campaign using fake coding interviews and SVG steganography to steal developer credentials and crypto wallets. Related Posts: DOJ Indicts Chinese National Over Gift Card Fraud Scheme in New Hampshire Dolphin X Stealer Sold on a Cybercrime Forum Uses an AI Profiler to Rank Victims HelloNet Campaign Abuses ViPNet Update System to Hit Russian Firms The post North Korean Contagious Interview Campaign Hides Malware in Fake Coding Tests appeared first on Daily CybeDo Son
- 16ACR Stealer Spreads Through ClickFix Lures in Two Attack ChainsMicrosoft warns of rising ACR Stealer attacks using ClickFix lures to steal browser credentials and tokens from enterprises. Two chains detailed. Related Posts: NadMesh Botnet Targets AI Services and Cloud Environments TAG-150 Attack Chain Deploys DenoRAT Malware GST Phishing Campaign Distributes Remcos RAT Malware The post ACR Stealer Spreads Through ClickFix Lures in Two Attack Chains appeared first on Daily CyberSecurity .Do Son
- 17LG Disables McAfee Ad Popups on Monitors After BacklashDiscover how Microsoft pressured LG to disable McAfee ad popups on webOS companion apps installed via Windows device metadata. Related Posts: Meta Seller App Brings Pro Tools and Meta AI to Marketplace 25 Tech Firms Sign Open-Weight AI Letter Backing US Leadership Facebook Verified Adds Free Real-Person Badge to Fight AI Fakes The post LG Disables McAfee Ad Popups on Monitors After Backlash appeared first on Daily CyberSecurity .Do Son
- 18ADAudit Plus Flaw CVE-2026-6516 Allows Unauthenticated Remote Code Execution at CVSS 10ManageEngine fixed an ADAudit Plus vulnerability, CVE-2026-6516, a CVSS 10 unauthenticated remote code execution flaw. Update to build 8606 now. Related Posts: FastJson RCE CVE-2026-16723 Exploited in the Wild as Details and PoC Exploit Code Go Public CVE-2026-50454: Public PoC Shows Windows AppResolver Elevation of Privilege to SYSTEM Konnectivity Vulnerability Lets Unauthenticated Attackers Intercept Control-Plane Traffic The post ADAudit Plus Flaw CVE-2026-6516 Allows Unauthenticated Remote CDo Son
- 19Public Exploit Code Released for Knot Resolver DNS-over-QUIC Remote Code Execution FlawResearchers publicly disclosed a Knot Resolver RCE flaw and PoC exploit code. The DNS-over-QUIC heap overflow hits 6.3.0; update to 6.4.1 now. Related Posts: FastJson RCE CVE-2026-16723 Exploited in the Wild as Details and PoC Exploit Code Go Public CVE-2026-50454: Public PoC Shows Windows AppResolver Elevation of Privilege to SYSTEM Konnectivity Vulnerability Lets Unauthenticated Attackers Intercept Control-Plane Traffic The post Public Exploit Code Released for Knot Resolver DNS-over-QUIC RemoDo Son
- 20CERT/CC Warns of Six Logto Vulnerabilities in SSO and MFA HandlingCERT/CC discloses six Logto vulnerabilities, including CVE-2026-15611 and CVE-2026-15616, that enable SSO authentication bypass and MFA skipping. Related Posts: FastJson RCE CVE-2026-16723 Exploited in the Wild as Details and PoC Exploit Code Go Public CVE-2026-50454: Public PoC Shows Windows AppResolver Elevation of Privilege to SYSTEM Konnectivity Vulnerability Lets Unauthenticated Attackers Intercept Control-Plane Traffic The post CERT/CC Warns of Six Logto Vulnerabilities in SSO and MFA HandDo Son
- 21DOJ Indicts Chinese National Over Gift Card Fraud Scheme in New HampshireDOJ charged a Chinese national with wire fraud conspiracy in a gift card fraud scheme that shipped electronics from a New Hampshire warehouse to China. Related Posts: North Korean Contagious Interview Campaign Hides Malware in Fake Coding Tests Dolphin X Stealer Sold on a Cybercrime Forum Uses an AI Profiler to Rank Victims HelloNet Campaign Abuses ViPNet Update System to Hit Russian Firms The post DOJ Indicts Chinese National Over Gift Card Fraud Scheme in New Hampshire appeared first on DailyDo Son
- 22Google Ships Chrome 150 Update Fixing Four High-Severity Memory BugsGoogle's Chrome security update fixes four high-severity bugs, including CVE-2026-16807, a Codecs flaw that could enable a sandbox escape. Update now. Related Posts: FastJson RCE CVE-2026-16723 Exploited in the Wild as Details and PoC Exploit Code Go Public CVE-2026-50454: Public PoC Shows Windows AppResolver Elevation of Privilege to SYSTEM Konnectivity Vulnerability Lets Unauthenticated Attackers Intercept Control-Plane Traffic The post Google Ships Chrome 150 Update Fixing Four High-SeverityDo Son
共 22 条热搜查看完整榜单