متوسط
۱۴۰۵/۰۶/۲۸
Brevo supply-chain attack injected ClickFix scripts on customer sites
Brevo confirmed that attackers stole a Cloudflare API key and used it to inject malicious ClickFix scripts into …
پایش زنده تهدیدات · ۲۴/۷
هشدارهای امنیت سایبری
آسیبپذیریها و تهدیدات روز با رتبهبندی CVSS و شدت — مستقیم از تیم تحلیل تهدیدات سیاره فناوری اطلاعات.
CRITICAL
بحرانی
HIGH
بالا
MEDIUM
متوسط
LOW
پایین
متوسط
۱۴۰۵/۰۶/۲۸
New RatHat Android malware uses AI to automate device control
A new Android malware called RatHat has been discovered, targeting users with an AI-powered subsystem that helps operators …
متوسط
۱۴۰۵/۰۶/۲۸
Fake LastPass Authenticator GitHub repos push new Rapuncel infostealer
An ongoing malware campaign uses SEO-optimized GitHub repositories to impersonate well-known software firms to push a previously undocumented …
متوسط
۱۴۰۵/۰۶/۲۲
U.S. Agencies Accuse China AI Firms of Distilling Claude, GPT, Gemini, and Grok
U.S. cybersecurity and intelligence agencies have accused China-based artificial intelligence (AI) companies of conducting "systematic extraction" of proprietary …
متوسط
۱۴۰۵/۰۶/۲۲
Webinar: Learn How to Answer “Are We Exposed?” Faster After a New CVE
A major vulnerability is disclosed. The alert lands immediately. Then comes the harder question: Are we actually exposed? …
متوسط
۱۴۰۵/۰۶/۲۲
Four Spy Groups Used the Same Chrome and Windows Exploit Kit Within a Week
Multiple espionage-motivated threat activity clusters have been found deploying a previously undocumented exploit kit called BlueMoon that chains …
متوسط
۱۴۰۵/۰۶/۲۲
PaperCut Attacker Uses Hundreds of AI Agents to Compromise 440+ Instances
A suspected Russian-speaking cyber actor has been attributed to the use of artificial intelligence (AI) to devise exploits …
متوسط
۱۴۰۵/۰۶/۲۲
China-Linked UNC3569 Exploited Sogou Input Method Flaw to Deploy GRAYRABBIT Backdoor
A China-linked hacking group exploited a flaw in Sogou Input Method, one of the most widely used tools …
متوسط
۱۴۰۵/۰۶/۲۲
Attackers Chain JFrog Artifactory Flaws to Gain Admin Control and Plant Backdoors
Attackers have chained two flaws in JFrog Artifactory, the repository that software build pipelines pull from, to take …
متوسط
۱۴۰۵/۰۶/۲۲
Claude Used to Automate Exploitation and Data Theft Across Multiple Victims
Anthropic has warned that cybercriminals and state-sponsored hackers alike are using its Claude models for cyber attacks, weapons …