NewsTuesday, 25 August 2026

Newsletter subscribe · Free

新闻

网络安全

来自塑造行业的会议、展会和峰会的网络安全领域最新新闻、公告和分析。

该分类的最新新闻

The Hacker News

Critical OpenWrt DHCPv6 Flaw Could Let Unauthenticated Attackers Run Code as Root

OpenWrt has shipped version 24.10.8 to close a critical DHCPv6 stack overflow and a wider set of remotely triggerable flaws in network services enabled by default. The critical issue, tracked as CVE-2026-53921 and rated 9.8 on CVSS 3.1 in OpenWrt's GitHub advisory, lets an unauthenticated attacker able to reach the DHCPv6 server overwrite a stack buffer in odhcpd through a crafted DHCPv6

info@thehackernews.com (The Hacker News)28 July 2026

Dark Reading

Former Citigroup CISO Blauner on What Makes A Great Security Leader

The cybersecurity pioneer discusses the evolution of the CISO role, AI's impact on careers, and why operational resilience is the profession's next frontier.

Kristina Beek28 July 2026

The Hacker News

Nimbus Manticore Deploys NightLedger and Turns Victim Systems Into Covert Relays

The Iranian state-backed hacking group tracked as Nimbus Manticore (aka GalaxyGato, Mirage Kitten, Smoke Sandstorm, Subtle Snail, and UNC1549) has been attributed to a fresh set of attacks targeting entities across the Middle East, Africa, and South Asia. The intrusions involve the use of a previously undocumented Windows backdoor called NightLedger and two custom WebSocket tunnelers,

info@thehackernews.com (The Hacker News)28 July 2026

The Hacker News

Critical TeamCity Flaw Could Let Attackers Run OS Commands Without Logging In

JetBrains is urging customers of on-premise versions of TeamCity to update to the latest version following the discovery of a critical security issue that could result in arbitrary code execution. The vulnerability, assigned CVE-2026-63077 (CVSS score: 9.8), affects all TeamCity On-Premises versions. It has been addressed in versions 2025.11.7 and 2026.1.3. TeamCity Cloud instances have already

info@thehackernews.com (The Hacker News)28 July 2026

The Hacker News

Researcher Says AI Helped Develop Linux Traffic-Control Race Into Root Exploit

STAR Labs has published a Linux kernel exploit that turns an ordinary local user into root on the CentOS Stream 9 build it targeted. The flaw, tracked as CVE-2026-53264 (CVSS score: 7.8), is a use-after-free race in the kernel's network traffic-control subsystem.Researcher Lee Jia Jie said artificial intelligence (AI) helped him find the bug and speed up exploit development. This is local

info@thehackernews.com (The Hacker News)28 July 2026

The Hacker News

Microsoft Says New Cybersecurity AI Model Helps MDASH Score 95.95% at Half the Cost

Microsoft has launched its first cybersecurity-specific model inside MDASH, its multi-model vulnerability identification and remediation harness. The company says MDASH, using MAI-Cyber-1-Flash and GPT-5.4, scored 95.95% on CyberGym. It also claims the configuration costs 50% less than its current best MDASH combination of GPT-5.4, GPT-5.4 mini, and GPT-5.3 Codex. Access is limited to approved

info@thehackernews.com (The Hacker News)28 July 2026

The Hacker News

Attackers Exploit Arista VeloCloud Orchestrator Command Injection Flaw

A maximum-severity security flaw impacting on-premises versions of Arista VeloCloud Orchestrator (VCO) has come under active exploitation in the wild. The vulnerability, tracked as CVE-2026-16812 (CVSS score: 10.0), is a case of operating system command injection that could pave the way for arbitrary code execution. "VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue

info@thehackernews.com (The Hacker News)28 July 2026

Dark Reading

AI Agent Drives Espionage Attack on Thai Ministry of Finance

Attackers used Hermes, an autonomous open source tool, in unrestricted "YOLO mode" to conduct espionage against Thailand's Ministry of Finance.

Alexander Culafi28 July 2026

Dark Reading

Agentic Browsers Rewind Web Security by 20 Years

PleaseFix class of flaws makes it easy to socially engineer agentic browsers and highlights weaknesses in how they handle cross-origin requests.

Ericka Chickowski27 July 2026

Dark Reading

'Confused Deputy' Flaws Persist in Google Cloud, Microsoft Azure

This category of vulnerabilities allows an attacker to easily acquire administrative level permissions and bypass cloud providers' access controls.

Rob Wright27 July 2026

Dark Reading

FBI: Breaking Affiliate Trust Sped Along LockBit's Takedown

An FBI agent explains how the mulitnational law-enforcement Operation Cronos was successful in disrupting the largest ransomware group of its time.

Elizabeth Montalbano27 July 2026

The Hacker News

NVIDIA Forms 37-Member Open Secure AI Alliance and Open-Sources NOOA Framework

NVIDIA and 36 other organizations have formed the Open Secure AI Alliance to develop and share open technologies, techniques, and tools for securing software and artificial intelligence (AI) agents. The 37-member group spans cloud, security, enterprise software, and AI companies, including Microsoft, Cisco, Cloudflare, CrowdStrike, Hugging Face, IBM, Palo Alto Networks, Red Hat, and the Linux

info@thehackernews.com (The Hacker News)27 July 2026

VF96.7.

一封简短的邮件。汇集塑造全球商业的展会、会议和峰会的头条新闻。没有废话，没有垃圾邮件，随时可取消订阅。

Critical OpenWrt DHCPv6 Flaw Could Let Unauthenticated Attackers Run Code as Root

Former Citigroup CISO Blauner on What Makes A Great Security Leader

Nimbus Manticore Deploys NightLedger and Turns Victim Systems Into Covert Relays

Critical TeamCity Flaw Could Let Attackers Run OS Commands Without Logging In

Researcher Says AI Helped Develop Linux Traffic-Control Race Into Root Exploit

Microsoft Says New Cybersecurity AI Model Helps MDASH Score 95.95% at Half the Cost

Attackers Exploit Arista VeloCloud Orchestrator Command Injection Flaw

AI Agent Drives Espionage Attack on Thai Ministry of Finance

Agentic Browsers Rewind Web Security by 20 Years

'Confused Deputy' Flaws Persist in Google Cloud, Microsoft Azure

FBI: Breaking Affiliate Trust Sped Along LockBit's Takedown

NVIDIA Forms 37-Member Open Secure AI Alliance and Open-Sources NOOA Framework

每周五送达的行业活动一周要闻。