Цены Enterprise

BREAKING

CISA Adds One Known Exploited Vulnerability to Catalog•YoSmart YoLink Smart Hub•CISA добавляет активно эксплуатируемую уязвимость CVE-2026-20805 в каталог KEV•Rockwell Automation FactoryTalk DataMosaix Private Cloud•A Cyberattack Was Part of the US Assault on Venezuela•CISA Adds One Known Exploited Vulnerability to Catalog•YoSmart YoLink Smart Hub•CISA добавляет активно эксплуатируемую уязвимость CVE-2026-20805 в каталог KEV•Rockwell Automation FactoryTalk DataMosaix Private Cloud•A Cyberattack Was Part of the US Assault on Venezuela•

ZERODAI SECURITY NEWS

четверг, 5 февраля 2026 г.

Киберразведка в Реальном ВремениНа базе ИИ

Рекомендуемое

CISA Adds One Known Exploited Vulnerability to Catalog

<p>CISA has added one new vulnerability to its <a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog" data-entity-type="node" data-entity-uuid="79453b83-86b9-4e2f-b1ec-abf73c6eb291" data-entity-substitution="canonical" title="Known Exploited Vulnerabilities Catalog">Known Exploited Vulnerabilities (KEV) Catalog</a>, based on evidence of active exploitation. </p> <ul> <li><a href="https://www.cve.o

12 янв.CISA Cybersecurity Advisories

The Buyer’s Guide to AI Usage Control

Today’s “AI everywhere” reality is woven into everyday workflows across the enterprise, embedded in SaaS platforms, browsers, copilots, extensions, and a rapidly expanding universe of shadow tools that appear faster than security teams can track. Yet most organizations still rely on legacy controls that operate far away from where AI interactions actually occur. The result is a widening

1ч назадThe Hacker News

Critical N8n Sandbox Escape Could Lead to Server Compromise

The vulnerability could allow attackers to execute arbitrary commands and steal credentials and other secrets. The post Critical N8n Sandbox Escape Could Lead to Server Compromise appeared first on SecurityWeek.

Критический

1ч назадSecurityWeek

СРОЧНЫЕ НОВОСТИ

Срочные новости

Утечка данных Betterment: взломаны 1,4 млн учётных записей в кибератаке в январе

Срочные новости

Cyberspy Group Hacked Governments and Critical Infrastructure in 37 Countries

Критический

Смотреть все

ИНСТРУМЕНТЫ И ЭКСПЛОЙТЫ

Инструменты и эксплойты

AI-supported vulnerability triage with the GitHub Security Lab Taskflow Agent

Критический

Инструменты и эксплойты

How to catch GitHub Actions workflow injections before attackers do

Критический

Инструменты и эксплойты

Kicking off Cybersecurity Awareness Month 2025: Researcher spotlights and enhanced incentives

Инструменты и эксплойты

Top security researcher shares their bug bounty process

ИССЛЕДОВАНИЯ

Исследования

Backdoor in Notepad++

Исследования

US Declassifies Information on JUMPSEAT Spy Satellites

Исследования

Microsoft передаёт ФБР ключи восстановления BitLocker по решению суда

Исследования

Please Don't Feed the Scattered Lapsus Shiny Hunters

CERT РЕКОМЕНДАЦИИ

CERT рекомендации

Mitsubishi Electric устраняет критическую уязвимость проверки входных данных в промышленных системах

CERT рекомендации

Ausencia de autenticación en switches de Ethernet de Moxa

CERT рекомендации

Ausencia de autenticación en Light Engine Pro de Avation

CERT рекомендации

Ausencia de autenticación en MOMA Seismic Station de RISS SRL

ЭКСПЛОЙТЫ

Эксплойты

[local] Docker Desktop 4.44.3 - Unauthenticated API Exposure

Эксплойты

[webapps] FortiWeb Fabric Connector 7.6.x - SQL Injection to Remote Code Execution

Эксплойты

[webapps] aiohttp 3.9.1 - directory traversal PoC

Эксплойты

[remote] Ingress-NGINX Admission Controller v1.11.1 - FD Injection to RCE