ZERODAI SECURITY NEWS

2026年2月5日星期四

实时网络安全情报AI驱动

精选

CISA Adds One Known Exploited Vulnerability to Catalog

<p>CISA has added one new vulnerability to its <a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog" data-entity-type="node" data-entity-uuid="79453b83-86b9-4e2f-b1ec-abf73c6eb291" data-entity-substitution="canonical" title="Known Exploited Vulnerabilities Catalog">Known Exploited Vulnerabilities (KEV) Catalog</a>, based on evidence of active exploitation. </p> <ul> <li><a href="https://www.cve.o

1月12日CISA Cybersecurity Advisories

The Buyer’s Guide to AI Usage Control

Today’s “AI everywhere” reality is woven into everyday workflows across the enterprise, embedded in SaaS platforms, browsers, copilots, extensions, and a rapidly expanding universe of shadow tools that appear faster than security teams can track. Yet most organizations still rely on legacy controls that operate far away from where AI interactions actually occur. The result is a widening

低

1小时前The Hacker News

Critical N8n Sandbox Escape Could Lead to Server Compromise

The vulnerability could allow attackers to execute arbitrary commands and steal credentials and other secrets. The post Critical N8n Sandbox Escape Could Lead to Server Compromise appeared first on SecurityWeek.

CISA Adds One Known Exploited Vulnerability to Catalog

The Buyer’s Guide to AI Usage Control

Critical N8n Sandbox Escape Could Lead to Server Compromise

突发新闻

Betterment数据泄露事件：140万账户在1月网络攻击中受损

Cyberspy Group Hacked Governments and Critical Infrastructure in 37 Countries

工具与漏洞利用

AI-supported vulnerability triage with the GitHub Security Lab Taskflow Agent

How to catch GitHub Actions workflow injections before attackers do

Kicking off Cybersecurity Awareness Month 2025: Researcher spotlights and enhanced incentives

Top security researcher shares their bug bounty process

研究

Backdoor in Notepad++

US Declassifies Information on JUMPSEAT Spy Satellites

微软依法向FBI提供BitLocker恢复密钥 引发隐私担忧

Please Don't Feed the Scattered Lapsus Shiny Hunters

CERT通告

三菱电机修补工业系统关键输入验证漏洞

Ausencia de autenticación en switches de Ethernet de Moxa

Ausencia de autenticación en Light Engine Pro de Avation

Ausencia de autenticación en MOMA Seismic Station de RISS SRL

漏洞利用

[local] Docker Desktop 4.44.3 - Unauthenticated API Exposure

[webapps] FortiWeb Fabric Connector 7.6.x - SQL Injection to Remote Code Execution

[webapps] aiohttp 3.9.1 - directory traversal PoC

[remote] Ingress-NGINX Admission Controller v1.11.1 - FD Injection to RCE

微软依法向FBI提供BitLocker恢复密钥引发隐私担忧