Aggregator

MICCIS 2026 组委会热忱地邀请您参与第四届移动互联网、云计算与信息安全国际会议（MICCIS 2026）。

The education sector is notoriously short on cash, but rich in assets for threat actors to target. How can managed detection and response (MDR) help learning institutions regain the initiative?

HumanBug15 年实战经验，手把手教落地

谷歌曝光iOS攻击链，窃取加密货币威胁升级

看雪论坛作者ID：易之生生

《Highguard》开发商 Wildlight Entertainment 宣布游戏将于 3 月 12 日永久关闭。《Highguard》是一款以突袭为主题的英雄射击游戏，于 1 月 26 日上线，一度吸引了 9.7 万玩家同时在线，但这一热度并没有持续太长时间，根据 Steamdb 的统计，过去二十四小时游戏同时在线人数最高仅为 460 人，对一款需要长期运营的免费 PvP 游戏而言，结局已经注定了。在关闭前《Highguard》共运营 45 天，是索尼《Concord》的 3.75 倍长，《Concord》运营 12 天就永久关闭了。Wildlight 的主要投资者是腾讯，它已经在两周前撤回了投资。

February 2026 brought a surge of sophisticated cyber threats targeting businesses across industries. ANY.RUN’s analysts exposed and explored several major cyber threats this month, providing early visibility into emerging malware families and evolving attack techniques.  From new ransomware strains capable of encrypting entire environments in minutes, to fully undetected remote access trojans — the threat […]

The post Major Cyber Attacks in February 2026: BQTLock, Thread-Hijack Phishing, and MFA Bypass Evolution appeared first on ANY.RUN's Cybersecurity Blog.

A vulnerability labeled as critical has been found in International Datacasting Corporation SFX2100 SuperFlex SatelliteReceiver. Impacted is an unknown function of the component Telnet Service. Executing a manipulation can lead to hard-coded credentials. The identification of this vulnerability is CVE-2026-29119. The attack may be launched remotely. There is no exploit available.

A vulnerability identified as critical has been detected in International Datacasting Corporation SFX2100 Satellite Receiver. This issue affects some unknown processing. Performing a manipulation results in hard-coded credentials. This vulnerability was named CVE-2026-28777. The attack may be initiated remotely. There is no available exploit.

A vulnerability categorized as critical has been discovered in International Datacasting Corporation IDC SFX2100 SuperFlex Satellite Receiver. This vulnerability affects unknown code. Such manipulation leads to hard-coded credentials. This vulnerability is uniquely identified as CVE-2026-28776. The attack can be launched remotely. No exploit exists.

A vulnerability was found in International Datacasting Corporation IDC SFX2100 SuperFlex Satellite Receiver SFX2100. It has been rated as critical. This affects an unknown part of the component Home Directory Handler. This manipulation causes hard-coded credentials. This vulnerability is handled as CVE-2026-28778. The attack can be initiated remotely. There is not any exploit available.

A vulnerability was found in International Datacasting Corporation SFX2100 SuperFlex SatelliteReceiver. It has been declared as very critical. Affected by this issue is some unknown functionality of the component SNMP Service. The manipulation results in insecure default initialization of resource. This vulnerability is known as CVE-2026-28775. It is possible to launch the attack remotely. No exploit is available.

A vulnerability was found in International Datacasting Corporation SFX SuperFlex Satellite Receiver Web management interface up to 100. It has been classified as critical. Affected by this vulnerability is an unknown functionality of the file /IDC_Logging/checkifdone.cgi of the component Backup Endpoint. The manipulation of the argument File leads to path traversal. This vulnerability is traded as CVE-2026-28769. It is possible to initiate the attack remotely. There is no exploit available. Upgrading the affected component is recommended.

昨晚一个朋友把他的 OpenClaw 拉进了 Telegram 群。群里都是互联网老鸟

A vulnerability was found in International Datacasting Corporation SFX SuperFlex SatelliteReceiver Web Management Interface 101 and classified as critical. Affected is an unknown function. Executing a manipulation of the argument flags can lead to os command injection. This vulnerability appears as CVE-2026-28774. The attack may be performed from remote. There is no available exploit.

A vulnerability has been found in International Datacasting Corporation SFX SuperFlex SatelliteReceiver Web Management Interface 101 and classified as critical. This impacts an unknown function of the file /IDC_Ping/main.cgi. Performing a manipulation of the argument IPaddr results in os command injection. This vulnerability is reported as CVE-2026-28773. The attack is possible to be carried out remotely. No exploit exists.

CVE-2026-23873 & CVE-2026-24479 审计过程

Cybersecurity researchers have flagged malicious Packagist PHP packages masquerading as Laravel utilities that act as a conduit for a cross-platform remote access trojan (RAT) that's functional on Windows, macOS, and Linux systems. The names of the packages are listed below - nhattuanbl/lara-helper (37 Downloads) nhattuanbl/simple-queue (29 Downloads) nhattuanbl/lara-swagger (49 Downloads)

漏洞简介VM2 是一个开源的虚拟机/沙盒Node.js。在 vm2 版本 3.10.2 之前，'Promise.prototype.then' 和 'Promise.prototype.catch' 的回调净化可以被绕过。这使得攻击者能够逃离沙盒，运行任意代码。在 lib/setup-sandbox.js 中，'localPromise.prototype.then' 的回调函数被净化，但 'gl

mcp服务器开发-漏洞风险分析