安全资讯归档（2026-04-01）

• 2Libra 社区 - 今日热议
  • 测出来一个 bug，附言单独添加图片会直接报错图片为空
• 404 Media
  • ‘BLOCKADE’: The Right Is Using AI Content Scanners to Try to Supercharge Book Banning
• Black Hills Information Security, Inc.
  • Cloud Security: Tips and Resources for Securing the Cloud
• Deeplinks
  • Digital Hopes, Real Power: From Revolution to Regulation
• Hacker News: Front Page
  • Is BGP Safe Yet? No. Test Your ISP
  • New Patches Allow Building Linux IPv6-Only, Option to Deprecate "Legacy" IPv4
• http://www.infosecurity-magazine.com/rss/news/
  • Eight in 10 UK Manufacturers Hit by Cyber Incident in a Year
  • Hackers Hijack Axios npm Package to Spread RATs
• ICT Security Magazine
  • I dilemmi della sovranità digitale
  • Trump trasforma il cyberspazio in un dominio di guerra: cosa cambia per l’Europa e per l’Italia nel 2026
• Kali Linux Tutorials
  • How to Prevent Software Supply Chain Attacks
• SANS Internet Storm Center, InfoCON: green
  • Malicious Script That Gets Rid of ADS, (Wed, Apr 1st)
• Schneier on Security
  • A Taxonomy of Cognitive Security
• Sec-News 安全文摘
  • 原域名已变更且将在2024年彻底废弃，请访问 https://govuln.com/news/ 查看新的RSS订阅
• SentinelOne
  • The Implementation Blind Spot | Why Organizations Are Confusing Temporary Friction with Permanent Safety
• Sploitus.com Exploits RSS Feed
  • Exploit for CVE-2026-5201 exploit
  • exploitdb exploit
• TechCrunch
  • Hasbro says it was hacked, and may take ‘several weeks’ to recover
• The Decoder
  • Perplexity AI sued over alleged data sharing with Meta and Google
• unSafe.sh - 不安全
  • AI Due Diligence Checklist 2026: How to Avoid AI Implementation Failures, Security Risks, and Cost Overruns
  • Cybersecurity Firm TAC Security Hits 10,000 Clients, Enters Top 5 in Global VM & AppSec
  • How to bypass Messenger selfie verification? I'm unable to message or reply to anyone
  • Iran Calls U.S. Tech Companies ‘Legitimate Targets,’ Threatens to Attack
  • Norma Rae, Union Activity and Computer Hacking – Skywest Sues Pilots for Using its Directory of Employees to Unionize
  • 思科遭到供应链攻击泄露内部及客户产品源代码 目前正在大规模轮换凭证
• VulDB Recent Entries
  • CVE-2026-0522 | VertiGIS FM up to 10.11.362 external reference
  • CVE-2026-1879 | Harvard University IQSS Dataverse up to 6.8 Theme Customization /ThemeAndWidgets.xhtml uploadLogo unrestricted upload
  • CVE-2026-22767 | Dell AppSync 4.6.0 symlink (dsa-2026-163)
  • CVE-2026-22768 | Dell AppSync 4.6.0 permission assignment (dsa-2026-163)
  • CVE-2026-23401 | Linux Kernel up to 7.0-rc5 KVM is_shadow_present_pte memory corruption
  • CVE-2026-23402 | Linux Kernel up to 7.0-rc5 KVM spte_to_pfn privilege escalation
  • CVE-2026-23403 | Linux Kernel up to 6.6.129/6.12.76/6.18.17/6.19.7/7.0-rc3 apparmor verify_header memory leak
  • CVE-2026-23404 | Linux Kernel up to 6.6.129/6.12.76/6.18.17/6.19.7/7.0-rc3 apparmor __aa_profile_list_release recursion
  • CVE-2026-23405 | Linux Kernel up to 6.6.129/6.12.76/6.18.17/6.19.7/7.0-rc3 apparmor privilege escalation
  • CVE-2026-23406 | Linux Kernel up to 6.6.129/6.12.76/6.18.17/6.19.7/7.0-rc3 apparmor match_char out-of-bounds
  • CVE-2026-23407 | Linux Kernel up to 6.6.129/6.12.76/6.18.17/6.19.7/7.0-rc3 apparmor verify_dfa out-of-bounds
  • CVE-2026-23408 | Linux Kernel up to 6.6.129/6.12.76/6.18.17/6.19.7/7.0-rc3 apparmor aa_replace_profiles double free
  • CVE-2026-23409 | Linux Kernel up to 6.6.129/6.12.76/6.18.17/6.19.7/7.0-rc3 apparmor encoding error
  • CVE-2026-23410 | Linux Kernel up to 6.6.129/6.12.76/6.18.17/6.19.7/7.0-rc3 apparmor use after free
  • CVE-2026-23411 | Linux Kernel up to 6.6.129/6.12.76/6.18.17/6.19.7/7.0-rc3 apparmor i_private privilege escalation
  • CVE-2026-27101 | Dell Secure Connect Gateway up to 5.0/5.28.00.xx/5.32.00.xx path traversal (dsa-2026-020)
  • CVE-2026-28265 | Dell PowerStore path traversal (dsa-2026-157)
  • CVE-2026-29014 | MetInfo CMS 7.9/8.0/8.1 code injection
  • CVE-2026-34889 | Brainstorm Force Ultimate Addons for WPBakery Page Builder Plugin up to 3.21.3 on WordPress cross site scripting
  • CVE-2026-35091 | Corosync UDP Packet function return value
  • CVE-2026-35092 | Corosync UDP Packet integer overflow
  • CVE-2026-3877 | VertiGIS FM up to 10.13.402 cross site scripting
  • CVE-2026-5311 | D-Link DNS-1550-04 up to 20260205 /cgi-bin/file_center.cgi Webdav_Access_List cmd access control
  • CVE-2026-5312 | D-Link DNS-1550-04 up to 20260205 /cgi-bin/dsk_mgr.cgi access control
  • CVE-2026-5323 | priyankark a11y-mcp up to 1.0.5 src/index.js A11yServer server-side request forgery
  • CVE-2026-5325 | SourceCodester Simple Customer Relationship Management System 1.0 Create Ticket /create-ticket.php Description cross site scripting
  • CVE-2026-5326 | SourceCodester Leave Application System 1.0 User Information index.php?page=manage_user ID authorization
  • CVE-2026-5327 | efforthye fast-filesystem-mcp up to 3.5.1 src/index.ts handleGetDiskUsage command injection (Issue 15)
  • CVE-2026-5328 | shsuishang modulithshop up to 829bac71f507e84684c782b9b062b8bf3b5585d6 ProductItemDao Interface ProductIndexServiceImpl.java listItem sidx/sort sql injection
  • CVE-2026-5338 | Tenda G103 1.0.0.5 Setting system.lua action_set_system_settings lanIp command injection
  • CVE-2026-5339 | Tenda G103 1.0.0.5 Setting gpon.lua action_set_net_settings command injection
• 嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com
  • 梆梆安全荣膺中关村网信联盟 “2025年度联盟最佳合作伙伴单位” ，以生态协同筑牢网络安全防线
• 奇客Solidot–传递最新科技情报
  • 俄罗斯加大力度打击 VPN