安全资讯归档（2026-04-03）

• 36氪
  • 工信部：有攻击者利用针对苹果公司终端产品的漏洞利用工具实施网络攻击活动，可导致信息窃取等严重危害
  • 谷歌现已支持在Google Vids中通过指令操控虚拟形象
• CERT Recently Published Vulnerability Notes
  • VU#951662: MuPDF by Artifex contains integer overflow vulnerability.
• darkreading
  • Geopolitics, AI, and Cybersecurity: Insights From RSAC 2026
  • Source Code Leaks Highlight Lack of Supply Chain Oversight
• Data Breach
  • Hasbro hit by cyberattack, investigates possible data breach
  • Pro-Iran Handala group breached Israeli defence contractor PSK Wind Technologies
• defend.network – Daily Threat Briefings
  • Daily Threat Briefing – April 3, 2026
• Fidelis Security
  • Why Network Deception Is Effective for OT Security
• Full Disclosure
  • [CVE-2026-33691] OWASP CRS whitespace padding bypass vulnerability
  • [KIS-2026-06] MetInfo CMS <= 8.1 (weixinreply.class.php) PHP Code Injection Vulnerability
  • SEC Consult SA-20260326-0 :: Local Privilege Escalation in Vienna Assistant (MacOS) - Vienna Symphonic Library
• HackerNews
  • Cisco 修复 IMC 和 SSM 漏洞，可致远程系统入侵
  • Drift 协议遭黑客夺取安全委员会权限，损失 2.8 亿美元
  • 黑客利用 CVE-2025-55182 入侵 766 台 Next.js 主机窃取凭证
• ICT Security Magazine
  • Prompt injection negli agenti AI aziendali: il nuovo vettore che i SOC non stanno monitorando
• InfoSec Write-ups - Medium
  • Container Image Security (Signing and Scanning with tools like Cosign, Trivy)
  • Gaara — SSH Brute Force + SUID gdb Shell Escape | OffSec PG Play
  • Prompt Engineering for AI Security: The Skill Every Cybersecurity Fresher Must Learn in 2026
  • Reverse Engineering a WhatsApp 0-Click Vulnerability: A Deep Dive into CVE-2025–43300
• NVISO Labs
  • The Axios npm supply chain incident: fake dependency, real backdoor
• SANS Internet Storm Center, InfoCON: green
  • TeamPCP Supply Chain Campaign: Update 006 - CERT-EU Confirms European Commission Cloud Breach, Sportradar Details Emerge, and Mandiant Quantifies Campaign at 1,000+ SaaS Environments, (Fri, Apr 3rd)
• Security Affairs
  • CrystalX RAT: new MaaS malware combines spyware, stealer, and remote access
• SentinelOne
  • Securing the Supply Chain: How SentinelOne®’s AI EDR Stops the Axios Attack Autonomously
  • The Good, the Bad and the Ugly in Cybersecurity – Week 14
• Simon Willison's Weblog
  • The Axios supply chain attack used individually targeted social engineering
• Sploitus.com Exploits RSS Feed
  • Exploit for Code Injection in Apache Ranger exploit
  • Exploit for CVE-2011-3556 exploit
  • Exploit for CVE-2026-28767 exploit
  • Exploit for Server-Side Request Forgery in Apache Cxf exploit
  • mansstimap exploit
  • zixem_challenges exploit
• TechCrunch
  • Flipboard’s new ‘social websites’ help publishers and creators tap into the open social web
  • Google now lets you direct avatars through prompts in its Vids app
• The Verge
  • I saved a doomed Windows laptop by embracing Linux
  • Pinterest said he violated laid-off colleagues’ privacy. Now he’s going public
• unSafe.sh - 不安全
  • 10 Things Your First Security Hire Shouldn’t Do – High Signal Security
  • A threat actor who goes by the name "Mr. Raccoon" has claimed to hack Adobe support via 3rd party Indian BPO firm
  • Cloudflare推出开源内容管理系统EmDash 采用现代化安全架构设计
  • New RCE in Control Web Panel (CVE-2025-70951)
• VulDB Recent Entries
  • CVE-2022-4986 | Belden Hirschmann EagleSDV up to 05.4.0/05.4.1 TLS Connection resource consumption
  • CVE-2025-43238 | Apple macOS up to 13.7.6/14.7.6/15.5 App integer overflow
  • CVE-2025-43257 | Apple macOS up to 15.5 App symlink
  • CVE-2025-7024 | Airbus PSS TETRA Connectivity Server 7.0 on Windows File default permission
  • CVE-2026-23418 | Linux Kernel up to 6.18.16/6.19.6/7.0-rc2 reg_sr xa_store allocation of resources
  • CVE-2026-23419 | Linux Kernel up to 6.6.129/6.12.76/6.18.16/6.19.6/7.0-rc2 rds rds_tcp_tune allocation of resources
  • CVE-2026-23420 | Linux Kernel up to 7.0-rc2 wifi denial of service
  • CVE-2026-23422 | Linux Kernel up to 7.0-rc2 dpaa2-switch out-of-bounds
  • CVE-2026-23423 | Linux Kernel up to 6.18.16/6.19.6/7.0-rc2 btrfs btrfs_uring_read_extent allocation of resources
  • CVE-2026-23424 | Linux Kernel up to 6.18.16/6.19.6/7.0-rc1 amdxdna Count buffer overflow
  • CVE-2026-23425 | Linux Kernel up to 6.18.16/6.19.6/7.0-rc1 KVM pkvm_init_features_from_host initialization
  • CVE-2026-26961 | Rack up to 2.2.22/3.1.20/3.2.5 Content-Type Header Rack::Multipart interpretation conflict (GHSA-vgpv-f759-9wx3)
  • CVE-2026-27655 | Zoho ManageEngine Exchange Reporter Plus up to 5801 Permissions Based on Mailboxes Report cross site scripting
  • CVE-2026-28703 | Zoho ManageEngine Exchange Reporter Plus up to 5801 Mails Exchanged Between Users Report cross site scripting
  • CVE-2026-28754 | Zoho ManageEngine Exchange Reporter Plus up to 5801 Distribution Lists Report cross site scripting
  • CVE-2026-28756 | Zoho ManageEngine Exchange Reporter Plus up to 5801 Distribution Groups Report cross site scripting
  • CVE-2026-28815 | Apple macOS up to 4.3.0 out-of-bounds (GHSA-9m44-rr2w-ppp7)
  • CVE-2026-32186 | Microsoft Bing server-side request forgery
  • CVE-2026-34230 | Rack up to 2.2.22/3.1.20/3.2.5 Rack::Utils resource consumption (GHSA-v569-hp3g-36wr)
  • CVE-2026-34730 | copier-org copier up to 9.14.0 YAML File Parser _external_data path traversal (GHSA-hgjq-p8cr-gg4h)
  • CVE-2026-34742 | modelcontextprotocol go-sdk up to 1.3.x insecure default initialization of resource (GHSA-xw59-hvm2-8pj6)
  • CVE-2026-34752 | Haraka up to 3.1.3 uncaught exception (GHSA-xph3-r2jf-4vp3)
  • CVE-2026-34763 | Rack up to 2.2.22/3.1.20/3.2.5 Regular Expression Rack::Directory permissive regular expression (GHSA-7mqq-6cf9-v2qp)
  • CVE-2026-34785 | Rack up to 2.2.22/3.1.20/3.2.5 Request Path /css Rack::Static partial string comparison (GHSA-h2jq-g4cq-5ppq)
  • CVE-2026-34786 | Rack up to 2.2.22/3.1.20/3.2.5 Rack::Static incorrect behavior order: validate before canonicalize (GHSA-q4qf-9j86-f5mh)
  • CVE-2026-34826 | Rack up to 2.2.22/3.1.20/3.2.5 Rack::Utils resource consumption (GHSA-x8cg-fq8g-mxfx)
  • CVE-2026-34829 | Rack up to 2.2.22/3.1.20/3.2.5 Rack::Multipart CONTENT_LENGTH resource consumption (GHSA-8vqr-qjwx-82mw)
  • CVE-2026-34830 | Rack up to 2.2.22/3.1.20/3.2.5 Regular Expression Rack::Sendfile X-Accel-Mapping permissive regular expression (GHSA-qv7j-4883-hwh7)
  • CVE-2026-34831 | Rack up to 2.2.22/3.1.20/3.2.5 Response Header Rack::Files Content-Length length parameter (GHSA-q2ww-5357-x388)
  • CVE-2026-34833 | bulwarkmail webmail up to 1.4.9 /api/auth/session cleartext storage (GHSA-47pm-883h-885r)
  • CVE-2026-34877 | mbed TLS up to 2.19.0/3.6.5/4.0.0 memory corruption
  • CVE-2026-34932 | hoppscotch 2023.4.5/2023.12.6/2026.2.0/2026.2.1 cross site scripting (GHSA-wj4r-hr4h-g98v)
  • CVE-2026-35466 | CERTCC cveClient up to 1.0.23 CVE API Service cveInterface.js cross site scripting
  • CVE-2026-35467 | CERTCC cveClient up to 1.1.14 Stored API encrypt-storage.js insufficiently protected credentials
  • CVE-2026-35507 | milesmcc Shynet up to 0.13.x Password Reset Host less trusted source
  • CVE-2026-35508 | milesmcc Shynet up to 0.13.x Template Filter urldisplay/iconify cross site scripting
  • CVE-2026-35535 | sudo up to 1.9.17p2 setuid/setgid/setgroups privilege dropping
  • CVE-2026-35536 | tornadoweb Tornado up to 6.5.4 Attributes RequestHandler.set_cookie samesite invalid special elements (GHSA-78cv-mqj4-43f7)
  • CVE-2026-35537 | Roundcube Webmail up to 1.5.13/1.6.13 redis/memcache deserialization (618c5428edc69fb088e7ac6c89e506dd39df3)
  • CVE-2026-35538 | Roundcube Webmail up to 1.5.13/1.6.13 IMAP SEARCH Command Argument argument injection
  • CVE-2026-35539 | Roundcube Webmail up to 1.5.13/1.6.13 HTML Attachment HTML injection
  • CVE-2026-35540 | Roundcube Webmail up to 1.6.13 HTML Mail Message resource transfer
  • CVE-2026-35541 | Roundcube Webmail up to 1.5.13/1.6.13 Password Plugin type confusion
  • CVE-2026-35542 | Roundcube Webmail up to 1.5.13/1.6.13 BODY Element resource transfer
  • CVE-2026-35543 | Roundcube Webmail up to 1.5.13/1.6.13 SVG Content resource transfer
  • CVE-2026-35544 | Roundcube Webmail up to 1.5.13/1.6.13 HTML Mail Message resource transfer
  • CVE-2026-35545 | Roundcube Webmail up to 1.5.14/1.6.14 SVG Content resource transfer
  • CVE-2026-35549 | MariaDB up to 11.4.9/11.8.5/12.2.1 Authentication Plugin caching_sha2_password memory allocation
  • CVE-2026-3879 | Zoho ManageEngine Exchange Reporter Plus up to 5801 Equipment Mailbox Details Report cross site scripting
  • CVE-2026-3880 | Zoho ManageEngine Exchange Reporter Plus up to 5801 Public Folder Client Permissions Report cross site scripting
  • CVE-2026-4107 | Zoho ManageEngine Exchange Reporter Plus up to 5801 Folder Message Report cross site scripting
  • CVE-2026-4108 | Zoho ManageEngine Exchange Reporter Plus up to 5801 Non-Owner Mailbox Permission Report cross site scripting
  • CVE-2026-4350 | Perfmatters Plugin up to 2.5.9.1 on WordPress PMCS::action_handler delete path traversal
  • CVE-2026-5452 | UCC CampusConnect App up to 14.3.5 on Android campusconnect.ucc BuildConfig.java hard-coded key
  • CVE-2026-5453 | Rico só vantagem pra investir App up to 4.58.32.12421 on Android br.com.rico.mobile SegmentSettingsModule.java SEGMENT_WRITE_KEY hard-coded key
  • CVE-2026-5454 | GRID Organiser App up to 1.0.5 on Android co.gridapp.organiser file res/raw/app.json SegmentWriteKey hard-coded key
  • CVE-2026-5455 | Dialogue App up to 4.3.2 on Android ca.diagram.dialogue config.json SEGMENT_WRITE_KEY hard-coded key
  • CVE-2026-5456 | Align Technology My Invisalign App 3.12.4 on Android com.aligntech.myinvisalign.emea BuildConfig.java CDAACCESS_TOKEN hard-coded key
  • CVE-2026-5457 | PropertyGuru AgentNet Singapore App up to 23.7.10 on Android com.allproperty.android.agentnet BuildConfig.java SEGMENT_ANDROID_WRITE_KEY/SEGMENT_TOS_WRITE_KEY hard-coded key
  • CVE-2026-5458 | Noelse Individuals & Pro App up to 2.1.7 on Android com.afone.noelse BuildConfig.java SEGMENT_WRITE_KEY hard-coded key
  • CVE-2026-5463 | Dan McInerney pymetasploit3 up to 1.0.6 console.run_module_with_output command injection
  • CVE-2026-5467 | Casdoor 2.356.0 OAuth Authorization Request redirect_uri
  • CVE-2026-5468 | Casdoor 2.356.0 dangerouslySetInnerHTML formCss/formCssMobile/formSideHtml cross site scripting
  • CVE-2026-5469 | Casdoor 2.356.0 Webhook URL server-side request forgery
  • CVE-2026-5470 | mixelpixx Google-Research-MCP Model Context Protocol content-extractor.service.ts extractContent URL server-side request forgery
  • CVE-2026-5471 | Investory Toy Planet Trouble App up to 1.5.5 on Android app.investory.toyfactory google-services-desktop.json current_key hard-coded key
  • CVE-2026-5472 | ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59 Profile Picture settings.php File unrestricted upload
  • CVE-2026-5473 | NASA cFS up to 7.0.0 Pickle pickle.load deserialization (Issue 951)
  • CVE-2026-5474 | NASA cFS up to 7.0.0 CCSDS Packet Header to_lab_passthru_encode.c CFE_MSG_GetSize heap-based overflow (Issue 952)
  • CVE-2026-5475 | NASA cFS up to 7.0.0 CCSDS Header Size cfe_sb_priv.c CFE_SB_TransmitMsg memory corruption (Issue 953)
  • CVE-2026-5476 | NASA cFS up to 7.0.0 on 32-bit cfe_tbl_passthru_codec.c CFE_TBL_ValidateCodecLoadSize integer overflow (Issue 954)
  • CVE-2026-5484 | BookStackApp BookStack up to 26.03 Chapter Export ExportFormatter.php chapterToMarkdown pages access control
• WIRED
  • CBP Facility Codes Sure Seem to Have Leaked Via Online Flashcards
• 嘶吼 RoarTalk – 网络安全行业综合服务平台,4hou.com
  • 国家计算机病毒应急处理中心通报71款应用违规背后：隐私合规风险全面下沉，合规审计刻不容缓
  • 应对iOS安全威胁新挑战，梆梆安全 “源到源” 加固全面护航移动应用安全
  • 邮件安全网关选型怎么做？企业采购避坑指南与评估清单
• 绿盟科技技术博客
  • 国际认可 | 绿盟科技跻身亚太区OT安全代表厂商
  • 绿盟科技斩获CSA 2025多项大奖，实力引领AI安全新征程
• 黑海洋Wiki | AI机器人硬件开发 | 网络安全攻防实战 | 区块链技术文档教程 - 免费资源平台
  • 爱尔兰测试数字身份以验证社媒用户年龄