← 全部报道

漏洞

Israeli Ad Firm Doubled as Candiru’s Zero-Click Spyware Delivery Channel

作者 SecurityWeek1 分钟阅读

Israeli company Discover-Tech’s ads allow threat actors to fingerprint and track devices at scale and infect selected targets. The post Israeli Ad Firm Doubled as Candiru’s Zero-Click Spyware Delivery Channel appeared first on SecurityWeek .

漏洞报道封面

This story is only available in English.

Israeli company Discover-Tech’s ads allow threat actors to fingerprint and track devices at scale and infect selected targets. The post Israeli Ad Firm Doubled as Candiru’s Zero-Click Spyware Delivery Channel appeared first on SecurityWeek .

Source: SecurityWeek

漏洞报道封面

漏洞

Brotli 压缩库漏洞(CVE-2026-111497)影响范围远超 Node.js

据 Help Net Security 报道,谷歌被广泛使用的开源压缩库 Brotli 中存在一个可远程利用的越界写入漏洞(CVE-2026-111497),Node.js 于 2026 年 10 月 21 日将其公开披露。该漏洞影响范围远超 Node.js 生态,攻击者可借助特制的 Brotli 数据破坏进程内存,导致程序崩溃或内存信息泄露。

1 分钟阅读

AI 撰写摘要 来源: Help Net Security · 抓取时间

如何阅读本页

仅限授权 · 基于证据 · 反映检测时点的状态。Aegis 无法保证不存在弱点或隐藏设备。在本机上，对外的 HTTP/TLS 实时检测可能被网络拦截，此时会如实标为覆盖缺口。严重程度与置信度分开呈现。已启用持久存储时，完成的评估会保存在加密存储中。主题选择可能保存在此浏览器中。你也可以导出一份副本带走。