Breaches & incidents
从“能接入”到“可管控”， 瑞数信息如何管理Agent生命周期安全？
Summary from source Source: 安全客 · Fetched
Read the storyToday ·
Newsroom
Security and privacy news from international and Chinese sources, refreshed every day.
Breaches & incidents
Cyberattack on Italy's Chamber of Deputies Highlights Hybrid Warfare Risks
A cyberattack targeted email accounts at Italy's Chamber of Deputies, including a parliamentary account assigned to Prime Minister Giorgia Meloni, Security Affairs reports. The outlet says the incident raises broader questions about hybrid warfare, transparency, and the defenses of European democratic institutions.
AI-written summary Source: Security Affairs · Fetched
Breaches & incidents
Magento Skimmer Campaign Infects 953 Online Stores Across Five Domains
A criminal group has infected 953 online stores, most of them running Magento, in a web skimming campaign active since July 2025, according to Sansec researchers cited by Security Affairs. The attackers hide malicious code in CMS blocks and use five domains and bot filtering to evade detection.
AI-written summary Source: Security Affairs · Fetched
Breaches & incidents
Security Affairs Publishes Malware Newsletter Round 120
Security Affairs has released the 120th edition of its malware newsletter, a roundup featuring research on the GhostAction attack targeting GitHub users, Plex vulnerabilities exploited to drop a cryptominer, and a vulnerability in the WordPress Rank Math SEO PRO plugin.
AI-written summary Source: Security Affairs · Fetched
Breaches & incidents
Security Affairs newsletter Round 601 by Pierluigi Paganini – INTERNATIONAL EDITION
A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including international press.
Summary from source Source: Security Affairs · Fetched
Breaches & incidents
U.S. CISA adds Collabora Online flaw to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Collabora Online flaw to its Known Exploited Vulnerabilities catalog. The U.S.
Summary from source Source: Security Affairs · Fetched
Breaches & incidents
Capcom Data Breach Exposes 11.7 Million Email Addresses
Capcom disclosed a data breach exposing 11.7 million email addresses and account details after hackers accessed its CAPCOM ID service.
Summary from source Source: Security Affairs · Fetched
Breaches & incidents
U.S. CISA adds Arista VeloCloud Orchestrator flaw to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Arista VeloCloud Orchestrator flaw to its Known Exploited Vulnerabilities catalog. The U.S.
Summary from source Source: Security Affairs · Fetched
Breaches & incidents
PHP Warns of New Code Execution Flaw Days After PHP2Shell Patches
PHP has warned of a new code execution vulnerability, tracked as CVE-2026-115560, only days after shipping emergency patches for the critical PHP2Shell flaws, Security Affairs reports. Users are advised to disable session upload progress until an official fix is available.
AI-written summary Source: Security Affairs · Fetched
Breaches & incidents
Critical Signal Flaw Could Keep Calls Alive After Users Hang Up
A critical vulnerability (CVE-2026-113380, CVSS 9.3) in Signal's calling library could let a malicious caller keep a call active after the victim hangs up, potentially exposing the microphone and camera, Security Affairs reports. Users are urged to update to a fixed version immediately.
AI-written summary Source: Security Affairs · Fetched
Breaches & incidents
PHP2Shell Attacks Started Four Days Before Public Disclosure, AWS Reports
AWS detected PHP2Shell exploit attempts four days before disclosure, highlighting the risk of attackers exploiting critical flaws before patches arrive. Attackers attempted to exploit two critical PHP vulnerabilities four days before the flaws became public, according to Amazon Threat Intelligence.
Summary from source Source: Security Affairs · Fetched
Breaches & incidents
Russian Satellite Makes Close Approach to Commercial Radar Satellite Used by Ukraine
A Russian satellite, Kosmos 2612, made a close approach last week to ICEYE-X36, a commercial radar imaging satellite whose data may support Ukraine, Security Affairs reported, citing CNN. The incident has raised concerns about surveillance and security in space.
AI-written summary Source: Security Affairs · Fetched
Breaches & incidents
Nikkei data breach affected over 1.8 million records
Nikkei disclosed a data breach affecting over 1.8 million records after hackers used stolen credentials to access a cloud service for system development. Japanese media company Nikkei has disclosed a data breach affecting more than 1.8 million records.
Summary from source Source: Security Affairs · Fetched
Breaches & incidents
Plex2Shell Exploit Used to Turn Vulnerable Plex Servers Into Crypto Miners
Attackers are exploiting Plex2Shell vulnerabilities in Plex Media Server to install cryptocurrency miners and proxy software on exposed systems, Security Affairs reports. Administrators are urged to update their servers.
AI-written summary Source: Security Affairs · Fetched
Breaches & incidents
Rust-Based CikaBika Bot Turns Discord into a Command Center
Darktrace researchers have documented a new campaign distributing a Rust-written remote access trojan called CikaBika Bot that is controlled entirely through Discord. The malware uses fake documents to infect Windows systems and abuses Discord and Ngrok to run commands, spy on victims and steal files.
AI-written summary Source: Security Affairs · Fetched
Breaches & incidents
U.S. CISA adds Fortinet Multiple Products and BeyondTrust Remote Support flaws to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Fortinet Multiple Products and BeyondTrust Remote Support flaws to its Known Exploited Vulnerabilities catalog. The U.S.
Summary from source Source: Security Affairs · Fetched
Breaches & incidents
Burger King Japan Data Breach Impacted 11 Million Customers
Burger King Japan disclosed a breach exposing 11.18 million app users’ personal data after attackers accessed its membership system in early October. Burger King Japan has disclosed a data breach that exposed the personal information of approximately 11.18 million official app members.
Summary from source Source: Security Affairs · Fetched
Breaches & incidents
F5 addressed critical RCE flaws in NGINX
F5 addressed multiple vulnerabilities, including critical RCE flaws in NGINX that attackers could exploit without authentication. Security and application delivery firm F5 announced fixes for eleven security issues in NGINX.
Summary from source Source: Security Affairs · Fetched
Sources we could not reach today: 绿盟科技博客 (failed); BleepingComputer (blocked by the site); Schneier on Security (blocked by the site); The Record (expected-blocked); FreeBuf (not a feed)
How to read this
Authorized-only · evidence-based · point-in-time. Aegis cannot guarantee the absence of weaknesses or hidden devices. On this machine, live external HTTP/TLS may be network-blocked and shown as an honest coverage gap. Severity and confidence are kept separate. Finished assessments persist in the encrypted store while durable storage is bound. A theme choice may persist in this browser. Export remains available for a copy you can take with you.