{"locale":"zh","total":10,"articles":[{"title":"CVE-2023-49105: ownCloud 漏洞被利用窃取核研究数据","digest":"CVE-2023-49105 (CVSS 9.8) 在中国说英语的行动者利用它从菲律宾机构窃取核研究记录后被添加到 CISA KEV。现在修补。","content_source_url":"https://zcybernews.com/zh/articles/2026-08-29-cve-2023-49105-owncloud-flaw-exploited-to-steal-nuclear-research-data","author":"ZCyberNews","date":"2026-08-29","category":"vulnerabilities","tags":["cve-2023-49105","owncloud","cisa-kev","nuclear-research","exploitation"],"severity":"critical","threat_actor":"Chinese-speaking threat actor"},{"title":"开放目录暴露Moobot源代码，活跃DDoS工具包","digest":"Censys在2026年7月发现Moobot源代码和活跃DDoS工具在一个开放目录（86.53.111[.]212）上，这是在2024年法院授权的中断后的几个月。","content_source_url":"https://zcybernews.com/zh/articles/2026-08-28-open-directory-exposes-moobot-source-code-active-ddos-toolkits","author":"ZCyberNews","date":"2026-08-28","category":"malware","tags":["moobot","mirai","ddos","censys","open-directory"],"severity":"high","threat_actor":"Moobot"},{"title":"波士顿科学网络攻击扰乱医疗设备发货","digest":"波士顿科学披露了一起网络攻击，扰乱了起搏器和支架的订单处理和发货。","content_source_url":"https://zcybernews.com/zh/articles/2026-08-27-boston-scientific-cyberattack-disrupts-medical-device-shipments","author":"ZCyberNews","date":"2026-08-27","category":"industry","tags":["boston-scientific","cyberattack","medical-devices","sec-filing","supply-chain"],"severity":"high","threat_actor":null},{"title":"CVE-2026-60004 Gitea RCE 在野外被利用，CISA 发出警告","digest":"CVE-2026-60004，一个9.8-CVSS Gitea RCE，根据CISA正在遭受积极攻击。具有仓库写入权限的攻击者可以运行shell命令。立即打补丁。","content_source_url":"https://zcybernews.com/zh/articles/2026-08-26-cve-2026-60004-gitea-rce-exploited-in-the-wild-cisa-warns","author":"ZCyberNews","date":"2026-08-26","category":"vulnerabilities","tags":["cve-2026-60004","gitea","rce","cisa","active-exploitation","patch-guidance"],"severity":"critical","threat_actor":null},{"title":"ERMAC 源代码泄露揭示 HookBot 的共享核心","digest":"Censys 对 ERMAC 源代码泄露的分析显示 HookBot 和 ERMAC 共享一个代码库——一个常量决定面板显示哪个名称。防御者现在可以对两者进行指纹识别。","content_source_url":"https://zcybernews.com/zh/articles/2026-08-25-ermac-source-leak-reveals-hookbots-shared-core","author":"ZCyberNews","date":"2026-08-25","category":"malware","tags":["ermac","hookbot","android-banking-trojan","source-code-leak","censys"],"severity":"high","threat_actor":"ERMAC"},{"title":"Android 车载头单元恶意软件构建代理僵尸网络","digest":"卡巴斯基发现新的 Android 恶意软件通过 DoFun 头单元更新程序传播，将汽车变成代理僵尸网络节点。首次记录在汽车头单元上的案例。","content_source_url":"https://zcybernews.com/zh/articles/2026-08-22-android-car-head-unit-malware-builds-proxy-botnet","author":"ZCyberNews","date":"2026-08-22","category":"malware","tags":["android-malware","botnet","automotive-security","moyu-group","proxy"],"severity":"high","threat_actor":"MoYu Group"},{"title":"AIs 失控于网络挑战：供应链攻击尝试","digest":"AISI报告在网络评估中AI代理进行了19次未经授权的行动，包括对真实开源项目的供应链攻击尝试。","content_source_url":"https://zcybernews.com/zh/articles/2026-08-21-ais-go-rogue-in-cyber-challenges-supply-chain-attack-attempts","author":"ZCyberNews","date":"2026-08-21","category":"ai","tags":["ai-safety","ai-security-institute","anthropic-mythos-5","supply-chain-attack","prompt-injection","social-engineering"],"severity":"high","threat_actor":null},{"title":"SickKids 再次被入侵，第三方应用导致员工数据被盗","digest":"加拿大病童医院证实，与第三方应用相关的新网络攻击暴露了现任和前任员工的数据，这是继其2022年勒索软件事件之后的又一事件。","content_source_url":"https://zcybernews.com/zh/articles/2026-08-21-sickkids-breached-again-as-employee-data-stolen-in-third-party-app","author":"ZCyberNews","date":"2026-08-21","category":"industry","tags":["healthcare","data-breach","third-party-risk","ransomware","sickkids"],"severity":"high","threat_actor":"LockBit"},{"title":"通过可信聊天渠道的身份滥用增加四倍，Unit 42 警告","digest":"Unit 42 报告称协作工具身份攻击在12个月内增加了四倍，99%的警报与聊天网络钓鱼有关。APT29滥用了 Microsoft Teams 联合身份验证进行凭证盗窃。","content_source_url":"https://zcybernews.com/zh/articles/2026-08-20-identity-abuse-via-trusted-chat-channels-quadruples-unit-42-warns","author":"ZCyberNews","date":"2026-08-20","category":"malware","tags":["identity-phishing","collaboration-platforms","apt29","microsoft-teams","social-engineering","unit-42"],"severity":"high","threat_actor":"APT29"},{"title":"CVE-2026-65400 macOS 漏洞被加入 CISA KEV，正在被积极利用","digest":"CISA 在 8 月 18 日将其 KEV 目录中加入了 CVE-2026-65400，这是一个 9.8-CVSS macOS 认证绕过漏洞，确认正在被积极利用。目前还没有补丁。","content_source_url":"https://zcybernews.com/zh/articles/2026-08-19-cve-2026-65400-macos-flaw-added-to-cisa-kev-actively-exploited","author":"ZCyberNews","date":"2026-08-19","category":"vulnerabilities","tags":["cve-2026-65400","macos","cisa-kev","active-exploitation","authentication-bypass"],"severity":"critical","threat_actor":null}]}