雲端資安業者Upwind今年1月完成2.5億美元融資後，相隔不到8個月再傳取得約3億美元新資金，估值由約15億美元升至約38億美元。相關消息由CTech、SiliconANGLE等媒體報導，但Upwind目前尚未正式公布此次融資與估值變動。成立於2022年的Upwind主要提供雲端原生應用程式保護平臺（CNAPP），技術重點放在雲端工作負載實際執行期間的安全監控。其平臺會建立雲端工作負載與相關資產 ...

Attackers are exploiting 2 new PaperCut flaws to steal credentials and gain privileged access in education-sector attacks across the US and EU ...

The Arctic Wolf Adversary Research Team said it observed attackers exploiting CVE-2026-81578 and CVE-2026-82078 – an authentication bypass and remote code execution chain – to conduct command ...

Explore the latest news, real-world incidents, expert analysis, and trends in Vulnerability — only on The Hacker News, the leading cybersecurity and IT news platform.

SMB enumeration, CVE mapping, Metasploit integration, evasion, and pivot scanning — one chain. Most Nmap articles teach you to scan. This one teaches you what to do with the results. There's a gap ...

最近在整理一些老漏洞的复现笔记，翻到了Oracle数据库历史上一个挺有意思的漏洞——CVE-2012-1675，业内也常称之为“TNS Listener远程数据投毒漏洞”。这个漏洞虽然年份久远，但它的原理和影响 ...

The remote code execution flaw enables root access and voice attacks on HP Poly VoIP phones, including eavesdropping and the ability to collect audio to generate deepfakes. HP has released patches for ...

'watchTowr', # Original technical analysis and PoC for CVE-2026-3055 'sfewer-r7' # Metasploit module for CVE-2026-3055, based on the watchTowr PoC and Spencer ...

Rapid7 has released a significant update to the Metasploit Framework, delivering powerful new exploit modules and critical vulnerability support. The February 2026 release equips security teams with ...

A critical security vulnerability (CVE-2026-2329) in Grandstream VoIP phones could let hackers remotely take full control of the devices and even intercept calls, Rapid7 researchers discovered. “The ...