左左网络博客-ZZA.CC鲁南网络技术分享 https://validator.w3.org/feed/docs/rss2.html Blog Home SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 106 Security Affairs newsletter Round 586 by Pierluigi Paganini – INTERNATIONAL EDITION Attackers Can Take Over WordPress Sites Using Newly Released wp2shell Exploits The Kenna Transition: Your Strategic Shift to Exposure Management From MCP to Vibe Coding: Full Endpoint Visibility in Wiz AI Security Bringing Oracle Cloud Identity to Wiz Gogs 0-Day Exploited in the Wild Zero‑Days in the Age of AI: Behind the Scenes of ZeroDay.cloud 2025, with a Record High of CVEs in Critical Cloud Infra 特斯拉因大灯过亮在美国召回近 2 万辆 Model 3/Y，这次无法 OTA 修复 喜剧动画电影《八仙！》海外定档，豆瓣开分 8.3 暂列 2026 暑期档新片第一 无障碍升级，消息称谷歌 Gboard 键盘即将支持“手语转文字”功能 意大利正经历今年第三次热浪天气，老外说被中国“降温神器”拯救了 阿里开放式世界模型快乐生蚝 HappyOyster 1.0 登陆百炼平台，支持两大核心模式 OPPO 陈希透露 ColorOS 17 没有透明化卡片设计，称可读性有挺大影响 OPPO 陈希透露 ColorOS 17 没有透明化卡片设计，称可读性有挺大影响 OPPO 陈希透露 ColorOS 17 没有透明化卡片设计，称可读性有挺大影响 OPPO 陈希透露 ColorOS 17 没有透明化卡片设计，称可读性有挺大影响 OPPO 陈希透露 ColorOS 17 没有透明化卡片设计，称可读性有挺大影响 OPPO 陈希透露 ColorOS 17 没有透明化卡片设计，称可读性有挺大影响 OpenSSL Fixes HollowByte Memory Exhaustion Bug Daxin: 13-Year-Old China-Linked Malware Found Still Active on Manufacturer’s Network U.S. CISA adds Fortinet FortiSandbox and Microsoft SharePoint flaws to its Known Exploited Vulnerabilities catalog Wiz Recognized as a 2025 Customers’ Choice in the Gartner® Peer Insights™ Voice of the Customer for CNAPP Expanding the Zero Critical Club to set a new standard for AppSec and SecOps teams Snipping the Long Tail of Shai-Hulud 2.0 MongoBleed (CVE-2025-14847) exploited in the wild: everything you need to know Protecting Against Zero-Day Vulnerabilities with SOC-Level ASM Alert 育碧《刺客信条：黑旗 记忆重置》销量突破 300 万份，新游戏 + 模式开发中 因主角受伤，消息称剧版《战神》将为奎托斯重新选角 东方算芯首次展出全球首颗软件定义近存计算 3D AI 芯片 DF1000，算力可达 520 TFLOPS Teams 新功能可显示“在办公室”引争议，微软回应称绝不监视员工 黄仁勋穿过的皮夹克拍出 96 万美元天价，善款用于支持科技“快闪社区” Code to Cloud Attacks: From Github PAT to Cloud Control Plane Top AWS re:Invent Announcements for Security Teams in 2025 React2Shell: Technical Deep-Dive & In-the-Wild Exploitation of CVE-2025-55182 React2Shell (CVE-2025-55182): Everything You Need to Know About the Critical React Vulnerability Wiz Product Announcements at re:Invent 2025: Expanding Visibility from Code to Cloud 我国人形机器人整机产品超全球半数 国产大飞机 C919 累计交付 41 架，安全飞行时长突破 13 万小时 荣耀 Robot Phone 手机现身世界杯夺冠现场，YOYO 此前成功预测西班牙将捧大力神杯 LG 上架两款 “Lunar Lake” + 16″ IPS 轻薄本，到手价低至 7394.15 元 34.9 元：酷态科 CP 编织 6A 彩虹线开售，长度约 2m Ernst & Young (EY) Investigates Data Breach Involving Third-Party Support Tickets A cyberattack hit Nichirei, one of Japan’s largest food companies 绿盟科技亮相十七届国际可靠性维修性安全性会议，深度解读智能体全栈安全防护体系 绿盟科技亮相2026世界人工智能大会 | 筑牢AI安全底座，护航智能向善发展 New Russian Campaign Uses Fake Webex and Zoom Installers to Deploy Starland RAT U.S. CISA adds KNX Association KNX Protocol Connection Authorization Option 1 and Oracle flaws to its Known Exploited Vulnerabilities catalog