已发布刊物 · 免费预览
Ariquo Security Daily Intelligence Briefing — 2026-11-03
发布： 摘要更新：
12 daily brief events from 17 source observations.
本期内容预览
1. Ivanti Connect Secure zero-days exploited in the wild
On October 29, 2026, Ivanti updated its security advisory for Ivanti Connect Secure (ICS) to include two additional vulnerabilities and released fixes for both.
Users and operators must apply the released fixes immediately to prevent unauthorized access and data breaches.
2. WordPress plugin Ultra Addons for Contact Form 7 allows arbitrary file deletion
Insufficient file path validation in the _getObjAttr function permits arbitrary file deletion.
Users risk data loss if attackers exploit the vulnerability to delete critical files.
3. INFINITT Healthcare IModular.exe URI handler vulnerable to remote code execution
A remote code execution flaw was identified in the IModular.exe URI handler of INFINITT Healthcare Co., Ltd.
4. Exploitation concentrates on a small subset of high-impact CVEs
A data-driven study shows that real-world exploitation focuses on a small, high-impact subset of CVEs.
5. SD JWT JS silently drops tampered disclosures instead of rejecting
The @sd-jwt/decode library 0.19.0 drops unmatched disclosures and returns a reduced claim set when a digest mismatch occurs.
6. Codex accelerates Linux security fix backporting from days to hours
Codex automates critical security patch backporting for Ubuntu, Fedora, and the Linux kernel.
Users and operators receive critical security patches faster, reducing exposure windows and improving system resilience.
7. AI-driven C2 agents target schools in Africa and Latin America
Kaspersky identified a malicious campaign using artificial intelligence to control command-and-control agents against schools and universities across Africa and Latin America.
8. Chinese hackers deploy ARTEX AI to automate attacks on 200+ organizations
Chinese hackers used the ARTEX open-source multi-agent AI framework to launch automated attacks against over 200 organizations across 14 countries starting October 17.
Organizations face increased automated threat volume requiring immediate AI-driven defense updates.
已展示本期 12 条中的 8 条。注册并开通相应订阅后，可在阅读页查看完整刊物。