← 返回博客

DarkSword iOS漏洞利用工具针对iPhone，Cisco FMC零日漏洞遭勒索软件攻击，Aura数据泄露影响90万用户，Ubuntu根权限提升

一个国家支持的iOS漏洞利用工具链接六个漏洞实现完全设备接管。Interlock勒索软件团伙自一月以来利用Cisco Secure防火墙管理中心的关键零日漏洞。Aura确认90万条记录被泄露。Ubuntu权限提升漏洞允许通过systemd时序获取根访问权限。此外：ConnectWise ScreenConnect劫持、9个关键IP KVM漏洞、XBOW为自主攻击安全融资1.2亿美元。

---

1. DarkSword — iOS Exploit Kit

一个国家支持的iOS漏洞利用工具链接六个漏洞实现完全设备接管。Interlock勒索软件团伙自一月以来利用Cisco Secure防火墙管理中心的关键零日漏洞。Aura确认90万条记录被泄露。Ubuntu权限提升漏洞允许通过systemd时序获取根访问权限。此外：ConnectWise ScreenConnect劫持、9个关键IP KVM漏洞、XBOW为自主攻击安全融资1.

2亿美元。.

---

2. Cisco FMC Zero-Day — Interlock Ransomware

Interlock ransomware — Cisco Secure Firewall Management Center (FMC) RCE zero-day. CVSS: Critical. Active since January 2026.

---

3. Aura — 900,000 Records Breached

---

4. Ubuntu CVE-2026-3888 — Root Escalation

---

5. ConnectWise ScreenConnect — Session Hijacking

ConnectWise ScreenConnect cryptographic signature verification vulnerability enables unauthorized access and privilege escalation.

---

6. IP KVM — 9 Critical Vulnerabilities

GL-iNet, Angeet/Yeeso, Sipeed, JetKVM — unauthenticated root access via missing firmware validation, broken access controls, exposed debug interfaces.

---

7. Industry Roundup

• XBOW: $120M raised at $1B+ valuation — autonomous offensive security
• Open Source Security: $12.5M from Anthropic, AWS, Google, Microsoft, OpenAI → Linux Foundation
• Zimbra XSS: CISA KEV — actively exploited, patch required
• Marquis: 672K records stolen, 74 US banks disrupted
• CISO AI Visibility: 67% lack visibility into AI usage (Pentera report)

---