🌍 国际网络安全每日情报 – 2026年03月20日
本文档由系统自动生成，汇总国际最新网络安全漏洞情报、安全新闻和技术解读。
内容策略：聚焦国际网络安全动态，涵盖The Hacker News、BleepingComputer、CISA等权威来源。
🌍 国际网络安全动态
📰 Speagle恶意软件劫持Cobra DocGuard ，通过受感染的服务器窃取数据
来源：The Hacker News
全球领先网络安全新闻
Speagle恶意软件利用Cobra DocGuard服务器泄露敏感数据，表明受保护系统存在有针对性的间谍风险。
Original: Speagle malware exploits Cobra DocGuard servers to exfiltrate sensitive data, indicating targeted espionage risks for protected systems.
Original Title: Speagle Malware Hijacks Cobra DocGuard to Steal Data via Compromised Servers
📰 54名EDR杀手使用BYOVD利用34个已签名的漏洞驱动程序并禁用安全性
来源：The Hacker News
全球领先网络安全新闻
54个EDR杀手通过BYOVD利用34个易受攻击的驱动程序，获得内核访问权限以禁用防御，从而提高勒索软件的成功率。
Original: 54 EDR killers exploit 34 vulnerable drivers via BYOVD, gaining kernel access to disable defenses, increasing ransomware success rates.
Original Title: 54 EDR Killers Use BYOVD to Exploit 34 Signed Vulnerable Drivers and Disable Security
📰 ThreatsDay公告： FortiGate RaaS、Citrix漏洞利用、MCP滥用、在线聊天网络钓鱼等
来源：The Hacker News
全球领先网络安全新闻
ThreatsDay综述涵盖整个威胁领域的隐形攻击、网络钓鱼趋势、漏洞利用链和不断上升的安全风险。
Original: ThreatsDay roundup covering stealthy attacks, phishing trends, exploit chains, and rising security risks across the threat landscape.
Original Title: ThreatsDay Bulletin: FortiGate RaaS, Citrix Exploits, MCP Abuse, LiveChat Phish & More
📰 新的Perseus Android银行恶意软件监控Notes应用程序提取敏感数据
来源：The Hacker News
全球领先网络安全新闻
Perseus Android恶意软件通过网络钓鱼应用程序滥用可访问性，在多个国家/地区实现设备接管和金融欺诈。
Original: Perseus Android malware uses accessibility abuse via phishing apps to enable device takeover and financial fraud across multiple countries.
Original Title: New Perseus Android Banking Malware Monitors Notes Apps to Extract Sensitive Data
📰 Ceros如何在Claude Code中为安全团队提供可见性和控制权
来源：The Hacker News
全球领先网络安全新闻
Claude Code通过在监控之前在本地采取行动来绕过安全控制，从而暴露数据风险和审计漏洞。
Original: Claude Code bypasses security controls by acting locally before monitoring, exposing data risks and audit gaps.
Original Title: How Ceros Gives Security Teams Visibility and Control in Claude Code
📰 [CVE-2026-20131] Cisco 安全防火墙管理中心(FMC) – 思科安全防火墙管理中心(FMC)软件和思科安全云控制(SCC)防火墙管理反序列化不可信数据漏洞
来源：CISA KEV
CISA 已知被利用漏洞 | 添加日期：2026-03-19 | 修复期限：2026-03-22
Cisco Secure Firewall Management Center (FMC)软件和Cisco Security Cloud Control (SCC) Firewall Management在基于Web的管理界面中包含对不可信数据的反序列化漏洞，该漏洞可能允许未经身份验证的远程攻击者在受影响的设备上以root身份执行任意Java代码。
Original: Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management contain a deserialization of untrusted data vulnerability in the web-based management interface that could allow an unauthenticated, remote attacker to execute arbitrary Java code as root on an affected device.
Original Title: [CVE-2026-20131] Cisco Secure Firewall Management Center (FMC) – Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability
📰 [CVE-2025-66376] Synacor Zimbra协作套件（ ZCS ） – Synacor Zimbra协作套件(ZCS)跨站点脚本漏洞
来源：CISA KEV
CISA 已知被利用漏洞 | 添加日期：2026-03-18 | 修复期限：2026-04-01
Synacor Zimbra Collaboration Suite (ZCS)在Classic UI中包含一个跨站点脚本漏洞，攻击者可以滥用电子邮件HTML中的层叠样式表(CSS) @ import指令。
Original: Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability in the Classic UI where attackers could abuse Cascading Style Sheets (CSS) @import directives in email HTML.
Original Title: [CVE-2025-66376] Synacor Zimbra Collaboration Suite (ZCS) – Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability
📰 [CVE-2026-20963] Microsoft SharePoint – Microsoft SharePoint反序列化不受信任的数据漏洞
来源：CISA KEV
CISA 已知被利用漏洞 | 添加日期：2026-03-18 | 修复期限：2026-03-21
Microsoft SharePoint包含对不可信数据的反序列化漏洞，允许未经授权的攻击者在网络上执行代码。
Original: Microsoft SharePoint contains a deserialization of untrusted data vulnerability that allows an unauthorized attacker to execute code over a network.
Original Title: [CVE-2026-20963] Microsoft SharePoint – Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
📰 [CVE-2025-47813] 未能连接到FTP服务器%s 未能连接到FTP服务器%s – Wing FTP服务器信息泄漏漏洞
来源：CISA KEV
CISA 已知被利用漏洞 | 添加日期：2026-03-16 | 修复期限：2026-03-30
当在UID cookie中使用长值时， Wing FTP Server会生成包含敏感信息漏洞的错误消息。
Original: Wing FTP Server contains a generation of error message containing sensitive information vulnerability when using a long value in the UID cookie.
Original Title: [CVE-2025-47813] Wing FTP Server Wing FTP Server – Wing FTP Server Information Disclosure Vulnerability
📰 [CVE-2026-3910] Google Chromium V8 – Google Chromium V8不当限制内存缓冲区漏洞范围内的操作
来源：CISA KEV
CISA 已知被利用漏洞 | 添加日期：2026-03-13 | 修复期限：2026-03-27
Google Chromium V8包含对内存缓冲区漏洞范围内操作的不当限制，可能允许远程攻击者通过精心设计的HTML页面在沙盒内执行任意代码。此漏洞可能会影响多个使用Chromium的网络浏览器，包括但不限于Google Chrome、Microsoft Edge和Opera。
Original: Google Chromium V8 contains an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
Original Title: [CVE-2026-3910] Google Chromium V8 – Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability
本文档自动生成于 2026-03-20 09:00:50 | 专注中国网络安全新闻
暂无评论内容