🌍 国际网络安全每日情报 – 2026年03月25日
本文档由系统自动生成，汇总国际最新网络安全漏洞情报、安全新闻和技术解读。
内容策略：聚焦国际网络安全动态，涵盖The Hacker News、BleepingComputer、CISA等权威来源。
🌍 国际网络安全动态
📰 TeamPCP Backdoors LiteLLM版本1.82.7–1.82.8可能通过Trivy CI/CD妥协
来源：The Hacker News
全球领先网络安全新闻
恶意LiteLLM 1.82.7–1.82.8通过Trivy妥协部署后门并窃取凭据，实现Kubernetes范围的持久性和横向传播。
Original: Malicious LiteLLM 1.82.7–1.82.8 via Trivy compromise deploys backdoor and steals credentials, enabling Kubernetes-wide persistence and lateral spread.
Original Title: TeamPCP Backdoors LiteLLM Versions 1.82.7–1.82.8 Likely via Trivy CI/CD Compromise
📰 税务搜索广告提供ScreenConnect恶意软件使用华为驱动程序禁用EDR
来源：The Hacker News
全球领先网络安全新闻
Google Ads恶意广告使用华为驱动程序漏洞传播ScreenConnect恶意软件，在美国税务搜索中实现EDR绕过和凭据盗窃。
Original: Google Ads malvertising spreads ScreenConnect malware using Huawei driver flaw, enabling EDR bypass and credential theft in U.S. tax searches.
Original Title: Tax Search Ads Deliver ScreenConnect Malware Using Huawei Driver to Disable EDR
📰 从首份 Gartner Guardian Agent 市场指南中汲取的 5 个经验教训
来源：The Hacker News
全球领先网络安全新闻
人工智能代理的采用率达到70 ％ ，超过了治理控制，增加了中断和攻击等风险。
Original: AI agent adoption hits 70% enterprises, outpacing governance controls, increasing risks like outages and attacks.
Original Title: 5 Learnings from the First-Ever Gartner Market Guide for Guardian Agents
📰 黑客使用虚假简历窃取企业凭据并部署加密矿工
来源：The Hacker News
全球领先网络安全新闻
FAUX # ELEVATE网络钓鱼通过虚假简历部署窃取者和矿工，瞄准企业系统，在25秒内实现快速凭据窃取。
Original: FAUX#ELEVATE phishing deploys stealers and miners via fake resumes, targeting enterprise systems, enabling rapid credential theft in 25 seconds.
Original Title: Hackers Use Fake Resumes to Steal Enterprise Credentials and Deploy Crypto Miner
📰 网络安全专业化的隐性成本：丧失基础技能
来源：The Hacker News
全球领先网络安全新闻
缺乏基本的网络安全环境会削弱风险优先级，导致工具不一致和事故响应速度变慢。
Original: Lack of foundational cybersecurity context weakens risk prioritization, causing misaligned tools and slower incident response.
Original Title: The Hidden Cost of Cybersecurity Specialization: Losing Foundational Skills
📰 [CVE-2025-32432] Craft CMS Craft CMS – Craft CMS代码注入漏洞
来源：CISA KEV
CISA 已知被利用漏洞 | 添加日期：2026-03-20 | 修复期限：2026-04-03
Craft CMS包含一个代码注入漏洞，允许远程攻击者执行任意代码。
Original: Craft CMS contains a code injection vulnerability that allows a remote attacker to execute arbitrary code.
Original Title: [CVE-2025-32432] Craft CMS Craft CMS – Craft CMS Code Injection Vulnerability
📰 [CVE-2025-54068] 拉拉维尔 Livewire – Laravel Livewire代码注入漏洞
来源：CISA KEV
CISA 已知被利用漏洞 | 添加日期：2026-03-20 | 修复期限：2026-04-03
Laravel Livewire包含一个代码注入漏洞，可能允许未经身份验证的攻击者在特定场景下实现远程命令执行。
Original: Laravel Livewire contain a code injection vulnerability that could allow unauthenticated attackers to achieve remote command execution in specific scenarios.
Original Title: [CVE-2025-54068] Laravel Livewire – Laravel Livewire Code Injection Vulnerability
📰 [CVE-2025-43510] 苹果 多个分类 – Apple多产品不当锁定漏洞
来源：CISA KEV
CISA 已知被利用漏洞 | 添加日期：2026-03-20 | 修复期限：2026-04-03
Apple watchOS、iOS、iPadOS、macOS、visionOS和tvOS包含一个不正确的锁定漏洞，该漏洞可能允许恶意应用程序导致进程之间共享的内存发生意外更改。
Original: Apple watchOS, iOS, iPadOS, macOS, visionOS, and tvOS contain an improper locking vulnerability that could allow a malicious application to cause unexpected changes in memory shared between processes.
Original Title: [CVE-2025-43510] Apple Multiple Products – Apple Multiple Products Improper Locking Vulnerability
📰 [CVE-2025-43520] 苹果 多个分类 – Apple多个产品经典缓冲区溢出漏洞
来源：CISA KEV
CISA 已知被利用漏洞 | 添加日期：2026-03-20 | 修复期限：2026-04-03
Apple watchOS、iOS、iPadOS、macOS、visionOS、tvOS和iPadOS包含一个经典的缓冲区溢出漏洞，该漏洞可能允许恶意应用程序导致意外的系统终止或写入内核内存。
Original: Apple watchOS, iOS, iPadOS, macOS, visionOS, tvOS, and iPadOS contain a classic buffer overflow vulnerability which could allow a malicious application to cause unexpected system termination or write kernel memory.
Original Title: [CVE-2025-43520] Apple Multiple Products – Apple Multiple Products Classic Buffer Overflow Vulnerability
📰 [CVE-2025-31277] 苹果 多个分类 – Apple多个产品缓冲区溢出漏洞
来源：CISA KEV
CISA 已知被利用漏洞 | 添加日期：2026-03-20 | 修复期限：2026-04-03
Apple Safari、iOS、watchOS、visionOS、iPadOS、macOS和tvOS包含一个缓冲区溢出漏洞，该漏洞可能允许处理恶意制作的网络内容，从而导致内存损坏。
Original: Apple Safari, iOS, watchOS, visionOS, iPadOS, macOS, and tvOS contain a buffer overflow vulnerability that could allow the processing of maliciously crafted web content which may lead to memory corruption.
Original Title: [CVE-2025-31277] Apple Multiple Products – Apple Multiple Products Buffer Overflow Vulnerability
本文档自动生成于 2026-03-25 09:00:44 | 专注中国网络安全新闻
暂无评论内容