TIKTOUK targets exposed WordPress backups to steal cloud and email credentials, with 50,000 credentials found across 37,000 domains.

A TerminalFix intrusion campaign that uses ClickFix-style social engineering, PowerShell execution, DLL sideloading, and a ...

Google report focuses on exploit of CVE-2026-88772, which executed lateral movement a month before a patch existed.

Unknown attackers exploit a patched Citrix NetScaler flaw to gain root access and deploy web shells and a tunneler.

Python SDK could allow a malicious MCP server to steal OAuth authentication material and take over AI agent accounts. The ...

Cybersecurity firms say attackers exploited the Citrix NetScaler CVE-2026-88772 zero-day to deploy custom web shells and ...

MCP Python SDK flaw can let malicious servers redirect OAuth exchanges and steal credentials; fixes are in 1.30.0 and 2.2.0.

Exploitation of CVE-2026-88772 bypasses authentication and triggers an unhandled termination of the NetScaler Packet Processing Engine (NSPPE) to establish initial root-level access. Analysis of the ...

Storm-3168, an AI-orchestrated threat actor also known as JADEPUFFER, used two compromised service principals to delete 100+ ...

PortSwigger published http-terminator on September 28, 2026, an AI-assisted research pipeline for discovering HTTP ...

A Chinese threat actor has exploited CVE-2026-7273 to extract sensitive information from 1,000 ZyXEL switches worldwide.

date: 2026-09-18 Python 爬虫入门：HTTP 协议与 requests 库实战 一、背景与目标 爬虫的本质，是 用程序模拟浏览器向服务器发起 HTTP 请求，并解析返回的响应。