2026-05-07 归档

今日共收录 722 条安全情报,包含 0 个 CVE,380 篇安全通告,以及 58 篇研究论文。

← 返回归档列表
威胁情报2026-05-07 发布INFO

CrowdStrike Expands Real-Time Cloud Detection and Response to Google Cloud

CrowdStrike Expands Real-Time Cloud Detection and Response to Google Cloud

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-05-07 发布INFO

CrowdStrike Falcon Cloud Security Delivered 264% ROI Through Unified Cloud Protection

CrowdStrike Falcon Cloud Security Delivered 264% ROI Through Unified Cloud Protection

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-05-07 发布INFO

Security & Identity

Security & Identity

历史摘要 · 未重新核验 · Mandiant

威胁情报2026-05-07 发布INFO

SAP on Google Cloud

SAP on Google Cloud

历史摘要 · 未重新核验 · Mandiant

威胁情报2026-05-07 发布INFO

Inside Google Cloud

Inside Google Cloud

历史摘要 · 未重新核验 · Mandiant

威胁情报2026-05-07 发布INFO

Google Cloud Next & Events

Google Cloud Next & Events

历史摘要 · 未重新核验 · Mandiant

威胁情报2026-05-07 发布INFO

Google Cloud Consulting

Google Cloud Consulting

历史摘要 · 未重新核验 · Mandiant

威胁情报2026-05-07 发布INFO

Transform with Google Cloud

Transform with Google Cloud

历史摘要 · 未重新核验 · Mandiant

威胁情报2026-05-07 发布INFO

Threat IntelligenceNorth Korea-Nexus Threat Actor Compromises Widely Used Axios NPM Package in Supply Chain AttackBy Google Threat Intelligence Group • 16-minute read

Threat IntelligenceNorth Korea-Nexus Threat Actor Compromises Widely Used Axios NPM Package in Supply Chain AttackBy Goo

历史摘要 · 未重新核验 · Mandiant

威胁情报2026-05-07 发布INFO

Threat IntelligenceRansomware Under Pressure: Tactics, Techniques, and Procedures in a Shifting Threat LandscapeBy Google Threat Intelligence Group • 53-minute read

Threat IntelligenceRansomware Under Pressure: Tactics, Techniques, and Procedures in a Shifting Threat LandscapeBy Googl

历史摘要 · 未重新核验 · Mandiant

威胁情报2026-05-07 发布INFO

Google Cloud Products

Google Cloud Products

历史摘要 · 未重新核验 · Mandiant

威胁情报2026-05-07 发布INFO

Cloud & Application Security

Cloud & Application Security

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-05-07 发布INFO

From Scanner to Stealer: Inside the trivy-action Supply Chain Compromise

From Scanner to Stealer: Inside the trivy-action Supply Chain Compromise

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-05-07 发布INFO

Next-Gen Identity Security

Next-Gen Identity Security

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-05-07 发布INFO

CrowdStrike FalconID Brings Phishing-Resistant MFA to Falcon Next-Gen Identity Security

CrowdStrike FalconID Brings Phishing-Resistant MFA to Falcon Next-Gen Identity Security

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-05-06 发布INFO

DAEMON Tools devs confirm breach, release malware-free version

Disc Soft Limited, the maker of DAEMON Tools Lite, confirmed that the software had been trojanized in a supply chain att

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-05-06 发布INFO

Iranian APT Intrusion Masquerades as Chaos Ransomware Attack

Likely perpetrated by MuddyWater, the attack combined social engineering, persistence, credential harvesting, and data t

历史摘要 · 未重新核验 · SecurityWeek

学术论文2026-05-07 发布INFO

INCOGNITOS: A Practical Unikernel Design for Full-System Obfuscation in Confidential Virtual Machines.

近期的研究工作反复证明了侧信道攻击能够破坏可信执行环境(如Intel SGX)的机密性保证。与此同时,云环境中的可信执行正朝着机密虚拟机(CVM)方向发展。不幸的是,一些侧信道攻击在CVM上依然可行,并且新发现了针对CVM架构的攻击。以往工

历史摘要 · 未重新核验 · IEEE S&P

学术论文2026-05-07 发布INFO

Hopper: Modeling and Detecting Lateral Movement.

本文提出了一种名为Hopper的横向移动检测系统。在企业网络攻击中,攻击者常在初始入侵后通过横向移动访问更多内部机器。Hopper利用企业常见的登录日志,构建内部机器之间的登录活动图,然后识别异常的登录序列。为了理解每个登录的上下文,Hop

历史摘要 · 未重新核验 · USENIX Security

学术论文2026-05-07 发布INFO

EOSAFE: Security Analysis of EOSIO Smart Contracts.

本论文提出 EOSAFE,一个针对 EOSIO 智能合约的自动化安全分析框架。EOSIO 是一种新兴的区块链平台,其智能合约使用 C++ 编写,且具有独特的通信模型和资源管理机制,导致传统分析工具难以直接应用。EOSAFE 结合了静态分析和

历史摘要 · 未重新核验 · USENIX Security