CrowdStrike Falcon Cloud Security Delivered 264% ROI Through Unified Cloud Protection
CrowdStrike Falcon Cloud Security Delivered 264% ROI Through Unified Cloud Protection
2026-05-09 归档
今日共收录 1190 条安全情报，包含 490 个 CVE，393 篇安全通告，以及 21 篇研究论文。
← 返回归档列表Security & Identity
Security & Identity
SAP on Google Cloud
SAP on Google Cloud
Inside Google Cloud
Inside Google Cloud
Google Cloud Next & Events
Google Cloud Next & Events
Google Cloud Consulting
Google Cloud Consulting
Transform with Google Cloud
Transform with Google Cloud
Threat IntelligenceNorth Korea-Nexus Threat Actor Compromises Widely Used Axios NPM Package in Supply Chain AttackBy Google Threat Intelligence Group • 16-minute read
Threat IntelligenceNorth Korea-Nexus Threat Actor Compromises Widely Used Axios NPM Package in Supply Chain AttackBy Goo
Threat IntelligenceRansomware Under Pressure: Tactics, Techniques, and Procedures in a Shifting Threat LandscapeBy Google Threat Intelligence Group • 53-minute read
Threat IntelligenceRansomware Under Pressure: Tactics, Techniques, and Procedures in a Shifting Threat LandscapeBy Googl
Google Cloud Products
Google Cloud Products
Cloud & Application Security
Cloud & Application Security
From Scanner to Stealer: Inside the trivy-action Supply Chain Compromise
From Scanner to Stealer: Inside the trivy-action Supply Chain Compromise
Next-Gen Identity Security
Next-Gen Identity Security
CrowdStrike FalconID Brings Phishing-Resistant MFA to Falcon Next-Gen Identity Security
CrowdStrike FalconID Brings Phishing-Resistant MFA to Falcon Next-Gen Identity Security
New PCPJack worm steals credentials, cleans TeamPCP infections
A new malware framework called PCPJack is stealing credentials from exposed cloud infrastructure while actively removing
BOLT: Bandwidth-Optimized Lightning-Fast Oblivious Map powered by Secure HBM Accelerators.
本文提出BOLT，一种基于高带宽内存（HBM）加速器的带宽优化的轻量级Oblivious Map（OMAP）硬件加速方案。传统OMAP通过随机重映射和最坏情况填充来隐藏访问模式，但开销极大。作者指出，现代HBM加速器将内存通道与处理器核心封
Un-Rocking Drones: Foundations of Acoustic Injection Attacks and Recovery Thereof.
该论文针对无人机系统面临的新型声学注入攻击进行了系统性研究，旨在揭示此类攻击的根本原理并设计相应的恢复机制。作者首先分析了无人机的惯性测量单元（IMU）在受到声波干扰时可能产生的异常输出，这种干扰可导致无人机姿态估计错误，进而影响飞行稳定性
Logical Relations for Formally Verified Authenticated Data Structures.
该论文研究了认证数据结构（Authenticated Data Structures）的形式化验证问题。认证数据结构允许不可信的第三方执行操作并生成可验证操作输出的证明，但这类数据结构的正确实现具有挑战性。本文提出了一种基于关系分离逻辑（r
VICEROY: GDPR-/CCPA-compliant Enforcement of Verifiable Accountless Consumer Requests.
本文提出了VICEROY，一个隐私保护且可扩展的框架，用于为无账户消费者生成数据所有权证明，从而支持可验证的消费者请求。背景是GDPR和CCPA等数据保护法规赋予消费者访问、修改或删除其个人数据的权利，但现有验证机制对有账户消费者（可通过密
A Security Study about Electron Applications and a Programming Methodology to Tame DOM Functionalities.
该论文针对基于 Electron 平台开发的桌面应用（如 Microsoft Teams、Visual Studio Code 等）进行了安全研究。传统桌面应用开发中，使用 HTML 和 JavaScript 构建界面虽然带来了便利，但也将