Inside CrowdStrike Automated Leads: A Transformative Approach to Threat Detections
Inside CrowdStrike Automated Leads: A Transformative Approach to Threat Detections
2026-05-15 归档
今日共收录 1277 条安全情报，包含 487 个 CVE，424 篇安全通告，以及 55 篇研究论文。
← 返回归档列表May 2026 Patch Tuesday: 30 Critical Vulnerabilities Among 130 CVEsMay 12, 2026
May 2026 Patch Tuesday: 30 Critical Vulnerabilities Among 130 CVEsMay 12, 2026
Falcon AIDR Detects Threats at the Prompt Layer in Kubernetes AI Applications
Falcon AIDR Detects Threats at the Prompt Layer in Kubernetes AI Applications
West Pharmaceutical says hackers stole data, encrypted systems
West Pharmaceutical Services disclosed that it was the target of a cyberattack that resulted in data exfiltration and sy
Iranian hackers targeted major South Korean electronics maker
The Iran-linked hacking group MuddyWater (a.k.a. Seedworm, Static Kitten) launched a broad cyber-espionage campaign targ
New critical Exim mailer flaw allows remote code execution
A critical vulnerability affecting certain configurations of the Exim open-source mail transfer agent could be exploited
Foxconn Confirms North American Factories Hit by Cyberattack
The Nitrogen ransomware group claims to have hacked the company’s systems, stealing 8TB of data, including confidential
[原创]间接提示词注入和供应链投毒，正在威胁你的 AI Agent
[原创]间接提示词注入和供应链投毒，正在威胁你的 AI Agent
Why AMOS matters: The macOS malware stealing data at scale
Sophos X-Ops looks at the Atomic macOS Stealer and its capabilitiesCategories: Threat ResearchTags: MacOS, AMOS, infoste
TeamPCP hackers advertise Mistral AI code repos for sale
The TeamPCP hacker group is threatening to leak source code from the Mistral AI project unless a buyer is found for the
Hackers exploit auth bypass flaw in Burst Statistics WordPress plugin
Hackers are leveraging a critical authentication bypass vulnerability in the WordPress plugin Burst Statistics to obtain
18-year-old NGINX vulnerability allows DoS, potential RCE
An 18-year-old flaw in the NGINX open-source web server, discovered using an autonomous scanning system, can be exploite
KongTuke hackers now use Microsoft Teams for corporate breaches
Initial access broker KongTuke has moved to Microsoft Teams for social engineering attacks, taking as little as five min
Dell confirms its SupportAssist software causes Windows BSOD crashes
Dell confirmed that its SupportAssist software is causing blue-screen crashes on some Windows systems following a wave o
US charges suspected Dream Market admin arrested in Germany
The alleged main administrator of Dream Market Incognito Market, one of the largest dark web marketplaces before its shu
ThreatsDay Bulletin: PAN-OS RCE, Mythos cURL Bug, AI Tokenizer Attacks, and 10+ Stories
Everything is still on fire. This week feels dumb in the worst way — bad links, weak checks, fake help desks, shady foru
Chinese APTs Expand Targets, Update Backdoors in Recent Campaigns
Salt Typhoon has hit an energy entity in Azerbaijan. Twill Typhoon has targeted Asian entities with an updated RAT. The
G7 Countries Release AI SBOM Guidance
The goal of the guidance, which outlines minimum elements, is to help organizations enhance transparency in AI systems a
Talk is (Not) Cheap: A Taxonomy and Benchmark Coverage Audit for LLM Attacks
本文针对大型语言模型（LLM）推理时攻击的基准测试覆盖不充分问题，提出一个可复用的审计框架。作者从2023至2026年间932篇arXiv安全论文中提取了2,521个独特攻击组，构建了一个包含507个叶子节点的攻击分类体系（其中401个基于
Veritas: A Semantically Grounded Agentic Framework for Memory Corruption Vulnerability Detection in Binaries
该论文提出 Veritas，一个语义驱动的代理框架，用于检测二进制程序中的内存破坏漏洞。针对剥离符号的二进制文件，传统方法难以恢复对象语义、过程间传播和可行触发条件。Veritas 结合了静态切片器（基于 RetDec 提升的 LLVM I