CrowdStrike Expands Real-Time Cloud Detection and Response to Google Cloud
CrowdStrike Expands Real-Time Cloud Detection and Response to Google Cloud
2026-05-17 归档
今日共收录 761 条安全情报，包含 52 个 CVE，439 篇安全通告，以及 15 篇研究论文。
← 返回归档列表CrowdStrike Falcon Cloud Security Delivered 264% ROI Through Unified Cloud Protection
CrowdStrike Falcon Cloud Security Delivered 264% ROI Through Unified Cloud Protection
Security & Identity
Security & Identity
SAP on Google Cloud
SAP on Google Cloud
Inside Google Cloud
Inside Google Cloud
Google Cloud Next & Events
Google Cloud Next & Events
Google Cloud Consulting
Google Cloud Consulting
Transform with Google Cloud
Transform with Google Cloud
Threat IntelligenceNorth Korea-Nexus Threat Actor Compromises Widely Used Axios NPM Package in Supply Chain AttackBy Google Threat Intelligence Group • 16-minute read
Threat IntelligenceNorth Korea-Nexus Threat Actor Compromises Widely Used Axios NPM Package in Supply Chain AttackBy Goo
Threat IntelligenceRansomware Under Pressure: Tactics, Techniques, and Procedures in a Shifting Threat LandscapeBy Google Threat Intelligence Group • 53-minute read
Threat IntelligenceRansomware Under Pressure: Tactics, Techniques, and Procedures in a Shifting Threat LandscapeBy Googl
Google Cloud Products
Google Cloud Products
Cloud & Application Security
Cloud & Application Security
From Scanner to Stealer: Inside the trivy-action Supply Chain Compromise
From Scanner to Stealer: Inside the trivy-action Supply Chain Compromise
Next-Gen Identity Security
Next-Gen Identity Security
CrowdStrike FalconID Brings Phishing-Resistant MFA to Falcon Next-Gen Identity Security
CrowdStrike FalconID Brings Phishing-Resistant MFA to Falcon Next-Gen Identity Security
Popular node-ipc npm package compromised to steal credentials
Hackers have injected credential-stealing malware into newly published versions of node-ipc, a popular inter-process com
Exploiting the Shared Storage API.
本文研究了 Google 提出的 Shared Storage API，该 API 是 Privacy Sandbox 的一部分，旨在替代第三方 cookie，同时减少隐私风险。Shared Storage API 允许第三方存储不被顶级网
GPU.zip: On the Side-Channel Implications of Hardware-Based Graphical Data Compression.
本文探讨了硬件图形压缩带来的侧信道泄漏风险。传统观点认为压缩是软件可见的，因此可以在处理敏感数据时关闭压缩或实施针对性缓解。然而，本文发现Intel和AMD的集成GPU在软件完全透明的情况下对图形数据进行压缩，即使软件未请求压缩，GPU也会
Remote Memory-Deduplication Attacks.
本文提出了首次完全远程的内存去重攻击。内存去重是一种通过合并相同内存块为写时复制映射来减少内存占用的技术。此前的研究表明，内存去重可被用于本地攻击，如破坏ASLR、监视其他程序或检测数据存在（如网页图片）。这些攻击跨安全域利用内存去重，因此
V-Range: Enabling Secure Ranging in 5G Wireless Networks.
本文提出了V-Range，这是首个完全兼容5G标准的安全测距系统。研究背景在于，5G网络为资产跟踪、智能生态系统、自动驾驶等安全关键应用提供了位置信息，但现有3GPP和研究提案均未解决5G安全位置估计的挑战，且已有多种针对定位和测距系统的攻