2026-05-20 归档

今日共收录 1110 条安全情报,包含 284 个 CVE,411 篇安全通告,以及 113 篇研究论文。

← 返回归档列表
威胁情报2026-05-20 发布INFO

CrowdStrike Technical Risk Assessments Reveal Common Exposure Patterns

CrowdStrike Technical Risk Assessments Reveal Common Exposure Patterns

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-05-20 发布INFO

CrowdStrike Launches Falcon OverWatch for Defender

CrowdStrike Launches Falcon OverWatch for Defender

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-05-20 发布INFO

CrowdStrike Named a Leader in the First-Ever Gartner® Magic Quadrant™ for Cyberthreat Intelligence Technologies

CrowdStrike Named a Leader in the First-Ever Gartner® Magic Quadrant™ for Cyberthreat Intelligence Technologies

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-05-20 发布INFO

GTIG AI Threat Tracker: Adversaries Leverage AI for Vulnerability Exploitation, Augmented Operations, and Initial Access

GTIG AI Threat Tracker: Adversaries Leverage AI for Vulnerability Exploitation, Augmented Operations, and Initial Access

历史摘要 · 未重新核验 · Mandiant

威胁情报2026-05-20 发布INFO

Inside CrowdStrike Automated Leads: A Transformative Approach to Threat Detections

Inside CrowdStrike Automated Leads: A Transformative Approach to Threat Detections

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-05-20 发布INFO

May 2026 Patch Tuesday: 30 Critical Vulnerabilities Among 130 CVEsMay 12, 2026

May 2026 Patch Tuesday: 30 Critical Vulnerabilities Among 130 CVEsMay 12, 2026

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-05-20 发布INFO

Falcon AIDR Detects Threats at the Prompt Layer in Kubernetes AI Applications

Falcon AIDR Detects Threats at the Prompt Layer in Kubernetes AI Applications

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-05-20 发布INFO

Threat IntelligenceWelcome to BlackFile: Inside a Vishing Extortion OperationBy Google Threat Intelligence Group • 16-minute read

Threat IntelligenceWelcome to BlackFile: Inside a Vishing Extortion OperationBy Google Threat Intelligence Group • 16-m

历史摘要 · 未重新核验 · Mandiant

威胁情报2026-05-20 发布INFO

Now Live: The CrowdStrike 2026 Financial Services Threat Landscape Report

Now Live: The CrowdStrike 2026 Financial Services Threat Landscape Report

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-05-18 发布INFO

TeamPCP Supply Chain Campaign: Activity Through 2026-05-17, (Mon, May 18th)

Since the last update, the TeamPCP supply chain campaign produced its loudest stretch since the March Trivy disclosure:

历史摘要 · 未重新核验 · SANS ISC

威胁情报2026-05-18 发布INFO

INTERPOL ‘Operation Ramz’ seizes 53 malware, phishing servers

More than 200 individuals were arrested for cybercrime activities during INTERPOL's Operation Ramz, which focused on the

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-05-18 发布INFO

SHub macOS infostealer variant spoofs Apple security updates

A new variant of the 'SHub' macOS infostealer uses AppleScript to show a fake security update message and installs a bac

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-05-19 发布INFO

From PDB strings to MaaS: Tracking a commodity BadIIS ecosystem used by Chinese-speaking threat

Cisco Talos has uncovered a BadIIS variant — identifiable by its embedded "demo.pdb" strings — that functions as commodi

历史摘要 · 未重新核验 · Cisco Talos

威胁情报2026-05-19 发布INFO

WantToCry ransomware remotely encrypts files

Brute-force attempts against SMB services can be early signs of an attackCategories: Threat ResearchTags: Ransomware, Wa

历史摘要 · 未重新核验 · Sophos

威胁情报2026-05-19 发布INFO

The quest for greater tech independence

A complete decoupling from US technology is neither realistic nor necessary, but the changing environment does require n

历史摘要 · 未重新核验 · ESET

威胁情报2026-05-20 发布INFO

GitHub investigates internal repositories breach claimed by TeamPCP

GitHub is investigating a breach of its internal repositories after the TeamPCP hacker group claimed to have accessed ap

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-05-19 发布INFO

Max-severity flaw in ChromaDB for AI apps allows server hijacking

A max-severity vulnerability in the latest Python FastAPI version of the ChromaDB project allows unauthenticated attacke

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-05-19 发布INFO

Cybercrime service disrupted for abusing Microsoft platform to sign malware

Microsoft says it has disrupted a malware-signing-as-a-service (MSaaS) operation that abused the company's Artifact Sign

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-05-19 发布INFO

Discord rolls out end-to-end encryption on voice, video calls

Discord announced that all voice and video calls through the communication platform are now protected by default with en

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-05-19 发布INFO

FBI: Americans lost over $388 million to scams using crypto ATMs in 2025

The FBI says Americans have lost over $388 million last year to scams using cryptocurrency kiosks, also known as crypto

历史摘要 · 未重新核验 · BleepingComputer