GTIG AI Threat Tracker: Adversaries Leverage AI for Vulnerability Exploitation, Augmented Operations, and Initial Access
GTIG AI Threat Tracker: Adversaries Leverage AI for Vulnerability Exploitation, Augmented Operations, and Initial Access
2026-05-23 归档
今日共收录 869 条安全情报，包含 93 个 CVE，394 篇安全通告，以及 104 篇研究论文。
← 返回归档列表Inside CrowdStrike Automated Leads: A Transformative Approach to Threat Detections
Inside CrowdStrike Automated Leads: A Transformative Approach to Threat Detections
May 2026 Patch Tuesday: 30 Critical Vulnerabilities Among 130 CVEsMay 12, 2026
May 2026 Patch Tuesday: 30 Critical Vulnerabilities Among 130 CVEsMay 12, 2026
Falcon AIDR Detects Threats at the Prompt Layer in Kubernetes AI Applications
Falcon AIDR Detects Threats at the Prompt Layer in Kubernetes AI Applications
Threat IntelligenceWelcome to BlackFile: Inside a Vishing Extortion OperationBy Google Threat Intelligence Group • 16-minute read
Threat IntelligenceWelcome to BlackFile: Inside a Vishing Extortion OperationBy Google Threat Intelligence Group • 16-m
Now Live: The CrowdStrike 2026 Financial Services Threat Landscape Report
Now Live: The CrowdStrike 2026 Financial Services Threat Landscape Report
How to Protect Identities and Sessions from Infostealers
How to Protect Identities and Sessions from Infostealers
Google accidentally exposed details of unfixed Chromium flaw
Google has accidentally leaked details about an unfixed issue in Chromium that keeps JavaScript running in the backgroun
Tracking Iranian APT Screening Serpens’ 2026 Espionage Campaigns
Unit 42 details Screening Serpens' use of AppDomainManager hijacking and new RAT variants to target tech and defense sec
New Claude Integration Brings Audit Data into the Falcon Platform
New Claude Integration Brings Audit Data into the Falcon Platform
Fast and Furious – Nimbus Manticore Operations During the Iranian Conflict
Key Findings Introduction During the recent geopolitical tensions in the Middle East, we reported on multiple Iran-nexus
Netherlands seizes 800 servers of hosting firm enabling cyberattacks
Financial crime investigators in the Netherlands (FIOD) arrested two men and seized 800 servers linked to a web hosting
Former US execs plead guilty to aiding tech support scammers
Two former executives of a call-tracking and analytics company pleaded guilty to concealing a years-long tech support fr
Trend Micro warns of Apex One zero-day exploited in the wild
Japanese cybersecurity software company Trend Micro has addressed an Apex One zero-day vulnerability exploited in attack
Drupal: Critical SQL injection flaw now targeted in attacks
Drupal is warning that hackers are attempting to exploit a "highly critical" SQL injection vulnerability announced earli
Why Chargebacks are Just One Piece of the Fraud Puzzle
Fraud losses don't stop at chargebacks. False declines, account takeovers, and abuse also damage revenue and trust. IPQS
Ubiquiti patches three max severity UniFi OS vulnerabilities
Ubiquiti has released security updates to patch three maximum severity vulnerabilities in UniFi OS that can be exploited
US and Canada arrest and charge suspected Kimwolf botnet admin
U.S. and Canadian authorities arrested and charged a Canadian man with operating the KimWolf distributed denial-of-servi
Grafana Says Codebase and Other Data Stolen via TanStack Supply Chain Attack
Hackers accessed Grafana’s GitHub repositories after a token compromised in the TanStack attack was not rotated. The pos
A First Measurement Study on Authentication Security in Real-World Remote MCP Servers
模型上下文协议（MCP）正成为连接大语言模型（LLM）与外部服务的通用接口。随着智能体接入社交、生产力、金融等在线服务，远程MCP服务器的部署日益重要，其客户端与服务器之间的认证边界成为安全关键但尚未被充分研究。本文首次对实际远程MCP服务