New Claude Integration Brings Audit Data into the Falcon Platform
New Claude Integration Brings Audit Data into the Falcon Platform
2026-05-28 归档
今日共收录 1581 条安全情报，包含 810 个 CVE，383 篇安全通告，以及 109 篇研究论文。
← 返回归档列表Measuring AI-Enabled Success: 3 KPIs Leaders Should TrackMay 22, 2026
Measuring AI-Enabled Success: 3 KPIs Leaders Should TrackMay 22, 2026
Threat Intelligence2 PhaaS 2 Furious: The Evolution of Chinese-language Phishing ServicesBy Google Threat Intelligence Group • 7-minute read
Threat Intelligence2 PhaaS 2 Furious: The Evolution of Chinese-language Phishing ServicesBy Google Threat Intelligence G
From poisoned search results to GPU mining: A cryptojacking campaign abusing ScreenConnect and Microsoft .NET utilities
Microsoft exposes a cryptojacking campaign using SEO poisoning and ScreenConnect to target high-performance PCs, with ma
Disrupting Glassworm: Inside CrowdStrike’s Takedown of a Developer-Targeting Botnet
Disrupting Glassworm: Inside CrowdStrike’s Takedown of a Developer-Targeting Botnet
Charter confirms data breach after ShinyHunters extortion threat
U.S. telecommunications giant Charter Communications has confirmed it suffered a data breach after the ShinyHunters exto
Out of the Crypt: The Evolving Cyber Extortion Economy
Unit 42 explores trends in data theft and extortion, outlining key strategies for organizations as frontier AI models ad
GPU mining malware spreads via SEO poisoning, AI chatbots
Threat actors are targeting systems with high-performance computers in an ongoing cryptojacking campaign spread through
Can you enforce strong Active Directory password rules without frustrating users?
Strong Active Directory passwords don't have to come at the expense of usability. Specops Software explains how passphra
Glassworm botnet disrupted after resilient C2 infrastructure takedown
The Glassworm botnet targeting developers in software supply-chain attacks has been disrupted after researchers took dow
FBI warns of in-person data theft attacks from extortion gang
The FBI warned on Tuesday that the Silent Ransom Group (SRG) extortion gang is now targeting U.S.-based law firms in in-
CISA gives feds 4 days to patch actively exploited cPanel plugin flaw
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has given U.S. federal agencies four days to secure the
Dutch police arrests suspect linked to Ajax football club hack
The Dutch National Police arrested a 35-year-old man suspected of hacking the professional football club Ajax Amsterdam
Windows 11 KB5089573 update released with performance improvements
Microsoft has released the KB5089573 preview cumulative update for Windows 11 versions 25H2 and 24H2, which comes with 3
Lastwall Raises $11.5 Million for Quantum-Resilient Identity Platform
The new funding, led by BDC Capital’s StrongNorth Fund, will accelerate Lastwall’s North American expansion. The post La
‘SymJack’ Attack Turns AI Coding Agents Into Supply Chain Attack Delivery Systems
Malicious repositories and disguised symlinks can trick AI coding agents into silently installing attacker-controlled MC
The Fault in Our Drafts: Vulnerabilities in RPKI Specification and Software
本文首次对资源公钥基础设施（RPKI）规范（RFC）中的缺陷与实现和实际部署中的漏洞之间的因果关系进行了全面分析。RPKI通过证书、路由起源授权（ROA）、清单和证书撤销列表（CRL）等机制保障互联网路由系统的安全，其规范分布在数十个RFC
Batch Me If You Can: Coverage-guided RPKI Fuzzing at Scale
资源公钥基础设施（RPKI）已成为保护域间路由安全的关键技术。然而，RPKI软件的安全性测试长期停留在浅层解析阶段，现有模糊测试工具（如AFL++、libFuzzer）因假设每次执行输入单一且独立，无法处理RPKI仓库中数百个相互依赖、经密
Heimdall: Formally Verified Automated Migration of Legacy eBPF Programs to Rust
该论文聚焦于Linux内核扩展程序eBPF的安全迁移问题。eBPF程序被广泛用于网络、可观测性及安全策略执行，但其内核验证器仅检查低级内存安全和终止性，未强制许多高级源级属性，如初始化规则、schema一致性或错误处理。作者识别出六类源级b
SilentRetrieval: Hijacking Retrieval-Augmented Generation via Semantically-Preserving Adversarial Data Poisoning
本文提出了一种名为 SilentRetrieval 的两阶段数据投毒攻击，专门针对检索增强生成（RAG）系统。RAG 通过外挂知识库缓解大语言模型的幻觉问题，但引入了语料库完整性的新攻击面。攻击的第一阶段采用“协调束搜索”（Coordina