2026-07-24 归档

今日共收录 841 条安全情报,包含 0 个 CVE,432 篇安全通告,以及 115 篇研究论文。

← 返回归档列表
威胁情报2026-07-24 发布INFO

AIDR: How CrowdStrike Is Defining the Next Era of CybersecurityJul 15, 2026

AIDR: How CrowdStrike Is Defining the Next Era of CybersecurityJul 15, 2026

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-07-24 发布INFO

Beyond the Model: Harnessing Frontier AI for Stronger Cyber Defense

Beyond the Model: Harnessing Frontier AI for Stronger Cyber Defense

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-07-22 发布INFO

Upbound says hack caused $13 million in fraudulent Acima leases

The Upbound Group fintech company disclosed that threat actors who stole data from its systems leveraged it to create $1

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-07-22 发布INFO

South Korea discloses data breach impacting diplomats worldwide

South Korea disclosed that hackers breached the National Diplomatic Academy's online education system for ten months and

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-07-24 发布INFO

make smarter security investments and mitigate future risks

make smarter security investments and mitigate future risks

历史摘要 · 未重新核验 · Mandiant

威胁情报2026-07-23 发布INFO

Russian Global Webmail Espionage

Unit 42 details a Russian cyberespionage campaign targeting Zimbra webmail servers using JavaScript injection to steal

历史摘要 · 未重新核验 · Palo Alto Unit 42

威胁情报2026-07-23 发布INFO

Chaos ransomware's msaRAT: Living off the browser to build a covert C2 channel

The Chaos ransomware group uses new malware "msaRAT" that hijacks browsers. The malware doesn't communicate directly wit

历史摘要 · 未重新核验 · Cisco Talos

威胁情报2026-07-24 发布INFO

CrowdStrike Falcon Platform Helps Meet U.S. Government Mandates for CISA BOD-26-04Jul 22, 2026

CrowdStrike Falcon Platform Helps Meet U.S. Government Mandates for CISA BOD-26-04Jul 22, 2026

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-07-23 发布INFO

How Elasticsearch ES|QL COMPLETION turns noisy curl and wget rules into high-fidelity cloud security alerts

Elastic InfoSec tested this detection rule pattern on their own cloud fleet, filtering noisy curl and wget events with d

历史摘要 · 未重新核验 · Elastic Security Labs

威胁情报2026-07-23 发布INFO

New Dolphin X malware uses AI to rank high-value targets

A new Dolphin X remote access trojan claims to use an AI-powered profiling feature to score and rank infected users, hel

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-07-23 发布INFO

Australian energy provider Origin says data breach exposes client data

Origin Energy has confirmed that an unauthorized party accessed and subsequently leaked customer data online, exposing s

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-07-23 发布INFO

Fake Claude app promoted by Bing ads pushes SectopRAT malware

A malvertising campaign on the Bing search service is pushing a fake Claude desktop app installer hosted on a legitimate

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-07-23 发布INFO

Russian hackers exploit Zimbra zero-click flaw for email theft

CISA is warning that the Russian state-sponsored hacking group Laundry Bear, also known as Void Blizzard, is targeting o

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-07-23 发布INFO

Hackers abuse Notepad++ plugins to stealthily install malware

Ukraine's CERT has uncovered attacks distributing an archive containing the legitimate Notepad++ application and a malic

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-07-23 发布INFO

Microsoft 365 outage affects Teams, SharePoint and other services

Microsoft is impacted by a massive outage affecting Teams and Microsoft 365 services, primarily affecting users in North

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-07-23 发布INFO

FedRAMP Rev5 Is Ending: What the 20x Transition Really Requires

FedRAMP 20X replaces point-in-time assessments with continuous, machine-readable evidence that demonstrates security con

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-07-23 发布INFO

EU fines Google $1 billion for search, app store antitrust violations

The European Commission fined Google €890 million ($1 billion) on Thursday after finding the company had violated the Eu

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-07-23 发布INFO

Check Point warns of SmartConsole zero-day exploited in attacks

Israeli cybersecurity firm Check Point Software has addressed an actively exploited zero-day flaw in the company's Smart

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-07-23 发布INFO

China-Nexus JadeProx Uses New TriBack Loader in Government and Healthcare Attacks

An exposed Alibaba Cloud server has revealed a China-nexus operation that Group-IB tracks as JadeProx. The cluster has t

历史摘要 · 未重新核验 · The Hacker News

威胁情报2026-07-23 发布INFO

How Synthetic Identity Fraud is Coming for Machine Identities

Most people understand identity theft as an attacker stealing a real person's sensitive information and impersonating th

历史摘要 · 未重新核验 · The Hacker News