CrowdStrike Falcon Platform Helps Meet U.S. Government Mandates for CISA BOD-26-04Jul 22, 2026
CrowdStrike Falcon Platform Helps Meet U.S. Government Mandates for CISA BOD-26-04Jul 22, 2026
2026-07-25 归档
今日共收录 771 条安全情报，包含 0 个 CVE，408 篇安全通告，以及 82 篇研究论文。
← 返回归档列表New Dolphin X malware uses AI to rank high-value targets
A new Dolphin X remote access trojan claims to use an AI-powered profiling feature to score and rank infected users, hel
Australian energy provider Origin says data breach exposes client data
Origin Energy has confirmed that an unauthorized party accessed and subsequently leaked customer data online, exposing s
Fake Claude app promoted by Bing ads pushes SectopRAT malware
A malvertising campaign on the Bing search service is pushing a fake Claude desktop app installer hosted on a legitimate
Russian hackers exploit Zimbra zero-click flaw for email theft
CISA is warning that the Russian state-sponsored hacking group Laundry Bear, also known as Void Blizzard, is targeting o
Hackers abuse Notepad++ plugins to stealthily install malware
Ukraine's CERT has uncovered attacks distributing an archive containing the legitimate Notepad++ application and a malic
OnTrac notifies customers of data breach after network hack
OnTrac parcel delivery company is informing that hackers breached its corporate network and may have accessed personal d
Hermes AI agent used to automate attack on Thai Finance Ministry
A threat actor used the open-source Hermes AI agent in unattended "YOLO" mode to automate post-exploitation activity dur
Hackers hijack hotel Wi-Fi DNS to steal Microsoft 365 accounts
Hackers are changing the DNS settings on Wi-Fi devices at hotels and conference centers to redirect users to fake Micros
Microsoft blames massive Microsoft 365 outage on maintenance bug
Microsoft says a bug in its automated network maintenance request system caused Thursday's massive outage by mistakenly
Chick-fil-A data breach affects more than 13,000 customers
Chick-fil-A has confirmed that over 13,000 customers had their accounts breached in a wave of credential stuffing attack
Slopsquatting, Phantom Domains, and HalluSquatting Are the Same AI Attack
Slopsquatting, phantom squatting, and HalluSquatting all exploit the same late-binding attack pattern, where AI coding a
Europol flags 4,340 URLs for removal in 'The Com' crackdown
Europol has flagged 4,340 URLs for removal during a multi-week operation targeting online content linked to "The Com," a
Man gets six years for hacking 750 women's Snapchat accounts
An Illinois man was sentenced on Tuesday to 76 months in prison and three years of supervised release for hacking the Sn
Clop ransomware targets Windchill, FlexPLM in data theft attacks
The Clop ransomware gang (also tracked as Cl0p) is targeting Internet-exposed PTC Windchill and FlexPLM instances in a n
Seeing AI Agents Is Not Enough. Security Teams Must Enforce What They Can Do
AI agent security is moving through a familiar maturity curve: adoption, then visibility, and finally, control. But what
In Other News: Dolphin X AI-Powered Malware, Car Anti-Theft Device Hack, 400 Linux Kernel Flaws
Noteworthy stories that might have slipped under the radar: Siemens ROX II industrial switch vulnerabilities, Russian Zi
Security Vulnerability Patterns in AI-Generated Code: A Cross-Model Comparative Study
该研究系统性地评估了由大型语言模型（LLM）生成的自动化脚本中存在的安全漏洞模式。研究者使用相同的提示，从 ChatGPT、Microsoft Copilot 和 Google Gemini 三个主流模型收集了跨越三个自动化领域的代码样本，
HijackKV: New Threat in Position-Independent KV Cache Reuse
该论文揭示了一种针对大语言模型（LLM）推理系统的新型安全威胁——KV缓存劫持（KV Cache Hijacking）。现代LLM使用键值（KV）缓存来减少推理延迟。传统的基于前缀的缓存重用要求精确的令牌和位置匹配，导致缓存命中率低。为提高
Where You Tap Matters: A Probe-and-Model Benchmark for Open-Set RF Fingerprinting
该论文系统性地评估了射频指纹识别（RFFI）中接收机链路不同采样点对开放集识别性能的影响。RFFI通过提取设备硬件缺陷实现物理层设备识别，但现有研究对信号采样位置缺乏统一标准。作者在标准的BPSK接收机链路中设置了五个探测点（包括载波恢复、