CrowdStrike Expands Identity Leadership with OpenID and IDPro
CrowdStrike Expands Identity Leadership with OpenID and IDPro
2026-08-21 归档
今日共收录 1701 条安全情报，包含 827 个 CVE，444 篇安全通告，以及 120 篇研究论文。
← 返回归档列表cloud architecture assessment
cloud architecture assessment
ransomware and multifaceted extortion defense
ransomware and multifaceted extortion defense
Google Cloud Next 2026Catch-up sessions on the keynotes and select sessions are now available on demand.Explore content on-demand
Google Cloud Next 2026Catch-up sessions on the keynotes and select sessions are now available on demand.Explore content
The Identity Problem Hiding in AI Agent Deployments
The Identity Problem Hiding in AI Agent Deployments
94% of Organizations Report Cloud Breaches: CrowdStrike State of CDR Survey
94% of Organizations Report Cloud Breaches: CrowdStrike State of CDR Survey
Falcon Cloud Security June 2026 Release: Updates for Azure and Google Cloud
Falcon Cloud Security June 2026 Release: Updates for Azure and Google Cloud
Falcon Cloud Security July 2026 Release: Helping Security Teams Move Faster in the Cloud
Falcon Cloud Security July 2026 Release: Helping Security Teams Move Faster in the Cloud
Microsoft named a Leader in the Frost Radar™: Cloud Workload Protection Platforms, 2026
Microsoft is named a visionary leader in the 2026 Frost Radar for Cloud Workload Protection Platforms, recognized for un
Sakura Internet hack exposes data of up to 1.36 million accounts
Japanese cloud and data center service provider Sakura Internet disclosed that hackers accessed its sales management sys
Healthtech firm CareCloud data breach impacts 3.7 million patients
U.S. healthcare IT company CareCloud disclosed that the data breach incident it suffered earlier this year has impacted
Identity Abuse Through Trusted Communication Channels
Unit 42 details how attackers exploit enterprise collaboration tools for identity phishing and credential theft. Discove
How MSPs can catch phishing attacks email filters miss
AI is making phishing attacks more personalized, convincing, and difficult for traditional email filters to detect. Kase
Understanding and Analyzing Appraisal Systems in the Underground Marketplaces.
本文是首个针对暗网/地下市场中“鉴定系统”（appraisal system）的大规模测量研究。在地下市场中，鉴定人（appraiser）会从卖家处免费获取样品，随后发布评估性评论（appraisal review），以帮助其他买家判断商品
Achilles: A Formal Framework of Leaking Secrets from Signature Schemes via Rowhammer.
该论文提出一个名为 Achilles 的形式化框架，用于系统评估和利用 Rowhammer 故障注入攻击从签名方案中泄露秘密。签名方案是网络安全基础设施的基础组件，虽然它们在数学上被设计为抗密码分析攻击，但易受 Rowhammer 硬件故障
Forensic Analysis of Fitbit Versa: Android vs iOS.
本文针对 Fitbit Versa 智能手表开展数字取证分析，聚焦 Android 与 iOS 平台下的数据提取能力对比。Fitbit Versa 是 Fitbit 系列中最受欢迎的型号，其在健身追踪、健康监测和日常使用中积累了大量个人数据
NODLINK: An Online System for Fine-Grained APT Attack Detection and Investigation.
本文提出并实现了一个名为 NODLINK 的在线 APT 攻击检测系统，旨在解决现有在线溯源图检测系统为了降低计算复杂度而牺牲检测粒度，导致生成的溯源图包含超过 10 万个节点、难以被安全运维人员解读的问题。作者的核心洞察是：在线溯源图检测
Careless Retention and Management: Understanding and Detecting Data Retention Denial-of-Service Vulnerabilities in Java Web Containers.
该论文聚焦于Java Web容器（如Tomcat、Jetty等）中一类被忽视的拒绝服务（DoS）漏洞——数据保留拒绝服务（Data Retention DoS）。研究指出，现有安全研究多关注内存泄漏或资源耗尽，但数据在容器内部被过度保留（C
Like, Comment, Get Scammed: Characterizing Comment Scams on Media Platforms.
本文针对大型媒体平台（如 YouTube）上日益猖獗的评论诈骗（comment scams）进行了系统性的测量与特征化研究。随着 YouTube 等平台用户量激增，攻击者开始利用这些平台的海量受众实施社交工程攻击。尽管平台提供了让内容创作者
Co-Inflow: Coarse-grained Information Flow Control for Java-like Languages.
本文提出 Co-Inflow，一种面向 Java 等命令式面向对象语言的粗粒度动态信息流控制（IFC）扩展。作者观察到 Java 的语言抽象（如类、对象、方法）与粗粒度 IFC 概念天然契合，因此可以在不引入大量安全注解、不要求重写设计模式