2026-09-04 归档

今日共收录 1362 条安全情报,包含 399 个 CVE,552 篇安全通告,以及 120 篇研究论文。

← 返回归档列表
威胁情报2026-09-04 发布INFO

Teaching AI to Reason Through Detection Triage

Teaching AI to Reason Through Detection Triage

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-09-04 发布INFO

CrowdStrike Falcon Guardian Defines the Next Generation of AI SecuritySep 01, 2026

CrowdStrike Falcon Guardian Defines the Next Generation of AI SecuritySep 01, 2026

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-09-04 发布INFO

Peer Pressure: Inside the Sality Botnet Disruption Operation

Peer Pressure: Inside the Sality Botnet Disruption Operation

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-09-02 发布INFO

Impersonating IT support: how threat actors turn a remote session into enterprise-wide access

Microsoft Threat Intelligence observed a human-operated intrusion campaign that abuses Microsoft Teams external collabor

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

威胁情报2026-09-04 发布INFO

CrowdStrike Delivers the Next Evolution of the Agentic SOC

CrowdStrike Delivers the Next Evolution of the Agentic SOC

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-09-02 发布INFO

WordPress backup plugin flaw exposes millions of sites to takeover attacks

An SQL injection vulnerability in the All-in-One WP Migration and Backup plugin for WordPress could allow unauthenticate

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-09-03 发布INFO

ASCII smuggling crosses over from AI prompt injection to phishing evasion

Invisible Unicode characters popularized for hiding instructions from AI models are now being used to obfuscate words be

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

威胁情报2026-09-03 发布INFO

Attackers Expose Ongoing AI Tool Use Targeting Organizations in Latin America

Explore how attackers targeting Latin American entities use AI for data exfiltration and how basic OpSec errors allow de

历史摘要 · 未重新核验 · Palo Alto Unit 42

威胁情报2026-09-03 发布INFO

French hospital fined €500,000 after breach exposes data of 727,000

France's data protection authority (CNIL) has fined Hôpital privé de la Loire €500,000 ($580,000) for failing to adequat

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-09-03 发布INFO

HPE patches critical ArubaOS-CX remote code execution flaw

Hewlett Packard Enterprise (HPE) has patched a critical vulnerability in the ArubaOS-CX network operating system that co

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-09-03 发布INFO

Microsoft: KB5120998 mouse reset bug affects only non-English PCs

Microsoft says a known issue that reverts mouse settings after installing the KB5120998 August 2026 preview update affec

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-09-03 发布INFO

OpenAI confirms ChatGPT is down ahead of 'Astra' model launch

ChatGPT and Codex are experiencing a major outage, with users reporting errors across nearly every major ChatGPT feature

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-09-03 发布INFO

Anthropic confirms Claude is down, multiple models affected

Claude is experiencing an outage, with users encountering elevated errors when sending requests to multiple Anthropic AI

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-09-03 发布INFO

Your Employee’s Password Appeared in an Infostealer Log. Now What?

Infostealers can expose far more than passwords, including authenticated sessions that may let attackers bypass MFA. Fla

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-09-03 发布INFO

Microsoft says KB5120998 Windows update resets desktop settings

Microsoft has confirmed that desktop settings are lost or reset on some Windows devices after installing the KB5120998 A

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-09-03 发布INFO

Plex warns users to patch security vulnerabilities immediately

Plex urged users this week to update their desktop clients and media servers immediately to patch multiple security vuln

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-09-03 发布INFO

Microsoft Teams, Outlook fail to launch on ARM-based Windows PCs

Microsoft is working to fix a known issue that causes crashes and launch failures for Microsoft Teams and New Outlook us

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-09-03 发布INFO

US Becomes Top Target in RMM Phishing Campaign Spanning 46 Countries

An RMM phishing campaign initially associated with Canadian targeting due to its use of Canada Revenue Agency (CRA) tax

历史摘要 · 未重新核验 · The Hacker News

学术论文2026-09-02 发布INFO

Can Risk-Based Alerting Mitigate Cybersecurity Alert Fatigue?

安全运营中心(SOC)在日常工作中面临大量告警,其中许多是误报,导致分析师在有限资源下难以有效发现真实攻击,即所谓的“告警疲劳”问题。风险基告警(Risk-Based Alerting, RBA)被提出作为一种减少误报的手段,并在若干企业部

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-09-02 发布INFO

The Implications of Linguistic Illegibility for LLM Security

该论文讨论了大语言模型(LLM)在安全视角下的一类根本性挑战:模型的语言表达能力与其内部实际计算过程可能并不一致。作者引入“语言不可读性”(Linguistic Illegibility)这一术语,泛指 LLM 的外部语言输出或通过机械解释

历史摘要 · 未重新核验 · arXiv cs.CR