Peer Pressure: Inside the Sality Botnet Disruption Operation
Peer Pressure: Inside the Sality Botnet Disruption Operation
2026-09-11 归档
今日共收录 1356 条安全情报，包含 483 个 CVE，489 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CrowdStrike Delivers the Next Evolution of the Agentic SOC
CrowdStrike Delivers the Next Evolution of the Agentic SOC
Protecting organizations from AI-assisted executive impersonation and invoice fraud
Microsoft examines an AI-assisted business email compromise campaign that used executive impersonation and fake invoices
Detect and disrupt AI-themed attacks with Microsoft Defender
See how Microsoft Defender detects and disrupts AI-themed phishing, malware, and multi-stage attacks across the attack c
We've got one word for it, and it's usually the wrong one
In this week's Threat Source newsletter, Joe explores why the word "burnout" often fails to capture the true toll of wor
September 2026 Patch Tuesday: Two Exploited Zero-Days and 113 Critical Vulnerabilities Among 972 CVEsSep 08, 2026
September 2026 Patch Tuesday: Two Exploited Zero-Days and 113 Critical Vulnerabilities Among 972 CVEsSep 08, 2026
1.1.1.1 now supports post-quantum DNSSEC, all 2,420 bytes of it
1.1.1.1 now validates DNSSEC signatures using NIST’s post-quantum ML-DSA-44 algorithm. Here is how we manage 2,420-byte
New Android malware encrypts files, steals data, and harasses victims
A new Android malware strain called Mantax Otax combines ransomware and spyware capabilities to encrypt files, steal sen
September Windows Server updates break Remote Desktop Services
Windows admins report that the September 2026 security updates are causing Remote Desktop Services (RDS) failures on Win
Microsoft Excel KB5002914 update breaks copy and paste for some users
Microsoft Excel users report that this week's KB5002914 Office security update is breaking copy-and-paste operations and
AI-powered attack exploited PaperCut flaws to hack 395 organizations
A threat actor, likely Russian-speaking, used hundreds of AI agents to develop and launch a global exploitation campaign
New 'BlueMoon' kit exploited Windows and Chrome zero-day flaws
Multiple cyber-espionage groups deployed an exploit kit dubbed "BlueMoon" that leveraged zero-day vulnerabilities in Mic
Microsoft says September updates fix mouse settings reset issues
Microsoft has fixed a known issue that wiped mouse settings on some Windows 11 systems after installing the KB5120998 Au
Microsoft fixes bug that wiped Windows desktop settings
Microsoft says the September 2026 Patch Tuesday updates fix a known issue causing desktop settings to be lost or reset o
Trezor warns users of email provider breach, phishing attacks
Trezor warned customers on Wednesday that threat actors who breached its third-party email provider are targeting them i
4.1 Million Impacted by AdaptHealth Data Breach
In June 2026, hackers stole personal, health, and insurance information from AdaptHealth’s systems. The post 4.1 Million
SpecGuard: Inference-Time Backdoor Detection For Free
该论文针对大语言模型供应链中的后门风险提出了一种推理时检测方法 SpecGuard。研究背景是：LLM 常被第三方微调、共享或直接下载，因此一个已部署的模型可能在良性输入上表现完全正常，但在出现秘密触发器时切换到攻击者控制的行为。虽然模型可
No-Box Vulnerability Analysis: Description-only Detection of Indirect Prompt Injection Vulnerabilities in MCP Servers
该论文提出并验证了一种新的漏洞分析范式——"无盒分析"（no-box vulnerability analysis）。研究背景是：传统漏洞分析通常依赖两条路径之一，要么拥有系统访问权限（源码、二进制或运行时环境），要么能够与目标进行动态交互
A2ABreak: Systematic Security Analysis of the A2A Protocol
本文针对由 Linux Foundation 治理的 Agent2Agent (A2A) 协议开展首个系统化安全分析。A2A 是一个开放标准，允许自主 AI 智能体跨组织边界相互发现、认证并委派任务，设计上与面向工具集成的 Model Co
From Specs to Apps: Verifying and Monitoring Models of Signal and WhatsApp
该论文关注一个长期存在的鸿沟：即时通信协议的形式化安全保证与其实际运行时行为之间的差距。Signal 协议为全球数十亿用户提供加密通信，支撑着使用最广泛的 WhatsApp 以及面向隐私敏感用户的 Signal 应用。学界在计算安全模型和