Beyond the Model: Harnessing Frontier AI for Stronger Cyber Defense
Beyond the Model: Harnessing Frontier AI for Stronger Cyber Defense
2026-09-20 归档
今日共收录 942 条安全情报，包含 169 个 CVE，438 篇安全通告，以及 68 篇研究论文。
← 返回归档列表make smarter security investments and mitigate future risks
make smarter security investments and mitigate future risks
Falcon Platform IOAs Arrive in Falcon Next-Gen SIEM to Identify New Threats
Falcon Platform IOAs Arrive in Falcon Next-Gen SIEM to Identify New Threats
CrowdStrike 2026 Threat Hunting Report: Exploitation Window Closes as AI Use Accelerates
CrowdStrike 2026 Threat Hunting Report: Exploitation Window Closes as AI Use Accelerates
CrowdStrike Threat Hunts for Shell Command Obfuscation on VMware ESX
CrowdStrike Threat Hunts for Shell Command Obfuscation on VMware ESX
Google is a Leader in the IDC MarketScape: Worldwide Cybersecurity Consulting Services 2024 Vendor Assessment
Google is a Leader in the IDC MarketScape: Worldwide Cybersecurity Consulting Services 2024 Vendor Assessment
Teaching AI to Reason Through Detection Triage
Teaching AI to Reason Through Detection Triage
Peer Pressure: Inside the Sality Botnet Disruption Operation
Peer Pressure: Inside the Sality Botnet Disruption Operation
CrowdStrike Delivers the Next Evolution of the Agentic SOC
CrowdStrike Delivers the Next Evolution of the Agentic SOC
Read the report
Read the report
CrowdStrike Accelerates Real-Time Data Classification with On-Device AISep 16, 2026
CrowdStrike Accelerates Real-Time Data Classification with On-Device AISep 16, 2026
PhantomRaven: An LLM-Generated Information Stealer Developed for Bug Bounty Hunting
PhantomRaven: An LLM-Generated Information Stealer Developed for Bug Bounty Hunting
CrowdStrike Named a Leader in The Forrester Wave™: External Threat Intelligence Service Providers, Q3 2026
CrowdStrike Named a Leader in The Forrester Wave™: External Threat Intelligence Service Providers, Q3 2026
CrowdStrike SafeMind: When the Best Offense Builds the Best DefenseSep 17, 2026
CrowdStrike SafeMind: When the Best Offense Builds the Best DefenseSep 17, 2026
North Korean WaterPlum hackers infected 30,000 devices worldwide
A joint law enforcement advisory warns that the North Korean hacking group WaterPlum compromised at least 30,000 devices
ShinyHunters hacks Clop leak site, threatens to extort ransomware gang
The ShinyHunters extortion gang breached the Clop (aka Cl0p) ransomware operation's data leak site, defacing the Tor sit
Viral AI actress' hotline face-scans every caller, watches their mood
AI actress Tilly Norwood went viral after glitching into Chinese on Piers Morgan Uncensored last night. Her "Talking Til
Identity Visibility in 2026: The Foundation of Identity Security
Identity visibility is a starting point for modern identity security, because stolen and misused credentials are among t
Measuring and Exploiting Implicit Trust in LLM Tool-Calling Pipelines
该论文聚焦 MCP（Model Context Protocol）引入的一类被忽视的信任问题。MCP 让 LLM 能调用外部工具，但每一次工具交互都会把攻击者可控的文本通过多条输入通道注入模型：工具描述、工具返回结果、采样（sampling
The More It Says, the More You Pay: A Black-Box Audit of Provider-Side Token Inflation in LLM Services
该论文关注按 token 计费的 LLM 服务中一个被忽视的利益冲突：模型输出越长，用户付费越多，因此不诚实的服务提供商有动机在基本保持任务可用性的前提下，隐蔽地拉长生成结果以虚增输出 token。作者将这类操纵形式化为「提供商侧 Toke