2026-09-21 归档

今日共收录 815 条安全情报,包含 111 个 CVE,394 篇安全通告,以及 53 篇研究论文。

← 返回归档列表
威胁情报2026-09-21 发布INFO

IDC business value studyTurn security into business growth

IDC business value studyTurn security into business growth

历史摘要 · 未重新核验 · Mandiant

威胁情报2026-09-21 发布INFO

How AI-leading Security Teams Are Building the Agentic SOC

How AI-leading Security Teams Are Building the Agentic SOC

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-09-21 发布INFO

Falcon Secure Access Sets the Standard for Zero Trust Browser Security

Falcon Secure Access Sets the Standard for Zero Trust Browser Security

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-09-21 发布INFO

Beyond the Model: Harnessing Frontier AI for Stronger Cyber Defense

Beyond the Model: Harnessing Frontier AI for Stronger Cyber Defense

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-09-21 发布INFO

make smarter security investments and mitigate future risks

make smarter security investments and mitigate future risks

历史摘要 · 未重新核验 · Mandiant

威胁情报2026-09-21 发布INFO

Falcon Platform IOAs Arrive in Falcon Next-Gen SIEM to Identify New Threats

Falcon Platform IOAs Arrive in Falcon Next-Gen SIEM to Identify New Threats

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-09-21 发布INFO

CrowdStrike 2026 Threat Hunting Report: Exploitation Window Closes as AI Use Accelerates

CrowdStrike 2026 Threat Hunting Report: Exploitation Window Closes as AI Use Accelerates

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-09-21 发布INFO

CrowdStrike Threat Hunts for Shell Command Obfuscation on VMware ESX

CrowdStrike Threat Hunts for Shell Command Obfuscation on VMware ESX

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-09-21 发布INFO

Google is a Leader in the IDC MarketScape: Worldwide Cybersecurity Consulting Services 2024 Vendor Assessment

Google is a Leader in the IDC MarketScape: Worldwide Cybersecurity Consulting Services 2024 Vendor Assessment

历史摘要 · 未重新核验 · Mandiant

威胁情报2026-09-21 发布INFO

Teaching AI to Reason Through Detection Triage

Teaching AI to Reason Through Detection Triage

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-09-21 发布INFO

Peer Pressure: Inside the Sality Botnet Disruption Operation

Peer Pressure: Inside the Sality Botnet Disruption Operation

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-09-21 发布INFO

CrowdStrike Delivers the Next Evolution of the Agentic SOC

CrowdStrike Delivers the Next Evolution of the Agentic SOC

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-09-21 发布INFO

Read the report

Read the report

历史摘要 · 未重新核验 · Mandiant

威胁情报2026-09-21 发布INFO

CrowdStrike Accelerates Real-Time Data Classification with On-Device AISep 16, 2026

CrowdStrike Accelerates Real-Time Data Classification with On-Device AISep 16, 2026

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-09-21 发布INFO

PhantomRaven: An LLM-Generated Information Stealer Developed for Bug Bounty Hunting

PhantomRaven: An LLM-Generated Information Stealer Developed for Bug Bounty Hunting

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-09-21 发布INFO

CrowdStrike Named a Leader in The Forrester Wave™: External Threat Intelligence Service Providers, Q3 2026

CrowdStrike Named a Leader in The Forrester Wave™: External Threat Intelligence Service Providers, Q3 2026

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-09-21 发布INFO

CrowdStrike SafeMind: When the Best Offense Builds the Best DefenseSep 17, 2026

CrowdStrike SafeMind: When the Best Offense Builds the Best DefenseSep 17, 2026

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-09-20 发布INFO

Researchers escape OpenAI Codex sandbox to run commands on host

Researchers escaped OpenAI's Codex sandbox two ways, one running commands on a developer's machine from its most locked-

历史摘要 · 未重新核验 · BleepingComputer

学术论文2026-09-17 发布INFO

The More It Says, the More You Pay: A Black-Box Audit of Provider-Side Token Inflation in LLM Services

该论文关注按 token 计费的 LLM 服务中的一个经济安全风险:不诚信的服务提供方可以在基本保持任务可用性的前提下,隐蔽地操纵生成过程以抬高输出 token 数量,从而让用户支付更多费用。作者将这类操纵定义为“提供方侧 token 膨胀

历史摘要 · 未重新核验 · arXiv cs.CR

学术论文2026-09-18 发布INFO

CESBench: Benchmarking Large Language Models on Cryptographic Engineering Security for IoT Devices

该论文针对物联网(IoT)设备密码工程安全领域缺少专用评测基准的空白,提出了 CESBench。研究背景在于:对 IoT 设备而言,仅有安全的密码算法远远不够——拥有物理接触能力的攻击者可以直接攻击实现本身(如侧信道、故障注入),而实现缺陷

历史摘要 · 未重新核验 · arXiv cs.CR