2026-09-27 归档

今日共收录 1038 条安全情报,包含 222 个 CVE,481 篇安全通告,以及 74 篇研究论文。

← 返回归档列表
威胁情报2026-09-27 发布INFO

Teaching AI to Reason Through Detection Triage

Teaching AI to Reason Through Detection Triage

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-09-27 发布INFO

Peer Pressure: Inside the Sality Botnet Disruption Operation

Peer Pressure: Inside the Sality Botnet Disruption Operation

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-09-27 发布INFO

CrowdStrike Delivers the Next Evolution of the Agentic SOC

CrowdStrike Delivers the Next Evolution of the Agentic SOC

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-09-27 发布INFO

Read the report

Read the report

历史摘要 · 未重新核验 · Mandiant

威胁情报2026-09-27 发布INFO

CrowdStrike Accelerates Real-Time Data Classification with On-Device AISep 16, 2026

CrowdStrike Accelerates Real-Time Data Classification with On-Device AISep 16, 2026

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-09-27 发布INFO

PhantomRaven: An LLM-Generated Information Stealer Developed for Bug Bounty Hunting

PhantomRaven: An LLM-Generated Information Stealer Developed for Bug Bounty Hunting

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-09-27 发布INFO

CrowdStrike Named a Leader in The Forrester Wave™: External Threat Intelligence Service Providers, Q3 2026

CrowdStrike Named a Leader in The Forrester Wave™: External Threat Intelligence Service Providers, Q3 2026

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-09-27 发布INFO

CrowdStrike SafeMind: When the Best Offense Builds the Best DefenseSep 17, 2026

CrowdStrike SafeMind: When the Best Offense Builds the Best DefenseSep 17, 2026

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-09-27 发布INFO

CrowdStrike Named a Leader in The Forrester Wave™: Proactive Security Platforms, Q3 2026Sep 24, 2026

CrowdStrike Named a Leader in The Forrester Wave™: Proactive Security Platforms, Q3 2026Sep 24, 2026

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-09-27 发布INFO

Cyber Defense Summit 2026Crafted to equip elite security professionals with the strategies, tools, and insights needed to outmaneuver increasingly sophisticated, AI-enabled adversaries and build resilient cyber ecosystems.Watch the keynotes on YouTube

Cyber Defense Summit 2026Crafted to equip elite security professionals with the strategies, tools, and insights needed t

历史摘要 · 未重新核验 · Mandiant

威胁情报2026-09-25 发布INFO

3 Consulting Myths Debunked by Unit 42 Experts

Unit 42 security experts address critical cybersecurity misconceptions, offering practical insights to help your organiz

历史摘要 · 未重新核验 · Palo Alto Unit 42

威胁情报2026-09-26 发布INFO

Claude Opus 5.5 uses 95% fewer em dashes, but its answers are getting longer

Anthropic's Claude Opus 5.5 appears to be changing how it writes, with new analysis showing fewer obvious AI writing pat

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-09-26 发布INFO

Microsoft pauses KB5002907 update after Office license deactivations

Microsoft has paused the rollout of the KB5002907 Microsoft 365 update after users report that it deactivated, or in som

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-09-26 发布INFO

GitHub Actions re-enabled with Mini Shai-Hulud payload still active

Two third-party GitHub Actions previously compromised in a Mini Shai-Hulud campaign were re-enabled by their maintainer

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-09-26 发布INFO

OpenAI's AI agents accidentally uploaded user-provided images to third-party sites

OpenAI says its AI agents uploaded user-provided images to third-party image-hosting services while carrying out researc

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-09-25 发布INFO

Kiteworks urges 6-hour server shutdown over potential zero-day attacks

Secure file-sharing software company Kiteworks is urging customers worldwide to temporarily shut down their servers on S

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-09-25 发布INFO

ShinyHunters hacked Clop leak site using Grav CMS path traversal flaw

The Clop ransomware gang has moved its data leak site to a new Tor address after confirming its previous server was comp

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-09-25 发布INFO

Elementor WordPress flaw lets attackers create admin accounts

A cross-site request forgery (CSRF) vulnerability in the Elementor plugin for WordPress could allow an unauthenticated a

历史摘要 · 未重新核验 · BleepingComputer

威胁情报2026-09-26 发布INFO

China and US Agree to Establish AI Safety Channel and Continue Trade and Military Talks

The US and China agreed to set up a communication mechanism for artificial intelligence-related incidents. The post Chin

历史摘要 · 未重新核验 · SecurityWeek

学术论文2026-09-23 发布MEDIUM

Persistent Billable State: Denial-of-Wallet Attacks and Defenses in Tool-Calling LLM Agents

该论文研究了多步工具调用型 LLM Agent 中一个此前被忽视的计费安全面。背景是:Agent 依赖宿主运行时(host runtime)在多个回合之间保存状态,而当运行时把外部工具的返回内容再次带入后续模型输入时,服务提供方会对这段内容

历史摘要 · 未重新核验 · arXiv cs.CR