U.S. Government Disrupts FAMOUS CHOLLIMA Operation with CrowdStrike Assistance
U.S. Government Disrupts FAMOUS CHOLLIMA Operation with CrowdStrike Assistance
2026-10-25 归档
今日共收录 737 条安全情报，包含 0 个 CVE，411 篇安全通告，以及 64 篇研究论文。
← 返回归档列表web_trafficRead the guide
web_trafficRead the guide
CrowdStrike Achieves NCSC CIR Enhanced Level Assurance
CrowdStrike Achieves NCSC CIR Enhanced Level Assurance
CrowdStrike Uncovers New Agentic AI Campaigns
CrowdStrike Uncovers New Agentic AI Campaigns
CrowdStrike Protects Customers from Threats Delivered via PHP2Shell
CrowdStrike Protects Customers from Threats Delivered via PHP2Shell
Why Organizations Secure AI Agents with Falcon GuardianOct 23, 2026
Why Organizations Secure AI Agents with Falcon GuardianOct 23, 2026
Abandoned Popcorn Time app exposed millions of devices to RCE attacks
Researchers remotely disabled a vulnerable updater in the abandoned Time4Popcorn app, a fork of the Popcorn Time BitTorr
Microsoft Teams to get AI-powered, context-aware phishing detection
Microsoft has announced plans to add AI-powered phishing detection to Teams messages starting in early November 2026. [.
BlackX UEFI Bootkit Bypasses Secure Boot on Patched Windows Systems Missing Revocations
Diplomatic organizations in Central Asia have been targeted by a sophisticated new Unified Extensible Firmware Interface
Exposed Infrastructure Reveals How Ransomware Affiliates Used AI Agents to Execute Intrusions
Cybersecurity researchers have discovered an artificial intelligence (AI)-driven intrusion ecosystem run by affiliates o
Obstacles to Weaponizing PHP2Shell Likely Constrain Immediate Widespread Exploitation
Obstacles to Weaponizing PHP2Shell Likely Constrain Immediate Widespread Exploitation
BlackX UEFI bootkit exploits Baton Drop flaw to bypass Secure Boot
A new UEFI bootkit named BlackX, deployed in an espionage campaign in early 2026, exploited the old Baton Drop vulnerabi
Social-HUMINT: An LLM-Augmented Unified Framework for Measuring Social Media Exposure
In the post-API landscape, social-media profiling has become inexpensive and automated: Large Language Models (LLMs) can
AgentPhishing: A Benchmark of LLM Email Agents Under Adaptive Attack
Computer-use agents increasingly handle private information and act on users' behalf across desktop and web applications
AfterDeleteBench: Auditing Post-Deletion Information Persistence in LLM Agents
Many LLM agents maintain external persistent memory and derive additional state from past interactions, such as summarie
Weaponizing the Exit: Input Privacy Leakage via Exit Routing Manipulation in Multi-Exit Networks
Multi-exit networks improve inference efficiency by allowing inputs to terminate early at intermediate exits. We identif
SecLog-Bench: A Scalable Benchmark for Cybersecurity Log Reasoning with Scaffolded Evidence
Large language models (LLMs) have shown strong potential for cybersecurity, leading to growing interest in LLM-based aut
Bridging Number-Theoretic Primality Testing And Algorithmic Optimization: An Adaptive Cryptographic Framework
The security of modern public-key cryptographic systems, such as RSA, Diffie-Hellman, and ECC, depends entirely on the c
Amplifying Latency and Cost of LLM Inference via Rowhammer Attack
Large language models (LLMs) achieve high inference efficiency using optimized GPU kernels generated by just-in-time (JI
Model-intrinsic, Weight-level, and Training-free Spectral Fingerprinting for Large Language Models
The increasing release and reuse of Large Language Models (LLMs) as open-weight checkpoints make model fingerprinting im