#APT 主题 - Cyber Security Daily Radar

威胁情报2026-08-18 发布INFO

Hunting MacSync Stealer infrastructure through behavioral pivots

MacSync Stealer rapidly rotates domains to evade detection, but its behavior remains consistent. Learn how Microsoft unc

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

#microsoft #malware #apt #ti

威胁情报2026-08-18 发布INFO

Secure Agent Harness Execution: Preventing EscapeAug 04, 2026

历史摘要 · 未重新核验 · CrowdStrike

#edr #apt #crowdstrike

学术论文2026-08-18 发布INFO

ADAPTD: Adaptive Detection and Proactive Threat Defense for Autonomous APT attacks

高级持续性威胁（APT）攻击者越来越多地利用复杂技术在企业网络的不同子网间进行横向移动。及时的检测与防御依赖于跨子网的协调，但维持全局态势感知会产生大量的通信开销。为了平衡这一权衡，需要灵活的监控和可适应的遏制策略。本文提出了ADAPTD，

历史摘要 · 未重新核验 · arXiv cs.CR

#eess.SY #apt #intrusion-detection #network-security #decision-theoretic

学术论文2026-08-17 发布INFO

LLMs for Zero-Shot Threat Detection via Structured Risk Indicators

本文提出一种基于大语言模型（LLM）的两阶段框架，用于从异构安全日志中进行零样本内部威胁和高级持续性威胁（APT）检测。该方法首先将用户活动建模为按时间顺序排列的时间线，并引入检索增强生成（RAG）技术，从用户历史行为中提取个性化上下文，以

历史摘要 · 未重新核验 · arXiv cs.CR

#cs.LG #cs.NI #llm #zero-shot #threat-detection #insider-threat

威胁情报2026-08-13 发布INFO

Black Hat USA 2026: Will vulnerability discovery eventually decline in the AI era?

And will today’s surge in AI-driven vulnerability discovery eventually make tomorrow’s software safer?

历史摘要 · 未重新核验 · ESET

#eset #malware #apt

威胁情报2026-08-12 发布INFO

Google is a Leader in the Forrester Wave™: Cybersecurity Incident Response Services, Q2 2024Read the report

历史摘要 · 未重新核验 · Mandiant

#mandiant #report #apt

威胁情报2026-08-12 发布INFO

Google is a Leader in the IDC MarketScape: Worldwide Cybersecurity Consulting Services 2024 Vendor AssessmentRead the report

Google is a Leader in the IDC MarketScape: Worldwide Cybersecurity Consulting Services 2024 Vendor AssessmentRead the re

历史摘要 · 未重新核验 · Mandiant

#mandiant #report #apt

威胁情报2026-08-11 发布INFO

Kimwolf v7: An Evolution of the Kimwolf Botnet

Discover how Kimwolf v7 targets Android IoT devices with HTTP/2 DDoS fingerprinting, Ethereum ENS C2 resolution and Tor

历史摘要 · 未重新核验 · Palo Alto Unit 42

#paloalto #malware #unit42 #apt

威胁情报2026-08-10 发布INFO

The Permanent Threat: Analyzing Aeternum’s Blockchain-Based C2 Operations and Communications

Analysis of the Aeternum botnet loader, a threat leveraging Polygon blockchain smart contracts for decentralized C2 infr

历史摘要 · 未重新核验 · Palo Alto Unit 42

#paloalto #malware #unit42 #apt

威胁情报2026-08-10 发布INFO

Microsoft named a Leader in the 2026 IDC MarketScape for MDR/MXDR for the Enterprise

Microsoft is named a Leader in the 2026 IDC MarketScape for MDR services. Discover how Microsoft Defender Experts MDR co

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

#malware #microsoft #ti #apt

威胁情报2026-08-10 发布INFO

DeadLock ransomware: Breaking down a Rust-based encryptor with decentralized recovery infrastructure

Microsoft Threat Intelligence examines DeadLock ransomware, an emerging financially motivated operation distinguished by

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

#ti #apt #microsoft #malware

威胁情报2026-08-07 发布INFO

Inside the Modern SOC: The Identity Front Door

Identity-based attacks drive 90% of incidents. Learn how modern attackers exploit identities and what SOC leaders can do

历史摘要 · 未重新核验 · Palo Alto Unit 42

#unit42 #paloalto #apt #malware

威胁情报2026-08-07 发布INFO

5 High-Impact Use Cases for Falcon Onum

历史摘要 · 未重新核验 · CrowdStrike

#crowdstrike #apt #edr

威胁情报2026-08-07 发布INFO

Falcon AIDR Now Protects Copilot Studio Agents and Claude CodeJul 30, 2026

历史摘要 · 未重新核验 · CrowdStrike

#crowdstrike #apt #edr

威胁情报2026-08-06 发布INFO

ChainDrop: Inside a Self-Propagating npm Worm

Analysis of ChainDrop, an npm supply chain worm extracting GitHub Actions runner secrets and using Ethereum smart contra

历史摘要 · 未重新核验 · Palo Alto Unit 42

#malware #paloalto #apt #unit42

威胁情报2026-08-06 发布INFO

Token Jacking: Cybercriminals Could Be Stealing Your AI Resources

Discover how attackers hijack AI tokens to fuel gray market transfer stations by stealing developer API keys. The post T

历史摘要 · 未重新核验 · Palo Alto Unit 42

#malware #apt #paloalto #unit42

威胁情报2026-08-05 发布INFO

Microsoft named a Leader in the KuppingerCole Leadership Compass for Cloud Native Application Protection Platforms (CNAPP)

Learn why KuppingerCole named Microsoft a Leader in its Leadership Compass: Cloud Native Application Protection Platform

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

#apt #ti #microsoft #malware

威胁情报2026-08-04 发布INFO

ChainDrop supply chain compromise: Anatomy of a self-propagating worm

A credential-stealing worm hidden in more than 400 compromised npm packages automatically spread across software ecosyst

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

#apt #ti #malware #microsoft

威胁情报2026-08-04 发布INFO

Advance Zero Trust for AI: New tools and guidance to secure AI agents and DevSecOps

Microsoft expands its Zero Trust for AI strategy to enhance security for AI and DevSecOps environments with new tools an

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

#apt #ti #malware #microsoft

威胁情报2026-08-04 发布INFO

128 Seconds to disruption: Microsoft Defender stops ransomware at QNET

Microsoft Defender automatically isolated a compromised QNET endpoint in 128 seconds, stopping a multi-stage attack befo

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

#apt #ti #malware #microsoft