#APT 主题 - Cyber Security Daily Radar

威胁情报2026-08-04 发布INFO

The Frontier AI Vulnerability Burst: Industrializing Autonomous Zero-Day Discovery in Open-Source Software

Frontier AI is reshaping vulnerability discovery. Learn how our NOVA system found 14,000+ unknown vulnerabilities across

历史摘要 · 未重新核验 · Palo Alto Unit 42

#unit42 #paloalto #apt #malware

威胁情报2026-08-04 发布INFO

Almost Half of Malware Samples Communicate Direct to IP

Nearly half of C2 malware bypasses DNS by connecting directly to IP addresses. Zero trust IP enforcement secures network

历史摘要 · 未重新核验 · Palo Alto Unit 42

#unit42 #paloalto #apt #malware

学术论文2026-08-04 发布INFO

MAGIC: Detecting Advanced Persistent Threats via Masked Graph Representation Learning.

本文提出 MAGIC，一种基于掩码图表示学习的自监督高级持续性威胁（APT）检测方法。现有基于数据起源图分析的 APT 检测方法存在三个主要缺陷：一是依赖包含攻击的数据和先验知识，难以应对未知攻击；二是无法充分提取起源图中丰富的上下文信息；

历史摘要 · 未重新核验 · USENIX Security

#apt #graph-representation-learning #self-supervised #provenance-analysis #anomaly-detection

威胁情报2026-08-03 发布INFO

Pass the Passkey: A Novel Attack Surface in Passwordless Authentication

Explore how passkey implementation gaps undermine security when relying parties fail to validate the User Verified flag,

历史摘要 · 未重新核验 · Palo Alto Unit 42

#unit42 #malware #paloalto #apt

威胁情报2026-08-03 发布INFO

Now Live: The CrowdStrike 2026 Financial Services Threat Landscape Report

历史摘要 · 未重新核验 · CrowdStrike

#apt #crowdstrike #edr

威胁情报2026-07-31 发布INFO

CaptiveCrunch: Midnight Blizzard targets travelers worldwide for malware delivery and credential theft

Storm-2945, a sub-cluster of the Russian threat actor Midnight Blizzard, has been observed compromising the sign-in port

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

#apt #microsoft #malware #ti

威胁情报2026-07-31 发布INFO

The Xcode Assassin Returns: A Deep Dive Into the Latest XCSSET Version

Analysis of XCSSET v40 reveals a macOS malware targeting developers via Xcode. Unit 42 used advanced pattern matching an

历史摘要 · 未重新核验 · Palo Alto Unit 42

#malware #unit42 #paloalto #apt

威胁情报2026-07-30 发布INFO

Falcon Next-Gen SIEM Supports Third-Party EDR Tools, Starting with Microsoft Defender

历史摘要 · 未重新核验 · CrowdStrike

#edr #apt #crowdstrike

威胁情报2026-07-30 发布INFO

CrowdStrike Named a Leader in the First-Ever Gartner® Magic Quadrant™ for Cyberthreat Intelligence Technologies

历史摘要 · 未重新核验 · CrowdStrike

#edr #apt #crowdstrike

威胁情报2026-07-30 发布INFO

Falcon AIDR Detects Threats at the Prompt Layer in Kubernetes AI Applications

历史摘要 · 未重新核验 · CrowdStrike

#edr #apt #crowdstrike

威胁情报2026-07-30 发布INFO

Denying the Worm: Detecting SANDWORM_MODE and the Emerging Class of AI Toolchain Supply Chain AttacksJul 21, 2026

历史摘要 · 未重新核验 · CrowdStrike

#sandworm #edr #apt #crowdstrike

威胁情报2026-07-30 发布INFO

CrowdStrike Joins the Open Secure AI Alliance to Advance AI Safety and SecurityJul 27, 2026

历史摘要 · 未重新核验 · CrowdStrike

#edr #apt #crowdstrike

威胁情报2026-07-30 发布INFO

CrowdStrike Falcon Platform Helps Meet U.S. Government Mandates for CISA BOD-26-04Jul 22, 2026

历史摘要 · 未重新核验 · CrowdStrike

#edr #apt #crowdstrike

威胁情报2026-07-29 发布INFO

Better security starts with better questions

Learn how better questions, trusted AI, and human judgment help security leaders make confident decisions and build resi

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

#malware #apt #ti #microsoft

威胁情报2026-07-27 发布INFO

Rethinking security for the age of AI

The physics of cybersecurity are changing. Introducing security's new cyber stack: Project Perception. The post Rethinki

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

#apt #microsoft #malware #ti

威胁情报2026-07-27 发布INFO

Enhancing AI security through global AI red teaming

Microsoft's External Red Team Alliance (EXTRA) is a global AI security initiative designed to advance AI safety research

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

#apt #microsoft #malware #ti

学术论文2026-07-27 发布INFO

VulnGym: Evaluating Vulnerability Management Strategies against Advanced Persistent Threats

企业网络持续面临高级持续性威胁（APT）的攻击，攻击者利用软件漏洞逐步渗透关键资产。随着披露的漏洞数量增长，资源受限的组织必须优先修补哪些漏洞。现有的漏洞优先级标准（如CVSS）对每个漏洞独立评分，无法评估修补策略在对抗随时间在网络中推进的

历史摘要 · 未重新核验 · arXiv cs.CR

#apt #vulnerability-management #simulation #reinforcement-learning

威胁情报2026-07-27 发布INFO

Falcon Next-Gen SIEM Simplifies Onboarding with Sensor-Native Log Collection

历史摘要 · 未重新核验 · CrowdStrike

#apt #crowdstrike #edr

威胁情报2026-07-27 发布INFO

AIDR: How CrowdStrike Is Defining the Next Era of CybersecurityJul 15, 2026

历史摘要 · 未重新核验 · CrowdStrike

#apt #crowdstrike #edr

威胁情报2026-07-27 发布INFO

CrowdStrike Falcon Platform Helps Meet U.S. Government Mandates for CISA BOD-26-04Jul 22, 2026

历史摘要 · 未重新核验 · CrowdStrike

#apt #crowdstrike #edr