#APT

共收录 564 条相关情报。

威胁情报2026-07-23 发布INFO

Email threat landscape: Q2 2026 trends and insights

In the second quarter of 2026, the continuing effects of Microsoft’s disruption of the Tycoon2FA phishing platform contr

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

#apt #conti #microsoft #malware #ti

威胁情报2026-07-23 发布INFO

Russian Global Webmail Espionage

Unit 42 details a Russian cyberespionage campaign targeting Zimbra webmail servers using JavaScript injection to steal

历史摘要 · 未重新核验 · Palo Alto Unit 42

#unit42 #paloalto #apt #malware

威胁情报2026-07-23 发布INFO

July 2026 Patch Tuesday: Microsoft Patches 622 Vulnerabilities Including Two Exploited Zero-DaysJul 14, 2026

历史摘要 · 未重新核验 · CrowdStrike

#apt #crowdstrike #edr

学术论文2026-07-23 发布INFO

Beyond Heavy Log Curation: Perplexity-Based APT Detection via Unsupervised, Context-Augmented Language Models

本论文提出了一种名为 CAPTAIN（Context-Augmented Perplexity-based Threat Activity log detectIoN）的 APT 检测方法。研究背景是高级持续性威胁（APT）检测的难点在于大

历史摘要 · 未重新核验 · arXiv cs.CR

#cs.LG #cs.AI #cs.CL #apt #log-analysis #perplexity

威胁情报2026-07-22 发布INFO

Real world incident response: Microsoft and AXA XL strengthen cyber resilience

Our collaboration with AXA XL brings Microsoft Incident Response services directly to cyber insurance policyholders, hel

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

#apt #ti #microsoft #malware

威胁情报2026-07-21 发布INFO

The Architecture of Agentic Defense: Inside the Falcon Platform

历史摘要 · 未重新核验 · CrowdStrike

#crowdstrike #edr #apt

威胁情报2026-07-21 发布INFO

Why AI Governance Without Guardrails Is TheaterJul 09, 2026

历史摘要 · 未重新核验 · CrowdStrike

#crowdstrike #edr #apt

学术论文2026-07-20 发布INFO

Are we there yet? An Industrial Viewpoint on Provenance-based Endpoint Detection and Response Tools.

本文首次从工业界视角系统评估了基于溯源的端点检测与响应（P-EDR）系统的有效性与局限性。研究通过一对一的专家访谈、在线问卷调查、相关文献调研以及系统性的测量实验四部分展开。结果显示，所有工业界专家均认为P-EDR系统比传统EDR更有效，但

历史摘要 · 未重新核验 · ACM CCS

#edr #apt #provenance

学术论文2026-07-18 发布INFO

APT to Disagree: A Comparative Analysis of Attribution in Commercial TI.

本文针对商业威胁情报（CTI）中高级持续性威胁（APT）归因的一致性问题展开系统性比较研究。研究背景：准确归因对于安全团队制定针对性防御策略至关重要，但不同 CTI 供应商对同一攻击事件的归因结果经常存在分歧，这可能导致资源浪费和防御盲点。

历史摘要 · 未重新核验 · IEEE S&P

#threat-intelligence #attribution #comparative-analysis #APT

威胁情报2026-07-17 发布INFO

Microsoft at Black Hat USA 2026: Defending trust in the age of AI and supply chain attacks

Join Microsoft Security at Black Hat USA 2026 for supply chain research, hands-on security experiences, expert conversat

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

#apt #malware #ti #microsoft

威胁情报2026-07-17 发布INFO

Three Steps to the Terminal: A Siemens ROX II Zero-Day Trilogy

A technical analysis of three chained zero-day vulnerabilities in Siemens ROX II OT switches that allow privilege escala

历史摘要 · 未重新核验 · Palo Alto Unit 42

#unit42 #malware #apt #paloalto

威胁情报2026-07-16 发布INFO

ACR Stealer: Two observed intrusion chains amid increased threat activity

From late April 2026 to mid-June 2026, Microsoft Defender Experts observed increased ACR Stealer activity across custome

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

#apt #malware #ti #microsoft

威胁情报2026-07-16 发布INFO

AI, Automation and Attacks: Unpacking the Unit 42 2026 Global Incident Response Report

Explore Unit 42's perspectives on AI's impact on cybersecurity, including key updates since the 2026 Incident Response R

历史摘要 · 未重新核验 · Palo Alto Unit 42

#unit42 #malware #apt #paloalto

威胁情报2026-07-16 发布INFO

Least privilege for AI agents: Identity, access, and tool binding

As AI agents become more autonomous, strong identity, access, and auditing controls are critical to keeping them secure.

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

#apt #malware #ti #microsoft

威胁情报2026-07-16 发布INFO

CrowdStrike Uncovers New Prompt Injection TechniquesJul 07, 2026

历史摘要 · 未重新核验 · CrowdStrike

#crowdstrike #apt #edr

威胁情报2026-07-16 发布INFO

Unpacking the AsyncAPI npm supply chain compromise and import-time payload delivery

Threat actors compromised AsyncAPI packages and weaponized trusted CI/CD workflows to distribute malware through npm. Th

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

#malware #apt #ti #microsoft

威胁情报2026-07-15 发布INFO

The npm Threat Landscape: Attack Surface and Mitigations (Updated July 15)

Palo Alto Networks Unit 42 团队发布了关于 npm 生态系统威胁态势的更新分析报告。报告指出，自 Shai Hulud 事件后，npm 供应链攻击持续演进，出现了可蠕虫化的恶意软件、CI/CD 持久化机制以及多阶段

历史摘要 · 未重新核验 · Palo Alto Unit 42

#malware #apt #unit42 #paloalto

威胁情报2026-07-15 发布INFO

Turning threat intelligence into decisive action with Defender Experts

Security teams have never had more visibility, yet rarely have they felt more uncertain. Signal pours in from endpoints,

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

#malware #apt #ti #microsoft

威胁情报2026-07-15 发布INFO

TuxBot v3: Inside an IoT Botnet Framework With LLM-Assisted Development

TuxBot v3 Evolution, an IoT botnet framework built with LLMs. Read our analysis of its cross-compiled binaries, C2 archi

历史摘要 · 未重新核验 · Palo Alto Unit 42

#unit42 #malware #apt #paloalto

威胁情报2026-07-13 发布INFO

Defending SaaS-based applications against ShinyHunters OAuth abuse

Microsoft Threat Intelligence identified threat actor activity with overlapping tradecraft commonly associated with Shin

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

#ti #malware #microsoft #apt