#APT 主题 - Cyber Security Daily Radar

威胁情报2026-07-13 发布INFO

Microsoft Entra ID security updates: Passkeys are the default authentication method in Entra ID

Microsoft Entra ID makes passkeys the default sign-in experience and introduces a new model for SMS and voice authentica

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

#ti #malware #microsoft #apt

威胁情报2026-07-10 发布INFO

No Manners Here: The Ruthless Rise of The Gentlemen Ransomware

Unit 42 explores The Gentlemen ransomware operations, revealing the affiliate model driving its rapid growth. Learn more

历史摘要 · 未重新核验 · Palo Alto Unit 42

#malware #unit42 #apt #paloalto

威胁情报2026-07-10 发布INFO

Securing our future: July 2026 progress report on Microsoft’s Secure Future Initiative

Microsoft’s latest Secure Future Initiative report outlines progress on secure foundations, AI-powered defense, and futu

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

#malware #apt #ti #microsoft

威胁情报2026-07-09 发布INFO

GigaWiper: Anatomy of a destructive backdoor assembled from multiple malware

GigaWiper is a destructive backdoor that combines multiple wiping and ransomware-like capabilities into a single operati

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

#apt #malware #ti #microsoft

威胁情报2026-07-09 发布INFO

How to Stop AI-Driven Data Loss

历史摘要 · 未重新核验 · CrowdStrike

#edr #apt #crowdstrike

威胁情报2026-07-08 发布INFO

Protecting Microsoft at AI speed: How SFI proactively hardens our cloud

微软于2026年7月8日发布博文，介绍其安全未来计划（Secure Future Initiative, SFI）如何利用AI速度主动加固云服务。SFI将威胁知识、运营框架与安全需求相结合，定义了完善云服务的防御标准。文章强调，满足这些标准

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

#ti #conti #apt #malware #microsoft

威胁情报2026-07-07 发布INFO

Vidar Stealer Unmasked: Code Signing Abuse, Go Loaders and File Inflation

A cybercrime campaign combined a loader-as-a-service framework and DLL sideloading via a Go-compiled fake MpClient.dll,

历史摘要 · 未重新核验 · Palo Alto Unit 42

#paloalto #malware #apt #unit42

威胁情报2026-07-07 发布INFO

4 Ways Businesses Use CrowdStrike Charlotte AI to Transform Security Operations

历史摘要 · 未重新核验 · CrowdStrike

#apt #edr #crowdstrike

威胁情报2026-07-06 发布INFO

5 insights from Frost & Sullivan’s 2025 Frost Radar™ for Cloud Security Posture Management

该文章基于Frost & Sullivan发布的2025年云安全态势管理（CSPM）Frost Radar™报告，提炼了五项关键洞察。报告指出，CSPM正从传统的“时间点合规”工具向“持续风险管理”平台演进。核心变化包括：1）CSPM不再仅

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

#conti #microsoft #apt #malware #ti

威胁情报2026-07-02 发布INFO

How We Added WebAuthn to a Browser-Based RDP Client

A look inside the reverse-engineering journey of building the first RDP client outside of Windows to support WebAuthn re

历史摘要 · 未重新核验 · Palo Alto Unit 42

#malware #apt #paloalto #unit42

威胁情报2026-07-01 发布INFO

Microsoft named a leader in the Frost Radar for cloud and application runtime security

Frost & Sullivan names Microsoft a leader as cloud and application security converge into unified, runtime risk reductio

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

#apt #microsoft #ti #malware

威胁情报2026-07-01 发布INFO

CrowdStrike Named a Leader in 2026 Gartner® Magic Quadrant™ for Endpoint Protection for Seventh Consecutive Time

历史摘要 · 未重新核验 · CrowdStrike

#apt #crowdstrike #edr

威胁情报2026-07-01 发布INFO

Phantom Squatting: AI-Hallucinated Domains as a Software Supply Chain Vector

Attackers can exploit LLM domain hallucinations through phantom squatting to target supply chains. Read the analysis to

历史摘要 · 未重新核验 · Palo Alto Unit 42

#apt #unit42 #paloalto #malware

威胁情报2026-06-30 发布INFO

Accelerating the quantum-safe timeline

We’re accelerating quantum-safe readiness—and sharing what organizations can do now to transition earlier and with confi

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

#apt #microsoft #ti #malware

威胁情报2026-06-30 发布INFO

What’s new in Microsoft Security: June 2026

This month’s updates help security and IT teams strengthen identity and multicloud foundations, protect data wherever it

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

#microsoft #malware #ti #apt

威胁情报2026-06-30 发布INFO

Securing AI agents: When AI tools move from reading to acting

MCP tool poisoning turns trusted AI agents into a control plane for data loss. Learn how threat actors manipulate tool d

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

#microsoft #malware #ti #apt

威胁情报2026-06-30 发布INFO

CrowdStrike Named a Leader in Frost & Sullivan 2026 Radar for Cloud-Native Application Protection Platforms

历史摘要 · 未重新核验 · CrowdStrike

#apt #crowdstrike #edr

威胁情报2026-06-29 发布INFO

Chromium extension uses AI‑related branding to redirect browser search

A malicious Chromium-based extension that spoofs the AI-powered answer engine Perplexity AI redirects browser search tra

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

#apt #ti #microsoft #malware

威胁情报2026-06-29 发布INFO

Inside the inbox: Why cybercriminals want to break into your email account

Your inbox is an identity system all of its own: whoever owns it may own a lot more

历史摘要 · 未重新核验 · ESET

#apt #eset #malware

学术论文2026-06-29 发布INFO

Expert Insights into Advanced Persistent Threats: Analysis, Attribution, and Challenges.

本文通过半结构化访谈15名不同角色和专业背景的安全从业者，探讨了高级持续性威胁（APT）分析、归因及面临的挑战。研究发现，从业者在APT归因中采用三层方法，每层有各自目标和挑战。他们通常更关注理解对手的战术、技术和程序（TTP）及动机，而非

历史摘要 · 未重新核验 · USENIX Security

#apt #threat-intel #attribution