Poster: When Logs Misbehave: Retrieving Known APTs from Noisy Graphs.
该论文聚焦于从系统活动图中检索已知高级持续性威胁(APT)活动的任务。在现实运维环境中,系统活动图(节点代表MITRE ATT&CK技术,边表示时间或资源级别的关联)常因检测不完整、技术误分类以及良性行为引入的结构伪影而包含噪声。传统基于精
共收录 564 条相关情报。
← 返回所有主题该论文聚焦于从系统活动图中检索已知高级持续性威胁(APT)活动的任务。在现实运维环境中,系统活动图(节点代表MITRE ATT&CK技术,边表示时间或资源级别的关联)常因检测不完整、技术误分类以及良性行为引入的结构伪影而包含噪声。传统基于精
Your business may be small, but its attack surface is anything but. Readiness is the first step to resilience.
Microsoft Threat Intelligence identified an active multi-stage intrusion campaign targeting hospitality organizations in
Government entities and critical infrastructure were targeted for espionage in SE Asia by attackers using a hybrid toolk
Microsoft named a Leader in the Forrester Wave™: Endpoint Management Platforms, Q2 2026, with the highest scores in the
ESET Research analyzes Gamaredon’s new toolset and the group’s growing reliance on legitimate online services to hide it
Learn how CNAPP platforms are helping organizations prioritize exploitable risks, reduce exposure, and operationalize se
ESET researchers assisted in the global disruption of the Amadey botnet and Stealc infostealer, providing technical anal
On June 24, 2026, Microsoft’s Digital Crimes Unit (DCU) facilitated the takedown, suspension, and blocking of domains th
Unit 42's analysis of ClawHub revealed evasive malicious skills bypassing automated scanners to deploy infostealers and
CrowdStrike Named a Leader in Identity Threat Detection and Response
CrowdStrike Expands Real-Time Cloud Detection and Response to Google Cloud
Falcon Exposure Management Now Available for Third-Party EnvironmentsJun 16, 2026
After Executive Order 14409: Next Steps for Securing AIJun 17, 2026
Unit 42 research details how attackers could exploit global name uniqueness in bucket hijacking to redirect cloud data s
What happens when threat actors target what AI remembers? Microsoft breaks down the risks and the defenses. The post Gua
Ransomware case reveals two parallel threat actors, blending tactics and evasion—showing why isolated signals can often
AutoJack is a novel exploit chain showing how a single malicious webpage can turn an AI browsing agent into a remote cod
New Forrester Total Economic Impact™ study shows Microsoft Security consolidation delivers ROI, lowers risk, and prepare
ESET Research shares the results of a months-long investigation into the suite of EDR killers maintained by the RaaS gan