EvilTokens: A phishing attack that doesn’t steal your password
A phishing kit subverting Microsoft’s legitimate authentication flow lets attackers break into accounts without stealing
#APT
共收录 564 条相关情报。
← 返回所有主题How to Protect Identities and Sessions from Infostealers
How to Protect Identities and Sessions from Infostealers
June 2026 Patch Tuesday: Microsoft Patches 206 Vulnerabilities Including Three Publicly Disclosed Zero-DaysJun 09, 2026
June 2026 Patch Tuesday: Microsoft Patches 206 Vulnerabilities Including Three Publicly Disclosed Zero-DaysJun 09, 2026
Threat IntelligenceNorth Korea-Nexus Threat Actor Compromises Widely Used Axios NPM Package in Supply Chain AttackBy Google Threat Intelligence Group • 16-minute read
Threat IntelligenceNorth Korea-Nexus Threat Actor Compromises Widely Used Axios NPM Package in Supply Chain AttackBy Goo
Tracing Digital Intent: New MacOS Tahoe 26 Artifact Discovered
Unit 42 has discovered a new macOS Tahoe 26 forensic artifact that tracks user menu selections across the operating syst
CISA Adds One Known Exploited Vulnerability to Catalog
CVE-2026-35273
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active e
Yarbo Android/iOS Mobile Application and Cloud Infrastructure
CVE-2026-10557 · CVE-2026-7368
2026年6月11日，CISA发布了一份关于Yarbo Android/iOS移动应用及其云基础设施的工业控制系统（ICS）公告。该公告披露了两个高危漏洞：CVE-2026-10557（硬编码凭据，CVSS 9.8）和CVE-2026-73
Brickcom Cameras
CVE-2026-50005 · CVE-2026-50245
美国网络安全和基础设施安全局（CISA）发布ICS公告，披露Brickcom摄像头产品中存在两个高危漏洞。CVE-2026-50245涉及/ONVIF端点缺少关键功能认证，允许远程未授权攻击者访问实时快照图像；CVE-2026-50005则
CISA Adds One Known Exploited Vulnerability to Catalog
CVE-2026-10520
2026年6月11日，美国网络安全和基础设施安全局（CISA）将CVE-2026-10520（Ivanti Sentry操作系统命令注入漏洞）添加到其已知被利用漏洞（KEV）目录中，原因是存在主动利用的证据。该漏洞影响Ivanti Sent
Naxclow IoT Platform
CVE-2026-50108 · CVE-2026-42947 · CVE-2026-50101
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to impersonate devices, inter
Trust No Skill: Integrity Verification for AI Agent Supply Chains
Protect enterprise AI agents from supply chain risks by auditing third-party skills for hidden vulnerabilities and multi
OceanLotus: From external espionage to domestic targeting
A shift in operational pattern of the infamous Vietnam-aligned APT group
Detecting CVE-2026-20929: Kerberos Authentication Relay via CNAME Abuse
CVE-2026-20929
Detecting CVE-2026-20929: Kerberos Authentication Relay via CNAME Abuse
CrowdStrike Falcon Cloud Security Delivered 264% ROI Through Unified Cloud Protection
CrowdStrike Falcon Cloud Security Delivered 264% ROI Through Unified Cloud Protection
CrowdStrike Launches Falcon OverWatch for Defender
CrowdStrike Launches Falcon OverWatch for Defender
ISO 42001:2023 and the New Reality of Cloud AI Data RiskJun 04, 2026
ISO 42001:2023 and the New Reality of Cloud AI Data RiskJun 04, 2026
3 Principles to Safely Scale Agentic AIJun 05, 2026
3 Principles to Safely Scale Agentic AIJun 05, 2026
Threat IntelligenceM-Trends 2026: Data, Insights, and Strategies From the FrontlinesBy Jurgen Kutscher • 8-minute read
Threat IntelligenceM-Trends 2026: Data, Insights, and Strategies From the FrontlinesBy Jurgen Kutscher • 8-minute read
Blinding the Watchmen: Abusing Cloud Logging Services for Defense Evasion and Visibility
Unit 42 research examines attack scenarios targeting cloud logging services. Learn how to defend against log manipulatio
Reconstructing AI activity in investigations
Learn how to investigate AI activity in Microsoft 365 Copilot and Azure AI services using a structured, telemetry-driven