#APT 主题 - Cyber Security Daily Radar

威胁情报2026-06-09 发布INFO

Schneider Electric EcoStruxure Panel Server

CVE-2026-6866

2026年6月9日，美国网络安全与基础设施安全局（CISA）发布了施耐德电气（Schneider Electric）EcoStruxure Panel Server系列产品中存在的一个高危漏洞公告（ICSA-26-160-03）。该漏洞编号

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

#advisory #government #apt #cisa

威胁情报2026-06-09 发布INFO

Schneider Electric Modicon Network Managed Switches

CVE-2024-3596

2026年6月9日，CISA发布了一份关于施耐德电气Modicon系列网络管理型交换机中RADIUS协议漏洞的安全公告。该漏洞编号为CVE-2024-3596，属于通信通道消息完整性执行不当（CWE-924）。当交换机的RADIUS服务器消

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

#advisory #government #apt #cisa

威胁情报2026-06-09 发布INFO

CISA Adds Three Known Exploited Vulnerabilities to Catalog

CVE-2026-20245 · CVE-2026-7473 · CVE-2026-11645

CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of acti

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

#advisory #government #cisa #conti #apt

威胁情报2026-06-09 发布INFO

Siemens KACO Blueplanet Inverters

CVE-2025-40946 · CVE-2026-41125

View CSAF Summary KACO blueplanet Inverters contain multiple vulnerabilities that could allow an attacker to derive the

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

#advisory #government #apt #cisa

威胁情报2026-06-09 发布INFO

Cybercriminals: the 'auditors' you never hired

Every organisation gets audited. The question is who does the auditing.

历史摘要 · 未重新核验 · ESET

#eset #apt #malware

威胁情报2026-06-08 发布INFO

When “Hi, This Is IT” Comes Through Microsoft Teams

Attackers are increasingly targeting collaboration platforms like Microsoft Teams. Learn the risks and key steps to stre

历史摘要 · 未重新核验 · Palo Alto Unit 42

#paloalto #apt #unit42 #malware

威胁情报2026-06-08 发布INFO

AI brands as bait: How threat actors are using the AI hype in social engineering

As threat actors operationalize AI to accelerate attacks, they are also leveraging the wider global interest around AI i

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

#malware #ti #apt #microsoft

威胁情报2026-06-08 发布INFO

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CVE-2026-42271 · CVE-2026-50751

CISA于2026年6月8日更新了已知被利用漏洞（KEV）目录，新增两个被积极利用的漏洞：CVE-2026-42271（BerriAI LiteLLM命令注入漏洞）和CVE-2026-50751（Check Point安全网关认证不当漏洞）

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

#apt #advisory #conti #government #cisa

威胁情报2026-06-08 发布INFO

CrowdStrike FalconID Brings Phishing-Resistant MFA to Falcon Next-Gen Identity Security

历史摘要 · 未重新核验 · CrowdStrike

#crowdstrike #edr #apt

威胁情报2026-06-08 发布INFO

CrowdStrike Brings Enterprise-Grade Security to the AI Factory with NVIDIA Vera BlueField-4 STXJun 01, 2026

历史摘要 · 未重新核验 · CrowdStrike

#crowdstrike #edr #apt

威胁情报2026-06-06 发布INFO

CrowdStrike Scales AI-Native Agents Across Falcon Exposure Management with NVIDIAJun 01, 2026

历史摘要 · 未重新核验 · CrowdStrike

#crowdstrike #apt #edr

威胁情报2026-06-05 发布INFO

Securing CI/CD in an agentic world: Claude Code Github action case

Microsoft Threat Intelligence identified a prompt injection pathway in Claude Code GitHub Action that allowed access to

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

#microsoft #malware #apt #ti

威胁情报2026-06-05 发布INFO

CISA Adds One Known Exploited Vulnerability to Catalog

CVE-2026-28318

2026年6月5日，美国网络安全和基础设施安全局（CISA）将CVE-2026-28318添加到已知被利用漏洞目录（KEV）。该漏洞影响SolarWinds Serv-U产品，属于不受控制的资源消耗漏洞（Uncontrolled Resou

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

#government #advisory #apt #cisa #conti

威胁情报2026-06-04 发布INFO

Updating the taxonomy of failure modes in agentic AI systems: What a year of red teaming taught us

A surge in real-world attacks against agentic AI systems is reshaping how we think about risk. Based on 12 months of red

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

#microsoft #malware #apt #ti

威胁情报2026-06-04 发布INFO

Secure Shadow AI at the Control Plane with Falcon for ITJun 01, 2026

历史摘要 · 未重新核验 · CrowdStrike

#apt #edr #crowdstrike

威胁情报2026-06-04 发布INFO

Threat IntelligenceThe Proliferation of DarkSword: iOS Exploit Chain Adopted by Multiple Threat ActorsBy Google Threat Intelligence Group • 34-minute read

Threat IntelligenceThe Proliferation of DarkSword: iOS Exploit Chain Adopted by Multiple Threat ActorsBy Google Threat I

历史摘要 · 未重新核验 · Mandiant

#mandiant #apt #report

威胁情报2026-06-03 发布INFO

CISA Adds One Known Exploited Vulnerability to Catalog

CVE-2026-45247

2026年6月3日，美国网络安全与基础设施安全局（CISA）将编号为 CVE-2026-45247 的漏洞添加至其已知被利用漏洞（KEV）目录。该漏洞存在于 Mirasvit Full Page Cache Warmer 组件中，属于反序列

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

#advisory #apt #conti #cisa #government

威胁情报2026-06-03 发布INFO

Falcon for IT Supports Windows Secure Boot Certificate Lifecycle Management

历史摘要 · 未重新核验 · CrowdStrike

#apt #crowdstrike #edr

威胁情报2026-06-03 发布INFO

Preinstall to persistence: Inside the Red Hat npm Miasma credential-stealing campaign

Microsoft Threat Intelligence 披露了一起大规模 npm 供应链攻击活动，代号 Miasma。攻击者入侵了 Red Hat 的 npm 组织 @redhat-cloud-services，篡改了超过 90 个版本

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

#ti #apt #malware #microsoft

威胁情报2026-06-02 发布INFO

Microsoft Build 2026: Securing code, agents, and models across the development lifecycle

Discover how Microsoft enables fast, secure AI development with MDASH and new security capabilities. The post Microsoft

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

#apt #malware #microsoft #ti