CISA and Partners Urge Hardening Automatic Tank Gauge Systems
2026年6月2日，美国网络安全与基础设施安全局（CISA）联合联邦调查局（FBI）、国家安全局（NSA）、能源部（DOE）、环保署（EPA）、运输安全管理局（TSA）、交通部（DOT）及农业部（USDA）发布联合公告，指出近期观察到针对美
#APT
共收录 564 条相关情报。
← 返回所有主题CISA Adds Two Known Exploited Vulnerabilities to Catalog
CVE-2025-48595 · CVE-2022-0492
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active
High-Precision APT Malware Attribution with Out-of-Scope Resilience
该论文针对高级持续性威胁（APT）恶意软件归因问题提出了一种高精度方法。现有方法通常作为闭集分类器在有限数量的已知APT组上进行训练和评估，但在实际运营环境中，分类器可能遇到来自训练中未出现的组的样本，闭集分类器会错误地将这些样本归入已知组
Operation FlutterBridge: macOS Malvertising Campaign Spreads New FlutterShell Backdoor
Operation FlutterBridge is a malvertising campaign targeting macOS users. It distributed the new backdoor FlutterShell,
Shadow AI: The Hidden Risk Expanding Across the EnterpriseMay 29, 2026
Shadow AI: The Hidden Risk Expanding Across the EnterpriseMay 29, 2026
CISA Adds One Known Exploited Vulnerability to Catalog
CVE-2024-21182
2026年6月1日，美国网络安全与基础设施安全局（CISA）将CVE-2024-21182添加到已知被利用漏洞（KEV）目录中。该漏洞是Oracle WebLogic Server中的一个未指定漏洞，根据证据已被积极利用。CISA依据具有约
Enhanced Network Visibility: A Dive into the Falcon macOS Sensor's New Capabilities
Enhanced Network Visibility: A Dive into the Falcon macOS Sensor's New Capabilities
Measuring AI-Enabled Success: 3 KPIs Leaders Should TrackMay 22, 2026
Measuring AI-Enabled Success: 3 KPIs Leaders Should TrackMay 22, 2026
Malicious npm packages abuse dependency confusion to profile developer environments
A dependency confusion campaign leveraged 33 malicious npm packages to collect reconnaissance data from developer and bu
Microsoft is named a Leader in the 2026 Gartner® Magic Quadrant™ for Endpoint Protection
Microsoft is named a Leader in the 2026 Gartner® Magic Quadrant™ for Endpoint Protection. The post Microsoft is named a
CISA Adds One Known Exploited Vulnerability to Catalog
CVE-2026-0257
2026年5月29日，美国网络安全和基础设施安全局（CISA）将一个新的漏洞CVE-2026-0257添加到其已知被利用漏洞（KEV）目录中，原因是存在主动利用的证据。该漏洞是Palo Alto Networks PAN-OS的身份验证绕过
Typosquatted npm packages used to steal cloud and CI/CD secrets
The Mini Shai-Hulud campaign used malicious npm packages to target cloud and CI/CD credentials across developer environm
Out of the Crypt: The Evolving Cyber Extortion Economy
Unit 42 explores trends in data theft and extortion, outlining key strategies for organizations as frontier AI models ad
CISA Adds Three Known Exploited Vulnerabilities to Catalog
CVE-2026-48027 · CVE-2026-8398 · CVE-2026-45321
CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of acti
From poisoned search results to GPU mining: A cryptojacking campaign abusing ScreenConnect and Microsoft .NET utilities
Microsoft exposes a cryptojacking campaign using SEO poisoning and ScreenConnect to target high-performance PCs, with ma
ABB Terra AC
CVE-2025-5517
CISA发布了一份关于ABB Terra AC电动汽车充电桩漏洞的公告（ICSA-26-146-01）。该漏洞被编号为CVE-2025-5517，属于堆缓冲区溢出（CWE-122），CVSS评分为6.8（中等）。攻击者可以利用不安全的HTT
Eppendorf BioFlo 320
CVE-2026-7251
CISA发布了一份针对Eppendorf BioFlo 320生物反应器的ICS医疗咨询（ICSMA-26-146-01），披露了一个关键漏洞CVE-2026-7251，CVSS评分9.8。该漏洞源于VNC服务器使用了硬编码密码（CWE-2
ABB AC500 V2
CVE-2025-7745
CISA发布了一份关于ABB AC500 V2可编程逻辑控制器（PLC）中缓冲区超读漏洞（CVE-2025-7745）的咨询通告。该漏洞影响AC500 V2固件版本2.5.2及更早版本（版本2.5.3于2016年发布并修复了该漏洞）。漏洞由
CISA Adds One Known Exploited Vulnerability to Catalog
CVE-2026-48172
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active e
ABB Ability Camera Connect
CVE-2023-47360 · CVE-2024-46461
View CSAF Summary ABB is aware of public reports of vulnerabilities in a 3rd party component VLC media player Version 2.