#APT

共收录 564 条相关情报。

← 返回所有主题
威胁情报2026-05-21 发布INFO

ABB B&R Automation Runtime

CVE-2025-3449 · CVE-2025-11498 · CVE-2025-3448

View CSAF Summary An update is available that resolves a vulnerability identified by B&Rs internal security analysis in

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-05-21 发布INFO

ABB B&R PCs

CVE-2023-45237 · CVE-2023-45232 · CVE-2023-45234 · CVE-2023-45231 · CVE-2023-45230 · CVE-2023-45229 · CVE-2023-45235 · CVE-2023-45236 · CVE-2023-45233

View CSAF Summary ABB became aware of vulnerability in the product versions listed as affected in the advisory. An updat

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-05-20 发布INFO

Mini Shai Hulud: Compromised @antv npm packages enable CI/CD credential theft

Compromised @antv npm packages deploy the Mini Shai-Hulud payload to steal CI/CD secrets from Linux-based automation env

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

威胁情报2026-05-20 发布INFO

Securing the gaming culture of cultures

Read about the unique challenges and rewards of securing gaming platforms and how to better protect gaming communities.

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

威胁情报2026-05-20 发布INFO

Introducing RAMPART and Clarity: Open source tools to bring safety into Agent development workflow

The AI systems shipping inside enterprises today are fundamentally different from the ones we were building even two yea

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

威胁情报2026-05-20 发布INFO

CISA Adds Seven Known Exploited Vulnerabilities to Catalog

CVE-2026-45498 · CVE-2009-3459 · CVE-2010-0249 · CVE-2008-4250 · CVE-2026-41091 · CVE-2010-0806 · CVE-2009-1537

CISA于2026年5月20日将7个已知被利用的漏洞(KEV)添加到其已知被利用漏洞目录中。这些漏洞包括:CVE-2008-4250(Microsoft Windows缓冲区溢出漏洞)、CVE-2009-1537(Microsoft Dir

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-05-20 发布INFO

Tracking TamperedChef Clusters via Certificate and Code Reuse

Unit 42 analyzes TamperedChef malware clusters that use trojanized productivity apps and malvertising to deliver stealth

历史摘要 · 未重新核验 · Palo Alto Unit 42

威胁情报2026-05-20 发布INFO

CrowdStrike to Acquire Seraphic to Secure Work in Any Browser

CrowdStrike to Acquire Seraphic to Secure Work in Any Browser

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-05-19 发布INFO

Exposing Fox Tempest: A malware-signing service operation

Fox Tempest is a financially motivated threat actor operating a malware‑signing‑as‑a‑service (MSaaS) used by other cyber

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

威胁情报2026-05-19 发布INFO

Kieback & Peter DDC Building Controllers

CVE-2026-4293

2026年5月19日,美国CISA发布ICS公告(ICSA-26-139-05),披露Kieback & Peter DDC系列楼宇控制器中存在一个存储型跨站脚本(XSS)漏洞(CVE-2026-4293,CVSS v3 5.3)。该漏洞源

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-05-19 发布INFO

Siemens RUGGEDCOM APE1808 Devices

CVE-2026-0300

CISA 发布了一份关于 Siemens RUGGEDCOM APE1808 设备的安全公告,该设备因集成了 Palo Alto Networks PAN-OS 软件而受到 CVE-2026-0300 漏洞的影响。该漏洞位于 PAN-OS

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-05-19 发布INFO

ZKTeco CCTV Cameras

CVE-2026-8598

CISA发布了一份ICS公告(ICSA-26-139-04),披露了ZKTeco CCTV摄像头中存在一个高危漏洞(CVE-2026-8598)。该漏洞涉及摄像头的一个未文档化的配置导出端口,无需身份验证即可访问,导致敏感信息泄露,包括开放

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-05-19 发布INFO

ABB CoreSense HM and CoreSense M10

CVE-2025-3465

View CSAF Summary An update is available that resolves vulnerability in the product versions listed as affected in this

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-05-19 发布INFO

ScadaBR

CVE-2026-8605 · CVE-2026-8604 · CVE-2026-8602 · CVE-2026-8603

View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to perform unauthenticated re

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-05-19 发布INFO

The quest for greater tech independence

A complete decoupling from US technology is neither realistic nor necessary, but the changing environment does require n

历史摘要 · 未重新核验 · ESET

威胁情报2026-05-18 发布INFO

How Storm-2949 turned a compromised identity into a cloud-wide breach

Storm-2949 turned stolen credentials into a cloud-wide breach, moving from identity compromise to large-scale data theft

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

威胁情报2026-05-18 发布INFO

How to better protect your growing business in an AI-powered world

See how built-in security helps keep your growing business running, protect customer trust, and support growth. The post

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

威胁情报2026-05-15 发布INFO

CISA Adds One Known Exploited Vulnerability to Catalog

CVE-2026-42897

CISA于2026年5月15日将其已知被利用漏洞(KEV)目录新增一个漏洞CVE-2026-42897,该漏洞为Microsoft Exchange Server中的跨站脚本(XSS)漏洞。CISA根据已发现的在野利用证据将该漏洞列入KEV

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-05-15 发布INFO

Gremlin Stealer's Evolved Tactics: Hiding in Plain Sight With Resource Files

Unit 42 analyzes the evolution of Gremlin stealer. This variant uses advanced obfuscation, crypto clipping and session h

历史摘要 · 未重新核验 · Palo Alto Unit 42

威胁情报2026-05-15 发布INFO

Defending Against CORDIAL SPIDER and SNARKY SPIDER with Falcon Shield

Defending Against CORDIAL SPIDER and SNARKY SPIDER with Falcon Shield

历史摘要 · 未重新核验 · CrowdStrike