#APT

共收录 564 条相关情报。

威胁情报2026-05-07 发布INFO

When prompts become shells: RCE vulnerabilities in AI agent frameworks

New research exposes how prompt injection in AI agent frameworks can lead to remote code execution. Learn how these vuln

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

#microsoft #malware #ti #apt

威胁情报2026-05-07 发布INFO

World Passkey Day: Advancing passwordless authentication

This World Passkey Day, read how Microsoft is advancing passkey adoption to replace passwords, cut phishing risk, and de

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

#microsoft #malware #ti #apt

威胁情报2026-05-07 发布INFO

MAXHUB Pivot Client Application

CVE-2026-6411

CISA于2026年5月7日发布ICS公告（ICSA-26-127-01），披露MAXHUB Pivot客户端应用（版本低于v1.36.2）存在一个高危漏洞（CVE-2026-6411），CVSS v3.1基础评分7.3。该漏洞源于应用程序

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

#advisory #conti #apt #government #cisa

威胁情报2026-05-07 发布INFO

CISA Adds One Known Exploited Vulnerability to Catalog

CVE-2026-6973

2026年5月7日，美国网络安全和基础设施安全局（CISA）将CVE-2026-6973添加到已知被利用漏洞（KEV）目录中。该漏洞影响Ivanti Endpoint Manager Mobile（EPMM），属于不当输入验证漏洞，已被攻击

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

#advisory #conti #apt #government #cisa

威胁情报2026-05-07 发布INFO

Threat Brief: Exploitation of PAN-OS Captive Portal Zero-Day for Unauthenticated Remote Code Execution

CVE-2026-0300

Unit 42 details CVE-2026-0300, a buffer overflow vulnerability in the PAN-OS User-ID Authentication Portal. Read now for

历史摘要 · 未重新核验 · Palo Alto Unit 42

#apt #malware #paloalto #unit42

威胁情报2026-05-06 发布INFO

Microsoft named an overall leader in KuppingerCole Analyst’s 2026 Emerging AI Security Operations Center (SOC) report

Microsoft is excited to be named an Overall Leader, and the Market Leader in the Kuppinger Cole Analyst’s 2026 Emerging

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

#microsoft #malware #apt #ti

威胁情报2026-05-06 发布INFO

ClickFix campaign uses fake macOS utilities lures to deliver infostealers

Threat actors are targeting macOS users with fake utility fixes that trick them into running malicious Terminal commands

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

#microsoft #malware #apt #ti

威胁情报2026-05-06 发布INFO

CISA Adds One Known Exploited Vulnerability to Catalog

CVE-2026-0300

2026年5月6日，美国网络安全与基础设施安全局（CISA）在其已知被利用漏洞（KEV）目录中新增了一个漏洞（CVE-2026-0300）。该漏洞存在于Palo Alto Networks的PAN-OS操作系统，属于越界写入类型，攻击者可能

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

#cisa #apt #advisory #conti #government

威胁情报2026-05-06 发布INFO

STARDUST CHOLLIMA Likely Compromises Axios npm Package

历史摘要 · 未重新核验 · CrowdStrike

#edr #apt #crowdstrike

学术论文2026-05-06 发布INFO

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis.

本文提出 KnowHow，一种自动化应用 CTI 报告高级知识的在线溯源分析方法。现有攻击检测系统（如溯源分析）依赖底层系统事件（文件访问、网络连接等），而 CTI 报告中的知识以自然语言形式（如 ATT&CK 技术）描述，两者之间存在语义

历史摘要 · 未重新核验 · NDSS

#cti #threat-intelligence #provenance-analysis #apt

威胁情报2026-05-05 发布INFO

Copy Fail: What You Need to Know About the Most Severe Linux Threat in Years

CVE-2026-31431

Copy Fail (CVE-2026-31431) is a critical Linux kernel LPE that allows stealthy root access. This flaw impacts millions o

历史摘要 · 未重新核验 · Palo Alto Unit 42

#unit42 #paloalto #apt #malware

威胁情报2026-05-05 发布INFO

ABB B&R Automation Runtime

CVE-2025-11044

CISA发布了一份关于ABB B&R Automation Runtime的安全公告，披露了一个中等严重性漏洞（CVE-2025-11044）。该漏洞源于ANSL-Server组件中的资源分配无限制或限流问题（CWE-770），攻击者可利用

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

#government #apt #cisa #advisory

威胁情报2026-05-05 发布INFO

Johnson Controls CEM AC2000

CVE-2026-21661

CISA发布了关于Johnson Controls CEM AC2000访问控制系统的安全公告。该产品存在一个DLL劫持漏洞（CVE-2026-21661，CVSS 8.7，高危），攻击者可通过构造恶意DLL文件并诱使系统加载，从而将标准用

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

#government #apt #cisa #advisory

威胁情报2026-05-05 发布INFO

ABB B&R Automation Studio

CVE-2025-11043

CISA发布ICS咨询，披露ABB B&R Automation Studio版本6.5之前存在一个证书验证不当漏洞（CVE-2025-11043，CVSS 7.4）。该漏洞影响OPC-UA和ANSL over TLS客户端，由于服务器证书

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

#government #apt #cisa #advisory

威胁情报2026-05-05 发布INFO

Hitachi Energy PCM600

CVE-2018-1002208

View CSAF Summary Hitachi Energy is aware of a vulnerability that affects the Hitachi Energy PCM600 product versions lis

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

#conti #government #cisa #advisory #apt

威胁情报2026-05-05 发布INFO

ABB B&R PVI

CVE-2026-0936

View CSAF Summary ABB became aware of vulnerability in the product versions listed as affected in the advisory. An updat

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

#government #apt #cisa #advisory

威胁情报2026-05-05 发布INFO

Tycoon2FA Phishing-as-a-Service Platform Persists Following Takedown

历史摘要 · 未重新核验 · CrowdStrike

#apt #crowdstrike #edr

威胁情报2026-05-05 发布INFO

CrowdStrike Expands ChatGPT Enterprise Integration with Enhanced Audit Logging and Activity MonitoringApr 28, 2026

历史摘要 · 未重新核验 · CrowdStrike

#apt #crowdstrike #edr

威胁情报2026-05-04 发布INFO

Breaking the code: Multi-stage ‘code of conduct’ phishing campaign leads to AiTM token compromise

Microsoft Defender Research observed a large-scale credential theft campaign that exemplifies this trend, using code of

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

#malware #ti #microsoft #apt

威胁情报2026-05-04 发布INFO

CrowdStrike Achieves NCSC CIR Assurance for Incident Response

历史摘要 · 未重新核验 · CrowdStrike

#crowdstrike #apt #edr