#APT

共收录 564 条相关情报。

← 返回所有主题
威胁情报2026-05-02 发布INFO

CrowdStrike 2026 Global Threat Report: The Evasive Adversary Wields AI

CrowdStrike 2026 Global Threat Report: The Evasive Adversary Wields AI

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-05-02 发布INFO

CVE-2026-31431: Copy Fail vulnerability enables Linux root privilege escalation across cloud environments

CVE-2026-31431

2026年5月,微软安全博客披露了一个影响Linux系统的高危漏洞CVE-2026-31431,命名为“Copy Fail”。该漏洞允许攻击者在云环境和Kubernetes工作负载中实现本地权限提升至root。漏洞根因在于Linux文件复制

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

威胁情报2026-05-01 发布INFO

Essential Data Sources for Detection Beyond the Endpoint

Unit 42 highlights the need for a comprehensive security strategy that spans every IT zone. Explore the full details her

历史摘要 · 未重新核验 · Palo Alto Unit 42

威胁情报2026-05-01 发布INFO

Microsoft Agent 365, now generally available, expands capabilities and integrations

​Today we’re announcing the general availability of Agent 365, plus previews of new capabilities to discover and manage

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

威胁情报2026-05-01 发布INFO

CISA Adds One Known Exploited Vulnerability to Catalog

CVE-2026-31431

2026年5月1日,美国网络安全与基础设施安全局(CISA)将一个新的漏洞CVE-2026-31431添加到其已知被利用漏洞(KEV)目录中。该漏洞存在于Linux内核中,属于“资源在不同领域之间错误转移”类型,可被恶意网络行为者用作频繁的

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-05-01 发布INFO

Careful Adoption of Agentic AI Services

CISA, in collaboration with the Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC) and other

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-05-01 发布INFO

The Art of Deception: How Threat Actors Master Typosquatting Campaigns to Bypass Detection

The Art of Deception: How Threat Actors Master Typosquatting Campaigns to Bypass Detection

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-05-01 发布INFO

GTIG AI Threat Tracker: Distillation, Experimentation, and (Continued) Integration of AI for Adversarial Use

GTIG AI Threat Tracker: Distillation, Experimentation, and (Continued) Integration of AI for Adversarial Use

历史摘要 · 未重新核验 · Mandiant

威胁情报2026-04-30 发布INFO

That AI Extension Helping You Write Emails? It’s Reading Them First

Unit 42 uncovers high-risk AI browser extensions. Disguised as productivity tools, they steal data, intercept prompts, a

历史摘要 · 未重新核验 · Palo Alto Unit 42

威胁情报2026-04-30 发布INFO

What’s new, updated, or recently released in Microsoft Security

Stay ahead of emerging threats with Microsoft’s newest security innovations and updates, delivered through the In the Lo

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

威胁情报2026-04-30 发布INFO

Email threat landscape: Q1 2026 trends and insights

In early 2026, email threats increased with a rise in credential phishing, QR code phishing, and CAPTCHA-gated campaigns

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

威胁情报2026-04-30 发布INFO

ABB AWIN Gateways

CVE-2025-13777 · CVE-2025-13778

2026年4月30日,CISA发布ICS Advisory ICSA-26-120-05,通报ABB AWIN网关中存在两个安全漏洞。受影响产品包括:运行固件版本2.0-0和2.0-1的ABB AWIN GW100 rev.2,以及运行固件

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-04-30 发布INFO

ABB Ability OPTIMAX

CVE-2025-14510

2026年4月30日,美国网络安全与基础设施安全局(CISA)发布关于ABB Ability OPTIMAX的工业控制系统(ICS)安全通告,涉及一个高危漏洞(CVE-2025-14510),CVSS 3.1评分为8.1。该漏洞存在于ABB

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-04-30 发布INFO

ABB PCM600

CVE-2018-1002208

ABB PCM600 是一款用于保护和控制 IED(智能电子设备)的管理软件,广泛应用于全球关键制造业。CISA 发布 ICS 公告(ICSA-26-120-02),披露了 ABB PCM600 中存在一个路径遍历漏洞(CVE-2018-1

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-04-30 发布INFO

ABB Edgenius Management Portal

CVE-2025-10571

View CSAF Summary Successful exploitation of this vulnerability could allow an attacker to send a specially crafted mess

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-04-30 发布INFO

ABB Ability Symphony Plus Engineering

CVE-2023-39417 · CVE-2023-5869

View CSAF Summary ABB became aware of vulnerability in the products versions listed as affected in the advisory. The ABB

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-04-30 发布INFO

CISA Adds One Known Exploited Vulnerability to Catalog

CVE-2026-41940

CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active e

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-04-30 发布INFO

ABB System 800xA, Symphony Plus IEC 61850

CVE-2025-3756

View CSAF Summary This vulnerability was privately reported relating to ABB’s implementation of the IEC 61850 communicat

历史摘要 · 未重新核验 · CISA Cybersecurity Advisories

威胁情报2026-04-30 发布INFO

This month in security with Tony Anscombe – April 2026 edition

Warnings about helpdesk impersonation scams and Iran-linked hackers targeting critical sectors in the US, plus the most

历史摘要 · 未重新核验 · ESET

威胁情报2026-04-29 发布INFO

8 best practices for CISOs conducting risk reviews

Embracing strong proactive security is something we can all do to mitigate our increased exposure to security threats. T

历史摘要 · 未重新核验 · Microsoft Threat Intelligence