Human Factors in Cybersecurity in Icelandic Small and Medium-sized Enterprises
本研究通过问卷调查（N=130）探讨了冰岛公共和私营部门组织（包括关键基础设施提供商）在网络安全中面临的人为因素挑战。研究发现，从管理层视角来看，人为因素被强烈视为安全障碍，包括缺乏充分的培训或安全意识、招聘困难、网络安全文化薄弱以及时间/
#cybersecurity
共收录 2711 条相关情报。
← 返回所有主题Dashlane password manager users locked out by brute force attacks
Multiple Dashlane users have been locked out of their accounts following brute-force attacks that attempted logins from
Miasma Supply Chain Attack Compromises Red Hat npm Packages with Credential-Stealing Worm
A new Mini Shai-Hulud supply chain attack campaign, codenamed Miasma, has compromised @redhat-cloud-services packages to
WordPress malware campaign hides payloads in Steam profiles
Nearly 2,000 WordPress websites were infected with malware that relies on Steam Community profile comments to hide comma
Microsoft investigates Office Apps, Teams file access issues
Microsoft says an ongoing incident is preventing users of its Teams collaboration platform and Office for the web cloud-
Race Against Time: Why Faster Vulnerability Alerts Matter
Attackers are exploiting vulnerabilities faster than many organizations can identify and patch them. SecAlerts explains
⚡ Weekly Recap: New Linux Flaw, PAN-OS Exploit, AI-Powered Attacks, OAuth Phishing and More
Monday hit like a cron job with anger issues. A busted auth path here, a repo-side faceplant there, some "patched-ish"
Critical Windows Netlogon RCE flaw now exploited in attacks
The Centre for Cybersecurity Belgium (CCB), the country's national authority for cybersecurity, warned on Friday that th
Webinar tomorrow: From alert to resolution in network incident response
Network incidents are often detected quickly, but investigations and coordination can delay resolution. Join our webinar
China-Aligned Groups Ramp Up Attacks: Dragon Weave Hits Czech Republic & Taiwan
A new cyber espionage campaign codenamed Operation Dragon Weave has been observed targeting officials and citizens in th
Microsoft fixes outage affecting MFA setup, MySignIn service
Microsoft is working to address an ongoing incident preventing customers from setting up multi-factor authentication (MF
The Security Growth Platform: Why MSPs Are Moving Beyond vCISO Tools
Three years ago, the practical question for an MSP building a cybersecurity practice was which "vCISO platform" to buy.
Microsoft fixes KB5089549 Windows security update install issues
Microsoft has resolved a known issue causing installation failures and 0x800f0922 errors when deploying the May 2026 Win
OpenAI Codex Authentication Tokens Stolen in codexui-android npm Supply Chain Attack
Cybersecurity researchers have disclosed details of a new malicious supply chain campaign that's targeting developers us
Critical WP Maps Pro Flaw Actively Exploited to Create Admin Accounts
Threat actors are attempting to actively exploit a critical security flaw impacting WP Maps Pro, a WordPress plugin that
The Challenges and Opportunities with Cybersecurity Regulations: A Case Study of the US Electric Power Sector.
该论文以美国电力行业为案例，系统研究了网络安全法规在实际执行中面临的挑战与机遇。尽管法规旨在推动组织安全态势的改进，但鲜有研究深入探讨组织如何与法规互动及其遭遇的困难。作者通过文献综述、行业访谈或案例分析等方法（具体方法未在摘要中详述），识
A New Framework for Cybersecurity Refusals in AI Agents
该论文提出了首个针对AI代理在网络安全场景中设定拒绝边界的框架。背景是，基于LLM的代理系统（agentic scaffolds）在完成复杂、长期任务方面表现显著提升，但也带来了风险放大，尤其在网络安全领域。现有基准主要衡量代理执行攻击任务
WP Maps Pro bug exploited to create admin accounts on WordPress sites
Hackers are targeting WordPress websites running a vulnerable version of the WP Maps Pro plugin, which allows creating r
Dutch Authorities Dismantle Botnet Linked to 17 Million Infected Devices
Dutch authorities have announced the takedown of a botnet that enslaved millions of infected devices, including computer
Palo Alto GlobalProtect VPN auth bypass flaw now exploited in attacks
CVE-2026-0257
Palo Alto Networks 发布警告，称其 PAN-OS 系统 GlobalProtect VPN 中存在一个认证绕过漏洞（CVE-2026-0257），目前已被攻击者利用，试图突破企业网络边界。该漏洞允许未认证的远程攻击者绕过认