本次输入并不包含可用的威胁情报内容。记录的标题为“京公网安备 11000002002063号”，这是中国大陆网站 ICP/公安联网备案的编号文本，来源 URL 指向 beian.gov.cn 的备案信息查询接口，而非任何安全报告正文。输入中声明的 source_name 为“360CERT 安全报告”，published_at 为 2026-09-16，tags 为 360、malware、apt、report，但正文摘要字段为空，cves 为空，未提供任何可能的攻击组织、恶意软件家族、受害行业、受害地区或 ATT&CK 技术映射，iocs_present 标记为 false。也就是说：标签暗示可能与 360 相关的恶意软件/APT 报告有关，但标题、URL 与标签三者互相矛盾，无法确认其真正指向的是哪一篇报告、哪个攻击活动或哪个漏洞。从防御视角看，该条目不具备任何可执行价值：既无法据此归因，也无法据此构造检测规则、狩猎假设或补丁优先级。建议将其视为数据采集/解析管道的噪声或抓取错误处理，回退到原始信源重新获取有效正文后再做分析。在获得有效正文之前，不应基于此条目生成任何 IOC、封禁清单或告警升级动作，避免把备案号误当成威胁指标污染内部情报库。

本条输入并非威胁情报内容，而是一个企业资质备案页面的元数据。标题“京网文〔2020〕6051-1195号”是北京市文化和旅游主管部门核发的《网络文化经营许可证》编号格式（京网文 + 年份 + 编号），说明该网页是 360 公司在其官网 360.cn 上公示经营资质与合规信息的静态页面（URL 路径 /licence1.html 亦印证这一点）。正文摘要为空，未包含任何关于攻击活动、恶意样本、漏洞、基础设施或受害者的描述。tags 中出现的 360、malware、apt、report 更可能来自采集系统的默认标签或上游分类模板，而非页面本身内容；cves 为空、iocs_present 为 false、可能攻击者、恶意软件家族、行业、地区、ATT&CK 技术全部为空，进一步说明该条目不含可操作情报。published_at 显示为 2026-09-16，与许可证 2020 年核发的时间不符，推测该时间戳是爬虫抓取或数据入库时间，而非文档发布时间，因此不具备事件时序意义。综合判断：这是一条被错误采集、错误分类进入威胁情报流的“数据源噪声”，其真实内容是企业合规公示，与网络安全攻防无任何关联。对分析团队而言，正确的处置不是从中提取 TTP 或 IOC，而是将其标记为非情报（non-intel）并从情报库、看板与告警规则中剔除或降权，同时回溯采集配置（source_url 白名单、关键词规则、标签映射逻辑），避免同类资质页、备案页、法律声明页持续污染情报管道，造成分析人力浪费与误报。

该输入标题为“（总）网出证（京）字第281号”，来源标注为“360CERT 安全报告”，但实际链接指向 360.cn 的许可证页面（licence2.html），且 summary/body excerpt 为空。标题本身是中国的网络出版服务许可证编号格式，并非安全报告标题。标签虽包含 360、malware、apt、report，但没有任何实质性的威胁情报内容，包括攻击活动描述、战术工具链、受害者特征、CVE 编号、攻击者归因、恶意软件家族、ATT&CK 技术或 IOC 数据。经分析，这很可能是一条因数据采集或标签映射错误而产生的误报条目，而非真实的威胁报告。360CERT 本身是合法的安全应急响应团队，但此条目的内容与威胁情报无关。因此，无法从中提取任何可用于防御的线索。建议安全团队不要基于此条目采取行动，并检查数据源采集管道，修正标签映射逻辑，避免类似误报消耗分析资源。若确实存在对应的 360CERT 报告，应通过官方渠道重新获取正确内容。

本次输入不构成一篇可用的威胁情报文章。所提供的“标题”内容为“京ICP证080047号[京ICP备08010314号-6]”，这是中国大陆工业和信息化部ICP备案/许可证编号，属于网站合规备案信息，而非安全事件标题；source_url 指向 https://beian.miit.gov.cn/，即工信部备案管理系统官网，并非威胁情报发布页面；正文/摘要字段为空，未提供任何事件描述、攻击链、样本信息或技术分析。元数据中虽然带有 360、malware、apt、report 等标签，并标注来源为“360CERT 安全报告”，但这些标签与标题、正文、URL 之间完全无法互相印证，缺乏可支撑分析的最小信息量。同时，published_at 标注为 2026-09-16，属于未来时间戳，进一步提示该条记录很可能是采集流水线中的脏数据、模板占位记录或抓取错位（例如抓取到了备案页面的页脚文本），而非真实发布的安全报告。由于原文既未提及任何攻击组织、恶意软件家族、受害行业与地区，也未给出 CVE 编号、IOC 或 ATT&CK 技术编号，本条目无法用于归因、影响面评估或检测规则编写。任何基于该条目的推论（例如“360 发布了某 APT 报告”）都属于无依据的臆测，不应写入情报库或工单。建议将此条目标记为数据质量问题并回退到采集环节修复，重新获取真实的 360CERT 报告原文后再行分析。

Categories: Threat ResearchTags: advisory, vulnerability, Cisco

This article was first published on LinkedIn.Categories: AI Research, Threat ResearchTags: AI, AI Cybersecurity, Threat Research

Sophos 威胁研究团队发布分析博客，指出模块化恶意软件平台 Cyclops Blink 以"升级版"形态回归，其能力较此前版本有所扩展，本轮观察到的攻击目标为 Cisco Firewall Management Center（FMC，防火墙管理中心）设备。Cyclops Blink 属于典型的模块化、多组件恶意平台，历史上的主要宿主是路由器、防火墙等网络边缘设备，具备在设备上驻留、按需下发功能模块、与外部 C2 保持受控通信等特征；由于它是"框架式"设计，攻击者可在不更换主体植入的情况下持续扩展功能，这也是其被反复迭代、"回归"的技术基础。本次值得注意的变化在于受害者类型：FMC 是集中式管理平面，用于统一下发和审计大量受管防火墙的策略与配置。相比单台边缘设备失陷，管理平面被攻陷意味着攻击者可能获得对整片防火墙资产的策略视图与配置操作面，横向影响范围和排查难度都显著上升。原文给出的信息相对简略，未披露具体利用的 CVE、未提供 IOC 清单、未给出 ATT&CK 技术编号，也未对攻击者身份作明确归因；输入元数据中同时出现了 Clop、ransomware 等标签，与正文主题（Cyclops Blink / Cisco / Linux）并不一致，疑为自动打标误差，需人工复核后使用，不应据此把本次活动直接认定为勒索软件团伙所为。总体结论是：面向网络边界设备与集中管理平面的恶意软件活动仍在演进，防御方应把 FMC 一类管理平台纳入高价值资产清单并加强监控。

In this week's Threat Source newsletter, Joe explores why the word "burnout" often fails to capture the true toll of working in the cybersecurity industry and why we need better language to address it.

Microsoft examines an AI-assisted business email compromise campaign that used executive impersonation and fake invoices to target finance teams with ACH payment fraud. The post Protecting organizations from AI-assisted executive impersonation and invoice fraud appeared first on Microsoft Security Blog.

See how Microsoft Defender detects and disrupts AI-themed phishing, malware, and multi-stage attacks across the attack chain. The post Detect and disrupt AI-themed attacks with Microsoft Defender appeared first on Microsoft Security Blog.

Executive Summary In this research we introduce a prompt-crafting technique for bypassing quick LLM-based policy checks — using plain English (no emojis, base64, invisible formatting, etc.) A policy-violating payload (e.g. ”encrypt files in ~/Documents”, “give me a biohazard recipe”, “ignore all previous instructions and…”) is embedded in a specially crafted prose wrapper. An LLM with limited […]

Learn how root access on a compromised K8s node allows attackers to utilize SPIFFE/SPIRE metadata to spoof and harvest co-located workload identities. The post The Machine With Many Faces: Post-Exploitation Identity Misuse in SPIFFE/SPIRE appeared first on Unit 42.

Microsoft introduces the Cloud Web Applications Threat Matrix, a MITRE ATT&CK-aligned framework that helps defenders understand, prioritize, and mitigate threats to cloud-hosted web apps and serverless platforms. The post Threat matrix: Mapping threats across cloud web applications appeared first on Microsoft Security Blog.

Passkey-themed social engineering is being used to compromise identities and enable broader cloud attacks. Learn how threat actors establish MFA persistence, abuse Microsoft Graph for reconnaissance, and access SharePoint, OneDrive, and email data, along with key detection and mitigation guidance. The post Passkey-themed social engineering leads to identity and cloud compromise appeared first on M

Microsoft has released its monthly security update for September 2026, which includes 973 vulnerabilities affecting a range of products, including 113 that Microsoft marked as "critical."

Research by: Alexey Bukhteyev Key Takeaways Introduction Over the past several years, AI assistants have moved far beyond text generation. Modern systems can execute code, install additional dependencies, analyze user files, and access data through connected services. These capabilities significantly increase the practical value of LLMs, but they also change the security model: protecting user […]

We assess with moderate confidence that the attacks are not targeted at a particular organization, but are a part of a cryptocurrency and credentials-stealing operation using the Amatera stealer as the primary payload.

Cisco Talos is tracking a cryptocurrency-stealing campaign that abuses the Google Visualization API for command and control (C2), retrieving obfuscated JavaScript from a publicly published Google Sheets document and injecting it into the victim's browser session.

For the latest discoveries in cyber research for the week of 7th Setpember, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Thomson Reuters, a global information and technology company, has disclosed a breach of its C-Track court case-management platform affecting courts across 11 US states and Canada. An unauthorized party obtained C-Track files […] The post 7th Septemb

Sophos X-Ops takes a deep dive into an insidious piece of malwareCategories: Threat ResearchTags: rootkit, php, webshell

论文提出 SCRIPTIOC-BENCH，一个用于衡量大语言模型（LLM）从基于脚本的恶意软件中静态提取可操作威胁情报（IOC）能力的基准。脚本型恶意软件（如 JavaScript、PowerShell、VBScript）仍然是常见的攻击手段，其中往往包含 URL、域名、IP 地址和文件系统痕迹等 IOC。传统静态分析方法难以恢复这些指标，因为相关值可能分散或经过编码/混淆。尽管 LLM 在安全分析中展现出潜力，但其恢复 IOC 的能力尚未被系统研究。该基准包含 634 个经过人工验证的真实恶意脚本样本，覆盖四种 IOC 类型（URL、域名、IP、文件系统痕迹），并进一步将真实 IOC 按恢复层级分层，区分直接暴露的指标和需要解码或重构的指标。作者在该基准上评估了多种商业和开源 LLM，结果显示在没有执行代码的情况下，IOC 恢复对所有模型规模仍具挑战性：最强模型仅达到 65.4 的 F1 分数。为了刻画失败模式，论文引入了一个误报分类法，并用它比较各模型的错误分布。此外，作者在一个小型开源模型上研究了两种缓解措施——确定性字符串工具和任务特定微调——发现它们带来了互补的恢复增益，提高了精确率，并将错误转向基于样本的失配。本文核心贡献包括：构建了首个针对恶意脚本 IOC 静态提取的基准、量化了 LLM 在此任务上的性能瓶颈、提供了细粒度的误报分类，并验证了轻量级增强手段的有效性。适合安全研究者、威胁情报分析人员以及 LLM 安全应用开发者阅读。

这篇文章由微软安全博客发布，针对AI向客户自有环境及边缘设备下沉的趋势，提出了系统化的安全建议。主体观点认为，在客户拥有且可物理接触的硬件环境中部署Edge AI时，传统云端信任边界已不适用，需要在保护敏感数据、凭据和模型之前，先对底层的系统、软件和AI资产进行可信验证。文章内容很可能涉及基于硬件信任根和远程证明所构建的信任链，用于验证主机固件、操作系统、容器、微服务以及模型文件的完整性；同时建议通过模型签名、模型来源追踪、差分检测等方式来防范AI资产在实际运行环境中被篡改或替换。文章还强调在数据流入模型前应通过API鉴权、加密、脱敏或端侧策略隔离敏感数据与凭据，并对边缘节点施行基于零信任的访问控制与持续监视，将安全事件响应能力延伸至无人值守的远端。而且需要针对边缘AI设计不可变日志、异常行为和模型输出对比等功能，以应对物理侧信道和供应链定向攻击。原文并未披露具体漏洞名称、恶意软件家族或威胁组织，也未附上IOC，更多属于基础设施架构与信任模型建设指导。本文总结仅基于文章公开摘要，未能覆盖全部细节，但可帮助安全团队把握方向。

From engaging with cybercriminals to surviving a live Flamin’ Hot Cheetos taste test, Hazel reflects on the latest Beers with Talos with Azim, where they cover the full spectrum of what it takes to gather threat intel.

Invisible Unicode characters popularized for hiding instructions from AI models are now being used to obfuscate words before email filters parse them. The post ASCII smuggling crosses over from AI prompt injection to phishing evasion appeared first on Microsoft Security Blog.

Explore how attackers targeting Latin American entities use AI for data exfiltration and how basic OpSec errors allow defenders to disrupt operations. The post Attackers Expose Ongoing AI Tool Use Targeting Organizations in Latin America appeared first on Unit 42.

Microsoft Threat Intelligence observed a human-operated intrusion campaign that abuses Microsoft Teams external collaboration to impersonate IT support, gain remote access, and deploy a Node.js-based implant. Learn how attackers move from social engineering to lateral movement using legitimate tools, and how Microsoft Defender helps detect and disrupt the activity. The post Impersonating IT suppor

Research by: Amit Yardeni Key Points Introduction Since mid-2025, Check Point Research has tracked a sustained campaign against Brazilian organizations. The tradecraft points to a Chinese-speaking cybercrime group connected to Earth Berberoka, an actor first documented targeting gambling sites across Asia. Once inside a victim, the group deploys a broad Linux toolkit: a custom downloader, several

Using autonomous AI agents, an attacker breached an enterprise network in a matter of hours. Understand how to address and defend against agentic attacks. The post An AI-Assisted Cyber Attack: Inside a Unit 42 Investigation appeared first on Unit 42.

Categories: Threat ResearchTags: advisory, vulnerability, SonicWall

An active campaign is impersonating legitimate software vendors to deliver malware through look-alike download pages and regenerated installer archives. Microsoft Defender Experts shares observed attack techniques, Defender XDR detections, indicators of compromise, and practical mitigations to help organizations identify, block, and respond to this threat. The post Counterfeit installers to system

Cyber resilience starts before a crisis. Gain practical insights from DART to strengthen readiness and response. The post Cybersecurity IR Workshop: The workshop you shouldn’t miss appeared first on Microsoft Security Blog.

Analysis of 15 intrusions revealed tradecraft used by GOLD SHERWOOD affiliatesCategories: Threat ResearchTags: ransomware as a service, The Gentlemen, GOLD SHERWOOD, Ransomware

Research by: hasherezade Key Points Introduction JSCeal is a stealer delivered as compiled V8 bytecode (.jsc) and executed by a bundled Node.js runtime, targeting cryptocurrency applications (other vendors also tag it with the names WEEVILPROXY or MeadowLocust). Its campaign activity dates back to March 2024 [1]; Check Point Research has been tracking the malware since early […] The post Breaking

For the latest discoveries in cyber research for the week of 31st August, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Manchester Airports Group, the UK operator of Manchester, London Stansted, and East Midlands airports, has disclosed a cyberattack that exposed data belonging to about 8.7 million customers. The compromised information includes contact details, […] Th

Learn how the Spring Ring campaign abuses Microsoft Teams and voice phishing to deploy malware and target enterprise domain controllers. The post Spring Ring: An Inside Look at Voice Phishing Campaigns in Microsoft Teams appeared first on Unit 42.

Details about the Hugging Face hack, critical infrastructure under attack, a spoofed in-flight Wi-Fi network, and more of this month's cybersecurity news

Microsoft Threat Intelligence provides analysis of a ClickFix campaign that uses fake CAPTCHA prompts, DLL sideloading, and a reverse tunnel, with detections and hunting guidance. The post TerminalFix campaign deploys a reverse tunnel through multistage intrusion appeared first on Microsoft Security Blog.

New research reveals that AI safety refusal lives in a thin neural layer, highlighting the critical need for external, multi-layered security. The post Perturbation Probing: A New Diagnostic for the Fragility of LLM Safety appeared first on Unit 42.

In his first Threat Source newsletter, David Bianco explores the critical need for operational sovereignty in customizing AI guardrails to maintain the defender’s advantage.

This month’s updates provide new capabilities to help organizations gain insights into agent activity, expand security coverage across supported environments, and enhance security management across their environments. The post ​​​​​​What’s new in Microsoft Security: August 2026 appeared first on Microsoft Security Blog.

Learn the basics of what obfuscation is, why a researcher would try to reverse it, and several ways to approach the problem.

It’s getting cheaper and easier for cybercriminals to research potential victims. Here’s what’s still in your control.

Microsoft Threat Intelligence examines attacks on exposed AI workloads, including LiteLLM gateway exploitation, credential harvesting, persistence, and cryptomining activity. The post When AI infrastructure becomes the target: Securing gateways and control points appeared first on Microsoft Security Blog.

Selecting a model for your security operations center (SOC) and digital forensics and incident response (DFIR) tasks is important, but selecting the best one is more involved than you might think. Here's how to choose.

Organizations need protection that operates in the gap between discovery and remediation. The post The patch window is collapsing: Why security needs a new control plane appeared first on Microsoft Security Blog.

Explore Unit 42 research on AI-enabled malware. Learn how existing behavioral detection and endpoint analytics stop AI-authored code before execution. The post The State of AI-Enabled Malware August 2026: From Brand Abuse to Agentic Execution appeared first on Unit 42.

As frontier AI models become increasingly restrictive, security teams are facing a "safety penalty" that hampers real-time incident response. Discover how organizations can move toward operational sovereignty to ensure their defensive AI keeps pace with unconstrained adversaries.

For the latest discoveries in cyber research for the week of 24th August, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Latvia’s Road Traffic Safety Directorate (CSDD) has confirmed a breach affecting payment records of more than 1.2 million people – roughly two-thirds of the country’s population – as well as 200,000 organizations. The […] The post 24th August – Threat

本文针对 Windows 恶意软件中利用系统原生二进制文件（Living-Off-The-Land, LotL）的规避技术进行了首次大规模系统化研究。随着检测算法日益复杂，恶意软件作者采用了同样复杂的规避机制，而 LotL 技术被认为是其中主要手段之一，它通过滥用系统中已存在的合法程序执行恶意行为，从而降低被检测的风险。作者收集了多个恶意软件数据集，总计包含 31,805,549 个样本，系统分析了这些原生系统二进制文件在恶意软件中的使用普遍性。结果显示，LotL 技术的平均使用率约为 9.41%，且在高级持续性威胁（APT）样本中尤为突出，使用率达到 26.26%，是普通商品恶意软件的两倍以上。为了进一步说明 LotL 技术的规避潜力，研究在本地沙箱环境中，针对多个已完全修补的 Windows 系统测试了 LotL 技术的使用情况，并证明 10 款主流防病毒产品普遍存在检测盲区。该研究首次以大规模数据量化了 LotL 技术的流行程度，揭示了现有安全产品在该类攻击面前的不足，为蓝队和安全研究人员理解、检测及防御 LotL 相关攻击提供了重要的实证基础。论文特别适合恶意软件分析师、入侵检测工程师以及安全产品研发人员阅读，用于评估和提升对无文件攻击和系统可信工具滥用的检测能力。

Attackers are targeting CI/CD pipelines and developer tools instead of application code, requiring total SDLC visibility and strict security controls The post Connecting the Dots: Securing the Overlooked Corners of the Software Development Lifecycle (SDLC) Supply Chain appeared first on Unit 42.

In this week's newsletter, new author Mick Baccio introduces himself and explores the operational and security implications of the new White House memorandum regarding private sector participation in government-authorized offensive cyber operations.

Research by: Jiří Vinopal (@vinopaljiri) Abstract What if a trusted security component could be repurposed into an attacker-controlled kernel primitive? What if a signed Microsoft remediation driver could be instructed to execute arbitrary file and registry operations from Ring 0 – without exploits, vulnerabilities, or memory corruption? In this publication, we present the first full […] The post

The newly identified SPECTRE implant represents an evolution in commodity intrusion tooling, integrating cross-platform C2 operations, process injection, credential theft, anti-analysis protections, and kernel-level endpoint detection and response (EDR) bypass functionality.

Cisco Talos discovered a Chinese-speaking cybercrime group, tracked as UAT-10147, that targets a wide range of vulnerable web servers. This is an overview of the campaign, examining the countries affected, potential impact of BadIIS infections, the attack chain, and post-compromise tactics.

Unit 42 details how attackers exploit enterprise collaboration tools for identity phishing and credential theft. Discover key defense strategies. The post Identity Abuse Through Trusted Communication Channels appeared first on Unit 42.

Microsoft is named a visionary leader in the 2026 Frost Radar for Cloud Workload Protection Platforms, recognized for unified runtime security with Microsoft Defender for Cloud. The post Microsoft named a Leader in the Frost Radar™: Cloud Workload Protection Platforms, 2026 appeared first on Microsoft Security Blog.

Martin explores how using crime script analysis to describe an attack with everyday language makes the situation accessible to non-technical audiences and identify points where the crime can be disrupted.

A year of MDR casework shows attackers repeatedly exploiting demand for AI toolsCategories: Threat ResearchTags: AI, malvertising, infostealer, Sophos X-Ops

In August 2026, the actor TheHatman claimed to have stolen large volume of credentials from organizations' Microsoft Entra tenants. We provide guidance on mitigating large-scale credential attacks. The post Threat Brief: Mitigating Large-Scale Credential Attacks (Updated August 18) appeared first on Unit 42.

MacSync Stealer rapidly rotates domains to evade detection, but its behavior remains consistent. Learn how Microsoft uncovered 30+ related domains using durable hunting pivots. The post Hunting MacSync Stealer infrastructure through behavioral pivots appeared first on Microsoft Security Blog.

Research by: Jaromír Hořejší (@JaromirHorejsi) Key points Introduction We first noticed a ransomware family called StopAndProtect in the middle of May 2026. Further analysis of the infrastructure reveals that the infection chain starts with a ClickFix social-engineering technique, which prompts victims to execute a PowerShell command. This leads to two stages of additional downloaders and […] The

For the latest discoveries in cyber research for the week of 17th August, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Colombia’s Ministry of Justice has experienced a ransomware attack that affected part of its technology infrastructure and disrupted public services related to illicit-drug monitoring and legal processes. Officials confirmed that some files were […] T

In this edition of the Threat Source newsletter, William reflects on the “Make Hazel a Hacker” segment in Beers with Talos, and how cybersecurity is a field where questions can lead to multiple correct answers.

And will today’s surge in AI-driven vulnerability discovery eventually make tomorrow’s software safer?

OpenAI, Anthropic and Meta disclosed agents reaching external systems. The tools didn't matter, and that changes the playbook for investigating intrusions.

For the past year, the ransomware conversation has centered on concentration: a handful of dominant RaaS operations controlling most of the damage, and a shrinking pool of active groups fighting over the same territory. The State of Ransomware Q2 2026 report from Check Point Research shows that picture starting to shift. The leaders are still winning, but […] The post The State of Ransomware Q2 20

Cisco Talos recently identified an undocumented phishing framework, internally branded "JWR" by its developer, built to convincingly impersonate checkout and login pages across major payment and shopping platforms.

Microsoft has released its monthly security update for August 2026, which includes 421 vulnerabilities affecting a range of products, including 62 that Microsoft marked as "critical."

Key Points Introduction Since early 2026, Check Point Research has tracked a wave of the Operation Dream Job campaign. This wave primarily targeted the defense sector worldwide, with a particular emphasis on companies operating in the aerospace and aviation industries. We observed the threat actor distributing modified PDF viewers designed to execute malicious payloads embedded within specially […

Discover how Kimwolf v7 targets Android IoT devices with HTTP/2 DDoS fingerprinting, Ethereum ENS C2 resolution and Tor backup routing. The post Kimwolf v7: An Evolution of the Kimwolf Botnet appeared first on Unit 42.

Analysis of the Aeternum botnet loader, a threat leveraging Polygon blockchain smart contracts for decentralized C2 infrastructure and payload execution. The post The Permanent Threat: Analyzing Aeternum’s Blockchain-Based C2 Operations and Communications appeared first on Unit 42.

Microsoft is named a Leader in the 2026 IDC MarketScape for MDR services. Discover how Microsoft Defender Experts MDR combines AI, threat intelligence, and human expertise. The post Microsoft named a Leader in the 2026 IDC MarketScape for MDR/MXDR for the Enterprise  appeared first on Microsoft Security Blog.

Microsoft Threat Intelligence examines DeadLock ransomware, an emerging financially motivated operation distinguished by its use of decentralized infrastructure to support victim communications, negotiations, and data leak operations alongside double extortion tactics used to pressure victims. The post DeadLock ransomware: Breaking down a Rust-based encryptor with decentralized recovery infrastruc

For the latest discoveries in cyber research for the week of 10th August, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES North Carolina Ports, the US authority operating the ports of Wilmington, Morehead City and others, has suffered a cyberattack that forced some operations onto manual processes. The authority claims it has contained […] The post 10th August – Threat I

Identity-based attacks drive 90% of incidents. Learn how modern attackers exploit identities and what SOC leaders can do to respond. The post Inside the Modern SOC: The Identity Front Door appeared first on Unit 42.

Analysis of ChainDrop, an npm supply chain worm extracting GitHub Actions runner secrets and using Ethereum smart contracts for C2 routing. The post ChainDrop: Inside a Self-Propagating npm Worm appeared first on Unit 42.

By Yarden Porat, Check Point Research Key Points The short version We set out to break Cloudflare Code Mode, and ended up breaking Cloudflare Workers too. We did both by targeting workerd, the runtime beneath both: an in-process sandbox that relies entirely on V8 to isolate untrusted code. We found five memory-corruption bugs in workerd’s native C++ (the “glue” […] The post When Agentic Glue Melts

In this week's newsletter, Martin looks at how the metaphors we use to describe AI "escaping" its sandbox can completely change how we react to the threat.

Discover how attackers hijack AI tokens to fuel gray market transfer stations by stealing developer API keys. The post Token Jacking: Cybercriminals Could Be Stealing Your AI Resources appeared first on Unit 42.

Learn why KuppingerCole named Microsoft a Leader in its Leadership Compass: Cloud Native Application Protection Platforms report. The post ​​Microsoft named a Leader in the KuppingerCole Leadership Compass for Cloud Native Application Protection Platforms (CNAPP) appeared first on Microsoft Security Blog.

A credential-stealing worm hidden in more than 400 compromised npm packages automatically spread across software ecosystems by republishing malicious updates. This analysis details the attack chain, affected environments, and practical guidance for detection, hunting, and remediation. The post ChainDrop supply chain compromise: Anatomy of a self-propagating worm appeared first on Microsoft Securit

Microsoft expands its Zero Trust for AI strategy to enhance security for AI and DevSecOps environments with new tools and guidance. The post Advance Zero Trust for AI: New tools and guidance to secure AI agents and DevSecOps appeared first on Microsoft Security Blog.

Microsoft Defender automatically isolated a compromised QNET endpoint in 128 seconds, stopping a multi-stage attack before the payload could persist or spread. The post 128 Seconds to disruption: Microsoft Defender stops ransomware at QNET  appeared first on Microsoft Security Blog.

这篇论文针对恶意软件分类系统中的概念漂移问题展开研究。随着恶意软件不断演化，数据分布会发生漂移，导致分类器性能下降。为此，研究者开发了基于机器学习的数据漂移检测工具来监控输入数据分布的变化。然而，此类检测器与恶意软件分类器在设计目的和技术上存在差异，因此针对分类器的对抗攻击（如规避攻击和投毒攻击）如何影响检测器，以及两者组合使用时的安全性尚不明确。本文通过实证分析，系统研究了规避与投毒攻击对数据漂移检测器以及整个恶意软件检测流程的影响。实验发现，数据漂移检测器的独特特性（如对数据分布变化的敏感性）使得原本针对分类器的攻击在联合场景下表现出不同的效果，可能引发检测器的误报或漏报，进而影响整个系统的可靠性。研究揭示了这一关键交互作用，为理解对抗攻击在多层检测架构中的传播提供了新视角，并为构建更稳健的恶意软件防御系统提供了理论基础和实验依据。

Frontier AI is reshaping vulnerability discovery. Learn how our NOVA system found 14,000+ unknown vulnerabilities across the open-source software supply chain. The post The Frontier AI Vulnerability Burst: Industrializing Autonomous Zero-Day Discovery in Open-Source Software appeared first on Unit 42.

Nearly half of C2 malware bypasses DNS by connecting directly to IP addresses. Zero trust IP enforcement secures networks against these threats. The post Almost Half of Malware Samples Communicate Direct to IP appeared first on Unit 42.

Talos has collected prompt logs from threat actor endpoints running various applications, such as Claude Code, CodeX, Cursor, or Gemini. This blog is an analysis of the ways we've seen bad actors leveraging cloud-based AI.

After compromising systems via CVE-2026-18577, threat actors use the additional RMM tools and network tunnels to establish persistent remote accessCategories: Threat ResearchTags: RMM, N-able, vulnerability

Multiple legitimate DFIR tools abused by GOLD EMBRACE double-extortion specialistsCategories: Threat Research

Register for an exclusive, unrecorded 30-minute webinar to review the most high-impact incidents Talos IR faced in Q2.

For the latest discoveries in cyber research for the week of 27th July, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Minnesota IT Services has confirmed coordinated cyberattacks affecting more than 30 community water utilities across the state. The incidents briefly disrupted a treatment plant in Braham and affected industrial control systems. Officials reported […] T

Explore how passkey implementation gaps undermine security when relying parties fail to validate the User Verified flag, reducing MFA to a single factor. The post Pass the Passkey: A Novel Attack Surface in Passwordless Authentication appeared first on Unit 42.

Storm-2945, a sub-cluster of the Russian threat actor Midnight Blizzard, has been observed compromising the sign-in portals of hospitality-related organizations such as hotels since May 2026 in order to deliver malware to travelers and steal credentials in an operation we call CaptiveCrunch. The post CaptiveCrunch: Midnight Blizzard targets travelers worldwide for malware delivery and credential t

Analysis of XCSSET v40 reveals a macOS malware targeting developers via Xcode. Unit 42 used advanced pattern matching and AI to decode its logic. The post The Xcode Assassin Returns: A Deep Dive Into the Latest XCSSET Version appeared first on Unit 42.

Amy hikes Virginia’s most difficult trail and muses on the persistent challenges of cybersecurity. The two aren't dissimilar.

Learn how better questions, trusted AI, and human judgment help security leaders make confident decisions and build resilient systems. The post ​​Better security starts with better questions appeared first on Microsoft Security Blog.

Talos IR's Q2 report highlights a significant surge in phishing-based initial access and the weaponization of legitimate remote management tools. Learn how to sharpen your defenses.

Attackers used Microsoft Teams vishing, custom malware, and remote access tools to facilitate ransomware deploymentCategories: Threat ResearchTags: Microsoft Teams, vishing, Ransomware, Chaos

The physics of cybersecurity are changing. Introducing security's new cyber stack: Project Perception. The post Rethinking security for the age of AI appeared first on Microsoft Security Blog.

Microsoft's External Red Team Alliance (EXTRA) is a global AI security initiative designed to advance AI safety research and red teaming. By partnering with universities, researchers, and regional experts, EXTRA helps identify emerging AI risks, improve security testing, and strengthen the resilience of frontier AI systems. The post Enhancing AI security through global AI red teaming appeared firs

For the latest discoveries in cyber research for the week of 27th July, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Nichirei, a Japan-based frozen-food supplier and logistics company, has experienced a ransomware attack that disrupted shipping operations and affected approximately 5,000 customers. KFC Japan warned of possible shortages. Nichirei confirmed personal da

What that means for Customer Protections Categories: Threat Research, AI Research

Thorsten explores Q2 2026 stats, the artificial buffer zone of 2026, and why smart, prioritized patching is more critical than ever.

In the second quarter of 2026, the continuing effects of Microsoft’s disruption of the Tycoon2FA phishing platform contributed to sustained declines in several major phishing techniques, while threat actors expanded into Teams-based social engineering and employed increasingly automated and multi-stage attack chains. The post Email threat landscape: Q2 2026 trends and insights appeared first on Mi

Unit 42 details a Russian cyberespionage campaign targeting Zimbra webmail servers using JavaScript injection to steal credentials. The post Russian Global Webmail Espionage appeared first on Unit 42.

The Chaos ransomware group uses new malware "msaRAT" that hijacks browsers. The malware doesn't communicate directly with C2 but connects through the browser. It enables arbitrary command execution while hiding the attacker's IP from victims via WebRTC over TURN.

Here’s some of the ways Talos is showing up at Black Hat, alongside our friends at Cisco and Splunk.

本文针对安卓应用中恶意软件通过应用推广广告（app promotion ads）分发的新趋势，提出了一种名为ADGPE（App promotion ad Detection via Graph learning and UI Exploration）的自动化检测与解释方法。研究背景是：应用开发者常嵌入推广其他应用的广告，但广告内容审核不足，导致恶意开发者利用这些广告作为恶意软件的新分发渠道。核心问题是如何自动收集应用推广广告、检测其中推广的恶意软件，并解释恶意软件采用的推广机制。方法上，ADGPE协同整合了应用用户界面（UI）探索与图学习技术：首先通过UI探索自动收集应用内的推广广告，构建应用推广图（App Promotion Graph）；然后利用图神经网络（GNN）对节点（应用）进行分类，检测恶意软件；最后通过路径推断模型揭示恶意软件的推广机制。实验基于18,627个应用推广广告数据，结果表明：从应用推广广告下载应用时遇到恶意软件的概率比Google Play高出数百倍；主流广告网络（如Google AdMob、Unity Ads、Applovin）被恶意开发者利用来传播各种恶意软件，包括激进广告软件、流氓安全软件、木马和勒索软件。UI探索技术相比现有方法在相同时间内多发现24%的推广广告。恶意软件检测模型在F1分数上比现有最佳技术提升5.17%（从90.14%提升至95.31%），并检测到28个最初被VirusTotal标记为良性但六个月后被标记为恶意/潜在有害应用（PUA）的应用。路径推断模型揭示了两种恶意软件推广机制：通过硬编码广告的自定义广告推广，以及通过与广告服务器（如AdMob和Applovin）交互的广告库推广。这些发现揭示了应用推广广告的关键安全风险，并证明了ADGPE结合动态程序分析与图学习在研究应用推广广告恶意软件分发方面的有效性。

A real-world benchmark tests whether powerful AI models can keep an investigation trustworthy when new evidence invalidates their conclusions.

Our collaboration with AXA XL brings Microsoft Incident Response services directly to cyber insurance policyholders, helping organizations coordinate technical, business, and insurance decisions. The post Real world incident response: Microsoft and AXA XL strengthen cyber resilience appeared first on Microsoft Security Blog.

In April, SentinelLABS’ Tom Hegel published an initial assessment of the first five weeks of the conflict. Three months later, the evidence supports refinement.

For the latest discoveries in cyber research for the week of 20th July, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Ernst & Young, a global accounting and professional services company, has disclosed a data breach involving a compromised third-party IT support platform. The exposed support tickets may have contained client documents, tax information, […] The post 20t

Join Microsoft Security at Black Hat USA 2026 for supply chain research, hands-on security experiences, expert conversations, and our reception. The post Microsoft at Black Hat USA 2026: Defending trust in the age of AI and supply chain attacks appeared first on Microsoft Security Blog.

A technical analysis of three chained zero-day vulnerabilities in Siemens ROX II OT switches that allow privilege escalation and persistent root access. The post Three Steps to the Terminal: A Siemens ROX II Zero-Day Trilogy appeared first on Unit 42.

From late April 2026 to mid-June 2026, Microsoft Defender Experts observed increased ACR Stealer activity across customer environments. These campaigns are successfully using ClickFix lures to steal browser credentials, authentication tokens, and sensitive documents from enterprise environments. The post ACR Stealer: Two observed intrusion chains amid increased threat activity appeared first on Mi

Explore Unit 42's perspectives on AI's impact on cybersecurity, including key updates since the 2026 Incident Response Report. The post AI, Automation and Attacks: Unpacking the Unit 42 2026 Global Incident Response Report appeared first on Unit 42.

Long foretold, the Great Patching has begun and it’s a doozy. Buckle in as Joe takes you through the story.

As AI agents become more autonomous, strong identity, access, and auditing controls are critical to keeping them secure. The post Least privilege for AI agents: Identity, access, and tool binding appeared first on Microsoft Security Blog.

Humans can no longer keep up with the volume and velocity of security data on their own, but AI can't be fully trusted. David discusses the merits of both and muses on what the future might look like.

Cisco Talos is disclosing UAT-11795, a sophisticated, Russian-speaking, financially motivated adversary that has been conducting a malicious campaign targeting users in the U.S. and Europe since at least June 2025.

Threat actors compromised AsyncAPI packages and weaponized trusted CI/CD workflows to distribute malware through npm. This analysis breaks down the attack chain, payload delivery, and recommended defenses. The post Unpacking the AsyncAPI npm supply chain compromise and import-time payload delivery appeared first on Microsoft Security Blog.

Palo Alto Networks Unit 42 团队发布了关于 npm 生态系统威胁态势的更新分析报告。报告指出，自 Shai Hulud 事件后，npm 供应链攻击持续演进，出现了可蠕虫化的恶意软件、CI/CD 持久化机制以及多阶段攻击等新型威胁。攻击者利用 npm 包的广泛分发特性，通过恶意包注入、依赖混淆、typosquatting 等手段渗透开发环境，进而横向移动至生产系统。报告重点分析了 CI/CD 管道中的持久化技术，攻击者可在构建过程中植入后门，导致每次部署都携带恶意代码。此外，蠕虫化恶意软件能够自动感染相关联的包，引发连锁反应。尽管报告未给出具体的攻击组织、恶意软件家族或 CVE 编号，但提供了详细的攻击面分析和缓解措施，帮助安全团队理解当前 npm 威胁格局并制定防御策略。目前尚未发现大规模在野利用的证据，但攻击手法日益复杂，开发者和安全团队需保持警惕。

Security teams have never had more visibility, yet rarely have they felt more uncertain. Signal pours in from endpoints, identities, cloud workloads, and a sprawling mix of third-party tools. The post Turning threat intelligence into decisive action with Defender Experts appeared first on Microsoft Security Blog.

TuxBot v3 Evolution, an IoT botnet framework built with LLMs. Read our analysis of its cross-compiled binaries, C2 architecture and bugs. The post TuxBot v3: Inside an IoT Botnet Framework With LLM-Assisted Development appeared first on Unit 42.

Categories: Threat ResearchTags: advisory, Vulnerabilities, SonicWall

Microsoft has released its monthly security update for July 2026, which includes 622 vulnerabilities affecting a range of products, including 57 that Microsoft marked as "critical."

Every day, defenders make high-consequence decisions with incomplete information. Learn how Cisco Talos Intelligence Integrations help reduce uncertainty by turning the latest threat intelligence into proactive protections across Cisco technologies.

This blog examines the full lifecycle of a Python package, from hosting on repositories such as PyPI or custom web servers, through source and wheel distribution formats, to the final installation into virtual or system-wide Python environments.

For years, the cyber security industry tracked AI as a force multiplier: something that made existing attack techniques faster, cheaper, and more accessible. That framing was accurate. But the Annual AI Security Report 2026 from Check Point Research documents a transition that goes further. AI has crossed from assistant to operator. Where it once helped attackers prepare, it now runs the […] The p

Microsoft Threat Intelligence identified threat actor activity with overlapping tradecraft commonly associated with ShinyHunters, including voice phishing (vishing), supply-chain compromise, and misconfigured guest access targeting SaaS-based applications. The post Defending SaaS-based applications against ShinyHunters OAuth abuse appeared first on Microsoft Security Blog.

Microsoft Entra ID makes passkeys the default sign-in experience and introduces a new model for SMS and voice authentication. Read about how to prepare. The post Microsoft Entra ID security updates: Passkeys are the default authentication method in Entra ID appeared first on Microsoft Security Blog.

For the latest discoveries in cyber research for the week of 13th July, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES U.S. auto insurer AssuranceAmerica has disclosed a data breach affecting approximately 7 million people. Attackers targeted an employee and used compromised credentials to access company systems, stealing names, contact information, driver’s license […]

该论文通过大规模实证研究，分析了真实世界中恶意软件在执行过程中行为动态变化的现象。作者收集了来自多个来源的恶意软件样本，在沙箱环境中执行并记录其系统调用、网络流量、文件操作等行为轨迹。通过时序聚类和变化点检测算法，识别出恶意软件行为发生显著变化的时间点。研究发现，相当比例的恶意软件在执行中会改变其行为模式，例如先进行良性行为再突然执行恶意载荷，或根据环境反馈调整攻击策略。这种行为变化有助于恶意软件逃避基于静态特征或固定行为模式的检测系统。论文进一步评估了现有检测方法对这种动态行为的脆弱性，并提出了改进建议，例如利用行为序列的上下文信息和时序依赖性来增强检测鲁棒性。实验结果表明，考虑行为变化的检测模型能够显著提高对高级恶意软件的识别率。该研究为恶意软件行为分析提供了新的视角，并强调了动态行为建模在网络安全防御中的重要性。

Unit 42 explores The Gentlemen ransomware operations, revealing the affiliate model driving its rapid growth. Learn more here. The post No Manners Here: The Ruthless Rise of The Gentlemen Ransomware appeared first on Unit 42.

Microsoft’s latest Secure Future Initiative report outlines progress on secure foundations, AI-powered defense, and future-ready cybersecurity. The post Securing our future: July 2026 progress report on Microsoft’s Secure Future Initiative appeared first on Microsoft Security Blog.

该论文提出了一种名为 Malaika 的多智能体框架，用于解决恶意软件理解中的核心挑战：如何在部分可观测性下，从稀疏、分散的代码证据中重建高级恶意行为，并与良性功能区分。作者将恶意软件理解形式化为一个基于证据的推理问题，并主张可靠的行为重建需要三种互补的接地：领域接地（约束假设生成与评估）、语义接地（定位并连接程序证据）、知识接地（通过外部可验证威胁知识支持行为归因）。Malaika 框架通过模拟分析师的推理过程、工具辅助的证据定位和基于检索的行为归因来实现这三种机制，并在 Android 恶意软件分析任务上进行了评估。结果显示，Malaika 在分析质量上优于先前的基于 LLM 的恶意软件分析框架，并表明可靠性不仅依赖于模型能力，还依赖于推理过程。与恶意软件分析系统和前沿智能体框架的对比表明，接地感知推理能产生更精确、可审计的结论。消融研究进一步支持了接地假设。该工作为可靠恶意软件理解提供了原则性基础，并更广泛地适用于基于证据的软件分析。

Cisco Talos’ Vulnerability Discovery & Research team recently disclosed three vulnerabilities in WolfSSF, fourteen in GeoVision, and one vulnerability in VTK-DICOM.The vulnerabilities mentioned in this blog post have been patched by their respective vendors, in adherence to Cisco’s third-party vulnerability disclosure policy. For

With Wimbledon's help, Hazel argues against the popular myth that "Attackers only need to be right once, but defenders need to be right 100% of the time."

GigaWiper is a destructive backdoor that combines multiple wiping and ransomware-like capabilities into a single operational platform. This blog analyzes how the malware incorporates code from several previously separate malware families and provides guidance to help defenders detect and defend against similar threats. The post GigaWiper: Anatomy of a destructive backdoor assembled from multiple m

China and India ran separate espionage operations against the same Pakistani police force, each drawn by different stakes in Pakistan's internal security.

微软于2026年7月8日发布博文，介绍其安全未来计划（Secure Future Initiative, SFI）如何利用AI速度主动加固云服务。SFI将威胁知识、运营框架与安全需求相结合，定义了完善云服务的防御标准。文章强调，满足这些标准需要持续以AI速度对在线服务进行评估。该计划旨在提前发现和缓解潜在威胁，而非事后响应。博文未提及具体攻击活动或漏洞，重点在于微软自身的安全架构和实践。

A cybercrime campaign combined a loader-as-a-service framework and DLL sideloading via a Go-compiled fake MpClient.dll, a novel evasion layer combination. The post Vidar Stealer Unmasked: Code Signing Abuse, Go Loaders and File Inflation appeared first on Unit 42.

Talos’ latest findings on UAT-7810 indicate that the threat actor continues to develop their custom-made malware.

An X-Ops analysis of how AI coding agents trigger endpoint detection rules designed for adversariesCategories: Threat Research

该文章基于Frost & Sullivan发布的2025年云安全态势管理（CSPM）Frost Radar™报告，提炼了五项关键洞察。报告指出，CSPM正从传统的“时间点合规”工具向“持续风险管理”平台演进。核心变化包括：1）CSPM不再仅检查配置错误，而是集成实时威胁情报，主动发现攻击路径；2）机器学习模型用于异常行为检测，减少误报；3）跨云环境（AWS、Azure、GCP）的统一视图成为标配；4）自动化修复能力（如自动回滚、策略实施）显著提升；5）与DevOps流程的深度集成，支持“安全即代码”。文章强调，现代CSPM需要同时处理基础设施即代码（IaC）的静态分析和运行时动态风险。虽然文章未披露具体漏洞或攻击事件，但这为安全团队选择或优化云安全工具提供了战略方向。附录中的Frost Radar排名显示微软、Palo Alto Networks、Check Point等厂商处于领导者象限。整体内容属于行业趋势分析，不涉及恶意活动。

Key Points Introduction Since early 2026, Check Point Research (CPR) has tracked a new modular command-and-control framework used by Cavern Manticore, an Iran-nexus APT group primarily targeting Israeli organizations, with a focus on IT providers, and government sectors. Cavern Manticore is an Iran MOIS (Ministry of Intelligence and Security)-linked actor, with links to the OilRig […] The post Cav

For the latest discoveries in cyber research for the week of 6th July, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES River Bank & Trust, a US financial institution, has experienced a ransomware incident after an unauthorized actor accessed the network of parent company River Financial Corporation on June 16. The bank found […] The post 6th July – Threat Intelligence Re

由于原始输入未提供论文摘要，以下内容基于标题推断：本文提出一种名为 BOOTKITTY 的隐蔽启动套件（bootkit）与 rootkit 组合攻击技术，针对现代操作系统（如 Windows、Linux）设计。核心研究目标是在系统启动过程中植入恶意代码，实现持久化并绕过 UEFI 安全启动、内核完整性检查等防御机制。作者可能提出了一种新型的启动阶段恶意软件，利用固件或引导加载程序漏洞实现高隐蔽性。该方法可能涉及修改系统引导组件或利用硬件级虚拟化特性。实验部分可能通过搭建实际环境测试逃避检测的能力，并与现有 bootkit（如 Trickboot、BootHole）进行对比。主要贡献在于揭示了现代操作系统启动链中的潜在攻击面，并提出了更难以检测的恶意代码植入技术。适合操作系统安全、恶意软件分析和防御研究者阅读。

A look inside the reverse-engineering journey of building the first RDP client outside of Windows to support WebAuthn redirection. The post How We Added WebAuthn to a Browser-Based RDP Client appeared first on Unit 42.

What do board games and cybersecurity have in common? Pattern recognition. Strategy. Adaptation. In this week’s Threat Source Bill explores why curiosity may be a defender’s most valuable skill.

Frost & Sullivan names Microsoft a leader as cloud and application security converge into unified, runtime risk reduction. The post Microsoft named a leader in the Frost Radar for cloud and application runtime security appeared first on Microsoft Security Blog.

For the latest discoveries in cyber research for the week of 22nd June, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Texas Parks and Wildlife Department has been affected by a third-party data breach involving its license system vendor. The incident exposed driver’s license information, passport numbers, emails, phone numbers, and residential addresses for […] The pos

Research by: Alexey Bukhteyev Key Takeaways Introduction Over the past several years, large language models have reshaped software development, and malware development has followed the same path. Check Point Research has documented this trend from early experiments showing that AI systems could generate offensive components, to cases of cybercriminals using ChatGPT to create malicious tools, and [

Ever wonder how someone goes from studying human viruses to leading cybersecurity teams? In this Humans of Talos, we’re joined by Martin Lee, EMEA Lead, to talk about his journey into the industry.

Talos has identified "ARToken," a phishing-as-a-service platform that targets Microsoft 365. The ARToken panel exposes 80+ API endpoints for device code phishing, Primary Refresh Token persistence, email access, BEC operations, and SharePoint exfiltration.

Attackers can exploit LLM domain hallucinations through phantom squatting to target supply chains. Read the analysis to learn more. The post Phantom Squatting: AI-Hallucinated Domains as a Software Supply Chain Vector appeared first on Unit 42.

We’re accelerating quantum-safe readiness—and sharing what organizations can do now to transition earlier and with confidence. The post Accelerating the quantum-safe timeline appeared first on Microsoft Security Blog.

This month’s updates help security and IT teams strengthen identity and multicloud foundations, protect data wherever it lives, and secure the developer workflows powering AI innovation. The post ​​What’s new in Microsoft Security: June 2026 appeared first on Microsoft Security Blog.

MCP tool poisoning turns trusted AI agents into a control plane for data loss. Learn how threat actors manipulate tool descriptions to trigger unauthorized actions, and how to detect, contain, and prevent it. The post Securing AI agents: When AI tools move from reading to acting appeared first on Microsoft Security Blog.

本文针对生成式AI在网络安全领域带来的威胁，特别关注大型语言模型（LLM）被用于生成PowerShell恶意代码的攻击事件。作者提出了一个评估LLM生成PowerShell恶意软件的实验框架，包括一种新型动态分析沙箱，用于分析AI生成的恶意软件行为。此外，他们构建了一个手动整理的、带有自然语言注释的真实世界PowerShell恶意软件数据集，以辅助LLM的训练和评估。研究评估了多种宽松许可的开源LLM在生成PowerShell恶意软件方面的能力。结果显示，在触发的操作系统恶意事件方面，真实恶意软件与LLM生成的恶意软件之间具有高度相似性，中位Jaccard指数达到84.5%，48.4%的实例实现了完全重叠。该研究揭示了当前LLM在恶意代码生成方面的潜在风险，并为防御方提供了评估和检测AI生成恶意脚本的方法框架。

A malicious Chromium-based extension that spoofs the AI-powered answer engine Perplexity AI redirects browser search traffic using MV3 APIs and intermediary infrastructure. The post Chromium extension uses AI‑related branding to redirect browser search appeared first on Microsoft Security Blog.

For the latest discoveries in cyber research for the week of 29th June, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Polymarket, a large cryptocurrency-based prediction market, has confirmed a supply chain attack after a third-party frontend vendor breach led to malicious JavaScript being injected into its website. Attackers tricked users into approving fraudulent […]

Your inbox is an identity system all of its own: whoever owns it may own a lot more

Your business may be small, but its attack surface is anything but. Readiness is the first step to resilience.

Microsoft Threat Intelligence identified an active multi-stage intrusion campaign targeting hospitality organizations in Europe and Asia. The campaign uses photo-themed ZIP archives and fake image shortcut files to deliver a persistent Node.js implant and evade detection. The post Photo ZIP campaign targeting hospitality industry delivers Node.js implant for persistent access appeared first on Mic

Government entities and critical infrastructure were targeted for espionage in SE Asia by attackers using a hybrid toolkit, including custom TinyRCT backdoor. The post CL-STA-1062 Targets Southeast Asian Governments and Critical Infrastructure appeared first on Unit 42.

In this week’s newsletter, Martin considers how AI will help threat intelligence by creating an easily queryable data source of intelligence reports.

Microsoft named a Leader in the Forrester Wave™: Endpoint Management Platforms, Q2 2026, with the highest scores in the current offering and strategy categories. The post Microsoft a Leader in The Forrester Wave™ for Endpoint Management Platforms appeared first on Microsoft Security Blog.

Component Object Model (COM) is a fundamental Windows technology used by legitimate applications for object activation, inter-process communication, automation and language-independent component reuse. Those same qualities make it useful to threat actors.

ESET Research analyzes Gamaredon’s new toolset and the group’s growing reliance on legitimate online services to hide its C&C infrastructure and exfiltrate stolen data

Learn how CNAPP platforms are helping organizations prioritize exploitable risks, reduce exposure, and operationalize security across the application lifecycle. The post CNAPP evolution: How Microsoft aligns with leading cloud risk management platforms appeared first on Microsoft Security Blog.

ESET researchers assisted in the global disruption of the Amadey botnet and Stealc infostealer, providing technical analysis, infrastructure tracking, and affiliate-level insights

On June 24, 2026, Microsoft’s Digital Crimes Unit (DCU) facilitated the takedown, suspension, and blocking of domains that formed the backbone of the StealC and Amadey infrastructure. This blog is a technical breakdown of StealC and Amadey. The post StealC and Amadey: Breaking down infostealers and the cybercrime services that deliver them appeared first on Microsoft Security Blog.

Unit 42's analysis of ClawHub revealed evasive malicious skills bypassing automated scanners to deploy infostealers and execute agentic financial fraud. The post OpenClaw’s Skill Marketplace and the Emerging AI Supply Chain Threat appeared first on Unit 42.

DPRK-linked implant embeds 38 fabricated system messages that spoof an LLM triage harness, hiding a credential stealer and Telegram C2 underneath.

Unit 42 research details how attackers could exploit global name uniqueness in bucket hijacking to redirect cloud data streams across major CSPs. The post The Global Namespace Risk: Universal Bucket Hijacking Technique for Cloud Data Exfiltration appeared first on Unit 42.

What happens when threat actors target what AI remembers? Microsoft breaks down the risks and the defenses. The post Guarding AI memory appeared first on Microsoft Security Blog.

Ransomware case reveals two parallel threat actors, blending tactics and evasion—showing why isolated signals can often miss modern, overlapping cyberattacks. The post One intrusion, two cyberattackers: Uncovering parallel threat activity appeared first on Microsoft Security Blog.

该论文提出了一种结合 Ghidra 和大语言模型（LLM）的系统，用于从 IoT 恶意软件二进制文件中自动提取通信规范并生成伪 C2 服务器，从而解决动态分析中因攻击基础设施短暂存活而导致的样本休眠问题。大多数 IoT 恶意软件作为依赖 C2 服务器的僵尸网络运作，但攻击基础设施短命，常常导致样本在动态分析时无法进行 C2 通信，使得分析受限。该系统首先利用 Ghidra 对恶意软件二进制进行反编译和静态分析，然后通过 LLM 语义解释二进制控制结构，提取协议元素（如命令格式、参数、加密方式等）。实验基于 Mirai 恶意软件，系统成功提取了所有 20 个核心协议元素，与 ground truth 完全一致，规范提取准确率达到 100%。生成的伪 C2 服务器能够完整复现十个 DDoS 攻击向量中的七个，攻击行为与原始 C2 一致。此外，在针对公开 Mirai 源代码修改而来的定制变种上，该方法也实现了端到端成功——从规范提取到伪 C2 生成再到攻击复现，证明了 LLM 能够从二进制结构推断规范而不依赖预训练知识。该工作将 LLM 的应用从分析辅助扩展到动态分析环境的自动构建，为 IoT 恶意软件分析提供了新的自动化手段。

AutoJack is a novel exploit chain showing how a single malicious webpage can turn an AI browsing agent into a remote code execution vector on the host machine. By abusing trust in localhost, missing authentication, and unsafe parameter handling, attackers can trigger arbitrary process execution through AutoGen Studio’s MCP WebSocket. The research highlights a broader pattern - when agents can brow

New Forrester Total Economic Impact™ study shows Microsoft Security consolidation delivers ROI, lowers risk, and prepares organizations to secure AI. The post New Forrester study shows customers who unified with Microsoft Security benefited from 124% ROI appeared first on Microsoft Security Blog.

In the latest Threat Source, Hazel channels her inner Spielberg to explore why humans are delightfully irrational, reminding us that while security best practices are simple in theory, they’re a lot harder to pull off when you’re busy dealing with real life.

Cisco Talos detailed a new approach to reverse engineering that pairs local AI agents with traditional analysis tools like the VB6 disassembler vbdec. Instead of awkwardly bolting AI onto the software, vbdec exposes its parsed data through a live COM interface.

ESET Research shares the results of a months-long investigation into the suite of EDR killers maintained by the RaaS gang Gentlemen

A poisoned npm package infected 140+ projects with a hidden payload. This report highlights how to detect, hunt, and defend against supply chain attacks using Microsoft Defender and actionable threat intelligence. The post From package to postinstall payload: Inside the Mastra npm supply chain compromise appeared first on Microsoft Security Blog.

Microsoft Threat Intelligence analyzed a cryptocurrency clipper campaign that combines clipboard theft, wallet replacement, Tor-based communications, and worm-like propagation. Beyond stealing cryptocurrency transactions, the malware establishes persistent access and enables follow-on activity through a lightweight backdoor capability. The post Crypto Clipper uses Tor and worm-like propagation for

Read how Microsoft Security has advanced its agentic vulnerability detection system, codename MDASH, integrating into real-world workflows across Windows, Azure, and identity systems. The post Beyond the benchmark: Advancing security at AI speed  appeared first on Microsoft Security Blog.

Microsoft has been named a Leader in The Forrester Wave™: Extended Detection and Response Platforms, Q2 2026. The post ​​Forrester names Microsoft a Leader in the 2026 Extended Detection and Response Platforms Wave™ report appeared first on Microsoft Security Blog.

See how Microsoft unifies identity and security signals to help teams prevent, detect, and respond to AI-accelerated attacks faster. The post AI is accelerating cyberattacks—here’s how to stay ahead appeared first on Microsoft Security Blog.

Key Points Introduction In this research, we analyze a clipboard hijacker campaign that is hidden inside a collection of “solutions” and “tools” that claim to give users an unfair advantage. These offers include Solana and Pump.fun sniper bots (automated tools that try to buy new tokens or meme coins faster than other traders), Aviator Predictor […] The post From Stars to Upvotes: Fake Reputation

Many manufacturing plants depend on OT systems that stay in service for many years. That long run can hide significant cybersecurity risks.

Amid discussions about how artificial intelligence can facilitate cybercrime, some threat actors remain skepticalCategories: Threat ResearchTags: AI, Dark Web, underground

Unit 42 discovered a Vertex AI Python SDK vulnerability that allows remote code execution via bucket squatting. Read the article for more. The post Pickle in the Middle – Hijacking Vertex AI Model Uploads for Cross-Tenant RCE appeared first on Unit 42.

ESET researchers have discovered SprySOCKS for Windows, FishMonger’s backdoor weaponizing a kernel driver for advanced stealthiness

Attackers can move from access to exfiltration in 72 minutes. Learn how modern SOC teams close the speed gap with Unit 42's AI-driven automation, threat hunting, MDR and Managed XSIAM. The post Inside the Modern SOC: The 72-Minute Race appeared first on Unit 42.

See how Microsoft Defender performed in one year of real-world email security benchmarking against SEG and ICES vendors. The post Microsoft Defender email security benchmarking: Key insights from one year of data appeared first on Microsoft Security Blog.

For the latest discoveries in cyber research for the week of 15th June, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES The University of Nottingham, a UK research university, has suffered a data breach after ShinyHunters accessed its student records system. The incident affected about 454,600 current and former students and exposed contact details, […] The post 15th Jun

A phishing kit subverting Microsoft’s legitimate authentication flow lets attackers break into accounts without stealing passwords or creating fake login pages

本文提出MASCOT-Android，一个经过整理的Android恶意软件源代码数据集及自动化收集流水线。Android恶意软件源代码相较于二进制或反编译代码更能直接反映攻击者意图，但由于源代码稀缺且人工审查成本高昂，此类数据集难以构建和维护。作者的关键发现是：仓库级别的README文档本身即能作为恶意软件源代码收集的强信号。方法上，他们从8,772个恶意软件和25,747个良性项目的README文档中提取字符级TF-IDF特征，训练LinearSVC分类器区分恶意仓库。该仅基于README的模型在本地评估中达到96.28%的准确率和1.06%的假阳性率。此外，模型输出置信度分数，允许用户调整决策阈值以平衡假阳性率和覆盖率，使实际收集过程更具灵活性。研究贡献包括：提供了一个公开可用的Android恶意软件源代码数据集；提出了一个可扩展的自动化收集框架，降低了对人工标注的依赖；验证了项目文档作为安全信号的有效性。该工作适用于恶意软件分析、威胁情报收集及机器学习检测模型训练等场景。

Unit 42 has discovered a new macOS Tahoe 26 forensic artifact that tracks user menu selections across the operating system. Learn more here. The post Tracing Digital Intent: New MacOS Tahoe 26 Artifact Discovered appeared first on Unit 42.

该论文探讨了持续集成（CI）系统的信任问题，核心关注点是：即便源代码本身没有恶意代码，基于容器的CI系统仍可能被植入隐形恶意软件，且不在源码中留下任何痕迹。作者借鉴了Ken Thompson经典的编译器后门思想，证明了攻击者可以通过多种初始感染手段（例如利用CI系统的镜像拉取机制、缓存污染、或插件漏洞）入侵CI环境，随后通过绕过CI系统更新的持久化机制长期潜伏。攻击载荷包括数据窃取、在生产软件中植入后门等。此外，攻击者还能利用隐蔽信道对受感染的CI系统进行远程控制，动态更新攻击载荷或规避防御措施。作者在GitLab CI上实现了概念验证，并指出该攻击可迁移至主流CI平台。研究指出传统代码审查、静态分析等防护手段对此类攻击几近无效，揭示了现代软件供应链中一个被忽视的信任盲区。

In this week’s newsletter, Amy reminisces on the tech toys of their childhood, inspired by a hilarious lesson about why your digital privacy shouldn't be left on an open channel.

By Yarden Porat AI agents need memory. Frameworks like LangGraph provide it through checkpointers – persistence layers that store execution state. But what happens when that persistence layer isn’t locked down? Key Points Background LangGraph is an open-source framework for building stateful, multi-agent AI systems with built-in persistence. It’s an extension of LangChain, with over […] The post F

Decades of piling complexity onto non-standardized stacks have left security unsteerable. Juan Andrés Guerrero-Saade makes the case for a new approach.

Protect enterprise AI agents from supply chain risks by auditing third-party skills for hidden vulnerabilities and multi-stage attack chains. The post Trust No Skill: Integrity Verification for AI Agent Supply Chains appeared first on Unit 42.

该论文是首次针对Android恶意软件生态系统中隐蔽通信信道（Covert Channels, CC）使用情况的纵向研究。研究背景是：代理、VPN和Tor等工具虽然帮助隐私社区和受限地区用户对抗审查，但同样可能被恶意软件和僵尸网络滥用，以隐藏与外部命令与控制服务器的通信。尽管基于恶意软件的攻击日益增多，此前尚无纵向研究分析恶意应用如何利用CC规避检测。为填补这一空白，作者开发了一个多阶段分析管道，结合静态和动态分析，检查系统和网络层面的特征。该管道应用于一个包含350万个Android恶意软件样本的语料库，时间跨度从2009年至2025年7月。精心设计的静态验证规则发现了28.8万使用CC的APK，涉及511个恶意软件家族，CC使用率从2012年的0.30%指数增长至2025年的50%。在动态分析中，识别出19,308个唯一的IP地址，分布在85个国家，其中59个IP地址（17个国家）被明确验证存在CC。此外，进行了跨越16年的纵向数据集研究，发现CC使用方式不断演变：例如，一些恶意软件采用多种CC；另一些则定期在不同CC之间切换（一个家族在2019年至2025年间切换CC达40次）。研究揭示了CC在Android恶意软件中的广泛和增长趋势，为检测和防御提供了重要依据。

A shift in operational pattern of the infamous Vietnam-aligned APT group

Unit 42 research examines attack scenarios targeting cloud logging services. Learn how to defend against log manipulation and defense evasion. The post Blinding the Watchmen: Abusing Cloud Logging Services for Defense Evasion and Visibility appeared first on Unit 42.

Microsoft Patch Tuesday details for June 2026.

Learn how to investigate AI activity in Microsoft 365 Copilot and Azure AI services using a structured, telemetry-driven approach. This playbook helps security teams reconstruct events, assess data exposure, and detect potential threats faster. The post Reconstructing AI activity in investigations  appeared first on Microsoft Security Blog.

We include indicators of activity and mitigations for PAN-OS vulnerability CVE-2026-0257. The post Threat Brief: Active Exploitation of PAN-OS CVE-2026-0257 appeared first on Unit 42.

Every organisation gets audited. The question is who does the auditing.

Attackers are increasingly targeting collaboration platforms like Microsoft Teams. Learn the risks and key steps to strengthen your organization's security. The post When “Hi, This Is IT” Comes Through Microsoft Teams appeared first on Unit 42.

As threat actors operationalize AI to accelerate attacks, they are also leveraging the wider global interest around AI itself as a social engineering lure. The post AI brands as bait: How threat actors are using the AI hype in social engineering appeared first on Microsoft Security Blog.

For the latest discoveries in cyber research for the week of 1st June, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES DentaQuest, a U.S. dental benefits administrator owned by Sun Life, has suffered a data breach after threat group ShinyHunters leaked exfiltrated data. Analysts assessed that 2.6 million accounts were exposed, including names, emails, […] The post 8th Ju

Microsoft Threat Intelligence identified a prompt injection pathway in Claude Code GitHub Action that allowed access to workflow secrets under specific conditions. This research examines the attack chain, responsible disclosure process, Anthropic's mitigation, and guidance for securing AI-powered CI/CD workflows. The post Securing CI/CD in an agentic world: Claude Code Github action case appeared

A surge in real-world attacks against agentic AI systems is reshaping how we think about risk. Based on 12 months of red teaming, this update introduces seven new failure modes, from supply chain compromise to goal hijacking, and the practical mitigations teams need now. The post Updating the taxonomy of failure modes in agentic AI systems: What a year of red teaming taught us  appeared first on M

Joe’s on-the-ground report from Cisco Live U.S. is here, complete with therapy dog pictures and tips on handling conference overstimulation.

该研究从行为心理学视角出发，系统分析恶意软件开发者的编码习惯与认知风格。研究者收集了大量泄露的恶意软件源代码，并与精心筛选的良性开源软件代码进行比较。通过静态应用安全测试（SAST）和多种软件度量指标（如代码行数、圈复杂度、注释密度、函数长度、抽象机制使用频率等），结合认知心理学和犯罪学理论，解释代码结构差异背后的行为含义。研究发现：恶意软件代码通常更短、注释更少，每个函数的圈复杂度更高，而类、闭包等抽象机制使用显著减少；漏洞类型上，恶意软件包含更多良性代码通常避免的安全问题，表明开发过程缺乏安全投资。这些模式暗示恶意开发者更注重快速实现、操作隐蔽和规避检测，而非代码长期可维护性。但度量数据显示，恶意代码与良性代码的差异尚不足以作为唯一的区分特征。本研究证明，定量代码分析可作为行为信号和战略选择的代理，为行为网络安全研究提供新方法，并为犯罪者行为画像的研究奠定基础。

Research by: Alexey Bukhteyev Key Takeaways Introduction When we search Google for a popular piece of software, we usually click the first result, sometimes without even looking at the rest, because official project sites tend to rank highest and appear near the top of the results. After landing on a site with a professional design and […] The post Impersonation, Click Hijacking, and TDS: Inside a

Microsoft Threat Intelligence 披露了一起大规模 npm 供应链攻击活动，代号 Miasma。攻击者入侵了 Red Hat 的 npm 组织 @redhat-cloud-services，篡改了超过 90 个版本的合法 package，在 CI/CD 环境和开发者机器中植入恶意代码。该恶意代码会窃取 GitHub 令牌、云服务凭证（如 AWS、Azure）以及本地存储的敏感信息，并通过蠕虫式传播机制，利用已感染的信任关系向其他项目自动推送恶意更新。攻击者在软件供应链的早期阶段（预安装脚本）执行恶意负载，实现了持久化驻留。受影响的主要是依赖 Red Hat 云服务组件的开发者和企业，可能引发大规模凭证泄露和横向移动。微软建议立即审计受影响的 npm 包版本，轮换所有可能暴露的凭证，并加强 CI/CD 管道的安全控制。

Discover how Microsoft enables fast, secure AI development with MDASH and new security capabilities. The post Microsoft Build 2026: Securing code, agents, and models across the development lifecycle appeared first on Microsoft Security Blog.

ESET researchers show how Gamaredon facilitated Turla access to Ukrainian targets, revealing rare cooperation between FSB-linked espionage groups.

Operation FlutterBridge is a malvertising campaign targeting macOS users. It distributed the new backdoor FlutterShell, built using the Flutter framework. The post Operation FlutterBridge: macOS Malvertising Campaign Spreads New FlutterShell Backdoor appeared first on Unit 42.

AI accelerated tool development and testing, but humans drove the workflowCategories: Threat ResearchTags: AI, EDR

For the latest discoveries in cyber research for the week of 1st June, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Carnival Corporation, a global cruise line operator, has confirmed a data breach affecting nearly 6 million people after attackers used social engineering to compromise an employee account. Exposed information may include names, contact […] The post 1st

A dependency confusion campaign leveraged 33 malicious npm packages to collect reconnaissance data from developer and build environments. This report details the attack chain, observed tradecraft, and detection opportunities to help organizations identify and disrupt related activity. The post Malicious npm packages abuse dependency confusion to profile developer environments appeared first on Mic

Microsoft is named a Leader in the 2026 Gartner® Magic Quadrant™ for Endpoint Protection. The post Microsoft is named a Leader in the 2026 Gartner® Magic Quadrant™ for Endpoint Protection appeared first on Microsoft Security Blog.

The Mini Shai-Hulud campaign used malicious npm packages to target cloud and CI/CD credentials across developer environments. This report details the attack chain, detection opportunities, and mitigation guidance to help organizations identify and disrupt related activity. The post Typosquatted npm packages used to steal cloud and CI/CD secrets appeared first on Microsoft Security Blog.

In this newsletter, Thor breaks down why you should stop relying solely on CVSS and start using EPSS and GCVE to focus your patching efforts on the threats that actually matter.

Unit 42 explores trends in data theft and extortion, outlining key strategies for organizations as frontier AI models advance. The post Out of the Crypt: The Evolving Cyber Extortion Economy appeared first on Unit 42.

Talos researchers find 4 heap-based buffer overflow vulnerabilities in MediaArea's MediaInfoLib.

EvidenceForge generates high-quality, realistic, and consistent datasets across multiple log formats, enabling teams to effectively train personnel and validate detection models without the need for complex manual simulations.