#malware

共收录 420 条相关情报。

威胁情报2026-10-31 发布INFO

Appraisal by AI: Model-driven victim prioritization in the VOLTA infostealer

The self-deleting VOLTA infostealer steals credentials, sessions, and cryptocurrency wallets. Then, it uses LLMs to prof

来源摘录 · Cisco Talos

#cisco #malware #talos #vuln_research

威胁情报2026-10-31 发布INFO

Inside a malicious Claude Code-branded extension and its persistent SSH backdoor

Microsoft analyzes a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and re

来源摘录 · Microsoft Threat Intelligence

#apt #malware #microsoft #ti

威胁情报2026-10-30 发布INFO

From help desk impersonation to AD CS abuse: Investigating ESC1 and ESC8 intrusion paths

Teams support impersonation led to remote access, malicious runtime execution, and Certificate Services abuse through au

来源摘录 · Microsoft Threat Intelligence

#apt #malware #microsoft #ti

威胁情报2026-10-30 发布INFO

This month in security with Tony Anscombe – October 2026 edition

The PHP2Shell disclosure and other major cybersecurity news this month brought into relief the need for well-thought-out

来源摘录 · ESET

#apt #eset #malware

威胁情报2026-10-30 发布INFO

Malicious Claude Code extension distributed through Cursor marketplace

Categories: Threat Research Tags: advisory, Cursor

来源摘录 · Sophos

#malware #ransomware #sophos

威胁情报2026-10-29 发布INFO

Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619 (Updated October 29)

CVE-2026-109618 · CVE-2026-109619

CVE-2026-109618 and CVE-2026-109619 are Critical vulnerabilities in PHP, a scripting language used globally for web serv

来源摘录 · Palo Alto Unit 42

#apt #malware #paloalto #unit42

威胁情报2026-10-29 发布INFO

A quiet week in infosec <.<

In this edition of the Threat Source newsletter, William explores how PHP has taken over the conversation, Node.js has j

来源摘录 · Cisco Talos

#cisco #malware #talos #vuln_research

威胁情报2026-10-29 发布INFO

Tracking AI adoption in North Korean threat actor tradecraft

As Microsoft Threat Intelligence continues to track how threat actors operationalize AI to increase the speed and effici

来源摘录 · Microsoft Threat Intelligence

#apt #conti #malware #microsoft #ti

威胁情报2026-10-29 发布INFO

IDC MarketScape names Microsoft a Leader in the 2026 Worldwide Modern Endpoint Security for Enterprises Vendor Assessment

IDC has named Microsoft a Leader in the 2026 IDC MarketScape for Worldwide Modern Endpoint Security for Enterprises. The

来源摘录 · Microsoft Threat Intelligence

#apt #malware #microsoft #ti

威胁情报2026-10-29 发布INFO

Cohere’s Qwen Story: Looks More Like Model Jaggedness

Key findings On October 26, Cohere reported a puzzling incident involving Qwen3.8-Flash-Next, an open-weight model from

来源摘录 · Check Point Research

#checkpoint #malware #research

威胁情报2026-10-29 发布INFO

IR trends Q3 2026: Actors impersonate IT help desks in vishing attacks as ransomware activity increases

Phishing remained the leading initial access technique, while percentage of ransomware and pre-ransomware cases increase

来源摘录 · Cisco Talos

#cisco #malware #talos #vuln_research

威胁情报2026-10-29 发布INFO

NIK C2: The new AI-enabled command-and-control framework

Cisco Talos observed a new AI-integrated command-and-control (C2) framework in the wild called “NIK C2.”

来源摘录 · Cisco Talos

#cisco #malware #talos #vuln_research

威胁情报2026-10-29 发布INFO

Amatera: How the prolific infostealer works and spreads

The malware that topped ESET’s infostealer detections in Latin America in the first half of 2026 is an example of how cy

来源摘录 · ESET

#apt #eset #malware

威胁情报2026-10-29 发布INFO

京网文〔2020〕6051-1195号

历史摘要 · 未重新核验 · 360CERT 安全报告

#360 #apt #malware #report

威胁情报2026-10-29 发布INFO

（总）网出证（京）字第281号

历史摘要 · 未重新核验 · 360CERT 安全报告

#360 #apt #malware #report

威胁情报2026-10-29 发布INFO

京公网安备 11000002002063号

历史摘要 · 未重新核验 · 360CERT 安全报告

#360 #apt #malware #report

威胁情报2026-10-29 发布INFO

AI used in Aur0ra ransomware testing and execution

The GOLD OGRE threat group has used AI extensively to develop tools and to orchestrate and execute ransomware operations

来源摘录 · Sophos

#malware #ransomware #sophos

威胁情报2026-10-28 发布INFO

Inside KeyDrift: Analyzing historical UAT-11473 activity on Cisco SD-WAN

CVE-2026-20127

Talos has identified UAT-11473, a highly sophisticated APT, who exploited CVE-2026-20127, an authentication bypass vulne

来源摘录 · Cisco Talos

#cisco #malware #talos #vuln_research

威胁情报2026-10-28 发布INFO

Inside KeyDrift: Analyzing historical UAT-11473 activity on Cisco SD-WAN

CVE-2026-20127

Talos has identified UAT-11473, a highly sophisticated APT, who exploited CVE-2026-20127, an authentication bypass vulne

历史摘要 · 未重新核验 · Cisco Talos

#cisco #malware #talos #vuln_research

威胁情报2026-10-28 发布INFO

Unwrapping Retail Peak Season Cyber Threats

Unit 42 explores key peak shopping season retail cyber threats, from ransomware to AI attacks, and shares how to defend

来源摘录 · Palo Alto Unit 42

#apt #malware #paloalto #unit42