#malware

共收录 420 条相关情报。

威胁情报2026-07-13 发布INFO

Microsoft Entra ID security updates: Passkeys are the default authentication method in Entra ID

Microsoft Entra ID makes passkeys the default sign-in experience and introduces a new model for SMS and voice authentica

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

#ti #malware #microsoft #apt

威胁情报2026-07-13 发布INFO

13th July – Threat Intelligence Report

For the latest discoveries in cyber research for the week of 13th July, please download our Threat Intelligence Bulletin

历史摘要 · 未重新核验 · Check Point Research

#malware #checkpoint #research

学术论文2026-07-11 发布INFO

When Malware Changed Its Mind: An Empirical Study of Variable Program Behaviors in the Real World.

该论文通过大规模实证研究，分析了真实世界中恶意软件在执行过程中行为动态变化的现象。作者收集了来自多个来源的恶意软件样本，在沙箱环境中执行并记录其系统调用、网络流量、文件操作等行为轨迹。通过时序聚类和变化点检测算法，识别出恶意软件行为发生显著

历史摘要 · 未重新核验 · USENIX Security

#malware #behavioral-analysis #dynamic-analysis #evasion

威胁情报2026-07-10 发布INFO

No Manners Here: The Ruthless Rise of The Gentlemen Ransomware

Unit 42 explores The Gentlemen ransomware operations, revealing the affiliate model driving its rapid growth. Learn more

历史摘要 · 未重新核验 · Palo Alto Unit 42

#malware #unit42 #apt #paloalto

威胁情报2026-07-10 发布INFO

Securing our future: July 2026 progress report on Microsoft’s Secure Future Initiative

Microsoft’s latest Secure Future Initiative report outlines progress on secure foundations, AI-powered defense, and futu

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

#malware #apt #ti #microsoft

学术论文2026-07-10 发布INFO

Malaika: Understanding Malware through Tri-Grounded Agentic Reasoning

该论文提出了一种名为 Malaika 的多智能体框架，用于解决恶意软件理解中的核心挑战：如何在部分可观测性下，从稀疏、分散的代码证据中重建高级恶意行为，并与良性功能区分。作者将恶意软件理解形式化为一个基于证据的推理问题，并主张可靠的行为重建

历史摘要 · 未重新核验 · arXiv cs.CR

#cs.SE #malware #llm #agent #android #explainability

威胁情报2026-07-09 发布INFO

WolfSSL, GeoVision, VTK vulnerabilities

Cisco Talos’ Vulnerability Discovery & Research team recently disclosed three vulnerabilities in WolfSSF, fourteen in Ge

历史摘要 · 未重新核验 · Cisco Talos

#malware #cisco #talos #vuln_research

威胁情报2026-07-09 发布INFO

Winning 54% of the time

With Wimbledon's help, Hazel argues against the popular myth that "Attackers only need to be right once, but defenders n

历史摘要 · 未重新核验 · Cisco Talos

#malware #cisco #talos #vuln_research

威胁情报2026-07-09 发布INFO

GigaWiper: Anatomy of a destructive backdoor assembled from multiple malware

GigaWiper is a destructive backdoor that combines multiple wiping and ransomware-like capabilities into a single operati

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

#apt #malware #ti #microsoft

威胁情报2026-07-09 发布INFO

One Target, Two Flags | Rival Espionage Actors Converge On Pakistani Law Enforcement

China and India ran separate espionage operations against the same Pakistani police force, each drawn by different stake

历史摘要 · 未重新核验 · SentinelOne

#sentinelone #malware #labs

威胁情报2026-07-08 发布INFO

Protecting Microsoft at AI speed: How SFI proactively hardens our cloud

微软于2026年7月8日发布博文，介绍其安全未来计划（Secure Future Initiative, SFI）如何利用AI速度主动加固云服务。SFI将威胁知识、运营框架与安全需求相结合，定义了完善云服务的防御标准。文章强调，满足这些标准

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

#ti #conti #apt #malware #microsoft

威胁情报2026-07-07 发布INFO

Vidar Stealer Unmasked: Code Signing Abuse, Go Loaders and File Inflation

A cybercrime campaign combined a loader-as-a-service framework and DLL sideloading via a Go-compiled fake MpClient.dll,

历史摘要 · 未重新核验 · Palo Alto Unit 42

#paloalto #malware #apt #unit42

威胁情报2026-07-07 发布INFO

UAT-7810 continues building ORB networks using new malware

Talos’ latest findings on UAT-7810 indicate that the threat actor continues to develop their custom-made malware.

历史摘要 · 未重新核验 · Cisco Talos

#conti #talos #malware #vuln_research #cisco

威胁情报2026-07-07 发布INFO

When AI agents look like attackers: what behavioral telemetry tells us

An X-Ops analysis of how AI coding agents trigger endpoint detection rules designed for adversariesCategories: Threat Re

历史摘要 · 未重新核验 · Sophos

#sophos #malware #ransomware

威胁情报2026-07-06 发布INFO

5 insights from Frost & Sullivan’s 2025 Frost Radar™ for Cloud Security Posture Management

该文章基于Frost & Sullivan发布的2025年云安全态势管理（CSPM）Frost Radar™报告，提炼了五项关键洞察。报告指出，CSPM正从传统的“时间点合规”工具向“持续风险管理”平台演进。核心变化包括：1）CSPM不再仅

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

#conti #microsoft #apt #malware #ti

威胁情报2026-07-06 发布INFO

Cavern Manticore: Exposing Iran-Linked Modular C2 Framework

Key Points Introduction Since early 2026, Check Point Research (CPR) has tracked a new modular command-and-control frame

历史摘要 · 未重新核验 · Check Point Research

#checkpoint #research #malware

威胁情报2026-07-06 发布INFO

6th July – Threat Intelligence Report

For the latest discoveries in cyber research for the week of 6th July, please download our Threat Intelligence Bulletin.

历史摘要 · 未重新核验 · Check Point Research

#checkpoint #research #malware

学术论文2026-07-06 发布INFO

BOOTKITTY: A Stealthy Bootkit-Rootkit Against Modern Operating Systems.

由于原始输入未提供论文摘要，以下内容基于标题推断：本文提出一种名为 BOOTKITTY 的隐蔽启动套件（bootkit）与 rootkit 组合攻击技术，针对现代操作系统（如 Windows、Linux）设计。核心研究目标是在系统启动过程中

历史摘要 · 未重新核验 · USENIX Security

#bootkit #rootkit #malware #stealth #UEFI

威胁情报2026-07-02 发布INFO

How We Added WebAuthn to a Browser-Based RDP Client

A look inside the reverse-engineering journey of building the first RDP client outside of Windows to support WebAuthn re

历史摘要 · 未重新核验 · Palo Alto Unit 42

#malware #apt #paloalto #unit42

威胁情报2026-07-02 发布INFO

Catan and Mouse

What do board games and cybersecurity have in common? Pattern recognition. Strategy. Adaptation. In this week’s Threat S

历史摘要 · 未重新核验 · Cisco Talos

#cisco #talos #vuln_research #malware