#malware

共收录 420 条相关情报。

威胁情报2026-06-17 发布INFO

Protecting legacy OT systems against modern cyberthreats

Many manufacturing plants depend on OT systems that stay in service for many years. That long run can hide significant c

历史摘要 · 未重新核验 · ESET

#eset #malware #apt

威胁情报2026-06-17 发布INFO

AI in the underground: Curiosity, claims, and concerns

Amid discussions about how artificial intelligence can facilitate cybercrime, some threat actors remain skepticalCategor

历史摘要 · 未重新核验 · Sophos

#ransomware #malware #sophos

威胁情报2026-06-16 发布INFO

Pickle in the Middle – Hijacking Vertex AI Model Uploads for Cross-Tenant RCE

Unit 42 discovered a Vertex AI Python SDK vulnerability that allows remote code execution via bucket squatting. Read the

历史摘要 · 未重新核验 · Palo Alto Unit 42

#paloalto #unit42 #apt #malware

威胁情报2026-06-16 发布INFO

FishMonger’s arsenal upgraded: SprySOCKS for Windows

ESET researchers have discovered SprySOCKS for Windows, FishMonger’s backdoor weaponizing a kernel driver for advanced s

历史摘要 · 未重新核验 · ESET

#apt #eset #malware

威胁情报2026-06-15 发布INFO

Inside the Modern SOC: The 72-Minute Race

Attackers can move from access to exfiltration in 72 minutes. Learn how modern SOC teams close the speed gap with Unit 4

历史摘要 · 未重新核验 · Palo Alto Unit 42

#paloalto #unit42 #apt #malware

威胁情报2026-06-15 发布INFO

Microsoft Defender email security benchmarking: Key insights from one year of data

See how Microsoft Defender performed in one year of real-world email security benchmarking against SEG and ICES vendors.

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

#malware #microsoft #apt #ti

威胁情报2026-06-15 发布INFO

15th June – Threat Intelligence Report

For the latest discoveries in cyber research for the week of 15th June, please download our Threat Intelligence Bulletin

历史摘要 · 未重新核验 · Check Point Research

#malware #research #checkpoint

威胁情报2026-06-15 发布INFO

EvilTokens: A phishing attack that doesn’t steal your password

A phishing kit subverting Microsoft’s legitimate authentication flow lets attackers break into accounts without stealing

历史摘要 · 未重新核验 · ESET

#malware #eset #apt

学术论文2026-06-15 发布INFO

MASCOT-Android: A Curated Dataset and Automated Collection Pipeline for Android Malware Source Code Specimens

本文提出MASCOT-Android，一个经过整理的Android恶意软件源代码数据集及自动化收集流水线。Android恶意软件源代码相较于二进制或反编译代码更能直接反映攻击者意图，但由于源代码稀缺且人工审查成本高昂，此类数据集难以构建和维

历史摘要 · 未重新核验 · arXiv cs.CR

#cs.AI #android #malware #dataset #automated-collection

威胁情报2026-06-12 发布INFO

Tracing Digital Intent: New MacOS Tahoe 26 Artifact Discovered

Unit 42 has discovered a new macOS Tahoe 26 forensic artifact that tracks user menu selections across the operating syst

历史摘要 · 未重新核验 · Palo Alto Unit 42

#apt #unit42 #malware #paloalto

学术论文2026-06-12 发布INFO

Reflections on Trusting Docker: Invisible Malware in Continuous Integration Systems.

该论文探讨了持续集成（CI）系统的信任问题，核心关注点是：即便源代码本身没有恶意代码，基于容器的CI系统仍可能被植入隐形恶意软件，且不在源码中留下任何痕迹。作者借鉴了Ken Thompson经典的编译器后门思想，证明了攻击者可以通过多种初始

历史摘要 · 未重新核验 · IEEE S&P

#continuous-integration #supply-chain #malware

威胁情报2026-06-11 发布INFO

A tale of two eras

In this week’s newsletter, Amy reminisces on the tech toys of their childhood, inspired by a hilarious lesson about why

历史摘要 · 未重新核验 · Cisco Talos

#vuln_research #talos #malware #cisco

威胁情报2026-06-11 发布INFO

From SQLi to RCE – Exploiting LangGraph’s Checkpointer

By Yarden Porat AI agents need memory. Frameworks like LangGraph provide it through checkpointers – persistence layers t

历史摘要 · 未重新核验 · Check Point Research

#checkpoint #malware #research

威胁情报2026-06-11 发布INFO

LABScon25 Replay | Keynote: Steps to an Ecology of Cyber

Decades of piling complexity onto non-standardized stacks have left security unsteerable. Juan Andrés Guerrero-Saade mak

历史摘要 · 未重新核验 · SentinelOne

#malware #labs #sentinelone

威胁情报2026-06-11 发布INFO

Trust No Skill: Integrity Verification for AI Agent Supply Chains

Protect enterprise AI agents from supply chain risks by auditing third-party skills for hidden vulnerabilities and multi

历史摘要 · 未重新核验 · Palo Alto Unit 42

#unit42 #malware #paloalto #apt

学术论文2026-06-11 发布INFO

The Invisible Ink of the Android Malware World: A Longitudinal Study on the Usage of Covert Communication Channels

该论文是首次针对Android恶意软件生态系统中隐蔽通信信道（Covert Channels, CC）使用情况的纵向研究。研究背景是：代理、VPN和Tor等工具虽然帮助隐私社区和受限地区用户对抗审查，但同样可能被恶意软件和僵尸网络滥用，以隐

历史摘要 · 未重新核验 · arXiv cs.CR

#cs.NI #android #covert-channel #malware #longitudinal-study

威胁情报2026-06-11 发布INFO

OceanLotus: From external espionage to domestic targeting

A shift in operational pattern of the infamous Vietnam-aligned APT group

历史摘要 · 未重新核验 · ESET

#malware #eset #apt

威胁情报2026-06-09 发布INFO

Blinding the Watchmen: Abusing Cloud Logging Services for Defense Evasion and Visibility

Unit 42 research examines attack scenarios targeting cloud logging services. Learn how to defend against log manipulatio

历史摘要 · 未重新核验 · Palo Alto Unit 42

#paloalto #apt #unit42 #malware

威胁情报2026-06-09 发布INFO

Microsoft Patch Tuesday for June 2026 — Snort rules and prominent vulnerabilities

Microsoft Patch Tuesday details for June 2026.

历史摘要 · 未重新核验 · Cisco Talos

#cisco #talos #vuln_research #malware

威胁情报2026-06-09 发布INFO

Reconstructing AI activity in investigations

Learn how to investigate AI activity in Microsoft 365 Copilot and Azure AI services using a structured, telemetry-driven

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

#microsoft #ti #apt #malware