Cybercriminals: the 'auditors' you never hired
Every organisation gets audited. The question is who does the auditing.
共收录 420 条相关情报。
← 返回所有主题Every organisation gets audited. The question is who does the auditing.
Attackers are increasingly targeting collaboration platforms like Microsoft Teams. Learn the risks and key steps to stre
As threat actors operationalize AI to accelerate attacks, they are also leveraging the wider global interest around AI i
For the latest discoveries in cyber research for the week of 1st June, please download our Threat Intelligence Bulletin.
Microsoft Threat Intelligence identified a prompt injection pathway in Claude Code GitHub Action that allowed access to
A surge in real-world attacks against agentic AI systems is reshaping how we think about risk. Based on 12 months of red
Joe’s on-the-ground report from Cisco Live U.S. is here, complete with therapy dog pictures and tips on handling confere
该研究从行为心理学视角出发,系统分析恶意软件开发者的编码习惯与认知风格。研究者收集了大量泄露的恶意软件源代码,并与精心筛选的良性开源软件代码进行比较。通过静态应用安全测试(SAST)和多种软件度量指标(如代码行数、圈复杂度、注释密度、函数长
Research by: Alexey Bukhteyev Key Takeaways Introduction When we search Google for a popular piece of software, we usual
Microsoft Threat Intelligence 披露了一起大规模 npm 供应链攻击活动,代号 Miasma。攻击者入侵了 Red Hat 的 npm 组织 @redhat-cloud-services,篡改了超过 90 个版本
Discover how Microsoft enables fast, secure AI development with MDASH and new security capabilities. The post Microsoft
ESET researchers show how Gamaredon facilitated Turla access to Ukrainian targets, revealing rare cooperation between FS
Operation FlutterBridge is a malvertising campaign targeting macOS users. It distributed the new backdoor FlutterShell,
AI accelerated tool development and testing, but humans drove the workflowCategories: Threat ResearchTags: AI, EDR
For the latest discoveries in cyber research for the week of 1st June, please download our Threat Intelligence Bulletin.
A dependency confusion campaign leveraged 33 malicious npm packages to collect reconnaissance data from developer and bu
Microsoft is named a Leader in the 2026 Gartner® Magic Quadrant™ for Endpoint Protection. The post Microsoft is named a
The Mini Shai-Hulud campaign used malicious npm packages to target cloud and CI/CD credentials across developer environm
In this newsletter, Thor breaks down why you should stop relying solely on CVSS and start using EPSS and GCVE to focus y
Unit 42 explores trends in data theft and extortion, outlining key strategies for organizations as frontier AI models ad