#malware

共收录 420 条相关情报。

← 返回所有主题
威胁情报2026-06-09 发布INFO

Cybercriminals: the 'auditors' you never hired

Every organisation gets audited. The question is who does the auditing.

历史摘要 · 未重新核验 · ESET

威胁情报2026-06-08 发布INFO

When “Hi, This Is IT” Comes Through Microsoft Teams

Attackers are increasingly targeting collaboration platforms like Microsoft Teams. Learn the risks and key steps to stre

历史摘要 · 未重新核验 · Palo Alto Unit 42

威胁情报2026-06-08 发布INFO

AI brands as bait: How threat actors are using the AI hype in social engineering

As threat actors operationalize AI to accelerate attacks, they are also leveraging the wider global interest around AI i

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

威胁情报2026-06-08 发布INFO

8th June – Threat Intelligence Report

For the latest discoveries in cyber research for the week of 1st June, please download our Threat Intelligence Bulletin.

历史摘要 · 未重新核验 · Check Point Research

威胁情报2026-06-05 发布INFO

Securing CI/CD in an agentic world: Claude Code Github action case

Microsoft Threat Intelligence identified a prompt injection pathway in Claude Code GitHub Action that allowed access to

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

威胁情报2026-06-04 发布INFO

Updating the taxonomy of failure modes in agentic AI systems: What a year of red teaming taught us

A surge in real-world attacks against agentic AI systems is reshaping how we think about risk. Based on 12 months of red

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

威胁情报2026-06-04 发布INFO

Reporting from Vegas: Networking, AI, and good boys

Joe’s on-the-ground report from Cisco Live U.S. is here, complete with therapy dog pictures and tips on handling confere

历史摘要 · 未重新核验 · Cisco Talos

学术论文2026-06-04 发布INFO

Exploring the connection between coding habits and cognitive styles in malware developers

该研究从行为心理学视角出发,系统分析恶意软件开发者的编码习惯与认知风格。研究者收集了大量泄露的恶意软件源代码,并与精心筛选的良性开源软件代码进行比较。通过静态应用安全测试(SAST)和多种软件度量指标(如代码行数、圈复杂度、注释密度、函数长

历史摘要 · 未重新核验 · arXiv cs.CR

威胁情报2026-06-03 发布INFO

Impersonation, Click Hijacking, and TDS: Inside a Malware Distribution Ecosystem

Research by: Alexey Bukhteyev Key Takeaways Introduction When we search Google for a popular piece of software, we usual

历史摘要 · 未重新核验 · Check Point Research

威胁情报2026-06-03 发布INFO

Preinstall to persistence: Inside the Red Hat npm Miasma credential-stealing campaign

Microsoft Threat Intelligence 披露了一起大规模 npm 供应链攻击活动,代号 Miasma。攻击者入侵了 Red Hat 的 npm 组织 @redhat-cloud-services,篡改了超过 90 个版本

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

威胁情报2026-06-02 发布INFO

Microsoft Build 2026: Securing code, agents, and models across the development lifecycle

Discover how Microsoft enables fast, secure AI development with MDASH and new security capabilities. The post Microsoft

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

威胁情报2026-06-02 发布INFO

LABScon25 Replay | Gamaredon x Turla: Unveiling a 2025 Espionage Alliance Targeting Ukraine

ESET researchers show how Gamaredon facilitated Turla access to Ukrainian targets, revealing rare cooperation between FS

历史摘要 · 未重新核验 · SentinelOne

威胁情报2026-06-02 发布INFO

Operation FlutterBridge: macOS Malvertising Campaign Spreads New FlutterShell Backdoor

Operation FlutterBridge is a malvertising campaign targeting macOS users. It distributed the new backdoor FlutterShell,

历史摘要 · 未重新核验 · Palo Alto Unit 42

威胁情报2026-06-02 发布INFO

Pointing a Cursor at evading detection

AI accelerated tool development and testing, but humans drove the workflowCategories: Threat ResearchTags: AI, EDR

历史摘要 · 未重新核验 · Sophos

威胁情报2026-06-01 发布INFO

1st June – Threat Intelligence Report

For the latest discoveries in cyber research for the week of 1st June, please download our Threat Intelligence Bulletin.

历史摘要 · 未重新核验 · Check Point Research

威胁情报2026-05-30 发布INFO

Malicious npm packages abuse dependency confusion to profile developer environments

A dependency confusion campaign leveraged 33 malicious npm packages to collect reconnaissance data from developer and bu

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

威胁情报2026-05-29 发布INFO

Microsoft is named a Leader in the 2026 Gartner® Magic Quadrant™ for Endpoint Protection

Microsoft is named a Leader in the 2026 Gartner® Magic Quadrant™ for Endpoint Protection. The post Microsoft is named a

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

威胁情报2026-05-29 发布INFO

Typosquatted npm packages used to steal cloud and CI/CD secrets

The Mini Shai-Hulud campaign used malicious npm packages to target cloud and CI/CD credentials across developer environm

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

威胁情报2026-05-28 发布INFO

Less panic patching, more precision

In this newsletter, Thor breaks down why you should stop relying solely on CVSS and start using EPSS and GCVE to focus y

历史摘要 · 未重新核验 · Cisco Talos

威胁情报2026-05-27 发布INFO

Out of the Crypt: The Evolving Cyber Extortion Economy

Unit 42 explores trends in data theft and extortion, outlining key strategies for organizations as frontier AI models ad

历史摘要 · 未重新核验 · Palo Alto Unit 42