Cyber Security Daily Radar

#malware

共收录 420 条相关情报。

← 返回所有主题
威胁情报2026-05-27 发布INFO

MediaArea heap-based buffer overflow vulnerabilities

Talos researchers find 4 heap-based buffer overflow vulnerabilities in MediaArea's MediaInfoLib.

历史摘要 · 未重新核验 · Cisco Talos

#malware#talos#vuln_research#cisco
威胁情报2026-05-27 发布INFO

Introducing EvidenceForge: Synthetic security logs that don’t look (as) fake

EvidenceForge generates high-quality, realistic, and consistent datasets across multiple log formats, enabling teams to

历史摘要 · 未重新核验 · Cisco Talos

#malware#talos#vuln_research#cisco
威胁情报2026-05-26 发布INFO

From poisoned search results to GPU mining: A cryptojacking campaign abusing ScreenConnect and Microsoft .NET utilities

Microsoft exposes a cryptojacking campaign using SEO poisoning and ScreenConnect to target high-performance PCs, with ma

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

#microsoft#apt#ti#malware
学术论文2026-05-26 发布MEDIUM

Silent Consent, Persistent Risk: Android Permission Groups and Custom Permissions

该论文系统性地研究了Android权限系统中两个被忽视的过时机制，这些机制持续破坏用户知情同意：（1）权限组（permission groups）机制：用户首次授权某个权限后，后续同一组内的新权限会被静默自动授予，用户无感知；（2）普通级自

历史摘要 · 未重新核验 · arXiv cs.CR

#android#permission-system#privacy#malware
威胁情报2026-05-26 发布INFO

AI Threat Landscape Digest March-April 2026

Executive Summary During the March–April 2026 reporting period, AI use in offensive operations advanced from development

历史摘要 · 未重新核验 · Check Point Research

#malware#research#checkpoint
威胁情报2026-05-25 发布INFO

25th May – Threat Intelligence Report

For the latest discoveries in cyber research for the week of 25th May, please download our Threat Intelligence Bulletin.

历史摘要 · 未重新核验 · Check Point Research

#checkpoint#research#malware
威胁情报2026-05-22 发布INFO

Microsoft recognized as a Leader in The Forrester Wave™ for Workforce Identity Security Platforms

Microsoft has been recognized as a Leader in The Forrester Wave™: Workforce Identity Security Platforms, Q2 2026, receiv

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

#microsoft#apt#malware#ti
威胁情报2026-05-22 发布INFO

From edge appliance to enterprise compromise: Multi-stage Linux intrusion via F5 and Confluence

微软威胁情报团队报告了一起针对Linux环境的多阶段入侵攻击事件。攻击始于一台暴露在公网的F5 BIG-IP边缘设备，该设备被作为初始访问入口。攻击者利用该设备作为跳板，通过内网横向移动至Confluence服务器，并试图窃取凭证和破坏身份

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

#ti#microsoft#apt#malware
威胁情报2026-05-22 发布INFO

Microsoft Security success stories: How St. Luke’s and ManpowerGroup are securing AI foundations

How Frontier firms secure AI at scale: read how Microsoft customers embed governance, identity, and cloud security to ma

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

#ti#microsoft#apt#malware
威胁情报2026-05-22 发布INFO

Fast and Furious – Nimbus Manticore Operations During the Iranian Conflict

Key Findings Introduction During the recent geopolitical tensions in the Middle East, we reported on multiple Iran-nexus

历史摘要 · 未重新核验 · Check Point Research

#research#malware#checkpoint
威胁情报2026-05-22 发布INFO

Tracking Iranian APT Screening Serpens’ 2026 Espionage Campaigns

Unit 42 details Screening Serpens' use of AppDomainManager hijacking and new RAT variants to target tech and defense sec

历史摘要 · 未重新核验 · Palo Alto Unit 42

#malware#paloalto#apt#unit42
威胁情报2026-05-22 发布INFO

Paved With Intent: ROADtools and Nation-State Tactics in the Cloud

Open-source framework ROADtools is being misused by threat actors for cloud intrusions. Learn how to identify its malici

历史摘要 · 未重新核验 · Palo Alto Unit 42

#malware#paloalto#apt#unit42
威胁情报2026-05-21 发布INFO

The art of being ungovernable

In this edition of the Threat Source newsletter, William explores the value of being "ungovernable" in a professional se

历史摘要 · 未重新核验 · Cisco Talos

#malware#vuln_research#cisco#talos
威胁情报2026-05-21 发布INFO

What’s new in Microsoft Security: May 2026

Microsoft Security’s latest updates extend visibility, control, and protection across expanding ecosystems as organizati

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

#malware#apt#microsoft#ti
威胁情报2026-05-20 发布INFO

Mini Shai Hulud: Compromised @antv npm packages enable CI/CD credential theft

Compromised @antv npm packages deploy the Mini Shai-Hulud payload to steal CI/CD secrets from Linux-based automation env

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

#malware#apt#microsoft#ti
威胁情报2026-05-20 发布INFO

Securing the gaming culture of cultures

Read about the unique challenges and rewards of securing gaming platforms and how to better protect gaming communities.

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

#apt#microsoft#malware#ti
威胁情报2026-05-20 发布INFO

Introducing RAMPART and Clarity: Open source tools to bring safety into Agent development workflow

The AI systems shipping inside enterprises today are fundamentally different from the ones we were building even two yea

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

#apt#microsoft#malware#ti
威胁情报2026-05-20 发布INFO

Tracking TamperedChef Clusters via Certificate and Code Reuse

Unit 42 analyzes TamperedChef malware clusters that use trojanized productivity apps and malvertising to deliver stealth

历史摘要 · 未重新核验 · Palo Alto Unit 42

#paloalto#unit42#malware#apt
威胁情报2026-05-19 发布INFO

TP-Link, Photoshop, OpenVPN, Norton VPN vulnerabilities

Cisco Talos’ Vulnerability Discovery & Research team recently disclosed eight vulnerabilities in TP-Link, and one each i

历史摘要 · 未重新核验 · Cisco Talos

#vuln_research#talos#cisco#malware
威胁情报2026-05-19 发布INFO

Exposing Fox Tempest: A malware-signing service operation

Fox Tempest is a financially motivated threat actor operating a malware‑signing‑as‑a‑service (MSaaS) used by other cyber

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

#microsoft#apt#ti#malware