Cyber Security Daily Radar

#malware

共收录 420 条相关情报。

← 返回所有主题
威胁情报2026-09-10 发布INFO

PuzzleMask: Abusing Plain Prose as a Covert AI Attack Vector

Executive Summary In this research we introduce a prompt-crafting technique for bypassing quick LLM-based policy checks

历史摘要 · 未重新核验 · Check Point Research

#research#checkpoint#malware
威胁情报2026-09-10 发布INFO

The Machine With Many Faces: Post-Exploitation Identity Misuse in SPIFFE/SPIRE

Learn how root access on a compromised K8s node allows attackers to utilize SPIFFE/SPIRE metadata to spoof and harvest c

历史摘要 · 未重新核验 · Palo Alto Unit 42

#apt#paloalto#unit42#malware
威胁情报2026-09-09 发布INFO

Threat matrix: Mapping threats across cloud web applications

Microsoft introduces the Cloud Web Applications Threat Matrix, a MITRE ATT&CK-aligned framework that helps defenders und

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

#apt#ti#microsoft#malware
威胁情报2026-09-09 发布INFO

Passkey-themed social engineering leads to identity and cloud compromise

Passkey-themed social engineering is being used to compromise identities and enable broader cloud attacks. Learn how thr

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

#apt#ti#microsoft#malware
威胁情报2026-09-08 发布INFO

Microsoft Patch Tuesday for September 2026 — Snort rules and prominent vulnerabilities

Microsoft has released its monthly security update for September 2026, which includes 973 vulnerabilities affecting a ra

历史摘要 · 未重新核验 · Cisco Talos

#cisco#malware#vuln_research#talos
威胁情报2026-09-08 发布INFO

The Shared Clipboard Inside the Sandbox: Cross-Account Data Leakage in ChatGPT

Research by: Alexey Bukhteyev Key Takeaways Introduction Over the past several years, AI assistants have moved far beyon

历史摘要 · 未重新核验 · Check Point Research

#research#checkpoint#malware
威胁情报2026-09-08 发布INFO

ClearFake WebDAV infection chain delivers Amatera stealer, ZigCryptoStealer, and NetSupport Manager

We assess with moderate confidence that the attacks are not targeted at a particular organization, but are a part of a c

历史摘要 · 未重新核验 · Cisco Talos

#cisco#malware#vuln_research#talos
威胁情报2026-09-08 发布INFO

ClickFix moves into the browser: Cryptocurrency theft with Google-hosted C2

Cisco Talos is tracking a cryptocurrency-stealing campaign that abuses the Google Visualization API for command and cont

历史摘要 · 未重新核验 · Cisco Talos

#cisco#malware#vuln_research#talos
威胁情报2026-09-07 发布INFO

7th September – Threat Intelligence Report

For the latest discoveries in cyber research for the week of 7th Setpember, please download our Threat Intelligence Bull

历史摘要 · 未重新核验 · Check Point Research

#checkpoint#malware#research
威胁情报2026-09-07 发布INFO

Dissecting a PHP web server rootkit

Sophos X-Ops takes a deep dive into an insidious piece of malwareCategories: Threat ResearchTags: rootkit, php, webshell

历史摘要 · 未重新核验 · Sophos

#ransomware#sophos#malware
学术论文2026-09-05 发布INFO

SCRIPTIOC-BENCH: A Benchmark for Recognizing Actionable Threat Intelligence from Script-Based Malware using LLMs

论文提出 SCRIPTIOC-BENCH，一个用于衡量大语言模型（LLM）从基于脚本的恶意软件中静态提取可操作威胁情报（IOC）能力的基准。脚本型恶意软件（如 JavaScript、PowerShell、VBScript）仍然是常见的攻击手

历史摘要 · 未重新核验 · arXiv cs.CR

#cs.AI#llm#malware#threat-intelligence#benchmark
威胁情报2026-09-04 发布INFO

How to secure edge AI in customer-owned environments

这篇文章由微软安全博客发布，针对AI向客户自有环境及边缘设备下沉的趋势，提出了系统化的安全建议。主体观点认为，在客户拥有且可物理接触的硬件环境中部署Edge AI时，传统云端信任边界已不适用，需要在保护敏感数据、凭据和模型之前，先对底层的系

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

#microsoft#malware#ti#apt
威胁情报2026-09-03 发布INFO

The story behind the intelligence

From engaging with cybercriminals to surviving a live Flamin’ Hot Cheetos taste test, Hazel reflects on the latest Beers

历史摘要 · 未重新核验 · Cisco Talos

#cisco#talos#vuln_research#malware
威胁情报2026-09-03 发布INFO

ASCII smuggling crosses over from AI prompt injection to phishing evasion

Invisible Unicode characters popularized for hiding instructions from AI models are now being used to obfuscate words be

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

#apt#microsoft#malware#ti
威胁情报2026-09-03 发布INFO

Attackers Expose Ongoing AI Tool Use Targeting Organizations in Latin America

Explore how attackers targeting Latin American entities use AI for data exfiltration and how basic OpSec errors allow de

历史摘要 · 未重新核验 · Palo Alto Unit 42

#malware#unit42#paloalto#apt
威胁情报2026-09-02 发布INFO

Impersonating IT support: how threat actors turn a remote session into enterprise-wide access

Microsoft Threat Intelligence observed a human-operated intrusion campaign that abuses Microsoft Teams external collabor

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

#apt#microsoft#malware#ti
威胁情报2026-09-02 发布INFO

Gaming the system: how a Chinese-speaking actor turned Brazilian government sites into an SEO weapon

Research by: Amit Yardeni Key Points Introduction Since mid-2025, Check Point Research has tracked a sustained campaign

历史摘要 · 未重新核验 · Check Point Research

#malware#checkpoint#research
威胁情报2026-09-02 发布INFO

An AI-Assisted Cyber Attack: Inside a Unit 42 Investigation

Using autonomous AI agents, an attacker breached an enterprise network in a matter of hours. Understand how to address a

历史摘要 · 未重新核验 · Palo Alto Unit 42

#apt#paloalto#malware#unit42
威胁情报2026-09-02 发布INFO

SonicWall 83548 83549

Categories: Threat ResearchTags: advisory, vulnerability, SonicWall

历史摘要 · 未重新核验 · Sophos

#sophos#malware#ransomware
威胁情报2026-09-01 发布INFO

Counterfeit installers to system compromise: Tracking a deceptive software download campaign

An active campaign is impersonating legitimate software vendors to deliver malware through look-alike download pages and

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

#apt#microsoft#ti#malware