#ti

共收录 122 条相关情报。

← 返回所有主题
威胁情报2026-10-31 发布INFO

Inside a malicious Claude Code-branded extension and its persistent SSH backdoor

Microsoft analyzes a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and re

来源摘录 · Microsoft Threat Intelligence

威胁情报2026-10-30 发布INFO

From help desk impersonation to AD CS abuse: Investigating ESC1 and ESC8 intrusion paths

Teams support impersonation led to remote access, malicious runtime execution, and Certificate Services abuse through au

来源摘录 · Microsoft Threat Intelligence

威胁情报2026-10-29 发布INFO

Tracking AI adoption in North Korean threat actor tradecraft

As Microsoft Threat Intelligence continues to track how threat actors operationalize AI to increase the speed and effici

来源摘录 · Microsoft Threat Intelligence

威胁情报2026-10-29 发布INFO

IDC MarketScape names Microsoft a Leader in the 2026 Worldwide Modern Endpoint Security for Enterprises Vendor Assessment

IDC has named Microsoft a Leader in the 2026 IDC MarketScape for Worldwide Modern Endpoint Security for Enterprises. The

来源摘录 · Microsoft Threat Intelligence

威胁情报2026-10-28 发布INFO

The CISO’s evolving role: Protecting and defending in the agentic era

As AI and agents reshape the enterprise, CISOs face two critical priorities: enabling innovation with the right identity

来源摘录 · Microsoft Threat Intelligence

威胁情报2026-10-28 发布INFO

The CISO’s evolving role: Protecting and defending in the agentic era

As AI and agents reshape the enterprise, CISOs face two critical priorities: enabling innovation with the right identity

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

威胁情报2026-10-23 发布INFO

Inside the LiteLLM 1.107.0 supply chain compromise: Credential theft through Python startup hooks

Microsoft Threat Intelligence analyzes the LiteLLM 1.107.0 compromise, including Python startup hooks, credential theft,

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

威胁情报2026-10-21 发布INFO

AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise

Storm-0940 used ARTEX agentic AI to accelerate a ConnectWise supply chain compromise, enabling application credential ab

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

威胁情报2026-10-19 发布INFO

Agents are your newest insiders. Security must move at their speed.

New capabilities in Microsoft 365 E7 and Project Perception help organizations contain agent risk and adapt protection c

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

威胁情报2026-10-14 发布INFO

The hidden network: Inside the phishing infrastructure ecosystem powering global cybercrime

Microsoft uncovered a Chinese-language cybercriminal ecosystem, an interconnected network of phishing kit operators (tra

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

威胁情报2026-10-08 发布INFO

Post-quantum authentication: Why organizations should start testing certificate ecosystems now

Prepare for post-quantum authentication by testing certificate ecosystems now. Learn how Microsoft’s PQC TLS Pilot Progr

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

威胁情报2026-10-07 发布INFO

3 lessons from frontier AI vulnerability research

Read how How Microsoft Security's FORGE Lab is scaling vulnerability research from Windows to the Linux kernel. The post

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

威胁情报2026-10-06 发布INFO

CISO perspectives on managing vulnerability risks in the age of AI

Learn how CISOs can mitigate cybersecurity risks and increase resilience in the age of AI-powered vulnerability manageme

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

威胁情报2026-10-01 发布INFO

Insights from the 2026 Microsoft Digital Defense Report

Read highlights from the 2026 Microsoft Digital Defense Report, which reflects a security environment that continues to

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

威胁情报2026-10-01 发布INFO

Preparing governments for an era of interconnected cyber risk

According to this year’s Microsoft Digital Defense Report, government agencies and services were the sector most impacte

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

威胁情报2026-09-30 发布INFO

​​Secure what’s next: Your guide to Microsoft Security at Microsoft Ignite 2026

This year at Microsoft Ignite, we spotlight our AI-first, end-to-end security platform designed to protect identities, d

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

威胁情报2026-09-29 发布INFO

Phishing Abuses RMM Tools for Persistent Access

Microsoft observed phishing campaigns that abused MSP360 RMM to deploy ScreenConnect, creating redundant remote-access c

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

威胁情报2026-09-29 发布INFO

​​Beyond source code: A path to the keys to the kingdom

Explore how Storm-3068 turned a compromised identity into broader cloud access and the steps organizations can take to d

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

威胁情报2026-09-29 发布INFO

Star Blizzard refines phishing and malware delivery with the RedFlick technique

Since January 2026, Microsoft has observed Russian state threat actor Star Blizzard evolve their detection evasion capab

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

威胁情报2026-09-28 发布INFO

NeedyMantis: Unpacking a post-compromise malware family used in targeted operations

Microsoft Threat Intelligence identified NeedyMantis, a modular post-compromise malware framework used in targeted intru

历史摘要 · 未重新核验 · Microsoft Threat Intelligence