#ti

共收录 122 条相关情报。

← 返回所有主题
威胁情报2026-05-19 发布INFO

Exposing Fox Tempest: A malware-signing service operation

Fox Tempest is a financially motivated threat actor operating a malware‑signing‑as‑a‑service (MSaaS) used by other cyber

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

威胁情报2026-05-18 发布INFO

How Storm-2949 turned a compromised identity into a cloud-wide breach

Storm-2949 turned stolen credentials into a cloud-wide breach, moving from identity compromise to large-scale data theft

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

威胁情报2026-05-18 发布INFO

How to better protect your growing business in an AI-powered world

See how built-in security helps keep your growing business running, protect customer trust, and support growth. The post

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

威胁情报2026-05-14 发布INFO

Defense in depth for autonomous AI agents

As AI agents gain autonomy, defense in depth must evolve, with application-layer design, identity, and human oversight a

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

威胁情报2026-05-14 发布INFO

Kazuar: Anatomy of a nation-state botnet

Kazuar, a sophisticated malware family attributed to the Russian state actor Secret Blizzard, has been under constant de

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

威胁情报2026-05-14 发布INFO

When configuration becomes a vulnerability: Exploitable misconfigurations in AI apps

Exposed UIs, weak authentication, and risky defaults could turn cloud-native AI apps on Kubernetes into potential target

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

威胁情报2026-05-12 发布INFO

Accelerating detection engineering using AI-assisted synthetic attack logs generation

What if you could generate realistic attack telemetry on demand? Explore research methods that translate attacker behavi

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

威胁情报2026-05-12 发布INFO

Defense at AI speed: Microsoft’s new multi-model agentic security system tops leading industry benchmark

Today Microsoft is announcing a major step forward in AI-powered cyber defense: a new multi-model agentic scanning harne

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

威胁情报2026-05-12 发布INFO

Defending consumer web properties against modern DDoS attacks

Read how to protect consumer websites and defend against modern DDoS attacks with layered security, resilient architectu

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

威胁情报2026-05-12 发布INFO

Undermining the trust boundary: Investigating a stealthy intrusion through third-party compromise

Microsoft Incident Response investigated an attack operated through legitimate and trusted administrative mechanisms to

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

威胁情报2026-05-08 发布INFO

Active attack: Dirty Frag Linux vulnerability expands post-compromise risk

Dirty Frag is a newly disclosed Linux local privilege escalation vulnerability affecting kernel networking and memory-fr

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

威胁情报2026-05-07 发布INFO

When prompts become shells: RCE vulnerabilities in AI agent frameworks

New research exposes how prompt injection in AI agent frameworks can lead to remote code execution. Learn how these vuln

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

威胁情报2026-05-07 发布INFO

World Passkey Day: Advancing passwordless authentication

This World Passkey Day, read how Microsoft is advancing passkey adoption to replace passwords, cut phishing risk, and de

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

威胁情报2026-05-06 发布INFO

​​Microsoft named an overall leader in KuppingerCole Analyst’s 2026 Emerging AI Security Operations Center (SOC) report ​​

Microsoft is excited to be named an Overall Leader, and the Market Leader in the Kuppinger Cole Analyst’s 2026 Emerging

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

威胁情报2026-05-06 发布INFO

ClickFix campaign uses fake macOS utilities lures to deliver infostealers

Threat actors are targeting macOS users with fake utility fixes that trick them into running malicious Terminal commands

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

威胁情报2026-05-04 发布INFO

Breaking the code: Multi-stage ‘code of conduct’ phishing campaign leads to AiTM token compromise

Microsoft Defender Research observed a large-scale credential theft campaign that exemplifies this trend, using code of

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

威胁情报2026-05-02 发布INFO

CVE-2026-31431: Copy Fail vulnerability enables Linux root privilege escalation across cloud environments

CVE-2026-31431

2026年5月,微软安全博客披露了一个影响Linux系统的高危漏洞CVE-2026-31431,命名为“Copy Fail”。该漏洞允许攻击者在云环境和Kubernetes工作负载中实现本地权限提升至root。漏洞根因在于Linux文件复制

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

威胁情报2026-05-01 发布INFO

Microsoft Agent 365, now generally available, expands capabilities and integrations

​Today we’re announcing the general availability of Agent 365, plus previews of new capabilities to discover and manage

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

威胁情报2026-04-30 发布INFO

What’s new, updated, or recently released in Microsoft Security

Stay ahead of emerging threats with Microsoft’s newest security innovations and updates, delivered through the In the Lo

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

威胁情报2026-04-30 发布INFO

Email threat landscape: Q1 2026 trends and insights

In early 2026, email threats increased with a rise in credential phishing, QR code phishing, and CAPTCHA-gated campaigns

历史摘要 · 未重新核验 · Microsoft Threat Intelligence