How Strong Device Policies Can Help Solve Your Shadow IT Problem
远程和混合工作模式增加了影子IT的风险，员工使用个人设备或未授权应用可能导致数据泄露或安全问题。便携式存储设备如USB和外部硬盘因高效便捷常被滥用。解决方法包括采用加密设备、限制端口接入、实时监控和员工培训，以平衡安全性和实用性，并培养安全文化。
Aggregator
Tycoon Phishing Kit Utilizes New Capabilities to Hide Malicious Links
10 months ago
Barracuda observed new methods to disguise phishing links in Tycoon phishing attacks, which are designed to bypass automated email security systems
Iranian Hackers Exploit 100+ Embassy Email Accounts in Global Phishing Targeting Diplomats
10 months ago
An Iran-nexus group has been linked to a "coordinated" and "multi-wave" spear-phishing campaign targeting the embassies and consulates in Europe and other regions across the world.
The activity has been attributed by Israeli cybersecurity company Dream to Iranian-aligned operators connected to broader offensive cyber activity undertaken by a group known as Homeland Justice.
"Emails were sent to
The Hacker News
Iranian Hackers Exploit 100+ Embassy Email Accounts in Global Phishing Targeting Diplomats
10 months ago
伊朗关联的网络间谍活动针对全球大使馆和领事馆展开鱼叉式钓鱼攻击，利用地缘政治紧张局势作为诱饵。攻击者通过伪装成合法外交沟通的恶意邮件传播恶意软件，诱导受害者启用宏以植入木马并建立持久控制。
Pear
10 months ago
You must login to view this content
cohenido
AI-Driven Trends in Endpoint Security: What the 2025 Gartner® Magic Quadrant™ Reveals
10 months ago
Cyber threats and attacks like ransomware continue to increase in volume and complexity with the endpoint typically being the most sought after and valued target. With the rapid expansion and adoption of AI, it is more critical than ever to ensure the endpoint is adequately secured by a platform capable of not just keeping pace, but staying ahead of an ever-evolving threat landscape.
The Hacker News
Chrome 140 Released With Fix For Six Vulnerabilities that Enable Remote Code Execution Attacks
10 months ago
Google has officially promoted Chrome 140 to the stable channel, initiating a multi-platform rollout for Windows, Mac, Linux, Android, and iOS. The update brings the usual stability and performance improvements, but the headline feature is a critical security patch addressing six vulnerabilities, including one high-severity flaw that could allow for remote code execution. Users are […]
The post Chrome 140 Released With Fix For Six Vulnerabilities that Enable Remote Code Execution Attacks appeared first on Cyber Security News.
Florence Nightingale
第三方集成应用 Drift OAuth 令牌被用于攻陷 Salesforce 实例，全球700+家企业受影响
10 months ago
受影响机构名单仍在拉长
2025 KCTF 第十题战况 | 即将完赛！COMPASS 拿下本题“一血”
10 months ago
最后一题，冲呀～
捷豹路虎遇网络攻击，全球 IT 系统陷瘫痪，生产受阻
10 months ago
捷豹路虎遭网攻，全球 IT 系统受影响
CRC校验原理及绕过
10 months ago
看雪论坛作者ID：Yangser
共筑智能时代可信生态！『武汉科锐』助力第九届安全开发者峰会-SDC2025
10 months ago
武汉科锐——将作为黄金合作伙伴盛大出席峰会
1,742 экзафлопса, архитектура AMD и лидерство США. Как изменился рейтинг TOP500 самых мощных суперкомпьютеров мира в 2025 году
10 months ago
Новые чемпионы считают быстрее, чем думали все люди на Земле 50 лет назад.
2025 KCTF 第十题战况 | 即将完赛！COMPASS 拿下本题“一血”
10 months ago
当前环境异常需完成验证后方可继续访问。
CRC校验原理及绕过
10 months ago
当前环境异常，请完成验证以继续访问。
共筑智能时代可信生态！『武汉科锐』助力第九届安全开发者峰会-SDC2025
10 months ago
当前环境出现异常,需完成验证后方可继续访问。
捷豹路虎遇网络攻击，全球 IT 系统陷瘫痪，生产受阻
10 months ago
当前环境出现异常问题，需完成验证后方可继续访问。
他不懂代码，却用 AI 黑掉 17 家医院和机构，Vibe Hacking 让全世界变成缅北
10 months ago
AI 网络犯罪，已进入全自动时代。
Data Privacy Framework: tiro salvezza superato!
10 months ago
欧盟法院驳回一起针对数据隐私框架的诉讼请求，认可美国数据保护机制与欧洲相当，并允许情报机构在事后监督下收集数据。尽管该框架通过考验，但需应对未来法律变化带来的潜在风险。
Model Namespace Reuse: An AI Supply-Chain Attack Exploiting Model Name Trust
10 months ago
文章揭示了AI供应链中的重大漏洞——Model Namespace Reuse，允许攻击者通过重新注册已删除或转移的模型名称，在Azure AI Foundry、Google Vertex AI等平台及开源项目中部署恶意模型并获得远程代码执行能力。该问题源于Hugging Face平台对模型命名空间的管理机制。文章建议通过版本固定、模型克隆和扫描等措施提升AI安全防护能力。