نبض سایبری اخبار امنیت سایبری، با ذکر منبع
EN
ANY.RUN

Your Threat Intelligence Stack Has Blind Spots. Here’s How to Close Them

Your SOC pays for multiple threat intelligence feeds, yet fresh malicious domains and IPs can still appear in telemetry as unknown. When feeds rely on overlapping sources, more subscriptions may deliver the same indicators while leaving emerging threats uncovered. Analysts must fill these gaps manually, checking indicator reputations, comparing sources, and gathering evidence. Every extra […] The post Your Threat Int…

هوش تهدید پاسخ به رخداد و جرم‌یابی
خواندن متن کامل در ANY.RUN درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←
CSO Online

Building incident playbooks for machine identity breaches

Pull up your SOC’s compromised account playbook and read through the first 15 minutes. Most SOCs begin their response by calling or messaging the user via Teams to ask whether the 2:00 am sign-in from an unfamiliar country was indeed them. Their subsequent actions depend upon what the user responds with. Try that with a service account, and you’ll be waiting a long time. The same goes for an API key buried in a build…

نشت داده هوش تهدید رایانش ابری
منبع
The Hacker News

CERT-In Flags AI-Driven Attacks as Backdoored ARTEX Exposes 62 Consoles to Root Access

The Indian Computer Emergency Response Team (CERT-In) has disclosed that an artificial intelligence (AI)-assisted threat actor it tracks as Crafty Falcon is targeting organizations in the Banking, Financial Services, and Insurance (BFSI) sectors in the country. Describing the threat as active and ongoing, the activity involves the use of publicly-available AI-driven offensive security tools

امنیت هوش مصنوعی هوش تهدید هوش مصنوعی و یادگیری ماشین
منبع
Cyble

AI-Powered Ransomware Is Coming for UK Critical Infrastructure, and Europe Is Already the Testing Ground

Overview The UK's National Cyber Security Centre (NCSC) has put a date on a threat that security teams across Europe have been bracing for. In its 2026 Annual Review, The State of the Cyber Nation, the agency assesses it is highly likely that AI-powered malware will be used in a ransomware attack on UK Critical National Infrastructure by 2028. That is not a distant, speculative scenario. It is a two-year window, and…

بدافزار و آلودگی آسیب‌پذیری و روز صفر فیشینگ
منبع