Aggregator

From Fake Purchase Orders to Remote Access: Analyzing the JS.MonoGlyphRAT Threat to US Enterprises

Anyrun
1 month ago

A previously unidentified cyberattack is quietly spreading through US businesses — and most security tools are not catching it. Researchers at ANY.RUN have identified a new backdoor called JS.MonoGlyphRAT, an advanced piece of malware delivered as an ordinary-looking JavaScript file disguised as a purchase order, quote, or business proposal. Once an employee opens the file, […]

The post From Fake Purchase Orders to Remote Access: Analyzing the JS.MonoGlyphRAT Threat to US Enterprises appeared first on ANY.RUN's Cybersecurity Blog.

raptur3

How Leading Organizations Are Turning EDR Into Operational Resilience

The Hackers News
1 month ago
Most organizations now recognize that endpoint protection alone is no longer sufficient. That's why adoption of endpoint detection and response (EDR) has accelerated rapidly in recent years. Organizations understand that modern attacks move faster, evade traditional prevention controls, and require continuous visibility into suspicious activity across the environment. But owning EDR
The Hacker News

评论 | 为短视频守住真实的边界

中国信息安全
1 month ago
近日，中央网信办部署推进短视频内容标注规范化工作，要求网站平台完善标注体系，明确六类必选标签，将内容标注设为短视频发布的必经环节，并对存量短视频开展回溯和补充标注。

前沿 | 推动人工智能成为中美合作的新疆域

中国信息安全
1 month ago
中美两国元首就人工智能问题进行了建设性交流，同意开展人工智能政府间对话。当前，中美关系总体保持稳定，确定了“中美建设性战略稳定关系”的新定位。作为两个人工智能大国，中美双方携手促进人工智能发展和治理，这既是落实两国元首共识的具体体现……

关注 | 教育部发布2026年高考预警信息

中国信息安全
1 month ago
近日，全国网络安全标准化技术委员会组织制定的技术文件《人工智能应用伦理安全指引1.0》正式发布。作为回应人工智能技术应用新阶段相关伦理安全挑战的重要文件，《指引》旨在统筹发展与安全，为人工智能应用相关方提供明确的行动指南……

CNNVD | 人工智能重要漏洞通报（2026年第八期）

中国信息安全
1 month ago
根据国家信息安全漏洞库统计，近期共采集重要人工智能漏洞114个。本周人工智能类漏洞主要涵盖了MLflow、Nous Research（Hermes Agent）、LangChain等多个厂商（项目）。CNNVD对其危害等级进行了评价，其中超危漏洞12个，高危漏洞37个，中危漏洞65个。

Managed ad