unSafe.sh - 不安全
我的收藏
今日热榜
公众号文章
导航
Github CVE
Github Tools
编码/解码
文件传输
Twitter Bot
Telegram Bot
Search
Rss
黑夜模式
How Natural Language Search Powers Rapid Physical Security Intelligence
When physical threats manifest in the real world, every minute counts. Whether tasked with Executi...
2026-9-11 16:51:15 | 阅读: 21 |
收藏
|
Over Security - Cybersecurity news aggregator - flashpoint.io
flashpoint
security
regional
chatter
psi
The Flashpoint Threat Intelligence Brief: Middle East
Following Operation Epic Fury, regional kinetic operations have transitioned into direct, persiste...
2026-9-9 14:51:36 | 阅读: 16 |
收藏
|
Over Security - Cybersecurity news aggregator - flashpoint.io
security
maritime
flashpoint
kinetic
threats
Cybercrime at Machine Speed: Key Takeaways from Flashpoint’s 2026 Midyear Threat Intelligence Briefing
In our latest webinar, Flashpoint Vice President of Intelligence, Ian Gray, briefed security leade...
2026-9-1 14:38:11 | 阅读: 35 |
收藏
|
Over Security - Cybersecurity news aggregator - flashpoint.io
flashpoint
security
nvd
extortion
Insider Threat Report: Dark Web Recruitment & Access Trends
Unknowingly, a member of key personnel is living two separate lives. On the clock, they are a high...
2026-8-20 14:37:53 | 阅读: 38 |
收藏
|
Over Security - Cybersecurity news aggregator - flashpoint.io
insider
flashpoint
advertising
illicit
security
Navigating AI-Driven Cyber Threats: Insights from Flashpoint’s 2026 GTIR Midyear Edition
In the first half of 2026, the global threat landscape reached a clear operational inflection poin...
2026-8-13 13:53:44 | 阅读: 36 |
收藏
|
Over Security - Cybersecurity news aggregator - flashpoint.io
2026
flashpoint
security
midyear
illicit
Data Center Physical Security: Mitigating FPV Drone Threats
Data centers have become a driving force in the modern digital economy—powering cloud services, gl...
2026-8-10 19:19:27 | 阅读: 48 |
收藏
|
Over Security - Cybersecurity news aggregator - flashpoint.io
security
flashpoint
centers
drones
drone
Beyond Cyber: How CTI Teams Are Solving Converged Threat Use Cases
For years, the mandate of Cyber Threat Intelligence (CTI) teams has been narrow and well understoo...
2026-8-6 20:35:56 | 阅读: 43 |
收藏
|
Over Security - Cybersecurity news aggregator - flashpoint.io
security
cti
flashpoint
analysis
convergence
Flashpoint EASM: Industry-Leading Vulnerability Intelligence, Mapped to Your Internet-Facing Assets
Security teams don’t lose ground because they lack tools. They lose ground because they can’t see...
2026-8-3 22:45:24 | 阅读: 39 |
收藏
|
Over Security - Cybersecurity news aggregator - flashpoint.io
easm
flashpoint
asset
security
Remus Stealer: A New, Not-So-New Infostealer
The underground marketplace rarely stays quiet for long. A new information-stealing malware dubbed...
2026-7-2 17:48:58 | 阅读: 42 |
收藏
|
Over Security - Cybersecurity news aggregator - flashpoint.io
remus
lumma
flashpoint
stealer
America250 Fourth of July Threat Assessment
As the United States prepares to mark its 250th anniversary this Fourth of July, the convergence o...
2026-6-30 16:22:3 | 阅读: 54 |
收藏
|
Over Security - Cybersecurity news aggregator - flashpoint.io
flashpoint
security
attendees
america250
Unmasking the Digital Trail: Essential Techniques for Vetting AI-Generated Content
In the era of generative artificial intelligence (AI), threat intelligence is facing a profound si...
2026-6-29 14:50:51 | 阅读: 52 |
收藏
|
Over Security - Cybersecurity news aggregator - flashpoint.io
security
distinct
structural
lookalike
noise
The Shift to Threat-Informed Prioritization: Operationalizing CISA BOD 26-04
With the recent issuance of Binding Operational Directive (BOD) 26-04, CISA has officially shifted...
2026-6-15 20:35:30 | 阅读: 42 |
收藏
|
Over Security - Cybersecurity news aggregator - flashpoint.io
flashpoint
operational
bod
kev
security
Understanding Illicit Ecosystems: Weaponizing Mainstream Apps and Social Infrastructure
Threat actors and their illicit communities do not exist in a vacuum. To scale their operations, c...
2026-6-8 20:4:27 | 阅读: 53 |
收藏
|
Over Security - Cybersecurity news aggregator - flashpoint.io
illicit
clearnet
flashpoint
heavily
security
Connecting Vulnerability Intelligence to Real-World Exposure With Flashpoint EASM
The volume of vulnerability disclosures is higher than ever, yet most security teams are still str...
2026-6-5 17:27:42 | 阅读: 51 |
收藏
|
Over Security - Cybersecurity news aggregator - flashpoint.io
flashpoint
easm
security
exposure
Understanding Illicit Ecosystems: XSS and the Current State of the Russian-Speaking Underground
What is XSS?For more than two decades, XSS was the gathering ground for the Russian-speaking c...
2026-6-3 15:8:58 | 阅读: 45 |
收藏
|
Over Security - Cybersecurity news aggregator - flashpoint.io
underground
speaking
damagelib
discussions
How to Align and Measure Threat Intelligence Operations: Flashpoint Priority Intelligence Requirements
For many intelligence teams, the hardest part of the intelligence lifecycle is no longer collectio...
2026-5-29 13:39:21 | 阅读: 46 |
收藏
|
Over Security - Cybersecurity news aggregator - flashpoint.io
operational
priorities
monitoring
workflows
The Mini Shai-Hulud Worm and the New Era of CI/CD Exploitation
The developer ecosystem recently faced one of its most significant architectural threats to date,...
2026-5-28 20:22:42 | 阅读: 58 |
收藏
|
Over Security - Cybersecurity news aggregator - flashpoint.io
teampcp
github
hulud
shai
flashpoint
Understanding Illicit Ecosystems: The Hybrid Threat of “The Com”
What is “The Com”?The Community, more widely known as “The Com” is a sophisticated hybrid thre...
2026-5-26 16:53:14 | 阅读: 51 |
收藏
|
Over Security - Cybersecurity news aggregator - flashpoint.io
pillar
violence
victim
capital
AI Threat Report: How Artificial Intelligence Is Used Across Illicit Communities
A finance employee joins a video call with their CFO and several colleagues. The request is routin...
2026-5-19 20:56:20 | 阅读: 42 |
收藏
|
Over Security - Cybersecurity news aggregator - flashpoint.io
workflows
jailbreak
prompts
discussions
communities
National Vulnerability Database (NVD) Shifts to Selective Enrichment as CVE Volume Surges
好的,我现在需要帮用户总结一篇文章的内容,控制在100个字以内。用户的要求是直接写文章描述,不需要特定的开头。首先,我得仔细阅读文章,抓住主要信息。 文章主要讲的是NVD(国家漏洞数据库)在处理漏洞数据方面的新变化。NVD不再对每个CVE进行增强,而是集中在特定的子集上,比如CISA KEV目录中的漏洞、联邦政府使用的软件以及关键软件。其他CVE则不会添加额外信息。 接下来,文章提到CVE提交量激增,导致NVD难以跟上节奏。新的模型下,符合优先级标准的CVE会加速增强,不符合的则会被标记但不增强。这会影响安全团队的工作流程,因为他们依赖于NVD的增强信息来评估风险和确定修复优先级。 此外,文章指出新的模型虽然重要,但无法涵盖所有组织遇到的风险环境,比如开源依赖、SaaS平台等。因此,安全团队需要寻找其他来源来填补信息空白。 最后,文章建议安全团队评估当前对NVD的依赖,并采取措施加强韧性,比如整合更多来源的漏洞情报,并确保数据增强不会延迟修复决策。 总结下来,我需要把这些关键点浓缩到100字以内。重点包括:NVD改变处理方式、只增强部分CVE、影响安全团队的工作流程、数据缺口及应对措施。 </think> NVD调整处理方式,不再为所有CVE提供增强信息,仅针对特定漏洞进行加速处理,影响安全团队的风险评估和修复优先级,需依赖更广泛的漏洞情报来源填补数据缺口。...
2026-4-17 18:7:53 | 阅读: 56 |
收藏
|
Over Security - Cybersecurity news aggregator - flashpoint.io
enrichment
nvd
security
cves
Previous
-15
-14
-13
-12
-11
-10
-9
-8
Next