{"locale":"zh","total":10,"articles":[{"title":"GoSerpent 后门在针对东南亚的定向攻击中进化","digest":"卡巴斯基详细介绍了自2021年以来活跃的GoSerpent后门，针对东南亚的政府实体，2026年的变种使用了加密的C2，SOCKS5代理，和...","content_source_url":"https://zcybernews.com/zh/articles/2026-07-17-goserpent-backdoor-evolves-in-targeted-attacks-on-southeast-asian","author":"ZCyberNews","date":"2026-07-17","category":"malware","tags":["goserpent","stowaway-rat","thumbcacheservice","southeast-asia","credential-dumping","socks5-proxy","kaspersky"],"severity":"high","threat_actor":"GoSerpent"},{"title":"OkoBot: 新型复杂恶意软件框架瞄准加密货币","digest":"Kaspersky GReAT 解析 OkoBot，这是一个多阶段框架，使用 SSH 隧道和超过 20 个有效载荷来窃取加密货币钱包种子短语、浏览器数据和凭证。","content_source_url":"https://zcybernews.com/zh/articles/2026-07-15-okobot-new-sophisticated-malware-framework-targets-cryptocurrency","author":"ZCyberNews","date":"2026-07-15","category":"malware","tags":["okobot","tookps","cryptocurrency-theft","ssh-tunnel","kaspersky","malware-framework"],"severity":"high","threat_actor":"OkoBot"},{"title":"AI 从助手转变为操作者在实时攻击中，Check Point","digest":"Check Point Research 的 AI 安全报告 2026 记录了 AI 现在运行实时入侵，一周内构建 88,000 行 C2 框架，并通过网络钓鱼大规模启用 vishing 通过...","content_source_url":"https://zcybernews.com/zh/articles/2026-07-14-ai-crosses-from-assistant-to-operator-in-live-attacks-check-point","author":"ZCyberNews","date":"2026-07-14","category":"ai","tags":["ai-security-report-2026","check-point-research","ai-driven-attacks","agentic-abuse","prompt-injection","enterprise-data-leakage","voidlink"],"severity":null,"threat_actor":null},{"title":"CISA 事后分析揭示 GitHub 凭证泄露持续六个月","digest":"CISA 对 GitHub 泄露事件的事后分析暴露了 844 MB 的内部数据，包括 AWS GovCloud 密钥，揭示该机构忽略了九个自动警报，并在 48 小时后才进行轮换...","content_source_url":"https://zcybernews.com/zh/articles/2026-07-13-cisa-postmortem-reveals-github-credential-leak-lasted-six-months","author":"ZCyberNews","date":"2026-07-13","category":"industry","tags":["cisa","github","credential-leak","postmortem","secrets-scanning","incident-response"],"severity":"high","threat_actor":null},{"title":"欧盟因NIS2网络安全法延迟起诉四个成员国","digest":"欧洲委员会对爱尔兰、西班牙、法国和荷兰提起法律诉讼，因其未能将NIS2指令转化为关键基础设施网络安全的国内法律，20...","content_source_url":"https://zcybernews.com/zh/articles/2026-07-10-eu-sues-four-member-states-over-nis2-cybersecurity-law-delays","author":"ZCyberNews","date":"2026-07-10","category":"industry","tags":["nis2","eu-cybersecurity","critical-infrastructure","enisa","european-commission"],"severity":null,"threat_actor":null},{"title":"拉脱维亚林业公司在勒索软件攻击数周后仍在恢复系统","digest":"拉脱维亚的LVM表示，44 GB的数据泄露，三分之二的客户在归因于外国财务动机团体的勒索软件攻击后仍无法访问系统。","content_source_url":"https://zcybernews.com/zh/articles/2026-07-09-latvian-forestry-firm-still-restoring-systems-weeks-after-ransomware","author":"ZCyberNews","date":"2026-07-09","category":"industry","tags":["ransomware","latvia","lvm","cert.lv","critical-infrastructure","data-leak"],"severity":null,"threat_actor":null},{"title":"加拿大间谍机构在2025年黑客攻击三个犯罪集团","digest":"加拿大的CSE在2025年对一个勒索软件即服务团伙、芬太尼贩运者和一个极端主义团体执行了国家授权的黑客攻击，破坏了基础设施并删除了...","content_source_url":"https://zcybernews.com/zh/articles/2026-07-07-canadian-spy-agency-hacked-three-criminal-groups-in-2025","author":"ZCyberNews","date":"2026-07-07","category":"industry","tags":["canada","cse","ransomware","cyber-operations","law-enforcement","fentanyl"],"severity":null,"threat_actor":"LockBit"},{"title":"2026年第一季度工业ICS威胁率创三年新低","digest":"卡巴斯基ICS CERT报告称，在2026年第一季度，19.6%的ICS计算机阻止了恶意软件，这是自2023年第二季度以来的最低比率。","content_source_url":"https://zcybernews.com/zh/articles/2026-07-07-industrial-ics-threat-rates-hit-three-year-low-in-q1-2026","author":"ZCyberNews","date":"2026-07-07","category":"industry","tags":["industrial-control-systems","ics-security","threat-landscape","kaspersky","q1-2026"],"severity":null,"threat_actor":null},{"title":"英国网络承诺在启动时吸引不到15家富时350指数公司","digest":"英国网络弹性承诺仅有70个签署方，尽管有部长级信件，但350家最大上市公司中加入的不到15家。","content_source_url":"https://zcybernews.com/zh/articles/2026-07-07-uk-cyber-pledge-draws-fewer-than-15-ftse-350-firms-at-launch","author":"ZCyberNews","date":"2026-07-07","category":"industry","tags":["uk-cyber-policy","cyber-resilience-pledge","ftse-350","ncsc","voluntary-regulation"],"severity":null,"threat_actor":null},{"title":"网络安全任务蔓延威胁治理，新论文警告","digest":"一篇新的学术论文警告说，政策制定者将从错误信息到反垄断的问题重新定义为网络安全威胁，冒着过度简化解决方案和侵蚀公众信任的风险。","content_source_url":"https://zcybernews.com/zh/articles/2026-07-02-cybersecurity-mission-creep-threatens-governance-new-paper-warns","author":"ZCyberNews","date":"2026-07-02","category":"industry","tags":["mission-creep","cybersecuritization","governance","policy","academic-paper"],"severity":null,"threat_actor":null}]}