EN

公司资源

Blackpoint Cyber Names Former CIA Operations Officer to Head Adversary Pursuit Group
公司资源

Blackpoint Cyber Names Former CIA Operations Officer to Head Adversary Pursuit Group

Blackpoint Cyber announced the appointment of Erin Whitmore as Head of the Adversary Pursuit Group (APG). Whitmore, a former CIA Operations Officer with experience across the Defense Intelligence Agency, National Geospatial-Intelligence Agency, and the Office of the Director of National Intelligence, will lead threat research and intelligence, bridging frontline insights from the B-ROC into actionable guidance.

Optery发布2026年企业社会工程学调查报告
公司资源

Optery发布2026年企业社会工程学调查报告

Optery于2026年6月23日发布《2026年企业社会工程学调查报告》(The Data Behind the Deception),基于对421名大型企业网络安全领导者的调查。报告显示,数据经纪商和人物搜索网站已成为攻击者获取情报的主要来源,近九成受访者报告过去12个月定向社会工程学攻击增加,约四分之三遭遇凭据泄露。企业正将减少员工公开数据作为首要防御措施和投资重点。

360 Privacy Appoints George Sax as Senior Vice President of Enterprise Security Operations
公司资源

360 Privacy Appoints George Sax as Senior Vice President of Enterprise Security Operations

360 Privacy announced the appointment of George L. Sax as Senior Vice President, Enterprise Security Operations. Sax brings over 30 years of federal and private sector security leadership, including roles at the U.S. Secret Service and as CSO of a global security firm. The move underscores the company's focus on addressing threats originating from personal data exposure.

Onspring 2026 GRC基准报告:仅13.5%的GRC团队将AI全面融入核心工作流
公司资源

Onspring 2026 GRC基准报告:仅13.5%的GRC团队将AI全面融入核心工作流

Onspring于2026年7月8日发布《2026 GRC基准报告》,调查显示AI在GRC领域的应用仍处于早期阶段:仅13.5%的组织将AI嵌入核心工作流,45%处于试点阶段,16.7%完全未使用。数据隐私(28.6%)和输出准确性(25.4%)是主要限制因素。报告强调,企业需先解决流程碎片化与数据孤岛问题,才能实现AI的规模化价值。

Upwind研究揭示:攻击者正从单一npm包转向针对AsyncAPI软件供应链
公司资源

Upwind研究揭示:攻击者正从单一npm包转向针对AsyncAPI软件供应链

云安全公司Upwind披露一项针对AsyncAPI生态的协同供应链攻击调查结果。攻击者入侵多个GitHub仓库与发布管道,在多个官方npm包中植入后门代码,并利用OIDC发布身份在短时间内针对不同发布分支发起攻击。恶意代码不再依赖传统安装脚本,而是在正常包导入时执行。Upwind CEO Amiram Shachar指出,这不仅是恶意包问题,更是对信任机制的破坏。