Aggregator

Google has firmly denied claims of a massive Gmail security breach affecting millions of users. The tech giant emphasized that its email service remains secure, with no evidence of a widespread compromise. Instead, the misinformation appears to stem from a misinterpretation of existing data leaks involving stolen credentials from various online sources. Social media and […]

The post Google Denies Claims of Gmail Security Breach Impacting Millions appeared first on Cyber Security News.

No SOC is perfect, but it’s possible to overcome frequent shortcomings and achieve measurable results by introducing one essential component of modern cybersecurity operations: threat intelligence.  Organizations using ANY.RUN’s TI solutions report the following results:  Quality, real-time threat intelligence helps SOCs tackle their toughest challenges. More on that below.  #1. Low Detection Rates  As attackers […]

The post 5 SOC Challenges and How Threat Intelligence Solves Them  appeared first on ANY.RUN's Cybersecurity Blog.

报告概述：

本报告基于CACTER邮件安全人工智能实验室在2025年第三季度（7-9月）监测的全量邮件数据，对期间出现的垃圾邮件、钓鱼攻击、暴力破解及域内威胁等安全态势进行梳理分析。报告重点解析了攻击源头变迁、行业风险分布，旨在为各行业用户提供及时有效的防护参考。

报告内容核心摘要：

1. 企业邮箱正常邮件量占比 54.64%，异常邮件合计占比 45.36%，两者接近，安全形势依然严峻。

2. 垃圾邮件总量8.72亿封，环比下降10.31%，越南首次进入TOP10即跃居榜首。

3. 钓鱼邮件总量为 1.71亿封，同比下降20.45%。国内发信源高度集中，香港断层领先，境外攻击源呈现“西退南进”特征。

4. 域内钓鱼邮件量锐减81%，防护成效显著，但内部高仿邮件仍具高欺骗性，需持续警惕。

5. 暴力破解攻击总量下降超20%，但成功率保持稳定（约0.14%），策略转向精准化。

6. 建议企业部署“智能检测+安全通道+账号防护”的协同防护方案。

CACTER解决方案建议：

1. 部署大模型邮件安全网关，精准拦截AI钓鱼邮件

针对本季度境外钓鱼邮件占比70.69%、越南为首要攻击源的情况，大模型网关融合大模型技术，提升 AI 钓鱼邮件及跨境威胁的检测与拦截精准度。

2. 采用安全海外中继，保障跨境邮件安全投递

面对境外垃圾邮件占比64.63%、跨境链路风险加剧，其依托全球中继节点智能选路，保障邮件安全投递，防范数据窃取和篡改。

3. 应用CAC2.0反钓鱼防盗号，强化账号防护与威胁感知

基于教育等行业高危账号占比超86%的现状，其拦截泄露账号登录、监测异常行为，依托威胁情报，支撑账号安全与防护决策。