Aggregator

Organizations that rely on Exchange Online for internal communications have long needed a way to send large volumes of automated messages, such as payroll notifications, IT alerts, and security advisories, without running into the sending limits designed for person-to-person email. Microsoft has addressed that with the general availability of High Volume Email (HVE) in Exchange Online. What High Volume Email does HVE is a tenant-native capability built for application-to-person messaging within an organization. It uses … More →

The post Microsoft adds high-volume email sending to Exchange Online appeared first on Help Net Security.

In this Help Net Security video, Lenny Gusel, Head of Fraud Solutions in North America at Feedzai, explains how customer identity and access management has converged with digital fraud detection, and why treating them as separate systems creates real risk. The core idea is continuous, contextual trust. Where traditional IAM grants access at a single point in time, fraud systems track behavior throughout an entire session, reading device signals, network context, and how a user … More →

The post Your customer passed authentication. So why are they sending money to a scammer? appeared first on Help Net Security.

嘶吼安全动态

【国内新闻】

国家市场监管总局推动网络食品安全“协同共治”，AI算法参与合规审核

摘要： 监管部门提出利用数字技术强化平台治理，通过AI算法自动识别违规信息。专家提醒，此类“以网管网”的机制必须建立算法透明度，防止AI在审核过程中因模型偏差误伤合法合规的平台商户。

原文链接：https://cpc.people.com.cn/n1/2026/0401/c64387-40693008.html

4月起多项网安新规施行：规制恶意索赔与免密支付漏洞

摘要：本月起，多项影响互联网平台安全的法规正式施行。重点包括：严厉规制恶意利用平台规则索赔、规范互联网免密支付与自动扣款流程。新规旨在切断针对电商与支付系统的业务逻辑漏洞链路。

原文链接：https://sfj.beijing.gov.cn/sfj/sfdt/fzxc74/743963873/index.html

腾讯QQ Bot官方插件正式接入OpenClaw，社交智能体隐私隔离成挑战

摘要：随着QQ成为国内首个原生接入OpenClaw的社交平台，业内关注焦点转向：当智能体具备在群组自主执行任务的能力时，如何通过“沙箱机制”防止其被恶意诱导泄露群聊隐私。

原文链接：https://www.tmtpost.com/nictation/7938037.html

柬埔寨向中国移交网络诈骗“幕后推手”，跨境联合治理力度再升级

摘要：随着打击网诈专项行动深化，柬埔寨警方近日将一名涉嫌跨境网络诈骗的核心头目移交中国。此举标志着东南亚地区针对针对数字欺诈的执法链条进一步闭环，极大震慑了海外“洗钱”与“引流”团伙。

原文链接：https://therecord.media/cambodia-extradites-alleged-cyber-scam-linchpin-to-china

【国外新闻】

玩具巨头孩之宝（Hasbro）确认遭黑客攻击，部分业务被迫转入“手动模式”

摘要：孩之宝在最新披露的文件中确认，自发现非法入侵后公司已关闭受影响系统。截至4月1日，部分订单履行和运输仍处于受限状态，疑似存在攻击者持续驻留风险。

原文链接：https://therecord.media/hasbro-takes-some-systems-offline-after-cyber-incident

拉美多国政府遭遇“数字攻势”，哥伦比亚健康部门首当其冲

摘要：监测显示，拉美地区已成为全球网安风险最高的区域。哥伦比亚国家健康署、波多黎各交通部门近期均遭遇AI辅助的黑客探测与攻击。攻击者利用Telegram泄露的凭证与旧系统漏洞，正在精准渗透政府机构。

原文链接：https://www.darkreading.com/cyber-risk/cyberattacks-latin-american-governments

日产汽车（Nissan）披露第三方供应商漏洞，导致部分客户数据泄露

摘要：日产汽车确认，有黑客组织通过其第三方软件服务商获取了非法访问权限。虽然核心核心生产系统未受影响，但涉及部分地区的客户信息已遭泄露。

原文链接：https://therecord.media/nissan-hackers-data-breach

加密平台Drift发生重大安全事故，因AI预测溢出漏洞损失数百万美元

摘要：知名加密交易平台Drift宣布暂停服务。初步调查显示，攻击者利用了其AI自动风控模块的一个逻辑溢出漏洞，通过极短时间内的虚假流量耗尽了部分流动性资金池。

原文链接：https://therecord.media/drift-crypto-heist-solana-hacker

美国国会听证会聚焦“AI 影子人才”与联邦监管缺口

摘要：美国国会听证会上，议员对如何监管非确定性AI算法表达了担忧。由于网安人才缺口高达数万，美国政府在面对AI辅助的恶意脚本编写时，缺乏足够的审计与逆向工程能力。

原文链接：https://www.govinfosecurity.com/congress-confronts-cyber-workforce-ai-risks-a-31176

Regional APT Threat Situation In January 2026, the global threat hunting system of Fuying Lab detected a total of 26 APT attack activities. These activities were primarily concentrated in regions including East Asia, South Asia, and Eastern Europe, as shown in the figure below. Regarding the activity levels of different groups, the most active APT […]

The post NSFOCUS Monthly APT Insights – January 2026 appeared first on NSFOCUS, Inc., a global network and cyber security leader, protects enterprises and carriers from advanced cyber attacks..

The post NSFOCUS Monthly APT Insights – January 2026 appeared first on Security Boulevard.