Security intelligence
All coverage
Security signals, without the noise.
Current reporting from security alerts, threat intelligence, incident response, fraud, practitioner blogs, community feeds, and watch-and-listen sources.
[Virtual Event] What Every Enterprise Should Know About Securing Cloud Assets in the Age of AI
darkreading Ā· 1h ago āsources
Anthropic is cutting Claude Code's current weekly limits by 17%
Five Critical WordPress Plugin and Theme Flaws Enable Site Takeover or RCEThe Hacker News Ā· All coverage / Incidents
ā
CVE-2026-68821 Windows Package Manager Elevation of Privilege VulnerabilityMSRC Security Update Guide Ā· All coverage / Alerts
ā
Hasbro Data Breach Exposed Employee Personal InformationSecurityWeek Ā· All coverage / Incidents
ā
Complete index
Source grid
Every loaded article, grouped by its original feed. Search scans source names and headlines.
Density
Sort
[Virtual Event] What Every Enterprise Should Know About Securing Cloud Assets in the Age of AI
[Virtual Event] Building a Secure AI Strategy for the Enterprise
Hundreds of OpenAI Agents Invaded Hugging Face Servers
Offensive Security Investments Surge as AI Threats Increase
You Need Cyber Deception for OT
Defining an AI Kill Switch Is Hard, but Necessary
The Vulnpocalypse Is Repricing the Bug Bounty Economy
Chinese Routers Sold Worldwide Contain Backdoors
Agentic AI Risks, CVE Program Concerns Permeate Black Hat USA 2026
Russian Hackers Phish EU Officials Over Messaging Apps
Black Hat Asia 2026 | Exploiting BLE Re-Pairing with the BLERP Attacks
Black Hat Asia 2026 | Bad Vibes - Pwning Coding Agents 70 Times With The Same Bugs
Black Hat Asia 2026 | Large-Scale macOS PID-Domain Vulnerability Discovery with LLM Reasoning
Black Hat Asia 2026 | LLM-Empowered Differential Testing for the Ethereum Infrastructure
Black Hat Asia 2026 | Overkill: Hijacking a Wi-Fi 7 Chip for SYSTEM Privileges
Black Hat Asia 2026 | Mass Scale Hijacking of Shared Mobility and EV-Charging Fleets
Black Hat Asia 2026 | Graph-Aware LLM for Windows Logon with a Closed-Loop Guarded Detection Agent
Black Hat Asia 2026 | Social Media Manipulation Wargaming for Cyberliteracy and Research
Black Hat Asia 2026 | When 3.5 Billion Strangers Can Exploit Your WhatsApp Devices
Black Hat Asia 2026 | Shedding LIGHT on Real-World Attacks on Cloudless IoT Devices
Anthropic is cutting Claude Code's current weekly limits by 17%
Anthropic is permanently increasing Claude Code's standard weekly usage limits by 25% for Pro, Max, Team, and seat-based Enterprise plans, but it's not as good as it sounds.
Brave browser adds email aliases to help users evade tracking
The latest version of the Brave browser, 1.94, introduces a feature called 'Email Aliases' that allows users to generate disposable email addresses when signing up to a new servicā¦
McKesson discloses breach after ShinyHunters claims patient data theft
Healthcare and pharmaceutical distribution giant McKesson has disclosed a cybersecurity incident involving unauthorized access to third-party applications and data theft, with theā¦
PaperCut releases second emergency patch for exploited flaws
PaperCut has released a second emergency security update for two actively exploited vulnerabilities in its PaperCut NG and MF print management software after researchers discovereā¦
GiveWP WordPress donation plugin flaw lets hackers execute server commands
A maximum-severity vulnerability in the GiveWP plugin for WordPress allows an unauthenticated attacker to execute arbitrary commands on the hosting server.
68-year-old imprisoned after making $1.3 million by pirating IPTV services
A 68-year-old has been sentenced in the U.K. to more than six years in prison for operating an illegal IPTV (Internet Protocol Television) service that generated Ā£980,812 ($1.3 miā¦
AI Is Accelerating Vulnerability Discovery. Can Defenders Keep Up?
AI is accelerating vulnerability discovery, putting pressure on systems built to enrich, prioritize, and remediate flaws at a slower pace. Action1 explains why defenders increasinā¦
Over 8,300 Gitea servers vulnerable to code execution attacks
Over 8,300 Internet-exposed Gitea instances are still unpatched against a critical security flaw exploited in ongoing remote code execution attacks, according to cybersecurity watā¦
Toy-making giant Hasbro disclose data breach affecting employees
Hasbro, one of the world's largest toy and game companies, has disclosed that attackers have accessed the personal and financial information of an undisclosed number of employees.
ServiceNow warns of three max severity security vulnerabilities
ServiceNow released security patches for three new maximum-severity AI Platform vulnerabilities that can be exploited in code injection, SQL injection, and privilege escalation atā¦
Five Critical WordPress Plugin and Theme Flaws Enable Site Takeover or RCE
Berlin Refuses to Pay Hackers Who Stole Data From the City's State Network
Cosmos EVM Flaw Exploited After Cosmos Labs Knew Every Blockchain Running It Was Vulnerable
Attackers Chain Two PaperCut Flaws to Execute Code Without Authentication
Android 17 Adds OS-Wide ECH to Hide Website Visits From Network Providers
ownCloud Flaw Exploited to Steal Nuclear Records From Philippine Research Body
19 Chrome and Edge Extensions Found With Wallet-Stealing and Crypto-Draining Code
Two Unitree G1 EDU Humanoid Robot Flaws Enable Root RCE, One Starts Over Bluetooth
Key Reasons Why Identity Fabric Matters in 2026
Three CVSS 10.0 ServiceNow Flaws Could Let Unauthenticated Attackers Execute Code and SQL
Phishing Panel Breadcrumbs
GitHub Hacker EXPOSED BY HIS CAT
Device Code Phishing
Inventory The Entire Host
Canary Tokens, Meet AI
I Built a Minecraft Mod That Sees Real Internet Data
AI Malware Gets Weird
Phishing Gets Personal
I Made AI Build a Cybersecurity Mod in Minecraft
I Found an MFA-Bypassing Phishing Kit on the Dark Web
CVE-2026-68821 Windows Package Manager Elevation of Privilege Vulnerability
CVE-2026-70331 Microsoft Edge for iOS Spoofing Vulnerability
CVE-2026-58616 Copilot Chat (Microsoft Edge) Information Disclosure Vulnerability
CVE-2026-62904 Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
CVE-2026-66323 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2026-66324 Microsoft Edge (Chromium-based) Spoofing Vulnerability
CVE-2026-66798 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2026-70341 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2026-72984 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Chromium: CVE-2026-78891 Buffer overflow in WebRTC
Hasbro Data Breach Exposed Employee Personal Information
In Other News: Log4j RCE Scare, Minimus Shutdown, Iranian Hacker Sanctions
ATF Confirms Cyber Incident After Ransomware Group Claims Attack
OpenAI Agents Exploited Linux Kernel Flaw on Companyās Own Systems
Tech, Cybersecurity Giants Unite Behind OpenAI-Led Cyber Defense Pledge
Think Youāve Eliminated Chinese AI? Check the Modelās Lineage, Cisco Says
PaperCut Releases Emergency Patch for Exploited Zero-Day
Trump Order Aims to Block Foreign Backdoors in US Power Grid Gear
Australia Arrests 2 Alleged TeamPCP Hackers
OpenAI Agents Coordinated via Makeshift Message Board Ahead of Hugging Face Hack
The Cybersecurity Apocalypse Is Coming in āMonths,ā AI Giants Warn
Microsoft Teams Has Become a Haven for Scammers in China
How an Atlanta Suburb Ended Up Sharing Flock Data With More Than 2,000 Organizations
A Georgia Cop Used Flock to Track 2 Other Cops: His Ex and Her Friend
OpenAIās Hugging Face Hack Debrief Raises More Questions Than It Answers
FBI Disrupts Chinese Proxy Tools Used in Mass Hacking of US Agencies and Infrastructure
The County Prosecutors Who Became ICE Informants
Your Expired Visa Card Could Be āZombifiedā to Make Contactless Payments
China Is Strapping āDigital Bombsā to Civilian InfrastructureāIs the US Ready?
Reverse-Lookup Service Exposed Millions of Photos of Peopleās Faces
TerminalFix campaign deploys a reverse tunnel through multistage intrusion
Microsoft Threat Intelligence provides analysis of a ClickFix campaign that uses fake CAPTCHA prompts, DLL sideloading, and a reverse tunnel, with detections and hunting guidance.
āāāāāāWhatās new in Microsoft Security: August 2026
This monthās updates provide new capabilities to help organizations gain insights into agent activity, expand security coverage across supported environments, and enhance securityā¦
When AI infrastructure becomes the target: Securing gateways and control points
Microsoft Threat Intelligence examines attacks on exposed AI workloads, including LiteLLM gateway exploitation, credential harvesting, persistence, and cryptomining activity.
The patch window is collapsing: Why security needs a new control plane
Learn why Microsoft is investing in new and innovative capabilities able to give organizations time to safely validate and deploy patches.
Microsoft named a Leader in the Frost Radarā¢: Cloud Workload Protection Platforms, 2026
Microsoft is named a visionary leader in the 2026 Frost Radar for CWPP, recognized for unified runtime security with Microsoft Defender for Cloud.
Hunting MacSync Stealer infrastructure through behavioral pivots
MacSync Stealer rapidly rotates domains to evade detection, but its behavior remains consistent. Learn how Microsoft uncovered 30+ related domains using durable hunting pivots.
Microsoft named a Leader in the 2026 IDC MarketScape for MDR/MXDR for the Enterprise
Microsoft is named a Leader in the 2026 IDC MarketScape for MDR services. Discover how Microsoft Defender Experts MDR combines AI, threat intelligence, and human expertise.
DeadLock ransomware: Breaking down a Rust-based encryptor with decentralized recovery infrastructure
Microsoft Threat Intelligence examines DeadLock ransomware, an emerging financially motivated operation distinguished by its use of decentralized infrastructure to support victimā¦
āāMicrosoft named a Leader in the KuppingerCole Leadership Compass for Cloud Native Application Protection Platforms (CNAPP)
Learn why KuppingerCole named Microsoft a Leader in its Leadership Compass: Cloud Native Application Protection Platforms report.
From open lures to cloaked gates: How a macOS ClickFix campaign learned to hide
A macOS ClickFix campaign shifted tactics from openly serving infostealer lures to hiding them behind a browser-fingerprinting gate. The change makes malicious infrastructure hardā¦
PaperCut warns of hackers using printer management software flaw in attacks
White House bans foreign-made equipment for power generation over cyber backdoor concerns
Finland appeals court revives case against Eagle S Officers over cable breaks
Chinese and Russian spies stepping up cyberattacks, German companies report
Cyberattack on Manchester Airports Group exposes data of 8.7 million customers
NodeZero Only Shows What It Exploits
Say Goodbye To Patch Tuesdays
What Happens If You Touch This Cable?
Why I Keep 72TB Out of the Cloud
AI Is Changing Cybersecurity. Hereās How to Defend Yourself
How 1 Email Can Hijack an AI Agent
Hacking Gadgets Every Cybersecurity Pro Should Know
Is it your fault that you got hacked?
How to Learn OSINT for Free
You need to try Qubes OS (replace Windows in 2026)
6 ThreatLocker alternatives that should make your shortlist
6 handpicked ThreatLocker alternatives. Some are direct ThreatLocker competitors, others let you manage clientsā environments differently.
50+ insider threat statistics for 2026
In 2026, insider threats are probably a bigger risk than you think. In fact, they could cost your organization $19.5 million a year. But itās not really a problem with hackers, spā¦
The Planting Seeds philosophy. Selling into schools takes years, not quarters
Itās tempting for MSPs to write off event sponsorship in education as a waste of money. You sponsor an event, hand out flyers, follow up with an email, and hear nothing back. Rickā¦
What the DfEās cyber security update means for multi-academy trusts
Before dawn on 10 July 2024, one ransomware attack took down ten schools inside the same multi-academy trust at once. Every control that eventually stopped it was something the Deā¦
9 Proofpoint alternatives. Pros & cons of the leading options
Compare 9 top Proofpoint alternatives to find the email security tool that best fits your needs, budget, and usability.
The risk awareness radar. A superpower every MSP needs to train
Most of the cyber incidents landing on our desks these days start with someone believing a lie. Itās not a brilliant piece of code that causes most breaches. A convincing email, aā¦
Heimdal data reveals MediaArena adware completes persistence before antivirus quarantine finishes
New data from Heimdal's telemetry measures the gap between execution of the MediaArena adware and the completion of quarantine. The same pattern has been confirmed across more thaā¦
How Heimdal grew from a bold idea into a global cybersecurity platform
Heimdal did not start as a traditional cybersecurity company. It started with two Danish cybersecurity researchers, a piece of innovative technology and a challenge. Could they crā¦
MediaArena malvertising: why a quarantine isnāt the end of the incident
If Microsoft Defender quarantines BrowserModifier:Win32/MediaArena on one of your endpoints, the alert reads like a win. Our SOC data says treat it as a live persistence incidentā¦
Tools Change. Teach People How to Keep Up
āMake everyone one percent better and it compounds across the team.ā Thatās the line Joe Head wrote about his own job and when I read it back to him, he didnāt hesitate. āThat isā¦
North Korean remote workers are broadening their job hunt beyond IT
North Korean remote workers are seeking jobs beyond IT, with suspected workers identified in sales, marketing and the medical profession.
Android 17 adds new protections against sneaky Wi-Fi tracking and web snooping
Android 17 brings new network security features that hide browsing domains, lock down Wi-Fi scanning and block 2G SMS scams.
Manchester Airports Group breached, millions of customersā data stolen
Manchester Airports Group confirms data breach at Manchester, Stansted, and East Midlands airports, exposing emails and phone numbers.
What 90 days and a small budget can buy in AI agent security
Securing AI agents starts with knowing which ones exist, what they can access, and what happens when one gets compromised.
New infosec products of the month: August 2026
The featured infosec products this month are from: A10 Networks, Abnormal AI, F5 Networks, Intezer, Netscout, ScienceLogic, and more.
Two alleged TeamPCP hackers arrested over global supply chain attacks
Two alleged TeamPCP hackers were arrested in Australia over cyberattacks that compromised more than 1,000 organizations worldwide.
Cyberattack causes network outage at Boston Scientific, disrupts global operations
Medical company Boston Scientific suffered a cyberattack that hit certain information technology systems, causing a network outage.
PaperCut NG/MF vulnerabilities exploited in zero-day attacks
A yet unspecified vulnerability affecting print management solutions PaperCut NG and PaperCut MF is being exploited by attackers.
Previously patched Citrix NetScaler flaw exploited in the wild (CVE-2026-8452)
Citrix NetScaler ADC and Gateway flaw CVE-2026-8452 is under active attack, with hackers dropping web shells days after a public PoC.
FBI takes down China-linked hacking network behind attacks on NASA, DOJ and U.S. Senate
FBI disrupted a China-linked hacking network built on QScan and QTRouter, tools used against NASA, the Federal Reserve, and the U.S. Senate.
Authorities arrest 2 alleged members of prolific hacking group TeamPCP
Claude, Codex, and Hermes installed unowned code inside corporate networks
How OpenAI let a mob of LLM agents game a test and ransack Hugging Face
Inaudible sounds used to fingerprint browsers catch AliExpress red-handed
Grok exfiltrates user data when malicious instructions are encrypted
Microsoft Copilot reveals secret input that allowed it to be hacked
Vulnerability giving attackers full control of Macs is under active exploitation
Private security firms will soon be allowed to hack overseas cybercriminals
Terabytes of credentials leaked in massive supply-chain attack
Researchers found a way to hijack devices through Zoom screen sharing
Two Alleged āTeamPCPā Hackers Arrested in Australia
Whoās Tracking You? Use This New Service to Find Out
It can be daunting to determine who's responsible for showing ads on the websites we visit, or who's harvesting data from the mobile apps we use every day. That information is alrā¦
Microsoft Plugs Nearly 400 Security Holes
Microsoft today released updates to remedy at least 398 security vulnerabilities in its Windows operating systems and supported software, including one weakness that is already beā¦
Canadian Man Pleads Guilty in Snowflake Extortions
A 26-year-old Canadian man once described as one of the most consequential cybercrime threat actors of 2024 has pleaded guilty to computer fraud and conspiracy to hack and extortā¦
Read This Before You Buy That TV Streaming Stick
Security experts have been sounding the alarm for years about the risks of using generic TV boxes that promise unlimited content streaming for a one-time fee, warning that they seā¦
LG to Ban Residential Proxies from Smart TV Apps
The home appliance giant LG Electronics USA said this week it plans to suspend any apps built for its smart TVs that turn one's television into an always-on residential proxy nodeā¦
Microsoft Patches a Record 570 Security Flaws
Microsoft Corp. today released software updates to plug at least 570 security holes in its Windows operating systems and other software, almost triple the number of vulnerabilitieā¦
Lessons Learned from CISAās Recent GitHub Leak
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a postmortem on a data leak in which a contractor published dozens of internal CISA credentials -- includingā¦
Felons, Fraudsters Flog Offensive Cybersecurity Startup
A cybersecurity startup dangling millions of dollars to acquire zero-day security vulnerabilities in popular software is run by a pair of far-right conspiracy theorists and convicā¦
FBI Seizes NetNut Proxy Platform, Popa Botnet
The Federal Bureau of Investigation (FBI) said today it worked with industry partners to seize hundreds of domains associated with NetNut, a sprawling residential proxy service opā¦
Threat landscape for industrial automation systems. Q2 2026
The report contains statistics on industrial threats for Q2 2026, including ransomware, miners, spyware and other threats that were detected and blocked on industrial control systā¦
Exploits and vulnerabilities in Q2 2026
This report covers statistics on vulnerabilities, exploits, and C2 frameworks in Q2 2026. For the first time ever, we aggregate data on vulnerabilities in open-source AI agents anā¦
The invisible passenger in your car
Kaspersky expert has discovered new Android malware designed to serve ads and build a proxy botnet. Itās delivered through legitimate software for DoFun head units.
APT group HoneyMyte upgrades CoolClient: the backdoor gets a kernel-level Windows rootkit
Our experts discovered a new CoolClient backdoor variant with a kernel-mode rootkit driver that hides malicious processes, files, and network connections from security tools and tā¦
Armored Likho expands its cyber-espionage toolkit
Kaspersky experts break down a new Armored Likho campaign that poses as a fundraising efforts and delivers a new Still Toolkit aimed at stealing Telegram data and eavesdropping onā¦
Head Mare APT is exploiting vulnerabilities in an unpatched TrueConf server to deliver PhantomCore and PhantomGraph to video conference participants
Kaspersky experts have discovered malicious TrueConf software installers. The Head Mare APT group uses them to deliver the PhantomCore and PhantomGraph backdoors to target systemsā¦
Project CAV3RN continues: Google Apps Script as C2 relay and DNS-based C2 channel selection
Project CAV3RN targets Israel with Google Apps Script C2 relays and DNS-based routing. Modular .NET NativeAOT framework blends C2 traffic with legitimate Google services to evadeā¦
IT threat evolution in Q2 2026. Non-mobile statistics
The report presents key trends and statistics on malware that targeted personal computers running Windows and macOS, as well as internet of things (IoT) devices, during Q2 2026.
IT threat evolution in Q2 2026. Mobile statistics
This report contains mobile threat statistics for Q2 2026, along with noteworthy discoveries and quarterly trends: the Anatsa banker and a transition to droppers.
How legitimate cloud platforms enable phishers to bypass MFA
We cover a cloud-based AitM attack scenario leveraging service workers and Ultraviolet, and provide detailed phishing hosting statistics across platforms like Cloudflare Workers,ā¦
AI-assisted reconnaissance: Why everyone could be a viable target for fraud
How QR-code phishing can slip past corporate security measures
Black Hat USA 2026: Will vulnerability discovery eventually decline in the AI era?
Black Hat USA 2026: What the Hugging Face hack tells us about human responsibility
Black Hat USA 2026: AI is racing ahead of cybersecurity controls
Are AI tutors safe for your kids?
This month in security with Tony Anscombe ā July 2026 edition
Beyond the screenshot: Why you should verify what you see
Forgotten UEFI shims undermining Secure Boot
ESET Threat Report H1 2026
Fraud Temperature Gauge: August 2026
Does AI Content Have to be Authentic ā or Can It Just Be Effective?
What Is Visaās DCAP? A Merchantās Guide to Requirements, Benefits, and Rollout
The Gray Area in Your Checkout Is Costing You More Than You Think
Your Payment Routing Rules Are Making Decisions Without You
New at Forter: AI Agents Built to Amplify Your Team
Can AI Agents Find, Trust, and Choose Your Brand?
IMPACT Roadshow Recap: Getting Ready for Agentic Commerce
Agent-Ready: How to Prepare Your Site for AI-Driven Commerce
Japanās 3DS Mandate: One Year In
Real Folks of Cyber | Joel Valenzuela | DITL
How to Build a Home Lab for Cheap!
Vanta vs. Drata: The 10 Questions Our CISO Asks GRC Vendors
Do I Need to Know Programming in 2026?
Soft Skills for the Job Market: Standing Out!
Meet TCM Security at DEF CON 34!
Real Folks of Cyber | Andrew Crotty | DITL
TCM Course Release | New Creator | Cybersecurity | AMA
Soft Skills for the Job Market: Applying for Jobs
LIVE: 1 Million Subscribers | DEF CON/Summer Camp Giveaway
BlueDelta Targets Defense and Diplomacy with HOOKEDGE
Discover how the Russian state-sponsored threat group BlueDelta is using the HOOKEDGE backdoor to target defense and diplomatic organizations across Europe
Recorded Future Launches AI Alert Filtering
Mexicoās Cybersecurity Plan 2025-2030: Turning Ambition Into Defense
Recorded Future Launches 6 New Capabilities for Third-Party Risk
PurpleDelta's Fraudulent Employment Operations
CopyCop Targets AI Investment in Armenia
Malware Crypting Services and the Threat Actors Who Sell Them
Mines, Minds, and Machines: The Journey of AI
The Hugging Face Hack Was Cheap Persistence at Work
July 2026 CVE Landscape
Cisco Advance Notification for Publication of September 2, 2026, Security Advisories
On September 2, 2026, the Cisco Product Security Incident Response Team (PSIRT) will publish advisories to disclose security vulnerability information along with fixed software reā¦
Cisco Secure Workload Software Security Hardening Release: August 2026
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review.ā¦
Cisco Industrial Ethernet 1000 Series Switches Stored Cross-Site Scripting Vulnerability
A vulnerability in the web-based management interface of Cisco Industrial Ethernet (IE) 1000 Series Switches could allow an authenticated, remote attacker to conduct a stored crosā¦
Cisco Packaged Contact Center Enterprise and Cisco Unified Contact Center Enterprise Server-Side Request Forgery Vulnerability
A vulnerability in Cisco Packaged Contact Center Enterprise (Packaged CCE) and Cisco Unified Contact Center Enterprise (Unified CCE) could allow an authenticated, remote attackerā¦
Cisco Unified Intelligence Center SQL Injection Vulnerability
A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an authenticated, local attacker to perform a blind SQL injection attack agaā¦
Cisco Industrial Ethernet 1000 Series Switches Denial of Service Vulnerability
A vulnerability in the handling of management plane packets by Cisco Industrial Ethernet (IE) 1000 Series Switches could allow an unauthenticated, remote attacker to cause the devā¦
Cisco RoomOS Stack Overflow Vulnerability
A vulnerability in the USB driver of Cisco RoomOS could allow an unauthenticated, local attacker with physical access to the USB port on an affected device to execute arbitrary coā¦
Cisco BroadWorks Out-of-Band Blind XML External Entity Injection Vulnerability
A vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks could allow an unauthenticated, remote attacker to read sensitive configuration information on anā¦
Cisco Crosswork Security Hardening Release: August 2026
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Crosswork engineering team has conducted a comprehensive internal security review. Thisā¦
Cisco Advance Notification for Publication of August 19, 2026, Security Advisories
On August 19, 2026, the Cisco Product Security Incident Response Team (PSIRT) will publish advisories to disclose security vulnerability information along with fixed software releā¦
ISC Stormcast For Wednesday, August 26th, 2026 https://isc.sans.edu/podcastdetail/10068, (Wed, Aug 26th)
ISC Stormcast For Wednesday, August 26th, 2026 https://isc.sans.edu/podcastdetail/10068, Author: Johannes Ullrich
Obfuscating IP Addresses as Hostnames, (Tue, Aug 25th)
ISC Stormcast For Tuesday, August 25th, 2026 https://isc.sans.edu/podcastdetail/10066, (Tue, Aug 25th)
DOUBLECUP's PNG Payload, (Mon, Aug 24th)
DOUBLECUP's PNG Payload, Author: Didier Stevens
ISC Stormcast For Monday, August 24th, 2026 https://isc.sans.edu/podcastdetail/10064, (Mon, Aug 24th)
Who Got Missed in the MFA Rollout? More Powershell + Graph + Entra scripting!, (Fri, Aug 21st)
ISC Stormcast For Friday, August 21st, 2026 https://isc.sans.edu/podcastdetail/10062, (Fri, Aug 21st)
Even MOAR Powershell, looking at Entra logins - the good, the bad and the password sprays, (Fri, Aug 21st)
Using Microsoft Graph and Powershell - Risk Detection Commands, (Thu, Aug 20th)
Using Microsoft Graph and Powershell to Mine for Information - Stale Accounts and Licenses, (Thu, Aug 20th)
DEF CON 34 - Video Team - Scavenger Hunt Slot Machine
DEF CON 34 - Video Team - I Am the Cavalry - Josh and Dean
DEF CON - noRecognition: Could a pattern on clothing fool Facial Recognition? - Bill Swearingen
DefCon 34 - Stalking the Wily Hacker: 40 years later - Cliff Stoll
DEF CON 34 - Video Team - Hackers dot Town - The Gibson
DEF CON 34 - Video Team - Car Hacking Villlage
DEF CON 34 - Video Team - Ham Radio Village - Marvin Goes HAM
DEF CON 34 - Video Team - Physical Security Village
DEF CON 34 - Video Team - LEECH
DEF CON 34 - Video Team - EmbeddedSystems Village
Is Linux the perfect operating system? - Omarchy interview with DHH
I had to assemble this laptop. Then I installed #omarchy on it.
You need to switch to Linux RIGHT NOW!!
This New Device is 10x Better Than Your Router
OSPF From Zero: Let's Build the Internet (Well...Almost) | Summer of CCNA
AI's Impact on Network Engineers | LIVE AMA | Summer of CCNA
this Raspberry Pi belongs on your wall
I got inside FIFAās Secret World Cup Broadcast Network
LIVE AMA | Summer of CCNA | 07/09/2026
Fable 5 is back.....run these prompts before July 12th
SCOTUS tosses one of two injunctions against Trump USPS mail-in ballot rules
Treasury sanctions alleged Iranian hackers as part of āeconomic D-Dayā
Bipartisan Senate bill aims to prepare energy sector for Q-Day
Postal Service moves to finalize mail ballot regs before SCOTUS ruling
Apollo discloses data breach from ongoing wave of attacks hitting financial sector
Lawmakers seek watchdog review of federal hacking of Americans
Early 764 member sentenced to 77 years, longest prison term to date for a nihilistic violent extremist
Retail theft bill spurs āvery large and very dangerousā surveillance fears
The push to designate AI as the next critical infrastructure sector
AI-fueled attacks pose āactive threatā to water, other sectors, U.S. agencies warn
Insight into agentic hacking tools: Hermes, OpenClaw and the Bayesian brain
The Citizen Lab Bad Connection: Uncovering Global Telecom Exploitation by Covert Surveillance Actors
Code Execution via Text Template Files | Playbook & Detection
Tataās B2B platform returned OTPs in API responses
ValleyRAT campaign uses fake GSTR-3B overdue notice targeting Indian taxpayers
CRLF-Powered Desync Attacks: Beheading HTTP Streams
How to break secure boot without touching any cryptography
The Curious Incidents with DNS in the Sandbox at Escape-Time
š„ Operation CameraSwarm: over 14,000 Dahua cameras compromised across Ukraine and Russia
How a popular Android library silently exposed thousands of apps to Arbitrary File Overwrite (AFO). https://itis911.github.io/writeups/cropper-vulnerability.html
This Word Document Steals Your Password From Microsoft Copilot (+ LIVE DEMO)
Blueprint to Making $100K with Caido (Free Bug Bounty Course)
I Went to the World's Biggest Hacker Conference (DEFCON VLOG)
Iām headed to DEFCON!
Free AI Hacking Course: Indirect Prompt Injection (+FREE LABS)
Are you ready for this year's @BugBountyVillage at @DEFCONConference
Do you guys agree? #hacking #bugbounty
How One File Upload Got Me the Entire Customer Database
Why Being a Great Hacker Doesn't Pay Anymore
This Hacker Made $8,000 Hacking a Major Retailer's AI Chatbot Over DNS (Live Demo!)
My Life, AI and the Future of LiveOverflow
The OpenAI Story Actually Scares Me
Learn Fault Injection at DEF CON 2026
Did an AI Really Hack Hugging Face?
Security-driven Rapid Release - Pwn2Own Documentary (Part 4)
Firefox JIT Bug - Pwn2Own Documentary (Part 3)
The First Exploit - Pwn2Own Documentary (Part 2)
The World's Hardest Hacking Competition - Pwn2Own Documentary (Part 1)
From Zero to Zero Day (and beyond) - Life of a Hacker: Jonathan Jacobi
The German Hacking Championship
Apple Detected Something on These iPhones | Threat Wire
You Donāt Need a Burner Phone at DEF CON | Threat Wire
OpenAI Turned Off the Guardrails | Threat Wire
Meta Logging Every Employee Keystroke | Threat Wire
Your Home Internet Has a New Owner | Threat Wire
Five Eyes Alert: The AI Deception Has Already Begun | Threat Wire
Miasma Worm Source Code Leaked (Plus: Anthropic's Fable RealityCheck) | Threat Wire
š“ [PAYLOAD] Shark Jack Display š¦
š“ [PAYLOAD] šš WiFi Pineapple Pager
š“ [PAYLOAD] Shark Jack Display š¦
News alert: Airlock Digital IRAP assessment bolsters trust for sensitive Australian deployments
ADELAIDE, Australia, August 19th, 2026, CyberNewswire Ć¢ā¬ā Airlock Digital, a global provider of application control and allowlisting solutions, today announced that it has completā¦
News alert: OpenMatter Network spotlights AI verification at Belgrade Blockchain Week
Melbourne, Fla., August 17, 2026, CyberNewswire Ć¢ā¬ā Continuing its effort to build global awareness of the need to move computing from assumption-based trust to cryptographic prooā¦
MY TAKE: Black Hat 2026 Part 3 ā Agentic AI can do the work, but somebody has to prove it
Security work used to leave a trail without anyone trying. A developer who wanted an open source library went and got it, and the license came along. An analyst who closed a caseā¦
MY TAKE: Black Hat 2026 Part 2 ā Security shifts to deciding in advance what an AI agent may reach
Humans get identity. That is what MFA and single sign-on are for, and we all understand the bargain: prove you are who you say, then go do your work. Machines get predictability.ā¦
MY TAKE: Black Hat 2026 Wrap-up Part 1 ā AI is forcing security and operations to merge in the SOC
Companies have kept security in one silo and operations in another for as long as both have existed. Related:Part 2 Ć¢ā¬ā deciding what AI can reach Agentic AI is collapsing the divā¦
News Alert: Pulse Security AIās research reveals C-suite, board confidence gap on cyber exposures
LAS VEGAS, Aug. 5, 2026, CyberNewswire ļ»ĀĀ Boards of directors believe they understand their company's security posture and what it means for the business. The security leaders prā¦
BLACK HAT ROUNDTABLE: Security pros dissect fallout from Hugging Faceās double guardrail failure
LAS VEGAS Ć¢ā¬ā It's come to this. A cyberattack carried out by a machine. Worse, a machine that picked its own victim. Whether that counts as agency is where the experts below partā¦
News alert: Airlock extends endpoint control to govern AI agents and define operating boundaries
Atlanta, GAÅÄƶAugust 4, 2026ÅÄƶAirlock Digital, a leader in preventative endpoint security, today announced Agentic AI Control & Governance at Black Hat USA 2026. The new capabiliā¦
News alert: Mallory links threat intelligence to governed response as exploit timelines shrink
Las Vegas, United States, August 4th, 2026, CyberNewswire Ć¢ā¬ā Mallory, the AI-native Threat and Exposure Management platform, today introduced a unified context and intelligence lā¦
News alert: Community voting shapes 2026 Cybersecurity Excellence Awards
LAS VEGAS, Aug. 4, 2026, CyberNewswire Ć¢ā¬ā The Cybersecurity Excellence Awards today announced the winners of the 2026 Community Choice Award, selected through 79,455 votes cast dā¦
HackTheBox - Cobblestone
HackTheBox - Helix
HackTheBox - Kobold
HackTheBox - Fries
HackTheBox Logging
HackTheBox - CCTV
HackTheBox - DevArea
HackTheBox - WingData
HackTheBox - Nanocorp
HackTheBox - VariaType
Cybercriminals Turn to Indirect Prompt Injection Attacks
Cybercriminals are developing indirect prompt injection tools to target AI agents.
Russian hackers can steal emails without a click
Proofpoint Joins Google Unified Security Recommended Program to Help Organizations Defend Against Todayās Most Sophisticated Threats
Recognition highlights Proofpoint's deep technical integration with Google Cloud Security solutions and commitment to helping organizations protect people, data and AI Helps
Proofpoint Launches OEM Program to Help Security Providers Embed Trusted Threat Intelligence and Detection Capabilities
Accelerates OEM innovation by embedding trusted threat intelligence into security products and customer-facing workflows. Helps partners deliver more prioritized,
Max-severity Exchange server flaw under active exploitation by Kremlin hackers
New warnings that Russian operatives are targeting the emails of US nuclear scientists and defense contractors
Russian Espionage Group Exploited Zimbra Zero-Day to Steal Mail and 2FA Codes
US and allies say Russian hackers stole emails without social engineering
The United States and more than a dozen allied nations said on Thursday that Russian hackers stole emails from users of āthe Zimbra email program without having to fool them intoā¦
If you pay a hackerās ransom, chances are that theyāll come back for more
Proofpoint Research Finds 65% of Organizations Affected by Ransomware Say AI Made Attacks More Effective
Global study reveals that AI is amplifying phishing, impersonation and credential theft, transforming ransomware into a human-centric extortion problem 40%
The next measure of AI momentum is work transformed
New data from Microsoft 365 Copilot telemetry signals, along with examples from our customers around the world, demonstrate AI transformation in action.
Copilot in Excel: Built for the era of Frontier Finance
- Discover how Copilot in Excel transforms finance workflows with skills, data connectors, and capabilities for traceability.
Copilot Cowork is now generally available
Copilot Cowork is now generally available worldwide, bringing secure, AI-powered automation for complex enterprise tasks in Microsoft 365.
Introducing Microsoft Scout: Your always-on personal agent
Microsoft introduces a new, always-on personal agent, Microsoft Scout, integrated across the Microsoft 365 apps you use every day.
Announcing the new Work IQ APIs
Build enterprise agents with Work IQ APIs for Microsoft 365ābringing business context, tools, and secure, scalable intelligence into every workflow.
Introducing Microsoft 365 Business with Copilot: The new standard for small business
Meet Microsoft 365 Business with Copilotāthe AI-powered solution transforming how small businesses work, collaborate, and compete.
Introducing a new design for Microsoft 365 Copilot
Copilotās redesigned experience delivers faster performance, adaptive tools, and clearer AI-powered workflows to help you easily move from intention to outcome.
New and improved: Computer-using agents, a new workflows experience, and real-time voice experiences
Explore what's new in Copilot Studio, May 2026: computer-using agents are now available, plus redesigned workflows and Work IQ extensibility.
New and improved: Agent governance, intelligent workflows, and connected app experiences
See what's new in Copilot Studio, April 2026: updates to workflows, more control over agent operations, and an expanded agent usage estimator.
Copilot Cowork: From conversation to action across skills, integrations, and devices
Today, weāre announcing additional capabilities in Cowork to expand on what it can make possible for you.
Why the Open Secure AI Alliance Matters: Open Frontier Models, Open Deployment Flexibility
Tracking Over 35,000 Fake Sites in the 2026 World Cup Scam Wave
The Signs Were There: What the First Autonomous Ransomware Case Confirms
13M+ Emails Sent in Tech Support Scam Targeting Users, Organizations in Japan
Inside the OpenAI ā Hugging Face Incident: The AI Breach With No Human Attacker Behind It
Federal Agencies Warn of Ongoing PLC Exploitation Against Critical U.S. Infrastructure
Device Code Phishing: Turning a Convenience Feature Into an MFA Bypass
Volume Is Not Risk: Making Sense of the āVulnpocalypseā
Six Minutes to Compromise: How āPatriot Baitā Actor Used AI to Build and Deploy a C&C Botnet
TONResolver RAT Abuses TON Blockchain to Target Japan's Hotel Industry
They hacked Google's AI in Seoul
āļøš
Life in the Nordics š² | Foraging Blueberries, Mushrooms & Nosework Training with Our Dogs
Winter vanlife = good times
What an experience! Getting a Christmas tree from our own piece of land. #movingupnorth!
Had to much GLĆGG and lost my camera during - 13371122 - Intigriti + Visma
IS THIS THE END?
Escaping the grind and decompiling python 3.9 pyc files to find vulnerabilites
How to turn bugs into a "passive" income stream! ft Detectify's Almroot
HOW DID THIS HAPPEN!? (13370822 LHE VLOG)
Ransomware in the Dairy Aisle: A Look at Fairlifeās Cyberattack
UKās Largest Cybercrime Case Ends in Prison for Spider Hacker
Hacking US Elections: The First Tranche of Declassified Election Integrity Documents
Inside Microsoftās Record-Breaking 622-Bug Release
Breaking the Knot: Marlinspike Capital Inverts the Cybersecurity Investment Playbook
Inside āGold Eagleā: The White Houseās New AI-Driven Clearinghouse for Critical Infrastructure
CISA Warns Russian FSB Hackers Are Targeting Critical Infrastructure Routers
The Threat Mechanism and Mitigation of Pink Vishing Campaigns
See It Once, Stop It Everywhere
Cybercriminals Targeting World Cup Fans
78% of CFOs Say Payment Blind Spots Increase Customer Friction
85% of CFOs Say Automation Cuts Payments Friction
42% of Issuers Say AI Has Cut Fraud Losses by at Least $5 Million
LexisNexis and Promon Help Brands Fight Rising Mobile App Fraud
42% of Issuers Say Fraud and Disputes Are Driving Up Costs
JPMorganChase and Amazon Back Aspen Institute Drive Against Scams
World Cup Gives Cross-Border Payments Their Super Bowl Moment
Banks Face a New ACH Fraud Test as Nacha Rules Take Effect
The latest Nacha fraud rules require banks to expand fraud monitoring and adopt broader, risk-based oversight across ACH activity.
Nvidia Wants Banks to Hunt Fraud Rings, Not Just Bad Charges
Nvidiaās AI blueprint maps connections across accounts and devices to catch the fraud network, not just the charge.
AI Forces Compliance Teams to Rethink Alert Strategy
Forgotten UEFI shims undermining Secure Boot
ESET Threat Report H1 2026
Cyber readiness for SMBs: Getting the basics right
This month in security with Tony Anscombe ā June 2026 edition
Inside the inbox: Why cybercriminals want to break into your email account
SMB cyber readiness: the road to resilience starts here
Gamaredon in 2025: Leveraging tunnels, workers, dead drops, and new alliances
ESET takes part in Operation Endgame to disrupt Amadey and Stealc
Killing me gently: Inside Gentlemenās EDR killer framework
Protecting legacy OT systems against modern cyberthreats
CISA Adds One Known Exploited Vulnerability to Catalog
CISA Urges Hardening Fortinet Devices After Reports of Credential Exposure
CISA Adds One Known Exploited Vulnerability to Catalog
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA Adds One Known Exploited Vulnerability to Catalog
CISA Adds One Known Exploited Vulnerability to Catalog
CISA Adds Three Known Exploited Vulnerabilities to Catalog
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA Adds One Known Exploited Vulnerability to Catalog
CISA Adds One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to its KEV Catalog, based on evidence of active exploitation.
Apollo Pharmacy Blood Glucose Monitoring System APG-01 BT
CISA Adds One Known Exploited Vulnerability to Catalog
Schneider Electric EasyLogic T150 and Saitel DP
AVer PTC cameras
Rockwell Automation FactoryTalk Historian Site Edition
AzeoTech DAQFactory
Schneider Electric Easergy, EcoStruxture, PowerLogic, and Saitel Products
Mitsubishi Electric MELSEC iQ-F Series
Mitsubishi Electric Co.'s MELSEC iQ-F Series FX5-ENET/IP Ethernet Module
CISA Urges Hardening Fortinet Devices After Reports of Credential Exposure
Any solutions we can use?
Possible targeted attack
RoguePlanet: Windows Zero-Day That Weaponizes Defender's Own Quarantine Pipeline
Facebook messenger to text
Managing Solution Agents
Nottingham University data breach affects over 450,000 students
SWGs that support 3rd party external DNS resolver
Sub:jugation - Hijacking Cloud Identities by Recycling Namespaces in Global OIDC Issuers
Chrome extensions with 10M+ installations are actively vulnerable to UXSS & UXSG
Cybersecurity researchers aren't happy about the guardrails on Anthropic's Fable | TechCrunch
DIY pwnagotchi-like device on esp32
Flipper Blackhat + Bjorn
Do you think AI is making hacking easier or harder
What can i do left? PSN
Proxmark5 campaign ending in less than 18 hours.
How to bypass speed queen coin slot for washer and dryer
Self-hosting stuff for when things get ugly
Malware Includes Taboo In Text To Prevent LLM Analysis
added Mac support for my corporate hacking game, demo on Steam
Catfished
Reverse engineered BLE protocol of a $7 generic Chinese smart ring from Temu, and built an iOS app around it
[Reverse-Engineering] Skeet CS:GO source code (Gamesense)
[Reverse-Engineering] Skeet CS:GO source code (Gamesense)
Giulio Zausa's MMO-CHIP Makes Reverse Engineering Old Silicon Chips a Multiplayer Game
I built 99 adversarially malformed PE files to test tool robustness - hereās what happened
Drive Firmware Security - Phison S11
IDA 9.4 Beta | Hex-Rays Docs
Trane Tracer HVAC cybersecurity issues
š Release PyMemoryEditor v2.0 ā read, write and scan the memory of any running process, in pure Python (Windows, Linux & macOS)
I reverse engineered Lofree Hypace mouse firmware flashing protocol to bypass their official web based configuration on MacOS.
US charges suspected Russian hacker with facilitating cyber campaign
Hawkish GOP lawmaker Don Bacon says he was hacked by Russia
Oops, I Weaponized the Database: Abusing AI Features in SQL Server 2025
GreatXML: GreatXML bitlocker bypass vulnerability
GreatXML a bitlocker that seems to only work if you ever had Defender Offline Scan
I found 23 Chrome extensions hijacking 758,000 users' searches for affiliate revenue
[Op Report] From SSA Phish to AdaptixC2: A Multi-RAT Intrusion
GhostTrace ā CLI forensic scanner for Windows: 22 modules, MITRE ATT&CK mapped, read-only by default
Miasma-style supply chain attacks
On affected platforms running Arista EOS where a tunnel decapsulation configurationāsuch as VXLAN (Virtual Extensible LAN), decap-groups, or a GRE (Generic Routing Encapsulation) tunnel interfaceāis present, the switch will incorrectly decapsulate and forward other unexpected tunneled packet
I built 99 adversarially malformed PE files to test tool robustness - hereās what happened
ClickFix attack in the wild ā fake Cloudflare CAPTCHA delivering obfuscated PowerShell dropper
WordPress malware in official WooCommerce theme (Kiosko): hidden admin users and corrupted sitemap
Inside the DPRK-Linked Backdoor Loitering in the VS Code Marketplace
Fake Interview deploys stealthy cross platform (macOS/Windows) through npm package install in take home assessment
73 Microsoft GitHub repositories impacted by Miasma malware
Unauthorized Onlyfans Payment
Building A Malware Lab From Scratch Part 2!
Detecting npm Native Addon Malware: node-gyp Abuse
Microsoft Warns of GPU Cryptojacking Campaign Spread Through AI Chatbot Links
Microsoft Build 2026: Building agentic apps with Microsoft Fabric and Microsoft Databases
Microsoft Build 2026 highlights advancements in app development with Microsoft Fabric and Microsoft Databases, emphasizing a unified data and AI platform.
Azure IaaS: Defense in depth built on secure-by-design principles
Explore how Azure IaaS uses defense in depth and secure-by-design principles to deliver layered, scalable cloud security across compute, network, and data.
Enforcing trust and transparency: Open-sourcing the Azure Integrated HSM
Learn how Microsoft Azure Integrated HSM delivers hardwareāenforced key protection in the cloud, combining FIPS Level 3 assurances with transparency and openāsource collaboration.
Azure IaaS: Keep critical applications running with built-in resiliency at scale
Learn how Azure IaaS helps organizations start from a resilient platform foundation with availability, continuity, and recovery capabilities.
Azure IaaS: Explore new resources for building a stronger, more efficient infrastructure
Learn how Azure IaaS helps you modernize infrastructure, improve performance and resilience, optimize costs, and prepare for AI workloads. Read more.
Azure reliability, resiliency, and recoverability: Build continuity by design
Learn how Azure reliability, resiliency, and recovery capabilities work together to improve cloud continuity. Read more.
Defending Against China-Nexus Covert Networks of Compromised Devices
Iranian-Affiliated Cyber Actors Exploit Programmable Logic Controllers Across US Critical Infrastructure
U.S. organizations should review the TTPs and IOCs in this advisory for indications of current or historical activity on their networks, and apply the
Business Fraud at Network Scale: What the $3.5B Medicare Hospice Crisis Reveals About Know Your Business
What is Customer Due Diligence (CDD)
Why Legacy Identity Verification Canāt Stop AI-Enabled Fraud
AML, KYC and Identity Verification in Australia
When Fraud Becomes Background Noise: The Industrialization of Digital Deception
The Efficiency Era of KYC: Reverification and Reusable Identity Take Center Stage
The End of Static KYB: Business Identity in Constant Motion
Know Your Agent: The Next Chapter in Digital Trust
When Rules Move Faster Than Readiness: Regulatory Adaptability as a Competitive Advantage
Digital Identity Trends 2026: AI Fraud, Compliance, and Orchestration
AI in Tax Season: Risks, Scams, and How to Protect Your Data
Tax Season Scams to Watch For This Year
Beware of Misleading Tax Advice on Social Media
Each year the IRS educates taxpayers on the most trending fraud schemes that could deceive individuals and businesses during tax season. In late 2024, The IRS took to warning theā¦
Scammers Up Their Game With AI
Learn how to spot the threats and protect yourself from scammers using AI for phishing and deepfakes with smart security practices.
The Essential Guide to Safeguarding Your Online Passwords
Protect your personal and business data with strong passwords, two-factor authentication, and smart cybersecurity practices.
Beware: Tax Season is Scam Season
Tax season is also prime time for tax scams. To safeguard your personal information, consider these key points: Communication methods The IRS initiates contact primarily through mā¦
Stop Scams: Fraud Prevention Starts with Your Employees
You can be as proactive and protective as possible when it comes to cyber security for your business, but thereās one vulnerability you cannot eliminate: human error. In fact, staā¦
āTis the Season for Holiday Shopping Scams
The holidays are typically the time of year for gifting presents to friends and family or donations to charity. Unfortunately, not-so-jolly fraudsters take advantage of this generā¦
IRS Issues āDirty Dozenā Fraud Warnings
Each year, the IRS releases a āDirty Dozenā series to highlight the most common fraud schemes taxpayers should be aware of.
IRS Identity Theft Season Begins Now
Each year thieves try to steal billions in federal withholdings by stealing your identity. As the IRS focuses more attention on this quickly growing problem, now is the time of yeā¦
How FIN6 Exfiltrates Files Over FTP
Emulating FIN6 - Active Directory Enumeration Made EASY
The SECRET to Embedding Metasploit Payloads in VBA Macros
Offensive VBA 0x4 - Reverse Shell Macro with Powercat
Offensive VBA 0x3 - Developing PowerShell Droppers
Offensive VBA 0x2 - Program & Command Execution
Offensive VBA 0x1 - Your First Macro
Emulating FIN6 - Gaining Initial Access (Office Word Macro)
FIN6 Adversary Emulation Plan (TTPs & Tooling)
Developing An Adversary Emulation Plan
Student Loan Breach Exposes 2.5M Records
2.5 million people were affected, in a breach that could spell more trouble down the line.
Watering Hole Attacks Push ScanBox Keylogger
Researchers uncover a watering hole attack likely carried out by APT TA423, which attempts to plant the ScanBox JavaScript-based reconnaissance tool.
Tentacles of ā0ktapusā Threat Group Victimize 130 Firms
Over 130 companies tangled in sprawling phishing campaign that spoofed a multi-factor authentication system.
Ransomware Attacks are on the Rise
Lockbit is by far this summerās most prolific ransomware group, trailed by two offshoots of the Conti group.
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Tens of thousands of cameras have failed to patch a critical, 11-month-old CVE, leaving thousands of organizations exposed.
Twitter Whistleblower Complaint: The TL;DR Version
Twitter is blasted for security and privacy lapses by the companyās former head of security who alleges the social media giantās actions amount to a national security risk.
Firewall Bug Under Active Attack Triggers CISA Warning
CISA is warning that Palo Alto Networksā PAN-OS is under active attack and needs to be patched ASAP.
Fake Reservation Links Prey on Weary Travelers
Fake travel reservations are exacting more pain from the travel weary, already dealing with the misery of canceled flights and overbooked hotels.
iPhone Users Urged to Update to Patch 2 Zero-Days
Separate fixes to macOS and iOS patch respective flaws in the kernel and WebKit that can allow threat actors to take over devices and are under attack.
Google Patches Chromeās Fifth Zero-Day of the Year
An insufficient validation input flaw, one of 11 patched in an update this week, could allow for arbitrary code execution and is under active attack.
No matching sources found.