WHATS Kazakhstan-linked hackers used AI agent to spy on Central Asian governments
The Record from Recorded Future News ·
WHATS
THE HAX?
Top story
Also in coverage
Microsoft: Recent Windows updates cause SQL Server performance issues
BleepingComputer ·
AI found Linux kernel bugs that remained undetected for decades
CSO Online ·
Google Cloud Warns Three AMD Turin CPU Flaws Could Leak Data Across Processes in VMs
The Hacker News ·
Article feed
60 sources ↓Kazakhstan-linked hackers used AI agent to spy on Central Asian governments
Iran-backed network directed London attacks over FaceTime, US prosecutors say
Poland shuts down government services platform ePUAP following cyberattack
Britain, France set out first guidelines for commercial hacking firms
Microsoft: Recent Windows updates cause SQL Server performance issues
Microsoft confirms Windows security updates installation issues
Hackers plant GSocket on Linux servers for persistent access
Baker Tilly notifies clients of data breach at third-party provider
AI found Linux kernel bugs that remained undetected for decades
The developer laptop just became production. Now what?
Hackers stole AI credentials to get $740,000 in free compute; Railway picked up the bill
Rewriting less than 10 neurons in an LLM can turn it into a sleeper backdoor
Google Cloud Warns Three AMD Turin CPU Flaws Could Leak Data Across Processes in VMs
Webinar: See How Identity Blind Spots Put Your SOC at Risk and How to Close Them
New N-central Exploits Work Against Patched Servers, Enable Root RCE and Windows SYSTEM Access
Another Way Police Are Locating People from Their Smartphones
Three People Arrested for AI-Enhanced Impersonation Fraud
New OpenSSH Vulnerability
Exploit Attempts for GPUStack Authentication Bypass (CVE-2026-102895), (Thu, Nov 12th)
ISC Stormcast For Thursday, November 12th, 2026 https://isc.sans.edu/podcastdetail/10176, (Thu, Nov 12th)
Microsoft Patch Tuesday November 2026, (Tue, Nov 10th)
Notion Customer Data Compromised in Fireworks AI Hack
Hackers Deploy Malware in Fresh ScreenConnect Campaign
Hackers Target N-central Zero-Days as N-able Rushes Patches
Microsoft Entra adds a seven-day safeguard against irreversible identity deletion
Stolen Claude API keys can turn Claude Code into a remote-controlled implant
Photos: IRISSCON 2026 cybercrime conference
Inside an AI Attack Against a US Retailer
Chinese AI Project Scouts Spies in Taiwan Chip Industry
Japan Pushes Emergency Funding for Cybersecurity as AI-Assisted Breaches Rise
Certified for what? How to read a vendor’s ISO 27001 certificate
MDR vs SOC: How to choose the right option for your organisation
The best due diligence on a vendor is who they’ve worked with
Security Teams Must Shift from Patching to Mitigation in the AI Era
NCSC Launches Cyber Adversary Testing to Boost Resilience
Maersk Reveals Data Breach as Extortion Group Demands $5m
Transcending the trust boundaries: how a cloud pentest works
Citrus Ransomware: VLESS for traffic, Sn00py for encryption, and LLMs lending a hand
IT threat evolution in Q3 2026. Non-mobile statistics
42% of Scam Victims Who Report to Banks Recover Every Dollar
How Banks Can Spot Scams That Pass Authentication
Fraud Costs Financial Institutions More Than Money
After 7-months, Glasswing Overwelms Maintainers with Underwhelming Findings | Blog
If you had to keep only 10 detections tomorrow, what signals make the cut?
Windows.Detection.HttpSysListeners: Lists HTTP.sys request queues with their registered URLs and owning processes: easy to triage version of netsh http show servicestate view=requestq verbose=yes
Poland takes its national e-government platform offline after a cyberattack
AI Pentest Tool AntiFox Abused To Steal AWS Credentials
WhiteArmor Demands $5 Million from Maersk, Claims Theft of 100GB of Data
Veterans Day Cybersecurity Livestream - Carlo Anez Mazurco
Why Your Company Needs an AI Policy (Ask a CISO)
Are CTF Platforms Useful? (Ask a CISO)
Active ScreenConnect attacks breach MSPs, impact dozens of organizations
[Vorfallsbericht] Nextcloud LXC-Kompromittierung durch RichDocumentsCode (RCE) – Erkenntnisse und Behebung
binkeep: check a suspicious file without uploading it anywhere
History of Password Cracking
Hide and Stream: Ambient Aircraft-DopplerGeolocation of Live Audio, and a Defense
Qlik Sense Servers Hit With PowerShell Reverse Shells; Attacker Server Holds ActiveMQ and Veeam Exploits
Smashing Security podcast #492: How hackers turned Russian cars into pumpkins
Iranian hackers turned up the heat on French supermarket freezers, says France
Smashing Security podcast #491: How AI agents are spooking the banks
The global socket: how threat actors are weaponizing GSocket for stealthy C2
Lessons from 59 Linux Kernel Bug Reports
Detecting sleeper agents hiding in AI model neurons
Vanderbilt restores systems after cyberattack as hackers claim data theft
Remus malware claims Gmail access even after you change your password
Muse sleep band users weren’t told their brain data was training AI
Who Runs the Ransomware Group Qilin?
Microsoft Fixes Nearly 1,100 Security Vulnerabilities
Want to Rent an Internet Address at the White House?
He Let Go of the Wheel in Busy Traffic
Ban AI, Lose Google SEARCH?
He Invented the USB Rubber Ducky to Fix Printers!
News alert: TENEX.ai previews three new security tools built from a live 26,000-agent AI attack test
LW ROUNDTABLE: Binance heist shows AI multiplies trust chains while handoffs go unguarded
News alert: One Identity updates Safeguard to strengthen privileged access management
i wired my toilet to a Raspberry Pi
you need to use Herdr RIGHT NOW!!
this WiFi GPU is wild.....
CVE-2026-105544 .NET Elevation of Privilege Vulnerability
CVE-2026-109475 .NET Denial of Service Vulnerability
CVE-2026-109476 ASP.NET Core Information Disclosure Vulnerability
Google DeepMind just mathematically verified key parts of Signal
Grok Build coding agent leaks oodles of confidential info, some belonging to SpaceXSI
Vulnerability that lets hackers SSH into Linux devices is under active exploitation
How to Navigating Continuous Cyber Warfare: Panel Discussion
Is Iran Behind the Recent String of Refrigerator Cyberattacks?
What the Midterm Results Could Mean for US Cybersecurity Policy
reverse-engineered Dr. Driving and brought it to the browser 💀
GitHub - IcyModz420/nfsu2-network-rce: NFS Underground 2 — Network Remote Code Execution (two heap overflow RCE vectors, CVSS 9.8)
My Linux app changed the DPI on my mouse, but the LED kept the old color. The firmware only repaints on one specific report.
AI Is Both Target and Tool for Threat Actors
DoppelCart Fraud Network Grows to More Than 250,000 Domains
GhostFrame: A new ESXi Implant Linked to Settra Ransomware
CISA director pick already drawing concern from Hill Dems over Palantir connection
The US wants its quantum lead to turn into factories and supply chains
Microsoft fixes over 1,000 vulnerabilities in November Patch Tuesday
Cisco Identity Services Engine Authorization Bypass Vulnerabilities
Cisco Informational for Emergency Distrust of eMudhra Root and Intermediate Certificate Authorities
Vulnerabilities in Node.js and Brotli Affecting Cisco Products: October 2026
Site Traffic Recommendations: 4 Steps to Reduce Agentic Risk
AI Agent Order Data: Agentic Commerce on Forter’s Network
How to Stop Holiday Return Abuse and Reseller Fraud
Chinese AI Tried to Phone Home. Nobody Knows Why | Threat Wire
Introducing Theme Studio Pro
A 12-Year-Old Security Flaw Was Just the Beginning | Threat Wire
Who Hacked Fridges In France?
PDF decryption script
Silverseal: Silverseal is an open-source Linux bootkit and rootkit framework and the first public ARM64 bootkit for Linux distros
Payload Podcast 013 - Catchup
ClickFix Cache Trick
Taking your PHP Website Offline
CISA Adds Six Known Exploited Vulnerabilities to Catalog
CISA Adds Four Known Exploited Vulnerabilities to Catalog
CISA Adds One Known Exploited Vulnerability to Catalog
Exchange for breakfast: Turla’s Cereal tricks are not for kids
SlippyNunchucks hijacks Sogou Input Method’s brand promotion mechanism to distribute malware
Security Flaws Across UK Government Sites Exposed ‘God-Tier’ Information
A New AI Tool From Google DeepMind Proved the Signal Protocol Is Secure
DHS Has Used This Controversial Investigative Tool 185,000 Times Since Trump Took Office
I Almost Missed This Kubernetes Vulnerability
Meta paid a $300,000 bounty for this
OpenAI paid $5000 for this account takeover vulnerability that could also leak your private chats
Troubleshooting .json file in Microsoft Defender Workbook
Urgent HELP my telegram got hacked
Getting tired of the nepotism in the industry - U.S
HackTheBox - Garfield
HackTheBox - MakeSense
HackTheBox - Checkpoint
ZDI-CAN-34407: Foxit
DEF CON 34 - Main - How Dealer Installed AntiTheft System Exposes 1M+ Cars - A Schulman, J Yu, Y Wei
DEF CON 34 - Main - Bird Hunting Season The Final Flight - Jon Gaines
DEF CON 34 - BugBounty - How Cache Poisoning Led to Critical Acct Takeover in TikTok's Web - G Chong
How an Image Causes a Heap Buffer Overflow // libheif
The $2,000 php2shell Challenge Was Unexploitable
php situation 24h later
Fromage-Gate: Old-School Hacking Tactics vs. French Supermarkets
Understanding the Blast Radius of a Cryptographic Change
Eliminating the Blind Spots Between Humans, Machines, and AI
Is curl Getting Harder to Hack? Daniel Stenberg on AI vs. Decades of Hardening
In Singapore for a few days hanging out with hackers and having a good time.
Your AI hackbot has found another 100+ vulnerabilities. Who fixes them? And how? ft Erlend
Proofpoint Introduces Flex to Help Customers Invest with Confidence as Security Needs Evolve
Proofpoint Joins Microsoft Integrated Cloud Email Security (ICES) Ecosystem
Proofpoint CEO Sumit Dhawan On ‘Market-Changing’ $6.3B Varonis Deal, IPO Goal
The AI advantage your company can keep
Bringing CRM into the flow of work and agents into business process for sales and service teams
Introducing the new Copilot with Home, Code and Autopilot
Does your fraud risk assessment measure up when a financial crime occurs?
Fraud Risk Assessment: A New Model and New Approach
Assessing the Strength of Your Fraud Controls
#StopRansomware: SafePay Ransomware
Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data
China-Based Artificial Intelligence Companies Conducting Industrial-Scale Distillation Campaigns Against U.S. AI Companies
Anthropic’s AI Reversal Is A Warning Shot For Agentic Defense
Agentic AI Is Changing Security Decisions: Why Accountability Must Be Designed, Not Assumed
A New OT Security Playbook for Connected Robots
eIDAS 2.0 and AMLR Updated Standards: What Should Regulated Businesses Do Next?
eIDAS 2.0 and AMLR Updated Standards: What Should Regulated Businesses Do Next?
Business Fraud at Network Scale: What the $3.5B Medicare Hospice Crisis Reveals About Know Your Business
AI Agents Can Be Secured. We Can Do It.
Why the Open Secure AI Alliance Matters: Open Frontier Models, Open Deployment Flexibility
Tracking Over 35,000 Fake Sites in the 2026 World Cup Scam Wave
Ransomware: A Continuing Threat for Small Businesses
AI in Tax Season: Risks, Scams, and How to Protect Your Data
Tax Season Scams to Watch For This Year
Why every payments team should be watching for ACH fraud
From the Edge to the Core: 9 Ways PKI Secures Your Network
How to Secure Your Email Server on an SMB Budget
Microsoft Build 2026: Building agentic apps with Microsoft Fabric and Microsoft Databases
Azure IaaS: Defense in depth built on secure-by-design principles
Enforcing trust and transparency: Open-sourcing the Azure Integrated HSM
How FIN6 Exfiltrates Files Over FTP
Emulating FIN6 - Active Directory Enumeration Made EASY
The SECRET to Embedding Metasploit Payloads in VBA Macros
Try another search or clear the filters.
Showing 180 of 1014 loaded entries. Search and all-headlines view include all available entries in this section. Browse the feed archive.