WHATS We are not ready for what AI has done to red teaming
CSO Online ·
WHATS
THE HAX?
Top story
Also in coverage
TeamViewer Flaw Could Let Malicious Hosts Take Over Support Technicians’ Machines
SecurityWeek ·
Binance hit by $6.3 billion theft in what could be the biggest crypto heist on record
Help Net Security ·
As Russia's Cyberwar Evolves, Belarus Steps Forward
darkreading ·
Article feed
60 sources ↓We are not ready for what AI has done to red teaming
Beyond deterministic worms: Preparing the SOC for reasoning adversaries
PHP2Shell plus Fragnesia: A dangerous new route from web server to root
A deep dive into China’s Volt Typhoon suggests it is preparing for an assault on infrastructure
Is curl Getting Harder to Hack? Daniel Stenberg on AI vs. Decades of Hardening
In Singapore for a few days hanging out with hackers and having a good time.
Your AI hackbot has found another 100+ vulnerabilities. Who fixes them? And how? ft Erlend
wood will keep you warm, once when chop, carry, staple and sort it, and once when you burn it.
TeamViewer Flaw Could Let Malicious Hosts Take Over Support Technicians’ Machines
$6 Billion Binance Hack Bears Hallmarks of North Korea’s TraderTraitor
When Risk Becomes Personal: What Security Leaders Can Learn From a Cancer Diagnosis
Google Touts Powerful Cybersecurity Capabilities in Gemini 4 Carbon Model
Binance hit by $6.3 billion theft in what could be the biggest crypto heist on record
Fake IT help desk callers got by on little more than names and email addresses
What exactly is ISOC? And what does it mean for you?
Scammers rebuild fake shopping sites within hours of a takedown
As Russia's Cyberwar Evolves, Belarus Steps Forward
Anthropic-Themed Phishing Emails Bypass Top Security Tools
Rethinking Cybersecurity Awareness in the AI Era
Hackers Actively Exploit Highly Critical Drupal Commerce Core Authorization Bypass Flaw
CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEV
Binance Suffers Security Breach Affecting $6.3 Billion in Assets, Nearly $3 Billion Frozen
Hacker leaks data on more than 40,000 Homeland Security employees
Binance Investigates Suspicious Crypto Transfers Worth Up to $5.8 Billion
US Probes Suspected Hack Behind Military Base Freezer Failures
ISC Stormcast For Friday, October 30th, 2026 https://isc.sans.edu/podcastdetail/10158, (Fri, Oct 30th)
Deploying a Local Ghidra Server for Your Malware Analysis Lab, (Thu, Oct 29th)
ISC Stormcast For Thursday, October 29th, 2026 https://isc.sans.edu/podcastdetail/10156, (Thu, Oct 29th)
php2bitcoin x brotli2coin: live hacking stream
Every false positive we have shipped had the same cause
Stopping Remote Code Execution with Sandboxes, CVE-2026-115995: Rust Zip
Question
Security awareness training platforms that have worked well long term
A data center moratorium awaiting Hochul’s signature was the most-lobbied bill lasts summer
OpenAI doubles ChatGPT Pro usage limits after backlash over planned 50% cut
Binance probes potential $5.8 billion crypto-theft hack
Hugging Face malware campaign returns to hijack GPUs for crypto mining
FTC Takes Down 19 Fake FTC Sites in Impersonation Scam Crackdown
Raise Cuts Chargebacks 45% and Nearly Ends Manual Fraud Reviews
Fraudsters Leave Patterns, and AWS Wants AI to Follow Them
Polymarket's DebugBear script was swapped for a wallet drainer on 29 Oct
Looking for feedback on a knowledge-management app for incident response
How do you validate SIEM detection rules beyond checking whether they fire? I’m building an open-source SIEM and looking for blue-team feedback
Cisco Finesse Server-Side Request Forgery Vulnerability
Vulnerabilities in Node.js Affecting Cisco Products: October 2026
Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
Leaked DHS employee archive, Icepick, faces challenges to stay online
Officials seize domain of top bulletproof hosting provider Virtualine
Leak site publishes data on more than 41,000 DHS employees obtained by hacktivists
Limited reports of PHP bug exploitation emerge
GM settles with 36 states for selling driver data, agrees to $220 million fine and reforms
Federal bankruptcy courts contractor says no data stolen during cyber intrusion
Hack a Water Tower! & Two Big Announcements
AI Meets Minecraft
New AI Threats in 2026 #sponsored by @Snyksec
BYOD cyberattack diverts ambulances and cancels classes at University of New Mexico health center
Smashing Security podcast #490: How Jared Kushner’s iPhone was allegedly hacked twice
Hive ransomware affiliate jailed, years after FBI infiltrated the gang’s systems
IDC MarketScape names Microsoft a Leader in the 2026 Worldwide Modern Endpoint Security for Enterprises Vendor Assessment
Tracking AI adoption in North Korean threat actor tradecraft
The CISO’s evolving role: Protecting and defending in the agentic era
NIK C2 Malware Can Use Victims’ OpenAI Keys for AI Queries
CREST Urges Whole-Ecosystem Approach to Financial Cyber Resilience
Online Scam Volumes Double to Overtake Phishing
What Is Shady AI?
Can You Train AI on a Laptop?
How Police Can Track Your Phone
CVE-2026-88078 Microsoft Edge (Chromium-based) Spoofing Vulnerability
CVE-2026-19175 Use after free in Payments
CVE-2026-57083 Windows Media Photo Codec Information Disclosure Vulnerability
How to Stop Holiday Return Abuse and Reseller Fraud
Holiday Shopping Gets an Agentic AI Twist
AIアシスタントはすでにあなたのサイトで購入を行っている：Forterのデータが示す実態
Turning the Valve - Exploiting RCE and LPE in the Steam Platform
Tool for scanning through million of text files easily
A researcher used an AI agent to reverse-engineer a Brother printer's firmware and found hidden Telnet debug modes
42M Records Exposed by Government Technology Platform
Hackers Target US Federal Election Commission
Microsoft Releases Emergency .NET Patches
Massive leak exposes 41,000 DHS workers and undercover ICE agents
Code-execution flaw in UEFI firmware affects most servers on planet Earth
Knicks sent employees fake offer of championship rings in phishing test: Report
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA Adds Two Known Exploited Vulnerabilities to Catalog
Siemens Mendix SAML Module
Hitachi Energy TRO600 series products
The best due diligence on a vendor is who they’ve worked with
Heimdal named Advanced Persistent Threat Solution of the Year at the Computing Security Awards
Data Breach Statistics That Matter in 2026
SHARED INTEL Q&A: 82% of campaign domains expose donors to email fraud before midterms
SHARED INTEL Q&A: PHP2Shell is no Log4Shell — open-source flaw is more warning than wildfire
MY TAKE: OktoberTech reveals a hardening AI foundation — but no one yet governing the agents
A Hacker Targeted High-Stakes Poker Players With Malware That Exposed Their Cards
Bluesky Is Blocking Links to a Major Leak of DHS Employee Records
Most Servers on the Planet Are Vulnerable to This Firmware Code-Execution Flaw
Unknown APT uses NetamLoader to attack a Win10 OS customized for governments in Asia
Millions of security cameras at risk: DoS vulnerability in Intelbras devices
An insecure neighbor: how a vulnerability chain led to an isolation bypass in cloud infrastructure
Amatera: How the prolific infostealer works and spreads
Lessons from Cybersecurity Black Week
Real Folks of Cyber | Thomas Rogers | DITL
Is AI Security a Real Career?
What Does a GRC Cybersecurity Professional Do?
Prediction Markets Emerge as a New Vertical for Traffer Teams
Behind Japan’s Warnings of a Cyber Crisis
PHP2Shell Exploitation: Two Critical PHP Flaws Explained
Cloudflare is offering a $3,000 bounty for any unique PHO2SHELL bypass.
My $250 AI Hackbot Ran 24/7 on a VPS and Missed This
HackerOne Limited Me to 3 Reports After 12 Years
Banks are blocking AI agents from customer accounts
Chrome and Firefox updates fix serious security flaws. Install them now
Five election scams to watch out for
Studying Fraudulent North Korean IT Workers
Hiding Capabilities in AI Models
Bias in Qwen3-Coder Model
Proofpoint Introduces Flex to Help Customers Invest with Confidence as Security Needs Evolve
Proofpoint Joins Microsoft Integrated Cloud Email Security (ICES) Ecosystem
Proofpoint CEO Sumit Dhawan On ‘Market-Changing’ $6.3B Varonis Deal, IPO Goal
JNISleuth-MCP: Automated Android JNI RegisterNatives recovery, ARM64 OLLVM (CSEL + BR X8) deobfuscator, and Ghidra / IDA Pro 9.0 bridge
Does any one Reverse Engineered IDM ( Internet Download Manager) ??
iCloudKit Extractor: seven months from an ADP dead end to a public toolkit
ZDI-CAN-34288: Adobe
why EVERYONE is copying this
The #1 Danger Isn't Roblox
0day Hacks NetworkChuck (OSINT)
The AI advantage your company can keep
Bringing CRM into the flow of work and agents into business process for sales and service teams
Introducing the new Copilot with Home, Code and Autopilot
The $2,000 php2shell Challenge Was Unexploitable
php situation 24h later
The race to the first exploit // php2shell
🍍📟 Theme Hacking Tip - WiFi Pineapple Pager #pentesting #hacking #cybersecurity
BOTS WIPED OUT? | Threat Wire
🍍📟 Don't dox yourself: Censor Mode - WiFi Pineapple Pager #pentesting #hacking #cybersecurity
Indirect Syscall Rust Loader Analysis (Stream)
Malicious AGENTS.md file in Downloads folder hijacks AI coding agents
Vivisection of Hermes: An Active Russian-Market Malware-as-a-Service Platform and Its PyMapper Distribution Chain
HackTheBox - Checkpoint
HackTheBox - Eloquia
HackTheBox - DevHub
Widespread PHP Flaw May Cause Many Site Outages Today
Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site
U.K. Sanctions Cryptomus for RU Money Laundering
Does your fraud risk assessment measure up when a financial crime occurs?
Fraud Risk Assessment: A New Model and New Approach
Assessing the Strength of Your Fraud Controls
Black Hat Stories | Island.io
Black Hat Europe 2026 | Hear From Our Sponsors
Black Hat Stories | First Time Exhibitor
#StopRansomware: SafePay Ransomware
Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data
China-Based Artificial Intelligence Companies Conducting Industrial-Scale Distillation Campaigns Against U.S. AI Companies
Anthropic’s AI Reversal Is A Warning Shot For Agentic Defense
Agentic AI Is Changing Security Decisions: Why Accountability Must Be Designed, Not Assumed
A New OT Security Playbook for Connected Robots
eIDAS 2.0 and AMLR Updated Standards: What Should Regulated Businesses Do Next?
Business Fraud at Network Scale: What the $3.5B Medicare Hospice Crisis Reveals About Know Your Business
DCSG1 - Pwn2Own Level Break of a Printer - SungJun Park, WonBeen Im
DCSG1 - Augmenting Apple's Source Code and OS Logs with AI Agents -Olivia Gallucci
DCSG1 - Actual OT Cyber Security - Dillon Lee
AI Agents Can Be Secured. We Can Do It.
Why the Open Secure AI Alliance Matters: Open Frontier Models, Open Deployment Flexibility
Tracking Over 35,000 Fake Sites in the 2026 World Cup Scam Wave
Ransomware: A Continuing Threat for Small Businesses
AI in Tax Season: Risks, Scams, and How to Protect Your Data
Tax Season Scams to Watch For This Year
Why every payments team should be watching for ACH fraud
From the Edge to the Core: 9 Ways PKI Secures Your Network
How to Secure Your Email Server on an SMB Budget
Microsoft Build 2026: Building agentic apps with Microsoft Fabric and Microsoft Databases
Azure IaaS: Defense in depth built on secure-by-design principles
Enforcing trust and transparency: Open-sourcing the Azure Integrated HSM
How FIN6 Exfiltrates Files Over FTP
Emulating FIN6 - Active Directory Enumeration Made EASY
The SECRET to Embedding Metasploit Payloads in VBA Macros
Try another search or clear the filters.
Showing 180 of 993 loaded entries. Search and all-headlines view include all available entries in this section. Browse the feed archive.