Loading…

Whats The Hax?

Daily intelligence on threats, breaches, and defenders

What's New

Top 5 Across All Sources

  1. Name That Toon Contest

    darkreading · 1h ago
Latest
darkreadingName That Toon ContestcybersecurityToo Many Certs, Not Enough Experience — What’s the Best Next Step?SecurityWeekAnthropic Launches Claude Fable 5: Mythos-Class AI With Cybersecurity GuardrailsSecurity LatestAnthropic Offers Mythos Upgrade for Cyber Partners and a ‘Safe’ Version for the Rest of YouLatest newsAnthropic's new Claude Fable 5 is a nerfed Mythos with guardrails attachedcybersecurityAuthenticating ARP and NDPLatest newsThe best early Prime Day TV deals actually worth your time: Samsung, Sony, and moreSecurityWeekOpenSSL Patches High-Severity Vulnerability Found With AIcybersecurityDoes anyone use rule feeds in 2026?The Hacker NewsMicrosoft Restores Some GitHub Repos, Keeps Others Offline as Miasma Probe ContinuesLatest newsUS workers are the world's biggest AI skeptics - and it's not just about job lossFor [Blue|Purple] Teams in Cyber Defence[2606.07158] Synthetic APTs: the Collapse of TTP-Based AttributioncybersecurityBuilding a tactical Pelican case for my Flipper Zero + AIO setup. Looking for advanced tool and script recommendations!cybersecurityNeed a vm for practiceBleepingComputerXBOW tests Anthropic's Mythos Preview for offensive securitycybersecurityTips/Tricks to WFH as a SOC Analyst?cybersecurityCybersecurity statistics of the week (June 1st - June 7th)Latest newsAmazon Prime members can buy a car online now - and get a $1,500 gift cardDavid BombalDo YOU Need Antivirus in 2026?For [Blue|Purple] Teams in Cyber DefenceHades Cluster PyPI Worm Abuses Python Startup HooksdarkreadingName That Toon ContestcybersecurityToo Many Certs, Not Enough Experience — What’s the Best Next Step?SecurityWeekAnthropic Launches Claude Fable 5: Mythos-Class AI With Cybersecurity GuardrailsSecurity LatestAnthropic Offers Mythos Upgrade for Cyber Partners and a ‘Safe’ Version for the Rest of YouLatest newsAnthropic's new Claude Fable 5 is a nerfed Mythos with guardrails attachedcybersecurityAuthenticating ARP and NDPLatest newsThe best early Prime Day TV deals actually worth your time: Samsung, Sony, and moreSecurityWeekOpenSSL Patches High-Severity Vulnerability Found With AIcybersecurityDoes anyone use rule feeds in 2026?The Hacker NewsMicrosoft Restores Some GitHub Repos, Keeps Others Offline as Miasma Probe ContinuesLatest newsUS workers are the world's biggest AI skeptics - and it's not just about job lossFor [Blue|Purple] Teams in Cyber Defence[2606.07158] Synthetic APTs: the Collapse of TTP-Based AttributioncybersecurityBuilding a tactical Pelican case for my Flipper Zero + AIO setup. Looking for advanced tool and script recommendations!cybersecurityNeed a vm for practiceBleepingComputerXBOW tests Anthropic's Mythos Preview for offensive securitycybersecurityTips/Tricks to WFH as a SOC Analyst?cybersecurityCybersecurity statistics of the week (June 1st - June 7th)Latest newsAmazon Prime members can buy a car online now - and get a $1,500 gift cardDavid BombalDo YOU Need Antivirus in 2026?For [Blue|Purple] Teams in Cyber DefenceHades Cluster PyPI Worm Abuses Python Startup Hooks

By Source

Feeds organized so you can skim by site.

Density Sort
DA
darkreading
1h ago · 65 items
Name That Toon Contest 1h ago [An RX Global Event] Infosecurity Europe 7d ago Name That Toon: Mark of (Cybersecurity) Progress 10d ago Asia's Cyber Insurance Market Shows Signs of Life 11d ago With Complex Cloud Integrations, Small Errors Lead to Major Compromises 11d ago 'The Com' Cyberattacks Support Violence & Sexploitation 11d ago As Global Powers Explore Humanoid Robots, Cyber-Risk Looms 11d ago Dutch Raid Fails to Dent Russian Bulletproof Host 11d ago Agentic AI Isn't Risky; the Way Orgs Deploy It Is 12d ago Focus on Cyber Insurance: How Quantifying Risk Is Reshaping Security 12d ago
65 loaded
CY
cybersecurity
1h ago · 20 items
Too Many Certs, Not Enough Experience — What’s the Best Next Step? 1h ago Authenticating ARP and NDP 1h ago Does anyone use rule feeds in 2026? 1h ago Building a tactical Pelican case for my Flipper Zero + AIO setup. Looking for advanced tool and script recommendations! 1h ago Need a vm for practice 1h ago Tips/Tricks to WFH as a SOC Analyst? 1h ago Cybersecurity statistics of the week (June 1st - June 7th) 1h ago Where can GRC folks learn practical AppSec / DevSecOps without going full engineer? 1h ago University of Toronto proof-of-concept AI worm spread to 62% of a test network in 7 days using a free open-weight model 1h ago AI Blocklist - help 2h ago
20 loaded
SE
SecurityWeek
1h ago · 10 items
Anthropic Launches Claude Fable 5: Mythos-Class AI With Cybersecurity Guardrails 1h ago OpenSSL Patches High-Severity Vulnerability Found With AI 1h ago Claude Mythos Turns N-Days Into N-Hours With Rapid Exploit Creation 2h ago New Platform Uses Cryptographic Invisibility to Protect AI-Built Applications 4h ago SAP Patches Critical NetWeaver, Commerce Vulnerabilities 4h ago Over 100 NPM, PyPI Packages Hit in New Shai-Hulud Supply Chain Attacks 5h ago Will AI Kill the Bug Bounty Industry? 6h ago Check Point VPN Zero-Day Exploited in Qilin Ransomware Attacks 7h ago Google Patches 5th Chrome Zero-Day Exploited in 2026 11h ago A Security Raises $37 Million for Autonomous Offensive Security Platform 23h ago
SL
Security Latest
1h ago · 20 items
Anthropic Offers Mythos Upgrade for Cyber Partners and a ‘Safe’ Version for the Rest of You 1h ago Meta Deletes Face-Recognition System From Its Smart Glasses App After WIRED Report 23h ago All the Ways Europe Is Ditching American Technology 1d ago Crypto-Funded Chinese Peptide Labs Are Booming 3d ago Meta Silently Added Face-Recognition Code for Its Smart Glasses to Millions of Phones 4d ago xAI Asks Court to Strip Alleged Grok Deepfake Nudes Victims of Anonymity 5d ago Android Is Fighting Phone Scams With a New Feature to Prove Who’s Calling 6d ago The Manhattan Institute Helped Kill DEI. Now It’s Coming for Protests 7d ago The Romance Scammer Who Made a Small Fortune Posing as a WWE Superstar 8d ago Websites Can Now Spy on You Through Your Hard Drive 8d ago
20 loaded
LN
Latest news
1h ago · 20 items
Anthropic's new Claude Fable 5 is a nerfed Mythos with guardrails attached 1h ago Claude Fable 5 brings Mythos-class AI coding power to general users, but with cybersecurity guardrails, fallback models, and pricing that could make developers think twice. The best early Prime Day TV deals actually worth your time: Samsung, Sony, and more 1h ago Amazon's Prime Day sale is just two weeks away, but you can already save thousands on TVs from top brands we've tested. US workers are the world's biggest AI skeptics - and it's not just about job loss 1h ago More than half of US desk workers consider themselves AI skeptics, while emerging economies trust AI more, according to recent studies. Amazon Prime members can buy a car online now - and get a $1,500 gift card 1h ago Amazon is now partnering with local dealerships to help you buy, sell, or lease your car - and Prime members can get a big gift card when they do. This silent Android feature scans your photos for 'sensitive content' - how to uninstall it 1h ago Google didn't say much about Android System SafetyCore before it suddenly appeared on phones. Fortunately, you can disable it. I tested iOS 27's new AI photo editing tools as a skeptic - and the results surprised me 1h ago The new developer beta of iOS 27 offers three AI-powered skills to tweak and enhance your photos. Are they worth using? RakuOS fixes the one thing that annoys me most about immutable Linux distros 1h ago Immutable Linux is the future of OS security, but the current distributions do have one particular limitation that RakuOS has overcome. What you give up when you put on a smartwatch or ring 2h ago Health wearables are constantly collecting your personal information, but who owns that data, and what does it mean for your privacy? Wearables produce huge amounts of health data - and doctors are struggling to keep up 2h ago Patients have never had more data about their health, but much of it is unusable. Here's why. I'm using these 7 Linux wellness apps to take better care of myself in 2026 2h ago If you're on a mission to improve your health and wellness, and Linux is your OS of choice, there are plenty of apps to help you on your journey, and these are my favorites.
20 loaded
TH
The Hacker News
1h ago · 20 items
Microsoft Restores Some GitHub Repos, Keeps Others Offline as Miasma Probe Continues 1h ago WinRAR Flaw Exploited by Russia-Aligned Groups to Deploy Stealers in Ukraine 4h ago Researchers Build Self-Replicating AI Worm That Operates Entirely on Local, Open-Weight Models 5h ago Chrome V8 Zero-Day CVE-2026-11645 Exploited in the Wild - Patch Now 5h ago The Hidden Security Risk in Modern Networks: The Work Between Tools 5h ago New FROST Attack Lets Websites Track What Sites and Apps You Open via SSD Timing 7h ago Hades PyPI Attack: 19 Packages Poisoned to Auto-Run Bun Credential Stealer 7h ago LiteLLM Flaw CVE-2026-42271 Exploited in the Wild, Chains to Unauthenticated RCE 10h ago One-Character Linux Kernel Flaw Enables Local Root Access, Exploits Now Public 20h ago Meta Blocks NSO Group's New WhatsApp Phishing Attack, Files Contempt Order 23h ago
20 loaded
FB
[2606.07158] Synthetic APTs: the Collapse of TTP-Based Attribution 1h ago Hades Cluster PyPI Worm Abuses Python Startup Hooks 1h ago Entra Agent ID from a Security Perspective 3h ago Understanding modern Chinese cyber operations means shifting from ‘APT’ to composite responsibility 4h ago What are the best risk-based vulnerability management tools for tracking active exploitation in 2026? 10h ago QuasarNix: Reverse Shell Detection with Machine Learning 10h ago Incident de sécurité sur Tchap : la DINUM sécurise la plateforme et informe les usagers après une intrusion maîtrisée - Security incident on Tchap: DINUM secures the platform and informs users after a controlled intrusion 12h ago Threat Brief: Active Exploitation of PAN-OS CVE-2026-0257 12h ago Don't Fear the Repo: UNK_DeadDrop Phishing Campaign Targets Developers to Steal Cryptocurrency 12h ago UK Cybercrime Journal: British Universities Struck by ShinyHunters Before Exam Season 13h ago
20 loaded
BL
BleepingComputer
1h ago · 15 items
XBOW tests Anthropic's Mythos Preview for offensive security 1h ago Anthropic's Mythos Preview was highly effective at finding vulnerability candidates, especially when analyzing source code. XBOW explores how the model performed across exploit discovery, reverse engineering, and live-site validation. GitHub disables Microsoft repos pushing password-stealing malware 1h ago Microsoft removed 73 repositories across its Azure, microsoft, Azure-Samples, and MicrosoftDocs organizations on GitHub, disrupting continuous integration pipelines. New Veeam vulnerability exposes backup servers to RCE attacks 2h ago Veeam has released security updates to patch a critical Backup & Replication security flaw that can be exploited to gain remote code execution (RCE) on domain-joined backup servers. French govt messaging service breached in account hijacking attack 6h ago DINUM, the digital affairs directorate of the French government, warned that hackers used a hijacked user account to breach Tchap, the French government's encrypted messaging platform. CISA gives feds 3 days to patch Check Point VPN bug exploited as zero-day 8h ago CISA has ordered U.S. government agencies to secure their Check Point Remote Access VPN and Mobile Access deployments against a critical vulnerability exploited in zero-day attacks by Qilin ransomware affiliates. Google patches new Chrome zero-day flaw exploited in the wild 10h ago Google has released emergency updates to patch another Chrome zero-day vulnerability that has been exploited in the wild, the fifth such flaw patched since the start of the year. NFCShare Android malware spreads via fake banking app updates on GitHub 18h ago New variants of the NFCShare Android malware are being distributed as fake updates for legitimate banking apps hosted on GitHub. SoFi confirms third-party data breach at Hong Kong subsidiary 19h ago SoFi Hong Kong is warning that it suffered a data breach after hackers gained access to a database at a third-party vendor containing customer information. New Apple feature automatically changes your compromised passwords 20h ago At WWDC 26, Apple announced an Apple Intelligence-powered feature that can automatically fix weak and compromised passwords. This works in Safari, and it's rolling out with iOS 27. New Shai-Hulud attack trojanizes 19 science-focused PyPI packages 20h ago Hackers compromised 19 packages on the PyPI, collectively downloaded hundreds of thousands of times, in a new Shai-Hulud supply-chain attack that delivered malware designed to steal developer secrets.
15 loaded
DB
David Bombal
1h ago · 15 items
Do YOU Need Antivirus in 2026? 1h ago Cisco's first Quantum Switch: What it means for you 3h ago WARNING: Copilot prompt injection 23h ago New CCNA Exam: Stop Memorizing and Start Labbing 2d ago Scan Your Home Network for Hidden Devices in 2026 4d ago Fix your WiFi speeds (find devices interfering) 5d ago How Cisco Is Using AI to Fix Networks 5d ago CCNA 2.0 REVEALED for 2027 5d ago Top 3 cyber attacks in 2026: What you need to know 6d ago 102.4 Tbps Liquid Cooled Switch 7d ago
15 loaded
SA
Security - Ars Technica
1h ago · 20 items
High-severity vulnerability in Linux caused by a single errant character 1h ago For the 2nd time in weeks, Microsoft packages laced with credential stealer 22h ago How a USB-connected speaker can infect a PC without ever being touched 3d ago Dashlane explains how attackers managed to download encrypted password vaults 4d ago Can't make sense of Dashlane's vault theft notification? You're not alone. 5d ago Hackers duped Meta AI support chatbot to steal celebrity Instagram accounts 7d ago Dozens of Red Hat packages backdoored through its official NPM channel 7d ago Botnet of more than 17 million devices dismantled 10d ago Fed up with vibe coders, dev sneaks data-nuking prompt injection into their code 11d ago Websites have a new way to spy on visitors: Analyzing their SSD activity 12d ago
20 loaded
CS
Cisco Security Advisory
2h ago · 20 items
Cisco Catalyst SD-WAN Controller, Catalyst SD-WAN Manager, and Catalyst SD-WAN Validator Authenticated Privilege Escalation Vulnerability 2h ago A vulnerability in the CLI of Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, and Cisco Catalyst SD-WAN Validator, formerly SD-WAN vBond, could allow an authenticated, local ... Cisco Webex Meetings Cross-Site Scripting Vulnerability 6d ago A vulnerability in the web-based user interface of Cisco Webex Meetings could have allowed an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. Cisco has addressed this vulnerability in the Webex Meetings serv... Cisco Unified Communications Manager Server-Side Request Forgery Vulnerability 6d ago A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to conduct server-side request forgery... Cisco Finesse Remote File Inclusion Vulnerability 6d ago A vulnerability in Cisco Finesse could allow an unauthenticated, remote attacker to load arbitrary files from remote locations into an active user session on an affected device, possibly leading to browser-based attacks. This vulnerability ... Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability 12d ago May 2026: This security advisory provides the details and fix information for a vulnerability that was discovered and fixed after the Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability was disclosed in February 2026. This ... Cisco Nexus 3000 and 9000 Series Switches Border Gateway Protocol Denial of Service Vulnerability 20d ago A vulnerability in the Border Gateway Protocol (BGP) enforce-first-as feature of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an unauthenticated, remote attacker to trigger BGP p... Cisco Secure Workload Unauthorized API Access Vulnerability 20d ago A vulnerability in the access validation of internal REST APIs of Cisco Secure Workload could allow an unauthenticated, remote attacker to access site resources with the privileges of the Site Admin role. This vulnerability is due to insuff... Cisco ThousandEyes Virtual Appliance Authenticated Remote Code Execution Vulnerability 20d ago A vulnerability in the SSL certificate handling of Cisco ThousandEyes Virtual Appliance could allow an authenticated, remote attacker to execute commands on the underlying operating system as the root user. This vulnerability is due to insu... Cisco ThousandEyes Enterprise Agent BrowserBot Command Injection Vulnerability 20d ago A vulnerability in the BrowserBot component of Cisco ThousandEyes Enterprise Agent could have allowed an authenticated, remote attacker to execute arbitrary commands on Agents on behalf of the BrowserBot synthetics orchestration process. Ci... Continued Evolution of Persistence Mechanism Against Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense 20d ago On April 23, 2026, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued an update to V1: Emergency Directive (ED) 25-03: Identify and Mitigate Potential Compromise of Cisco Devices related to Cisco Secure Firewall Adaptiv...
20 loaded
HN
Help Net Security
3h ago · 10 items
French government messaging platform breached through account hijacking 3h ago French authorities are investigating a Tchap breach after attackers used a compromised account to access public chat rooms. Elastic brings AI-driven incident investigation to Kubernetes and observability tools 3h ago Elastic launches AI-powered Kubernetes investigations that identify root causes and recommend fixes before SREs respond. Filigran launches XTM One to automate CTEM with AI agents 3h ago Filigran has unveiled XTM One, an AI-native orchestration layer that automates CTEM workflows across the XTM Platform. Rockwell Automation adds AI-powered security tools to SecureOT Suite 3h ago Rockwell Automation expands SecureOT with AI-powered assessments, managed services and secure remote access for OT security. LiteLLM vulnerability under active attack, CISA warns (CVE-2026-42271) 5h ago A command injection vulnerability (CVE-2026-42271) in BerryAI’s LiteLLM open-source AI gateway is being exploited by attackers. Google patches Chrome zero-day exploited in the wild (CVE-2026-11645) 5h ago Google has fixed 74 vulnerabilities in Chrome, including CVE-2026-11645, a high-severity zero-day that has been exploited in the wild. Apple Intelligence can now replace weak passwords without user intervention 5h ago Apple Intelligence adds automated password updates to the Passwords app, helping users replace weak credentials with stronger ones. Apple expands what parents can block, approve, and limit 7h ago Apple introduced new child safety features that help parents manage app access, communication, web browsing, and screen time. Mythos Preview can weaponize N-day vulnerabilities in hours 7h ago Anthropic says Mythos Preview developed working Firefox exploits and Windows privilege-escalation chains from N-day vulnerabilities. The architecture of subtraction: Why it’s time to erase the roads, not just map the traffic 11h ago With AI shrinking the time to exploit, attack path erasure beats backlog management by eliminating whole classes of adversary paths at once.
TI
Entra Agent ID from a Security Perspective 3h ago WinGet - Code Execution, Persistence and Detection Strategies 4h ago I found 23 Chrome extensions hijacking 758,000 users' searches for affiliate revenue 7h ago AI Agents May Always Fall for Prompt Injections 10h ago EDRChoker: Choking The Telemetry Stream to Bypass Defenses 2d ago CVE-2026-46640: Developing payloads for Twig sandbox bypass 2d ago Keeping Secrets Out of Logs 4d ago Unauthenticated RCE as QSECOFR via IBM i Management Central — port 5555, client-controlled verify flag, no credentials required (V7R4 and earlier) 4d ago System Over Model, Tested: Reproducing Mythos’s FreeBSD Find on Local Open-Weight Models 4d ago Re:CACHE - Excessive reflection, type confusion, and 0-click SXSS on Next.js 5d ago
20 loaded
MS
MSRC Security Update Guide
3h ago · 20 items
CVE-2026-41108 Windows DNS Client Elevation of Privilege Vulnerability 3h ago CVE-2026-45467 Microsoft SharePoint Server Spoofing Vulnerability 3h ago CVE-2026-45468 Microsoft SharePoint Server Spoofing Vulnerability 3h ago CVE-2026-45469 Microsoft Excel Remote Code Execution Vulnerability 3h ago CVE-2026-45475 Microsoft Office Remote Code Execution Vulnerability 3h ago CVE-2026-45472 Microsoft Office Remote Code Execution Vulnerability 3h ago CVE-2026-45471 Microsoft Word Remote Code Execution Vulnerability 3h ago CVE-2026-45474 Microsoft Office Remote Code Execution Vulnerability 3h ago CVE-2026-45479 Microsoft SharePoint Server Spoofing Vulnerability 3h ago CVE-2026-45486 Microsoft Word Remote Code Execution Vulnerability 3h ago
20 loaded
TC
The Cyber Mentor
4h ago · 15 items
Secrets to PNPT Debrief Success 4h ago TCM Security CTF Walkthrough 4d ago Top 5 Active Directory Pentesting Tools 6d ago Real Folks of Cyber | Dan Berger | Day in the Life 12d ago Soft Skills for the Job Market: Communication 18d ago LIVE: 🕵️ HTB Sherlocks! | Cybersecurity | Blue Team 26d ago A Quick Way to Prove Your Cybersecurity Skillset! 27d ago A Guide to LNK File Forensics 39d ago Josh Mason | Real Folks of Cyber | DITL 40d ago Use BLUR-IT to Increase Your OPSEC 48d ago
15 loaded
AC
All CISA Advisories
5h ago · 20 items
Siemens KACO Blueplanet Inverters 5h ago Schneider Electric EcoStruxure Panel Server 5h ago Schneider Electric Modicon Network Managed Switches 5h ago CISA Adds Two Known Exploited Vulnerabilities to Catalog 1d ago CISA Adds One Known Exploited Vulnerability to Catalog 4d ago NAVTOR NavBox 5d ago Hitachi Energy RTU500 5d ago B&R PPT30 Operating System 5d ago Hitachi Energy MACH HiDraw 5d ago Hitachi Energy ITT600 Explorer 5d ago
20 loaded
HS
hacking: security in practice
16h ago · 20 items
StumbleTV: Omegle/ChatRoulette but for accidentally exposed webcams 16h ago GitHub - Teycir/ApiHunter: Async API security scanner in Rust for CORS, CSP, GraphQL, JWT, OpenAPI, and active API posture checks. 1d ago What's up with powershellforhackers.com? 1d ago Can converted video files contain malware? 2d ago Rooted your router lately? 2d ago A modular autonomous-agent runtime written in C 3d ago ESP32 Bit Pirate - An Hardware Hacking Tool That Speaks Every Protocol - Version 1.6, new Pirate Assistant in the WebUI, USB adapter system - IR SUBGHZ WIFI BT JTAG I2C UART SPI 1WIRE 2WIRE 3WIRE RF24 ETH and more 3d ago Proxmark3 vs Proxmark5 Side by Side 4d ago Should I go for it? 4d ago Failed to verify LHOST error for long links in metasploit 4d ago
20 loaded
RF
Recorded Future
17h ago · 20 items
Russia’s Defense-Based Economy Risks Forcing Putin to Fight Wars 17h ago Western sanctions have tied Russia's elite patronage to the defense sector. Learn why this creates a domestic imperative for Putin to pursue perpetual war Why Holistic Sourcing Wins: The Numbers Behind the Recorded Future Advantage 4d ago Future’s Intelligence Grap® uses holistic sourcing across 1M+ sources for complete threat intelligence and proactive defense. Threats to the 2026 FIFA World Cup 5d ago Threat assessment for the 2026 FIFA World Cup (US, Mexico, Canada) covering organized crime, AI-powered cyber fraud, state espionage, and political influence operations. Remembering Sir Alex Younger 5d ago A personal tribute to Sir Alex Younger, former head of MI6, on the friendship, lessons, and clarity he brought to Recorded Future and to those who knew him. Iran Expands Handala Brand to Physical Threats 7d ago Iran's MOIS expands its Handala brand to hybrid cyber and physical threat operations, recruiting proxies to conduct attacks, espionage, and sabotage against US and Israeli interests The Vulnerability Flood Is Now a Board Conversation. Here's How to Lead It. 19d ago Boards are asking about AI-driven vulnerability discovery. The leaders who answer that question well will come out with more credibility and more resources. Here's how to be one of them. At Mythos Speed: A Defender's Playbook for the AI Vulnerability Surge in 2026 21d ago Frontier AI models like Mythos are making vulnerability discovery fast and cheap. Here's how defenders use threat intelligence and agentic processing to prioritize and act at the same speed. April 2026 CVE Landscape 25d ago In April 2026, Insikt Group® identified 37 high-impact vulnerabilities that should be prioritized for remediation, 35 of which had a Very Critical Recorded Future Risk Score. This represents a 19% increase from last month. NIST NVD Enrichment Policy Change: Prioritizing Vulnerabilities with Attacker Behavior Signals 26d ago NVD enrichment now covers only 15–20% of CVEs. Learn how Recorded Future Vulnerability Intelligence prioritizes risk using real attacker behavior signals. Beyond Acceleration and Automation: How AI + Intelligence Changes Cyber Defense 26d ago The real question in modern cyber defense isn't who has more technology. It's who uses their resources more efficiently. Here's how AI fused with threat intelligence tips that balance.
20 loaded
MA
Malware Analysis & Reports
23h ago · 20 items
Fake Interview deploys stealthy cross platform (macOS/Windows) through npm package install in take home assessment 23h ago 73 Microsoft GitHub repositories impacted by Miasma malware 1d ago Detecting npm Native Addon Malware: node-gyp Abuse 3d ago Microsoft Warns of GPU Cryptojacking Campaign Spread Through AI Chatbot Links 4d ago 🚨 PCPJack's SMTP Toolkit Dissected: 3 Deployer Generations, Multi-Arch Chisel, and a Full EHLO/STARTTLS Verification Loop 6d ago ChatGPT Malvertising Campaign 6d ago Recommendation 6d ago LLMShare: using shared chatbot pages to distribute malware 7d ago How to Unpack FlawedAmmyy - Malware Unpacking Tutorial 8d ago Building A Malware Lab From Scratch! 9d ago
20 loaded
RE
Reverse Engineering
1d ago · 20 items
[Tool/Writeup] PureBasic FLIRT Signature for IDA Pro — demo + crackme 1d ago [Tool/Writeup] PureBasic FLIRT Signature for IDA Pro — demo + crackme 1d ago First Public Analysis of the BoldTealLayer Loader: A Custom Lua Script that Blinds Windows Security 1d ago EMBA firmware analysis framework v2.0.2 available - Party the big 2k 1d ago /r/ReverseEngineering's Weekly Questions Thread 1d ago HDD Firmware Hacking Part 1 1d ago Independent Post-Quantum KEM and Digital Signature Suite in C++ (NSLD Reduction 1d ago Zhiyun Weebil-S Camera Gimbal BLE Protocol 2d ago Reverse Engineering the Garmin Running Dynamics BLE protocol 2d ago Reverse Engineering Crazy Taxi, Part 3 3d ago
20 loaded
HA
Hak5
1d ago · 15 items
Introducing Shark Jack Display 🦈 1d ago The GitHub Leak Situation Just Got Worse | Threat Wire 12d ago The JavaScript Ecosystem is Falling Apart | Threat Wire 18d ago A TL;DR on Dirty Frag #cybersecurity #threatwire @endingwithali 18d ago Google’s Silent AI Install: What They’re Hiding in Your Files #cybersecurity @endi 18d ago 🔴 [PAYLOAD REVIEW] WiFi Pineapple Pager 📟🍍 23d ago 🔴 [LIVE] Payload Review & 1M Subs! 26d ago 🔴 [LIVE] Hak5 Hits 1 MILLION SUBSCRIBERS 27d ago Why Google’s Silent AI Install is Dangerous | Threat Wire 27d ago The Fatal 4-Byte Error That Just Broke Linux | Threat Wire 32d ago
15 loaded
MS
Microsoft Security Blog
1d ago · 10 items
AI brands as bait: How threat actors are using the AI hype in social engineering 1d ago As threat actors operationalize AI to accelerate attacks, they are also leveraging the wider global interest around AI itself as a social engineering lure. Securing CI/CD in an agentic world: Claude Code Github action case 4d ago Microsoft Threat Intelligence identified a prompt injection pathway in Claude Code GitHub Action that allowed access to workflow secrets under specific conditions. This research examines the attack chain, responsible disclosure process, Ant... Updating the taxonomy of failure modes in agentic AI systems: What a year of red teaming taught us 4d ago A surge in real-world attacks against agentic AI systems is reshaping how we think about risk. Based on 12 months of red teaming, this update introduces seven new failure modes, from supply chain compromise to goal hijacking, and the practi... Preinstall to persistence: Inside the Red Hat npm Miasma credential-stealing campaign 6d ago A large-scale npm supply chain attack compromised over 90 versions of @redhat-cloud-services packages, silently infecting CI/CD environments and developer systems. The malicious code steals credentials from GitHub, cloud platforms, and loca... Microsoft Build 2026: Securing code, agents, and models across the development lifecycle 6d ago Discover how Microsoft enables fast, secure AI development with MDASH and new security capabilities. Malicious npm packages abuse dependency confusion to profile developer environments 10d ago A dependency confusion campaign leveraged 33 malicious npm packages to collect reconnaissance data from developer and build environments. This report details the attack chain, observed tradecraft, and detection opportunities to help organiz... Microsoft is named a Leader in the 2026 Gartner® Magic Quadrant™ for Endpoint Protection 11d ago Microsoft is named a Leader in the 2026 Gartner® Magic Quadrant™ for Endpoint Protection. Typosquatted npm packages used to steal cloud and CI/CD secrets 11d ago The Mini Shai-Hulud campaign used malicious npm packages to target cloud and CI/CD credentials across developer environments. This report details the attack chain, detection opportunities, and mitigation guidance to help organizations ident... The Gentlemen ransomware: Dissecting a self-propagating Go encryptor 12d ago Microsoft Threat Intelligence presents a comprehensive analysis of The Gentlemen, a Go-based ransomware deployed by affiliates of Storm-2697 that combines per-file ephemeral key encryption with an aggressive self-propagation module to deplo... From poisoned search results to GPU mining: A cryptojacking campaign abusing ScreenConnect and Microsoft .NET utilities 13d ago Microsoft exposes a cryptojacking campaign using SEO poisoning and ScreenConnect to target high-performance PCs, with malicious sites also surfaced through AI chatbots.
NA
NahamSec
1d ago · 15 items
Content creations was both a blessing and a curse. #bugbounty 1d ago This Hacker Made $7,000 Hacking AI With One Email 1d ago How I Found My First $3,000 AI Vulnerability 8d ago This GitHub README Hijacks Your AI and Spreads Like a Virus 22d ago New video: hacking AI coding assistants and IDEs. #bugbounty #ai 22d ago The Bug Bounty Roadmap I'd Follow If I Started Over (With AI) 29d ago Is the AI hype helping or killing your bug bounty dreams? #hacking #bugbounty 29d ago Stop Using AI Connectors Until You Watch This 36d ago One ChatGPT connector. One email. Full AI agent hijack. #BugBounty #PromptInjection #ai #hacking 36d ago This hacker made $40,000 using Claude #ai #hacking #bugbounty 43d ago
15 loaded
AL
Alerts
1d ago · 20 items
CISA Adds Two Known Exploited Vulnerabilities to Catalog 1d ago CISA Adds One Known Exploited Vulnerability to Catalog 4d ago CISA Adds One Known Exploited Vulnerability to Catalog 6d ago CISA has added one new vulnerability to its KEV Catalog, based on evidence of active exploitation. CISA Adds Two Known Exploited Vulnerabilities to Catalog 7d ago CISA has added two new vulnerabilities to its KEV Catalog, based on evidence of active exploitation. CISA Adds One Known Exploited Vulnerability to Catalog 8d ago CISA has added one new vulnerability to its KEV Catalog based on evidence of active exploitation. CISA Adds One Known Exploited Vulnerability to Catalog 11d ago Supply Chain Compromises Impact Nx Console and GitHub Repositories 12d ago CISA urges organizations to implement these recommendations to detect and remediate a potential compromise: CISA Adds Three Known Exploited Vulnerabilities to Catalog 13d ago CISA Adds One Known Exploited Vulnerability to Catalog 14d ago CISA Adds One Known Exploited Vulnerability to Catalog 18d ago
20 loaded
HS
Heimdal Security Blog
1d ago · 15 items
Heimdal® Marks Six Years of Consecutive ISAE 3000 SOC 2 Type II Certification 1d ago Heimdal has achieved ISAE 3000 SOC 2 Type II certification for the sixth consecutive year, reflecting the company's continued focus on operational security, accountability, and data protection. AI Will Absorb 99.98% of SOC Triage Within a Year, as 79% of IT teams brace for AI-driven workload shift 28d ago Morten Kjaersgaard expects fewer than 500 of three million monthly alerts to need a human analyst in the year ahead. The role is being rebuilt around cases that warrant judgement. Top 10 Cybersecurity Companies in Europe 34d ago Over the last 10-15 years, the cybersecurity scene has gotten increasingly complex, as organizations adopt new technology and hackers evolve more innovative ways to target them. At the same time, data protection and compliance have become m... Heimdal Expands AI Strategy with AI Wingman and Third-Party AI Containment 49d ago Heimdal today unveiled the next phase of its AI strategy, expanding AI Wingman with three new layers - Assist, Triage and SOC - alongside the introduction of Third-Party AI Containment. You Only Know What You’ve Got When Its Gone 74d ago Prepare for the expected. Rehearse an action plan in case of technology failure or cyberattacks. We all know they can happen. Nordic MSPs Can Now Access Heimdal’s Unified Security and Compliance Platform Through Elovade 83d ago Heimdal has appointed Elovade as its official distributor in the Nordic region. The move gives MSPs and resellers across Sweden, Norway, Denmark, Iceland, and Finland direct access to Heimdal's consolidated cybersecurity platform through a ... OpenClaw Incidents Show Why AI Adoption Pressure Puts Companies at Risk 96d ago The OpenClaw security failures show how hasty AI adoption can expose businesses and supply chains to major cyber risk. Heimdal Claims Industry First With a Cyber Essentials Control Mapping for PEDM to Help Organisations Prove Least Privilege 120d ago Heimdal is the first vendor to publish a dedicated Cyber Essentials control mapping for PEDM, setting out how privilege management supports Cyber Essentials requirements and what evidence can be produced to support assessment and assurance. Five Predictions for Cyber Security Trends in 2026 125d ago Morten Kjaersgaard, Heimdal’s Founder, and Adam Pilton, a former cybercrime investigator, predict five cyber security trends for 2026. Heimdal Achieves OPSWAT Gold Certification for Anti-Malware 145d ago Heimdal today announced that its Next-Gen Antivirus (NGAV) with Extended Threat Protection (XTP) has achieved OPSWAT Gold Certification for Anti-Malware, validating its compatibility and effectiveness within OPSWAT’s industry-leading Access...
15 loaded
TM
Old WinRAR Flaw Fuels Attacks on Ukraine: How Unmanaged Software Keeps the Door Open 1d ago Governing Claude Enterprise in Environments Where Inline Controls Can't Go 1d ago Pwn2Own Berlin 2026: On the Ground With TrendAI™ ZDI's Biggest AI Showdown Yet 8d ago Smart Contracts for C&C: How ClearFake Hid in Plain Sight on BSC Testnet 14d ago Analyzing Void Dokkaebi’s Cython-Compiled InvisibleFerret Malware 18d ago Inside SHADOW-WATER-063’s Banana RAT: From Build Server to Banking Fraud 21d ago Agentic Governance: Why It Matters Now 22d ago AI agents now act inside the trust boundary with real credentials, and agentic governance is what keeps them from quietly breaking things at machine speed. Analyzing TeamPCP’s Supply Chain Attacks: Checkmarx KICS and elementary-data in CI/CD Credential Theft 27d ago Vibe Hacking: Two AI-Augmented Campaigns Target Government and Financial Sectors in Latin America 29d ago What Is the Instructure Canvas Breach? Impact, Risks, and What Institutions Should Do 30d ago
20 loaded
BH
Black Hat
2d ago · 15 items
Get One Step Ahead at Black Hat 🚀 2d ago Inside the Black Hat community 💻 4d ago Black Hat Europe 2025 | From Live Exploitation to Zero-Day Discovery: Investigating Attacks on Gogs 4d ago Black Hat Europe 2025 | Network Operations Center (NOC) Report 5d ago Black Hat Europe 2025 | Weaponizing Image Scaling Against Production AI Systems 5d ago Black Hat Europe 2025 | The Post-NVD Era: A Call for Global CVE Decentralization 5d ago Why leaders in cybersecurity keep coming back to Black Hat 5d ago Black Hat Europe 2025 | You Win Some, You CheckSum: A Kerberos Delegation Vulnerability 6d ago Black Hat Europe 2025 | Flaw And Order: Finding The Needle In The Haystack Of CodeQL Using LLMs 10d ago Black Hat Europe 2025 | A crash course in revealing insecure blind spots for DoS & DDoS 11d ago
15 loaded
IP
IppSec
3d ago · 15 items
HackTheBox - Facts 3d ago HackTheBox - Interpreter 10d ago HackTheBox - MonitorsFour 17d ago HackTheBox - Pterodactyl 24d ago HackTheBox - Overwatch 31d ago HackTheBox - Sorcery 45d ago HackTheBox - AirTouch 52d ago HackThebox - Eighteen 59d ago HackTheBox - DarkZero 66d ago HackTheBox - Browsed 73d ago
15 loaded
JH
John Hammond
3d ago · 15 items
JHT Course Launch! Windows Maldev 6 3d ago BIG SHOW TODAY & AI vibes 5d ago Are ANY hacking scenes actually good? 6d ago A Hacker's Way of Thinking (with Ted Harrington) 7d ago A Linux Backdoor is For Sale on the Dark Web 8d ago ContinuumCon Teaser: solst/ice, Zack Korman, & Spencer Alessi!! 10d ago Payload Podcast 007 with Andy Piazza (klrgrz) 11d ago Google served me Malware 13d ago Payload Podcast 007 with Andy Piazza (klrgrz) 13d ago I Built an AI Cybersecurity Research Factory (for CTFs & Vulnerabilities) 22d ago
15 loaded
CY
CyberScoop
4d ago · 67 items
Nightmare Eclipse incident shows the researcher-vendor fights may never fully go away 4d ago Hill Dems hammer GOP for $250M CISA budget cut 4d ago Your AI agent could become your biggest insider threat 4d ago Inside the race to adapt to an AI-powered security world 5d ago European authorities crack down on illegal streaming networks 5d ago DHS Secretary Markwayne Mullin pinpoints optimal CISA staffing levels 5d ago DOD wants to integrate cyber in all operations, and integrate security into AI 6d ago Trump administration releases scaled-back AI executive order 7d ago Anthropic expanding access to Project Glasswing 7d ago Attackers are exploiting Palo Alto Networks defect that initially flew under the radar 7d ago
67 loaded
NE
NetworkChuck
4d ago · 15 items
Certification Questions | LIVE AMA | Summer of CCNA 4d ago Hermes has a Home Assistant skill and it's unreal! 5d ago FREE coffee at Cisco Live (I'm giving it away) 6d ago Codex Lives In PowerShell Now 7d ago I'm Moderating My First Panel… Come see me at Cisco Live 7d ago Switching back to Windows?!? 7d ago Who actually owns the AI in your company? 10d ago Hermes wasn’t built to compete. It was built to WORK. 12d ago Summer of CCNA - 90 Minute - Session 2 18d ago you need to use Hermes RIGHT NOW!! (goodbye OpenClaw!!) 20d ago
15 loaded
BF
Blog – Forter
5d ago · 10 items
Agent-Ready: How to Prepare Your Site for AI-Driven Commerce 5d ago Japan’s 3DS Mandate: One Year In 25d ago One-Click Refunds Are Not as Hard as You Think 34d ago Toys“R”Us Japan Implements Forter’s Fraud Management and Payment Optimization Solutions 41d ago More of What Matters: Forter’s April Product Release 42d ago If AI Agents Can’t Find You, Do You Even Exist? 42d ago Return Policy Abuse Is Theft. It’s Time to Treat It That Way. 55d ago What Is Return Abuse and Why Is It Getting Harder to Stop? 55d ago Return Abuse Prevention Starts with the Person, Not the Policy 55d ago Shoptalk 2026: Retail in the Age of AI 64d ago
SE
Securelist
6d ago · 10 items
Argamal: Malware hidden in hentai games 6d ago Kaspersky researchers analyze new Argamal RAT distributed via infected hentai games and allowing the attacker to control the target machine. Wardriving assessment across Mexico: Preparing for the 2026 World Cup 7d ago In the lead-up to the 2026 FIFA World Cup, Kaspersky GReAT experts conducted a wardriving assessment in Mexico City, Monterrey, and Guadalajara to evaluate Wi-Fi hotspot security configurations and potential exposure risks. Containers on fire: from container escapes to supply chain attacks 8d ago We break down the primary attack vectors in containerized environments: exposed secrets, privilege misconfigurations, API compromise, and supply chain attacks. What’s in the container? Analyzing vulnerabilities, risks and protection with Kaspersky Container Security and the KIRA AI assistant 11d ago What are the main risks for container environments: vulnerabilities, supply chain attacks, configuration errors; how to improve container security and how Kaspersky Container Security with the KIRA AI assistant can help. Pirates in the crosshairs: how one cybercrime gang has been infecting book, movie, and TV show fans for years 12d ago Our experts continue to track attacks targeting consumers of pirated content, both books and movies. 2026 saw the discovery of new target sites with tens of millions of visitors, while the miner based on SilentCryptoMiner gained a RAT modul... Cloud Atlas activity in the second half of 2025 and early 2026: new tools and a new payload 18d ago The experienced Cloud Atlas group remains active, continuing to target government sectors and diplomatic entities in Russia and Belarus, employing both new and established techniques. How an image could compromise your Mac: understanding an ExifTool vulnerability (CVE-2026-3102) 20d ago We explain how a flaw in ExifTool allows attackers to compromise macOS systems via a malicious image (CVE-2026-3102). IT threat evolution in Q1 2026. Mobile statistics 22d ago This report contains mobile threat statistics for Q1 2026, along with noteworthy discoveries and quarterly trends: new versions of SparkCat and Triada. IT threat evolution in Q1 2026. Non-mobile statistics 22d ago The report presents key trends and statistics on malware that targeted personal computers running Windows and macOS, as well as Internet of Things (IoT) devices, during Q1 2026. Kimsuky targets organizations with PebbleDash-based tools 26d ago Kaspersky researchers analyze a range of new PebbleDash-based tools used in recent Kimsuky campaigns and reveal their connection to the AppleSeed malware cluster.
WE
WeLiveSecurity
6d ago · 20 items
Lessons for life: Why children’s data is a long-term identity risk 6d ago This month in security with Tony Anscombe – May 2026 edition 11d ago ESET APT Activity Report Q4 2025–Q1 2026 12d ago What to consider before asking an AI chatbot for health advice 13d ago BTMOB: A stealthy RAT burrowing deep into Android devices 14d ago Foul play: Fake FIFA websites target soccer fans looking for World Cup tickets, merchandise 18d ago Webworm: New burrowing techniques 20d ago The quest for greater tech independence 21d ago Why geopolitical turmoil is a gift for scammers, and how to stay safe 25d ago FrostyNeighbor: Fresh mischief and digital shenanigans 26d ago
20 loaded
M3
Microsoft 365 Blog
6d ago · 10 items
Introducing Microsoft Scout: Your always-on personal agent 6d ago Microsoft introduces a new, always-on personal agent, Microsoft Scout, integrated across the Microsoft 365 apps you use every day. Announcing the new Work IQ APIs 7d ago Build enterprise agents with Work IQ APIs for Microsoft 365—bringing business context, tools, and secure, scalable intelligence into every workflow. Introducing Microsoft 365 Business with Copilot: The new standard for small business 11d ago Meet Microsoft 365 Business with Copilot—the AI-powered solution transforming how small businesses work, collaborate, and compete. Introducing a new design for Microsoft 365 Copilot 12d ago Copilot’s redesigned experience delivers faster performance, adaptive tools, and clearer AI-powered workflows to help you easily move from intention to outcome. New and improved: Computer-using agents, a new workflows experience, and real-time voice experiences 14d ago Explore what's new in Copilot Studio, May 2026: computer-using agents are now available, plus redesigned workflows and Work IQ extensibility. New and improved: Agent governance, intelligent workflows, and connected app experiences 28d ago See what's new in Copilot Studio, April 2026: updates to workflows, more control over agent operations, and an expanded agent usage estimator. Copilot Cowork: From conversation to action across skills, integrations, and devices 35d ago Today, we’re announcing additional capabilities in Cowork to expand on what it can make possible for you. Microsoft 365 Copilot, human agency, and the opportunity for every organization 35d ago Empower your organization with Microsoft 365 Copilot—AI that bridges human potential and business outcomes for the future of work. Microsoft Agent 365, now generally available, expands capabilities and integrations 39d ago ​We’re announcing the general availability of Agent 365, plus previews of new capabilities to discover and manage shadow AI agents. Learn more. Copilot’s agentic capabilities in Word, Excel, and PowerPoint are generally available 47d ago Copilot's newest features are now generally available as the default experience across all Microsoft 365 subscriptions.
SM
Microsoft Build 2026: Building agentic apps with Microsoft Fabric and Microsoft Databases 7d ago Microsoft Build 2026 highlights advancements in app development with Microsoft Fabric and Microsoft Databases, emphasizing a unified data and AI platform. Azure IaaS: Defense in depth built on secure-by-design principles 36d ago Explore how Azure IaaS uses defense in depth and secure-by-design principles to deliver layered, scalable cloud security across compute, network, and data. Enforcing trust and transparency: Open-sourcing the Azure Integrated HSM 39d ago Learn how Microsoft Azure Integrated HSM delivers hardware‑enforced key protection in the cloud, combining FIPS Level 3 assurances with transparency and open‑source collaboration. Azure IaaS: Keep critical applications running with built-in resiliency at scale 69d ago Learn how Azure IaaS helps organizations start from a resilient platform foundation with availability, continuity, and recovery capabilities. Azure IaaS: Explore new resources for building a stronger, more efficient infrastructure 97d ago Learn how Azure IaaS helps you modernize infrastructure, improve performance and resilience, optimize costs, and prepare for AI workloads. Read more. Azure reliability, resiliency, and recoverability: Build continuity by design 112d ago Learn how Azure reliability, resiliency, and recovery capabilities work together to improve cloud continuity. Read more. Microsoft strengthens sovereign cloud capabilities with new services 216d ago Discover new Microsoft digital sovereignty capabilities and upcoming features across AI, security, and productivity, to address sovereign cloud needs. Enhancing software supply chain security with Microsoft’s Signing Transparency 218d ago Microsoft Signing Transparency delivers verifiable code integrity and tamper-evident software releases for stronger supply chain security. Oracle Database@Azure offers new features, regions, and programs to unlock data and AI innovation 237d ago Migrate Oracle solutions to the cloud with a trusted, enterprise-ready platform from Microsoft and Oracle. Learn more. Building secure, scalable AI in the cloud with Microsoft Azure 343d ago Forrester Research shows how Azure helps enterprises scale generative AI securely, unlocking real business value. Learn more.
KO
Krebs on Security
7d ago · 10 items
Hackers Used Meta’s AI Support Bot to Seize Instagram Accounts 7d ago The Instagram accounts for the Obama White House and the Chief Master Sergeant of the U.S. Space Force were briefly defaced with pro-Iranian images and messages over the weekend, after instructions began circulating on Telegram showing how ... Netherlands Seizes 800 Servers, Arrests 2 for Aiding Cyberattacks 15d ago Authorities in the Netherlands have arrested the co-owners of two related Internet hosting companies for operating IT infrastructure used by Russia to carry out cyberattacks, influence operations and disinformation campaigns inside the Euro... Lawmakers Demand Answers as CISA Tries to Contain Data Leak 18d ago Lawmakers in both houses of Congress are demanding answers from the U.S. Cybersecurity & Infrastructure Security Agency (CISA) after KrebsOnSecurity reported this week that a CISA contractor intentionally published AWS GovCloud keys and a v... Alleged Kimwolf Botmaster ‘Dort’ Arrested, Charged in U.S. and Canada 18d ago Canadian authorities on Wednesday arrested a 23-year-old Ottawa man on suspicion of building and operating Kimwolf, a fast spreading Internet-of-Things botnet that enslaved millions of devices for use in a series of massive distributed deni... CISA Admin Leaked AWS GovCloud Keys on Github 21d ago Until this past weekend, a contractor for the Cybersecurity & Infrastructure Security Agency (CISA) maintained a public GitHub repository that exposed credentials to several highly privileged AWS GovCloud accounts and a large number of inte... Patch Tuesday, May 2026 Edition 27d ago Artificial intelligence platforms may be just as susceptible to social engineering as human beings, but they are proving remarkably good at finding security vulnerabilities in human-made computer code. That reality is on full display this m... Canvas Breach Disrupts Schools & Colleges Nationwide 32d ago An ongoing data extortion attack targeting the widely-used education technology platform Canvas disrupted classes and coursework at school districts and universities across the United States today, after a cybercrime group defaced the servi... Anti-DDoS Firm Heaped Attacks on Brazilian ISPs 40d ago A Brazilian tech firm that specializes in protecting networks from distributed denial-of-service (DDoS) attacks has been enabling a botnet responsible for an extended campaign of massive DDoS attacks against other network operators in Brazi... ‘Scattered Spider’ Member ‘Tylerb’ Pleads Guilty 49d ago A 24-year-old British national and senior member of the cybercrime group "Scattered Spider" has pleaded guilty to wire fraud conspiracy and aggravated identity theft. Tyler Robert Buchanan admitted his role in a series of text-message phish... Patch Tuesday, April 2026 Edition 55d ago Microsoft today pushed software updates to fix a staggering 167 security vulnerabilities in its Windows operating systems and related software, including a SharePoint Server zero-day and a publicly disclosed weakness in Windows Defender dub...
PN
Proofpoint News Feed
13d ago · 10 items
Proofpoint Introduces Active Exploits Protection to Help Organizations Prioritize Vulnerability Patching for Real-World Attacks in the AI Era 13d ago New solution reduces exposure to actively exploited vulnerabilities in minutes by turning intelligence into immediate protection across primary attack paths Disrupts AI-powered exploit- Verizon DBIR: Healthcare Fends Off Increased Social Engineering Attacks 18d ago Proofpoint Integrates with the Claude Compliance API to Extend Data Security and Governance to Claude 19d ago New product integrations bring data protection, insider risk detection, and governance into Claude Enterprise and Claude Platform activity Organizations gain unified visibility across Proofpoint Launches Dedicated MSP Business Unit and Introduces 365 Total Protection for North America 27d ago New MSP Platform business unit, AI-powered all-in-one Microsoft 365 protection, and Marketplace partnership with Pax8 strengthen Proofpoint’s commitment to channel and small and mid-size The spy who logged me in. 31d ago ⁠Mark Kelly⁠, Staff Threat Researcher at ⁠Proofpoint⁠, is discussing their work on "I’d come running back to EU again: TA416 resumes European government espionage campaigns." China-linked threat group TA416 has resumed large-scale phishing ... Proofpoint Establishes Innovation Precedent for Source-Agnostic Modern Enterprise Investigations 34d ago Proofpoint Prism Investigator positioned as first fully autonomous Agentic AI solution to significantly streamline investigations for highly regulated and highly AI and the New Threat Landscape | Sumit Dhawan with NightDragon | RSAC 2026 35d ago The Most Powerful Women Of The Channel 2026: Power 100 36d ago The Power 100 is culled from the ranks of CRN’s 2026 Women of the Channel and spotlights the female executives at vendors and distributors whose insight and influence help drive channel success. AI Security Gaps Create New MSSP Opportunity: Proofpoint 40d ago Claude Mythos Fears Startle Japan's Financial Services Sector 41d ago
SK
STÖK
16d ago · 15 items
☔️🌅 16d ago Life in the Nordics 🌲 | Foraging Blueberries, Mushrooms & Nosework Training with Our Dogs 289d ago Winter vanlife = good times 891d ago What an experience! Getting a Christmas tree from our own piece of land. #movingupnorth! 897d ago Had to much GLÖGG and lost my camera during - 13371122 - Intigriti + Visma 904d ago IS THIS THE END? 964d ago Escaping the grind and decompiling python 3.9 pyc files to find vulnerabilites 1118d ago How to turn bugs into a "passive" income stream! ft Detectify's Almroot 1359d ago HOW DID THIS HAPPEN!? (13370822 LHE VLOG) 1372d ago Q: How to write a BUG BOUNTY report that actually gets paid? 1489d ago
15 loaded
WE
WeLiveSecurity
18d ago · 28 items
Foul play: Fake FIFA websites target soccer fans looking for World Cup tickets, merchandise 18d ago Webworm: New burrowing techniques 20d ago The quest for greater tech independence 21d ago Why geopolitical turmoil is a gift for scammers, and how to stay safe 25d ago FrostyNeighbor: Fresh mischief and digital shenanigans 26d ago Eyes wide open: How to mitigate the security and privacy risks of smart glasses 29d ago Fake call logs, real payments: How CallPhantom tricks Android users 33d ago Fixing the password problem is as easy as 123456 33d ago A rigged game: ScarCruft compromises gaming platform in a supply-chain attack 35d ago This month in security with Tony Anscombe – April 2026 edition 40d ago
28 loaded
TL
The Last Watchdog
20d ago · 16 items
GUEST ESSAY: AI can speed up communication, but it can also weaken human connection 20d ago The first warning sign came on stage. Related: Carol Sturka declares her agency I had turned to ChatGPT to help organize research notes for an upcoming keynote. I was pressed for time and wanted help spotting patterns I might have missed. T... News alert: Orchid Security study finds invisible identities now outnumber managed accounts 20d ago NEW YORK, May 19, 2026, CyberNewswireŌĆöOrchid Security, the company solving identity at its core, today released its Identity Gap: 2026 Snapshot report, revealing that the majority of enterprise identity now exists outside the view of iden... MY TAKE: AI agents force a rethink of enterprise service lines as vendors move up the tech stack 22d ago ORLANDO — Companies are pulling AI agents into their daily operations through a dozen side doors. Related: SaaS and AI agents converge One of them was in focus at KB4-CON, KnowBe4’s annual customer conference at the Marriott World Cente... LW ROUNDTABLE: Microsoft Edge normalizes credential exposure — security pros push back 27d ago By design. Two words that have done an awful lot of heavy lifting in the cybersecurity industry over the years. They tend to surface whenever a vendor wants to wave off a serious finding without fixing it. Related: The unending password pro... FIRESIDE CHAT: Cyber insurers deepen SMB security role as supply chain attacks spread 28d ago The cyber insurance industry set out to manage financial risk. Along the way, it has quietly became the security operations provider for a significant share of American small businesses. An $11 billion acquisition agreement announced earlie... News Alert: Lyrie.ai joins Anthropic verification program, unveils protocol for securing AI agents 28d ago DUBAI, United Arab Emirates, May 11, 2026, CyberNewswire—Dubai-founded OTT Cybersecurity LLC today announced acceptance into Anthropic’s Cyber Verification Program and unveiled the Agent Trust Protocol (ATP), an open cryptographic stand... News alert: LuxSci launches HIPAA-compliant email platform for mid-size healthcare market 34d ago CAMBRIDGE, Mass., May 5, 2026, CyberNewswireŌĆöLuxSci, a leading provider of HIPAA compliant secure healthcare communications, today announced the launch of LuxSci Secure High Volume Email for mid-sized healthcare organizations, the industr... SHARED INTEL Q&A: PKI’s unfinished business—’digital passports’ for content, models and agents 40d ago As if keeping track of machine identities wasnŌĆÖt hard enough. AI agents are now arriving by the thousands ŌĆö and most enterprises are just handing them borrowed credentials and hoping for the best. Meanwhile, the cryptographic infrastruc... GUEST ESSAY: How augmented reality (AR) can turn building images into ad space with no control 42d ago Every major building in America has three things: a physical address, a legal owner, and an unmonitored attack surface. Related: Sam Altman's quest to usurp the browswer That surface extends from the ground up through every floor, every fac... FIRESIDE CHAT: Leaked secrets are now the go-to attack vector — and AI is accelerating exposures 43d ago A consequential shift is underway in how enterprise breaches begin. The leaked credential ‚Äî once treated as a hygiene problem ‚Äî has become the primary on-ramp. Related: No easy fixes for AI risk Last August‚Äôs Salesloft campaign was th...
16 loaded
CD
Cyber Defense Magazine
23d ago · 35 items
Why Is Cybersecurity Now A Business Priority, Not Just An IT Function? 23d ago The Security Mistakes Being Repeated With Ai 24d ago The Hidden Risk For IT Subcontractors: When Insurance, Not Security, Costs You The Contract 25d ago Innovator Spotlight: Klever Compliance 25d ago Innovator Spotlight: Radware 25d ago Innovator Spotlight: JScrambler 25d ago Innovators Spotlight: OPSWAT 26d ago The Board Is Asking The Wrong Security Question 27d ago Synthetic Identity Fraud Requires An Equal Focus On Biometrics And Document Verification 28d ago Innovator Spotlight: Iru 28d ago
35 loaded
DE
DEFCONConference
41d ago · 15 items
DEF CON 34 - DEF CON Policy Announcement - Katie Noble, Heather West 41d ago DEF CON 33 - DisguiseDelimit: Exploiting Synology NAS with Delimiters and Novel Tricks - Ryan Emmon 110d ago DEF CON 33 - Browser Extension Clickjacking: One Click and Your Credit Card Is Stolen - Marek Tóth 110d ago DEF CON 33 - Can't Stop the ROP: Automating Universal ASLR Bypasses - Bramwell Brizendine 110d ago DEF CON 33 Recon Village - How to Become One of Them: Deep Cover Ops - Sean Jones, Kaloyan Ivanov 160d ago DEF CON 33 Recon Village - Inside the Shadows Tracking RaaS Groups, Cyber Threats - John Dilgen 160d ago DEF CON 33 Recon Village - Autonomous Video Hunter AI Agents for Real Time OSINT - Kevin Dela Rosa 160d ago DEF CON 33 Recon Village - A Playbook for Integration Servers - Ryan Bonner, Guðmundur Karlsson 160d ago DEF CON 33 Recon Village - Mapping the Shadow War From Estonia to Ukraine - Evgueni Erchov 160d ago DEF CON 33 Recon Village - Building Local Knowledge Graphs for OSINT - Donald Pellegrino 160d ago
15 loaded
CC
CISA Cybersecurity Advisories
49d ago · 10 items
Defending Against China-Nexus Covert Networks of Compromised Devices 49d ago Iranian-Affiliated Cyber Actors Exploit Programmable Logic Controllers Across US Critical Infrastructure 64d ago U.S. organizations should review the TTPs and IOCs in this advisory for indications of current or historical activity on their networks, and apply the Pro-Russia Hacktivists Conduct Opportunistic Attacks Against US and Global Critical Infrastructure 185d ago The authoring organizations encourage critical infrastructure organizations to implement the recommendations in this advisory to reduce the likelihood and CISA Shares Lessons Learned from an Incident Response Engagement 260d ago Countering Chinese State-Sponsored Actors Compromise of Networks Worldwide to Feed Global Espionage System 288d ago The authoring agencies strongly urge network defenders to hunt for malicious activity and to apply the mitigations in this CSA to reduce the threat of Chinese CISA and USCG Identify Areas for Cyber Hygiene Improvement After Conducting Proactive Threat Hunt at US Critical Infrastructure Organization 314d ago #StopRansomware: Interlock 323d ago Ransomware Actors Exploit Unpatched SimpleHelp Remote Monitoring and Management to Compromise Utility Billing Software Provider 362d ago CISA urges software vendors, downstream customers, and end users to immediately implement the Mitigations listed in this advisory based on confirmed compromise Threat Actors Deploy LummaC2 Malware to Exfiltrate Sensitive Data from Organizations 384d ago Russian GRU Targeting Western Logistics Entities and Technology Companies 393d ago Executives and network defenders should recognize the elevated threat of unit 26165 targeting, increase monitoring and threat hunting for known TTPs and IOCs
BA
Business Fraud at Network Scale: What the $3.5B Medicare Hospice Crisis Reveals About Know Your Business 53d ago What is Customer Due Diligence (CDD) 77d ago Why Legacy Identity Verification Can’t Stop AI-Enabled Fraud 80d ago AML, KYC and Identity Verification in Australia 89d ago When Fraud Becomes Background Noise: The Industrialization of Digital Deception 155d ago The Efficiency Era of KYC: Reverification and Reusable Identity Take Center Stage 155d ago The End of Static KYB: Business Identity in Constant Motion 155d ago Know Your Agent: The Next Chapter in Digital Trust 155d ago When Rules Move Faster Than Readiness: Regulatory Adaptability as a Competitive Advantage 155d ago Digital Identity Trends 2026: AI Fraud, Compliance, and Orchestration 174d ago
13 loaded
LI
LiveOverflow
96d ago · 15 items
Security-driven Rapid Release - Pwn2Own Documentary (Part 4) 96d ago Firefox JIT Bug - Pwn2Own Documentary (Part 3) 99d ago The First Exploit - Pwn2Own Documentary (Part 2) 103d ago The World's Hardest Hacking Competition - Pwn2Own Documentary (Part 1) 106d ago From Zero to Zero Day (and beyond) - Life of a Hacker: Jonathan Jacobi 426d ago The German Hacking Championship 452d ago Do you know this common Go vulnerability? 466d ago Google's Mobile VRP Behind the Scenes with Kristoffer Blasiak (Hextree Podcast Ep.1) 601d ago My theory on how the webp 0day was discovered #short 617d ago My theory on how the webp 0day was discovered (BLASTPASS) 618d ago
15 loaded
HA
HackerSploit
426d ago · 15 items
How FIN6 Exfiltrates Files Over FTP 426d ago Emulating FIN6 - Active Directory Enumeration Made EASY 477d ago The SECRET to Embedding Metasploit Payloads in VBA Macros 482d ago Offensive VBA 0x4 - Reverse Shell Macro with Powercat 490d ago Offensive VBA 0x3 - Developing PowerShell Droppers 496d ago Offensive VBA 0x2 - Program & Command Execution 501d ago Offensive VBA 0x1 - Your First Macro 503d ago Emulating FIN6 - Gaining Initial Access (Office Word Macro) 508d ago FIN6 Adversary Emulation Plan (TTPs & Tooling) 512d ago Developing An Adversary Emulation Plan 512d ago
15 loaded
TH
Threatpost
1378d ago · 10 items
Student Loan Breach Exposes 2.5M Records 1378d ago 2.5 million people were affected, in a breach that could spell more trouble down the line. Watering Hole Attacks Push ScanBox Keylogger 1379d ago Researchers uncover a watering hole attack likely carried out by APT TA423, which attempts to plant the ScanBox JavaScript-based reconnaissance tool. Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms 1380d ago Over 130 companies tangled in sprawling phishing campaign that spoofed a multi-factor authentication system. Ransomware Attacks are on the Rise 1383d ago Lockbit is by far this summer’s most prolific ransomware group, trailed by two offshoots of the Conti group. Cybercriminals Are Selling Access to Chinese Surveillance Cameras 1383d ago Tens of thousands of cameras have failed to patch a critical, 11-month-old CVE, leaving thousands of organizations exposed. Twitter Whistleblower Complaint: The TL;DR Version 1385d ago Twitter is blasted for security and privacy lapses by the company’s former head of security who alleges the social media giant’s actions amount to a national security risk. Firewall Bug Under Active Attack Triggers CISA Warning 1386d ago CISA is warning that Palo Alto Networks’ PAN-OS is under active attack and needs to be patched ASAP. Fake Reservation Links Prey on Weary Travelers 1387d ago Fake travel reservations are exacting more pain from the travel weary, already dealing with the misery of canceled flights and overbooked hotels. iPhone Users Urged to Update to Patch 2 Zero-Days 1390d ago Separate fixes to macOS and iOS patch respective flaws in the kernel and WebKit that can allow threat actors to take over devices and are under attack. Google Patches Chrome’s Fifth Zero-Day of the Year 1391d ago An insufficient validation input flaw, one of 11 patched in an update this week, could allow for arbitrary code execution and is under active attack.

No matching sources found.