Loading…

Whats The Hax?

Daily intelligence on threats, breaches, and defenders

What's New

Top 5 Across All Sources

  1. Name That Toon Contest

    darkreading · 1h ago
Latest
darkreadingName That Toon Contestdarkreading[An RX Global Event] Infosecurity EuropeBleepingComputerWordPress malware campaign hides payloads in Steam profilesLatest newsI ditched my office desktop PC for a gaming laptop, and it's a serious productivity upgradecybersecurityIs TeamPCP a Russian-affiliated APT? How can preventive security principles assist defending ecosystems against attacks on software supply chains?cybersecurityMacBook or Windows Laptop for CybersecurityHelp Net SecurityMeta tries to get ahead of scammers before the World Cup beginsLatest newsMy top 7 laptop-bag essentials now, after decades of remote workcybersecurityWhat's the most creative MFA bypass you've seen?For [Blue|Purple] Teams in Cyber Defence@redhat-cloud-services npm scope backdoored with valid signed SLSA provenance; recovered the GitHub commit-search dead-drop C2 markerscybersecurityResearch Notes from Building a Windows Event Log Hunting Workflowhacking: security in practiceAnalyzed 24 months of ransomware leak-site posts. 84% land on weekdays, not at 3am.Latest newsYou can leave FaceTime video voicemails, and a lot of people don't know it - here's howcybersecurityHow to fix securityheaders scan X-Frame-Options and Content-Security-Policy ??Latest newsWhy I happily paid for the Transmit MacOS app - and it's not just the 16x faster file transfer speedcybersecurityFree AI tools for TPRM?SecurityWeekCritical Windows Netlogon Vulnerability in Attackers’ CrosshairsHelp Net SecurityNetQuest expands NetworkLens to detect threats hidden in network management trafficcybersecurityNPM packages from RedHat CompromisedcybersecurityLinux Copy Fail CVE-2026-31431: KEV Privilege Escalation on Shared Build HostsdarkreadingName That Toon Contestdarkreading[An RX Global Event] Infosecurity EuropeBleepingComputerWordPress malware campaign hides payloads in Steam profilesLatest newsI ditched my office desktop PC for a gaming laptop, and it's a serious productivity upgradecybersecurityIs TeamPCP a Russian-affiliated APT? How can preventive security principles assist defending ecosystems against attacks on software supply chains?cybersecurityMacBook or Windows Laptop for CybersecurityHelp Net SecurityMeta tries to get ahead of scammers before the World Cup beginsLatest newsMy top 7 laptop-bag essentials now, after decades of remote workcybersecurityWhat's the most creative MFA bypass you've seen?For [Blue|Purple] Teams in Cyber Defence@redhat-cloud-services npm scope backdoored with valid signed SLSA provenance; recovered the GitHub commit-search dead-drop C2 markerscybersecurityResearch Notes from Building a Windows Event Log Hunting Workflowhacking: security in practiceAnalyzed 24 months of ransomware leak-site posts. 84% land on weekdays, not at 3am.Latest newsYou can leave FaceTime video voicemails, and a lot of people don't know it - here's howcybersecurityHow to fix securityheaders scan X-Frame-Options and Content-Security-Policy ??Latest newsWhy I happily paid for the Transmit MacOS app - and it's not just the 16x faster file transfer speedcybersecurityFree AI tools for TPRM?SecurityWeekCritical Windows Netlogon Vulnerability in Attackers’ CrosshairsHelp Net SecurityNetQuest expands NetworkLens to detect threats hidden in network management trafficcybersecurityNPM packages from RedHat CompromisedcybersecurityLinux Copy Fail CVE-2026-31431: KEV Privilege Escalation on Shared Build Hosts

By Source

Feeds organized so you can skim by site.

Density Sort
DA
darkreading
1h ago · 65 items
Name That Toon Contest 1h ago [An RX Global Event] Infosecurity Europe 1h ago Name That Toon: Mark of (Cybersecurity) Progress 2d ago Asia's Cyber Insurance Market Shows Signs of Life 3d ago With Complex Cloud Integrations, Small Errors Lead to Major Compromises 3d ago 'The Com' Cyberattacks Support Violence & Sexploitation 3d ago As Global Powers Explore Humanoid Robots, Cyber-Risk Looms 3d ago Dutch Raid Fails to Dent Russian Bulletproof Host 3d ago Agentic AI Isn't Risky; the Way Orgs Deploy It Is 4d ago Focus on Cyber Insurance: How Quantifying Risk Is Reshaping Security 4d ago
65 loaded
BL
BleepingComputer
1h ago · 15 items
WordPress malware campaign hides payloads in Steam profiles 1h ago Nearly 2,000 WordPress websites were infected with malware that relies on Steam Community profile comments to hide command-and-control (C2) data. Microsoft investigates Office Apps, Teams file access issues 2h ago Microsoft says an ongoing incident is preventing users of its Teams collaboration platform and Office for the web cloud-based productivity suite from opening files. Race Against Time: Why Faster Vulnerability Alerts Matter 3h ago Attackers are exploiting vulnerabilities faster than many organizations can identify and patch them. SecAlerts explains why faster vulnerability alerts can help reduce exposure and improve response times. Critical Windows Netlogon RCE flaw now exploited in attacks 4h ago The Centre for Cybersecurity Belgium (CCB), the country's national authority for cybersecurity, warned on Friday that threat actors are now exploiting a recently patched critical Windows Netlogon vulnerability in attacks. Webinar tomorrow: From alert to resolution in network incident response 5h ago Network incidents are often detected quickly, but investigations and coordination can delay resolution. Join our webinar tomorrow to learn how automation and AI-assisted workflows can help IT teams accelerate incident response. Microsoft fixes outage affecting MFA setup, MySignIn service 5h ago Microsoft is working to address an ongoing incident preventing customers from setting up multi-factor authentication (MFA) or accessing the My Sign-Ins platform. Microsoft fixes KB5089549 Windows security update install issues 6h ago Microsoft has resolved a known issue causing installation failures and 0x800f0922 errors when deploying the May 2026 Windows 11 security update (KB5089549). WP Maps Pro bug exploited to create admin accounts on WordPress sites 1d ago Hackers are targeting WordPress websites running a vulnerable version of the WP Maps Pro plugin, which allows creating rogue administrator accounts without authentication. Palo Alto GlobalProtect VPN auth bypass flaw now exploited in attacks 1d ago Palo Alto Networks is warning that hackers are now exploiting a PAN-OS GlobalProtect authentication bypass flaw, tracked as CVE-2026-0257, in attacks attempting to breach corporate networks. New CIFSwitch Linux flaw gives root on multiple distributions 2d ago A newly discovered local privilege escalation vulnerability dubbed 'CIFSwitch' in the Linux kernel could allow attackers to forge CIFS authentication key descriptions, abuse the kernel's key request mechanism, and gain root privileges.
15 loaded
LN
Latest news
1h ago · 20 items
I ditched my office desktop PC for a gaming laptop, and it's a serious productivity upgrade 1h ago The MSI Raider 16 Max HX combines powerful current-gen hardware with a revamped cooling system and a stunning 240Hz OLED screen. My top 7 laptop-bag essentials now, after decades of remote work 1h ago Have gear, will travel: Here are the gadgets powering my mobile office this summer. You can leave FaceTime video voicemails, and a lot of people don't know it - here's how 1h ago If someone missed your FaceTime call, try leaving them a video message. Why I happily paid for the Transmit MacOS app - and it's not just the 16x faster file transfer speed 1h ago If you spend a good amount of time transferring files to and from your MacOS machine, do yourself a favor and grab a copy of Transmit. Chrome stops hackers from stealing your browser cookies now - how its new security feature works 2h ago Now available for all Windows users, Chrome's security feature will thwart attackers who try to impersonate you by using your stolen browser cookies on their own devices. Why I built my own DIY cyberdeck straight out of 80s sci-fi - and how you can too 4h ago The latest DIY craze is a portable computer inspired by a 1984 sci-fi novel. I built one with a Raspberry Pi. Here's why and how. Wireless vs. wired security cameras: After years of testing, the best choice for my home is clear 8h ago After using multiple security cameras over the years, I've found the best arrangement for my home - but that doesn't make it right for everyone. Overheating from Android Auto? 8 easy fixes that effectively cooled off my phone 14h ago Android Auto uses a lot of resources, which can make your phone hot. Here's how to help. This Lenovo Yoga rivaled my MacBook Air in ways I didn't expect it to 15h ago The Slim 7x (2026) has impressive performance improvements, but its target user - the modern professional - remains the same. I switched to MyRadar as my main Android Auto weather app and don't regret it 15h ago There aren't many weather apps for Android Auto, but the ones I found work very well.
20 loaded
CY
cybersecurity
1h ago · 20 items
Is TeamPCP a Russian-affiliated APT? How can preventive security principles assist defending ecosystems against attacks on software supply chains? 1h ago MacBook or Windows Laptop for Cybersecurity 1h ago What's the most creative MFA bypass you've seen? 1h ago Research Notes from Building a Windows Event Log Hunting Workflow 1h ago How to fix securityheaders scan X-Frame-Options and Content-Security-Policy ?? 1h ago Free AI tools for TPRM? 1h ago NPM packages from RedHat Compromised 2h ago Linux Copy Fail CVE-2026-31431: KEV Privilege Escalation on Shared Build Hosts 2h ago SOC Analyst working towards Threat Intelligence 2h ago Is XSS possible through PDFs? 3h ago
20 loaded
HN
Help Net Security
1h ago · 10 items
Meta tries to get ahead of scammers before the World Cup begins 1h ago Meta has outlined new measures to combat FIFA World Cup 2026 scams, including ticket fraud and online abuse targeting fans and players. NetQuest expands NetworkLens to detect threats hidden in network management traffic 2h ago NetQuest expands NetworkLens to detect threats hidden within the protocols used to manage critical network infrastructure. Windows Netlogon RCE exploited, domain controllers at risk (CVE-2026-41089) 2h ago CVE-2026-41089, a critical Windows Netlogon RCE flaw that allows remote code execution, is now actively exploited in the wild. Secure Code Warrior connects developer training to AI usage and code risks 3h ago Secure Code Warrior Adaptive Learning provides risk-based training and tracks outcomes at the code commit level. Brute-force attack triggers Dashlane account lockouts 3h ago Dashlane has confirmed that a brute-force attack targeting user accounts triggered temporary account suspensions and authentication issues. Insight bundles exposure management, patch operations, and XDR into one service 3h ago Insight Managed Exposure Defense helps organizations identify, prioritize, and remediate security vulnerabilities. depthfirst adds pre-install protection against malicious dependencies 3h ago depthfirst introduces Dependency Firewall to block malicious open-source packages before they reach users, systems, or AI agents. PathSolutions brings on-premises AI troubleshooting to NetOps teams 3h ago PathSolutions launches TotalView AI, adding on-premises AI-driven network troubleshooting and root-cause analysis for NetOps teams. Cato cuts vulnerability protection time to 45 minutes with agentic threat research 3h ago Cato agentic threat research reduces time-to-protect for newly disclosed vulnerabilities to 45 minutes, accelerating response. Hyland platform innovations focus on AI governance, context, and agent oversight 4h ago Hyland platform innovations add AI governance, agent management, and contextual data capabilities for enterprises.
FB
@redhat-cloud-services npm scope backdoored with valid signed SLSA provenance; recovered the GitHub commit-search dead-drop C2 markers 1h ago Instagram Meta AI Vulnerability Allegedly Enables Password Reset for Accounts via prompt injection with bot - now patched 10h ago Tracking The Trackers: Commercial Surveillance Occurring on U.S. Army Networks 11h ago Sapphire Sleet Targets macOS in Multi-Stage Intrusion Campaign 12h ago Legitimate-Looking Codex Remote UI Secretly Steals Your AI Tokens 1d ago 179 npm Packages Target Cloud and Finance via oob.moika.tech 1d ago KB4853: Vulnerability Resolved in Veeam Service Provider Console 9.2.1 - "A vulnerability in Veeam Service Provider Console allows for remote code execution." - CVSS 9.4 1d ago Click Or Trick (CVE-2025-59199): Escaping the Sandbox with Windows URIs 1d ago Hawk: Golang tool designed to exfiltrate passwords found via the sshd and su services 1d ago Inside MicrosoftSystem64: A Supply Chain RAT Exfiltrating to HuggingFace 1d ago
20 loaded
HS
hacking: security in practice
1h ago · 20 items
Analyzed 24 months of ransomware leak-site posts. 84% land on weekdays, not at 3am. 1h ago $730k+ raised on Proxmark5 with 2150 backers 1d ago Blue Team tips? 1d ago Do you guys take paper notes or digital ones during studying ? 3d ago How do people actually modify mobile games to increase their power? 3d ago Why Loyalty Programs Are Quietly Becoming a Security Blind Spot 3d ago Samy Kamkar on building viruses, his arrest and privacy in the LLM era 3d ago Is this considered a bug or something else entirely? 4d ago Building Omegle for Exposed Webcams 4d ago AI Cyber Security vs Cyber Defense? In your opinions, which one would be better for a more immediate/stable/higher paying career? 4d ago
20 loaded
SE
SecurityWeek
2h ago · 10 items
Critical Windows Netlogon Vulnerability in Attackers’ Crosshairs 2h ago Dragos Acquires xIoT Security Firm Phosphorus 4h ago As the Pentagon Pushes for Battlefield AI, Some Military Leaders Urge Caution 5h ago 19-Year-Old Linux Kernel Vulnerability Exposes Systems to Root Access 5h ago Recent Palo Alto Networks Vulnerability Exploited for Weeks 7h ago Russian Spies Are Aggressively Seeking Western Technology as Sanctions Bite, Officials Say 2d ago Exploit Code Published for Critical Flowise RCE Vulnerability 2d ago In Other News: Trump Mobile Data Breach, FIFA World Cup Phishing, CISA Responds to Supply Chain Attacks 3d ago Charter Communications Data Breach Could Impact Nearly 5 Million 3d ago MokN Raises $15 Million for Phish-Back Platform 3d ago
TH
The Hacker News
3h ago · 20 items
⚡ Weekly Recap: New Linux Flaw, PAN-OS Exploit, AI-Powered Attacks, OAuth Phishing and More 3h ago China-Aligned Groups Ramp Up Attacks: Dragon Weave Hits Czech Republic & Taiwan 5h ago The Security Growth Platform: Why MSPs Are Moving Beyond vCISO Tools 5h ago OpenAI Codex Authentication Tokens Stolen in codexui-android npm Supply Chain Attack 7h ago Critical WP Maps Pro Flaw Actively Exploited to Create Admin Accounts 8h ago Dutch Authorities Dismantle Botnet Linked to 17 Million Infected Devices 1d ago PAN-OS GlobalProtect Authentication Bypass (CVE-2026-0257) Under Active Exploitation 2d ago ChatGPhish Vulnerability Turns ChatGPT Web Summaries Into a Phishing Surface 2d ago Attackers Use LLM Agent for Post-Exploitation After Marimo CVE-2026-39987 Exploit 3d ago New Russia-Linked GREYVIBE Targets Ukraine with AI-Powered Cyberattacks 3d ago
20 loaded
TI
r/netsec monthly discussion & tool thread 3h ago Poisoning Claude Code: One GitHub Issue to Break the Supply Chain 3h ago Stealing Passwords via HTML Injection Under a Strict CSP 4h ago Subnet discovery through multi-protocol TTL tracing 10h ago OffensiveCon26 YouTube Playlist released 2d ago 1,001 IPs, 64 countries, one operation: mapping a botnet by its back end · HoneyLabs blog 3d ago I evaluated 5 LLM agents on patching real-world CVEs. Here is what I found. 3d ago Fooling around with encrypted reasoning blobs 3d ago CALIF: An AI audit of FreeBSD 3d ago The Word 'Toad' Gave Any Website Full Control of Chrome's Most Popular VPN 3d ago
20 loaded
JH
John Hammond
4h ago · 15 items
A Linux Backdoor is For Sale on the Dark Web 4h ago ContinuumCon Teaser: solst/ice, Zack Korman, & Spencer Alessi!! 2d ago Payload Podcast 007 with Andy Piazza (klrgrz) 3d ago Google served me Malware 5d ago Payload Podcast 007 with Andy Piazza (klrgrz) 5d ago I Built an AI Cybersecurity Research Factory (for CTFs & Vulnerabilities) 14d ago Hack a Drug Lord's Smart Toilet! 16d ago The Payload Podcast 006 17d ago Hackers are Using AI (much scary, very wow) 19d ago JHT Course Launch: Web App Junior Analyst! 30d ago
15 loaded
NA
NahamSec
4h ago · 15 items
How I Found My First $3,000 AI Vulnerability 4h ago This GitHub README Hijacks Your AI and Spreads Like a Virus 14d ago New video: hacking AI coding assistants and IDEs. #bugbounty #ai 14d ago The Bug Bounty Roadmap I'd Follow If I Started Over (With AI) 21d ago Is the AI hype helping or killing your bug bounty dreams? #hacking #bugbounty 21d ago Stop Using AI Connectors Until You Watch This 28d ago One ChatGPT connector. One email. Full AI agent hijack. #BugBounty #PromptInjection #ai #hacking 28d ago This hacker made $40,000 using Claude #ai #hacking #bugbounty 35d ago My Friend Made $40,000 Using Claude Code (Here's How) 35d ago I Learned How to Jailbreak AI Chatbots 42d ago
15 loaded
TR
Microsoft says it will not pursue security researchers after zero-day backlash 4h ago Afghan finance officials targeted by suspected Pakistani cyberespionage campaign 18h ago Unknown hacker group targeted Russian maritime universities, diplomats for nearly two years 18h ago Microsoft calls zero-day releases ‘never justifiable’ as researcher threatens to drop more 3d ago Cruise giant Carnival confirms data breach affecting nearly 6 million people 4d ago
SL
Security Latest
6h ago · 20 items
The Romance Scammer Who Made a Small Fortune Posing as a WWE Superstar 6h ago Websites Can Now Spy on You Through Your Hard Drive 7h ago Cybercrime Crew Claims It Hacked Mike Lindell’s MyPillow 2d ago The White House’s Aliens.gov Site Brags That ICE Arrested More Than 700 US Citizens 2d ago The Pentagon Knew Enemies Could Track Troops’ Phones for Years. Now They Are 4d ago Scammers Are Using Your Real Hotel Reservations to Trick You With Spear-Phishing Attacks 4d ago Internet Starts to Return in Iran After 3-Month Blackout 5d ago US Law Enforcement Warns of ‘Anti-Tech Extremism’ as AI Hatred Grows 6d ago The AI Era Is Creating a Bug-Hunting Arms Race 7d ago The FBI Wants ‘Near Real-Time’ Access to US License Plate Readers 9d ago
20 loaded
SE
Securelist
7h ago · 10 items
Containers on fire: from container escapes to supply chain attacks 7h ago We break down the primary attack vectors in containerized environments: exposed secrets, privilege misconfigurations, API compromise, and supply chain attacks. What’s in the container? Analyzing vulnerabilities, risks and protection with Kaspersky Container Security and the KIRA AI assistant 3d ago What are the main risks for container environments: vulnerabilities, supply chain attacks, configuration errors; how to improve container security and how Kaspersky Container Security with the KIRA AI assistant can help. Pirates in the crosshairs: how one cybercrime gang has been infecting book, movie, and TV show fans for years 4d ago Our experts continue to track attacks targeting consumers of pirated content, both books and movies. 2026 saw the discovery of new target sites with tens of millions of visitors, while the miner based on SilentCryptoMiner gained a RAT modul... Cloud Atlas activity in the second half of 2025 and early 2026: new tools and a new payload 10d ago The experienced Cloud Atlas group remains active, continuing to target government sectors and diplomatic entities in Russia and Belarus, employing both new and established techniques. How an image could compromise your Mac: understanding an ExifTool vulnerability (CVE-2026-3102) 12d ago We explain how a flaw in ExifTool allows attackers to compromise macOS systems via a malicious image (CVE-2026-3102). IT threat evolution in Q1 2026. Mobile statistics 14d ago This report contains mobile threat statistics for Q1 2026, along with noteworthy discoveries and quarterly trends: new versions of SparkCat and Triada. IT threat evolution in Q1 2026. Non-mobile statistics 14d ago The report presents key trends and statistics on malware that targeted personal computers running Windows and macOS, as well as Internet of Things (IoT) devices, during Q1 2026. Kimsuky targets organizations with PebbleDash-based tools 18d ago Kaspersky researchers analyze a range of new PebbleDash-based tools used in recent Kimsuky campaigns and reveal their connection to the AppleSeed malware cluster. State of ransomware in 2026 20d ago Kaspersky researchers are sharing insights into the main ransomware trends for 2026: EDR killers on the rise, switching from data encryption to data leaks, and more. CVE-2025-68670: discovering an RCE vulnerability in xrdp 24d ago During a security assessment of Kaspersky USB Redirector, we discovered CVE-2025-68670: a pre-auth RCE in the xrdp server component. Project maintainers promptly patched the vulnerability.
MS
MSRC Security Update Guide
8h ago · 20 items
CVE-2026-39829 Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh 8h ago CVE-2026-39821 Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna 8h ago CVE-2026-39835 Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh 8h ago CVE-2026-21717 A flaw in V8's string hashing mechanism causes integer-like strings to be hashed to their numeric value, making hash collisions trivially predictable. By crafting a request that causes many such collisions in V8's internal string table, an attacker can significantly degrade performance of the Node.js process. The most common trigger is any endpoint that calls `JSON.parse()` on attacker-controlled input, as JSON parsing automatically internalizes short strings into the affected hash table. This vulnerability affects **20.x, 22.x, 24.x, and 25.x**. 1d ago Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) 1d ago Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) 1d ago Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) 1d ago CVE-2025-23167 A flaw in Node.js 20's HTTP parser allows improper termination of HTTP/1 headers using `\r\n\rX` instead of the required `\r\n\r\n`. This inconsistency enables request smuggling, allowing attackers to bypass proxy-based access controls and submit unauthorized requests. The issue was resolved by upgrading `llhttp` to version 9, which enforces correct header termination. Impact: * This vulnerability affects only Node.js 20.x users prior to the `llhttp` v9 upgrade. 1d ago CVE-2024-36137 A vulnerability has been identified in Node.js, affecting users of the experimental permission model when the --allow-fs-write flag is used. Node.js Permission Model do not operate on file descriptors, however, operations such as fs.fchown or fs.fchmod can use a "read-only" file descriptor to change the owner and permissions of a file. 1d ago CVE-2024-22018 A vulnerability has been identified in Node.js, affecting users of the experimental permission model when the --allow-fs-read flag is used. This flaw arises from an inadequate permission model that fails to restrict file stats through the fs.lstat API. As a result, malicious actors can retrieve stats from files that they do not have explicit read access to. This vulnerability affects all users using the experimental permission model in Node.js 20 and Node.js 21. Please note that at the time this CVE was issued, the permission model is an experimental feature of Node.js. 1d ago
20 loaded
RE
Reverse Engineering
10h ago · 20 items
/r/ReverseEngineering's Weekly Questions Thread 10h ago ThinkPad firmware reverse-engineering toolchain: archived Lenovo BIOS → named SoC pads, EC analysis, CVE diffs, coreboot/OpenCore port scaffolding 1d ago TinyLoad v7 - what i added :D (in memory protection using VEH and alot more) 1d ago [ Removed by Reddit ] 1d ago Snowboard Kids 2 is 100% Decompiled 1d ago usbsnoop — sniff and decode USB device traffic system-wide with eBPF, for reversing proprietary protocols (control/SCSI/HID, no bus analyzer) 1d ago I reverse engineered how Plex gates its Pass features, then wrote a tiny patch that flips them all on (Linux) 1d ago Ghidra 12.1.1 has been released! 3d ago Technical Brief of Planck-99: 34ns Deterministic Malware Classification on MCU-class Hardware (Zero FPU, 27KB footprint) 3d ago VMP 3.5+ Internal Architecture & Heap Dispatch Analysis 3d ago
20 loaded
MA
Malware Analysis & Reports
17h ago · 20 items
How to Unpack FlawedAmmyy - Malware Unpacking Tutorial 17h ago Building A Malware Lab From Scratch! 1d ago A Deeper Look at GLASSWORM's Solana Variant 4d ago Kali365 Activity Surges: Device Code Phishing Is Scaling Fast 4d ago MCP-Powered Malware Traffic Analysis — Benchmarked Against Real Malware 5d ago Deep structural file analysis with MITRE ATT&CK mapping, from the original ClamAV authors (clens.io) 5d ago Not a security person... got hit by an undocumented macOS stealer campaign, reverse engineered it, and tried to take the whole operation down. 5d ago How random program can cause most of antiviruses close himself without telling himself to close 6d ago The War Between Wars: How an IRGC Front Runs Destructive OT and IT Attacks Under Cover of a Ceasefire 6d ago Harvard and 140 other legitimate websites compromised 10d ago
20 loaded
DB
David Bombal
22h ago · 15 items
What are your IoT devices sending? (Let's find out) 22h ago How ISPs Bypass Encrypted DNS to Track All Traffic 3d ago Does Encrypted DNS Keep Your Traffic Private? 4d ago Is it good or bad? 5d ago NVIDIA vs AMD. Which do you think is better? 5d ago Why 75% face API ATTACKS 7d ago WARNING AI watches kids 7d ago 4 Dirty Linux Bugs Expose a Bigger Root Problem 8d ago First 2026 AI zero-day REVEALED 9d ago Government posts passwords in clear text 🤯 9d ago
15 loaded
IP
IppSec
2d ago · 15 items
HackTheBox - Interpreter 2d ago HackTheBox - MonitorsFour 9d ago HackTheBox - Pterodactyl 16d ago HackTheBox - Overwatch 23d ago HackTheBox - Sorcery 37d ago HackTheBox - AirTouch 44d ago HackThebox - Eighteen 51d ago HackTheBox - DarkZero 58d ago HackTheBox - Browsed 65d ago HackTheBox - Conversor 72d ago
15 loaded
MS
Microsoft Security Blog
2d ago · 10 items
Malicious npm packages abuse dependency confusion to profile developer environments 2d ago A dependency confusion campaign leveraged 33 malicious npm packages to collect reconnaissance data from developer and build environments. This report details the attack chain, observed tradecraft, and detection opportunities to help organiz... Microsoft is named a Leader in the 2026 Gartner® Magic Quadrant™ for Endpoint Protection 3d ago Microsoft is named a Leader in the 2026 Gartner® Magic Quadrant™ for Endpoint Protection. Typosquatted npm packages used to steal cloud and CI/CD secrets 3d ago The Mini Shai-Hulud campaign used malicious npm packages to target cloud and CI/CD credentials across developer environments. This report details the attack chain, detection opportunities, and mitigation guidance to help organizations ident... The Gentlemen ransomware: Dissecting a self-propagating Go encryptor 4d ago Microsoft Threat Intelligence presents a comprehensive analysis of The Gentlemen, a Go-based ransomware deployed by affiliates of Storm-2697 that combines per-file ephemeral key encryption with an aggressive self-propagation module to deplo... From poisoned search results to GPU mining: A cryptojacking campaign abusing ScreenConnect and Microsoft .NET utilities 5d ago Microsoft exposes a cryptojacking campaign using SEO poisoning and ScreenConnect to target high-performance PCs, with malicious sites also surfaced through AI chatbots. Microsoft recognized as a Leader in The Forrester Wave™ for Workforce Identity Security Platforms 10d ago Microsoft has been recognized as a Leader in The Forrester Wave™: Workforce Identity Security Platforms, Q2 2026, receiving the highest scores in both the current offering and strategy categories. From edge appliance to enterprise compromise: Multi-stage Linux intrusion via F5 and Confluence 10d ago A multi-stage attack on Linux devices began with an exposed F5 BIG-IP edge appliance and pivoted to an internal Confluence server for credential theft and identity compromise. Learn how the threat actor attempted Kerberos relay and lateral ... Microsoft Security success stories: How St. Luke’s and ManpowerGroup are securing AI foundations 10d ago Read how Microsoft customers embed governance, identity, and cloud security to make protection an enabler of AI growth. What’s new in Microsoft Security: May 2026 11d ago Microsoft Security’s latest updates extend visibility, control, and protection across expanding ecosystems as organizations accelerate AI adoption. Mini Shai Hulud: Compromised @antv npm packages enable CI/CD credential theft 11d ago Compromised @antv npm packages deploy the Mini Shai-Hulud payload to steal CI/CD secrets from Linux-based automation environments. The malware executes during npm install and targets credentials across GitHub, AWS, Kubernetes, Vault, npm, a...
SA
Security - Ars Technica
2d ago · 20 items
Botnet of more than 17 million devices dismantled 2d ago Fed up with vibe coders, dev sneaks data-nuking prompt injection into their code 3d ago Websites have a new way to spy on visitors: Analyzing their SSD activity 4d ago Millions of AI agents imperiled by critical vulnerability in open source package 5d ago Police boast of hacking VPN where criminals "believed themselves to be safe" 9d ago Texas AG sues Meta over claims that WhatsApp doesn't provide end-to-end encryption 9d ago A hacker group is poisoning open source code at an unprecedented scale 10d ago Google publishes exploit code threatening millions of Chromium users 11d ago In stunning display of stupid, secret CISA credentials found in public GitHub repo 12d ago Bug bounty businesses bombarded with AI slop 14d ago
20 loaded
NE
NetworkChuck
2d ago · 15 items
Who actually owns the AI in your company? 2d ago Hermes wasn’t built to compete. It was built to WORK. 4d ago Summer of CCNA - 90 Minute - Session 2 10d ago you need to use Hermes RIGHT NOW!! (goodbye OpenClaw!!) 12d ago Compliance can be frustrating. But....CALMpliance........that's a whole different thing. 25d ago Summer of CCNA LIVE Launch Party 27d ago Learn networking with REAL labs 👉 Join the Summer of CCNA 35d ago Most AI coding tools don’t sandbox on Windows (except one) 38d ago I built a network with gachapon machines 49d ago i didn't want to like this.... 53d ago
15 loaded
CY
CyberScoop
2d ago · 54 items
Tennessee man linked to 764 accused of series of crimes against children dating back to 2022 2d ago Federal audit reveals NIST’s NVD is plagued by poor planning and duplication 3d ago House panel poised to hold hearing centered on AI impact on cyber 3d ago Google security engineer accused of turning confidential search trends into $1.2M win on Polymarket 3d ago Zapier fixes bug chain that researchers say risked widespread account takeover 4d ago OpenAI heralds cybersecurity, election interference safeguard plans for 2026 midterms 4d ago FBI warns US-based law firms to be on the lookout for cybercrime group that steals data in person 4d ago UK spy chief labels AI ‘unstoppable force’ with offensive, defensive ramifications for cyberspace 4d ago CrowdStrike disrupts Glassworm botnet that preyed on open-source supply chain 5d ago Apple open-sources quantum-resistant encryption code 5d ago
54 loaded
BH
Black Hat
2d ago · 15 items
Black Hat Europe 2025 | Flaw And Order: Finding The Needle In The Haystack Of CodeQL Using LLMs 2d ago Black Hat Europe 2025 | A crash course in revealing insecure blind spots for DoS & DDoS 3d ago Black Hat Europe 2025 | Unveiling System Management Mode Memory Corruption Vulnerability Via Fuzzing 3d ago Black Hat Stories | Ari Herbert-Voss, CEO and Founder of RunSybil 3d ago SecTor 2025 | Grand Finale: Cutting Through the Cyber Noise 5d ago SecTor 2025 | Chasing Shadows: Chronicles of Counter-Intelligence from the Citizen Lab 6d ago SecTor 2025 | The Good, the Bad, and the Ugly: Hacking 3 Cloud Providers with 1 Vulnerability 6d ago SecTor 2025 | Security is Easier Before PCB Assembly: Easy Threat Modeling for Hardware 7d ago SecTor 2025 | Scaling the AppSec Program Without Scaling Security Headcount 7d ago SecTor 2025 | Invoking Gemini for Workspace Agents with Simple Google Calendar Invite 8d ago
15 loaded
AL
Alerts
3d ago · 20 items
CISA Adds One Known Exploited Vulnerability to Catalog 3d ago Supply Chain Compromises Impact Nx Console and GitHub Repositories 4d ago CISA urges organizations to implement these recommendations to detect and remediate a potential compromise: CISA Adds Three Known Exploited Vulnerabilities to Catalog 5d ago CISA Adds One Known Exploited Vulnerability to Catalog 6d ago CISA Adds One Known Exploited Vulnerability to Catalog 10d ago CISA Adds Two Known Exploited Vulnerabilities to Catalog 11d ago CISA Adds Seven Known Exploited Vulnerabilities to Catalog 12d ago CISA Adds One Known Exploited Vulnerability to Catalog 17d ago CISA Adds One Known Exploited Vulnerability to Catalog 18d ago CISA Adds One Known Exploited Vulnerability to Catalog 24d ago
20 loaded
AC
All CISA Advisories
3d ago · 20 items
CISA Adds One Known Exploited Vulnerability to Catalog 3d ago ABB EIBPORT 4d ago Jinan USR IOT Technology Limited (PUSR) USR-W610 RS232/485 to Wi-Fi/Ethernet Converter 4d ago ABB Busch-Welcome 2 Wire Door Opener Actuator 4d ago Fourth Frontier Frontier X Mobile Application, Frontier X2 4d ago Schnieider Electric EcoStruxure Machine Expert HVAC 4d ago CP Plus 8 Ch. Network Video Recorder 4d ago Supply Chain Compromises Impact Nx Console and GitHub Repositories 4d ago CISA urges organizations to implement these recommendations to detect and remediate a potential compromise: XCharge C6 4d ago KMW CCTV Security Cameras 4d ago
20 loaded
WE
WeLiveSecurity
3d ago · 20 items
This month in security with Tony Anscombe – May 2026 edition 3d ago ESET APT Activity Report Q4 2025–Q1 2026 4d ago What to consider before asking an AI chatbot for health advice 5d ago BTMOB: A stealthy RAT burrowing deep into Android devices 6d ago Foul play: Fake FIFA websites target soccer fans looking for World Cup tickets, merchandise 10d ago Webworm: New burrowing techniques 12d ago The quest for greater tech independence 13d ago Why geopolitical turmoil is a gift for scammers, and how to stay safe 17d ago FrostyNeighbor: Fresh mischief and digital shenanigans 18d ago Eyes wide open: How to mitigate the security and privacy risks of smart glasses 21d ago
20 loaded
HA
Hak5
4d ago · 15 items
The GitHub Leak Situation Just Got Worse | Threat Wire 4d ago The JavaScript Ecosystem is Falling Apart | Threat Wire 10d ago A TL;DR on Dirty Frag #cybersecurity #threatwire @endingwithali 10d ago Google’s Silent AI Install: What They’re Hiding in Your Files #cybersecurity @endi 10d ago 🔴 [PAYLOAD REVIEW] WiFi Pineapple Pager 📟🍍 15d ago 🔴 [LIVE] Payload Review & 1M Subs! 18d ago 🔴 [LIVE] Hak5 Hits 1 MILLION SUBSCRIBERS 19d ago Why Google’s Silent AI Install is Dangerous | Threat Wire 19d ago The Fatal 4-Byte Error That Just Broke Linux | Threat Wire 24d ago The Worst-Case Scenario for Password Managers | THREAT WIRE 31d ago
15 loaded
TC
The Cyber Mentor
4d ago · 15 items
Real Folks of Cyber | Dan Berger | Day in the Life 4d ago Soft Skills for the Job Market: Communication 10d ago LIVE: 🕵️ HTB Sherlocks! | Cybersecurity | Blue Team 18d ago A Quick Way to Prove Your Cybersecurity Skillset! 19d ago A Guide to LNK File Forensics 31d ago Josh Mason | Real Folks of Cyber | DITL 32d ago Use BLUR-IT to Increase Your OPSEC 40d ago How to Investigate with Windows Prefetch Files 45d ago Cybersecurity Books to Read: DFIR Investigative Mindset 47d ago Bye Bye Bellini! | Andrew Bellini's Farewell Stream | Cybersecurity | AMA 53d ago
15 loaded
CS
Cisco Security Advisory
4d ago · 20 items
Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability 4d ago May 2026: This security advisory provides the details and fix information for a vulnerability that was discovered and fixed after the Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability was disclosed in February 2026. This ... Cisco Nexus 3000 and 9000 Series Switches Border Gateway Protocol Denial of Service Vulnerability 12d ago A vulnerability in the Border Gateway Protocol (BGP) enforce-first-as feature of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an unauthenticated, remote attacker to trigger BGP p... Cisco Secure Workload Unauthorized API Access Vulnerability 12d ago A vulnerability in the access validation of internal REST APIs of Cisco Secure Workload could allow an unauthenticated, remote attacker to access site resources with the privileges of the Site Admin role. This vulnerability is due to insuff... Cisco ThousandEyes Virtual Appliance Authenticated Remote Code Execution Vulnerability 12d ago A vulnerability in the SSL certificate handling of Cisco ThousandEyes Virtual Appliance could allow an authenticated, remote attacker to execute commands on the underlying operating system as the root user. This vulnerability is due to insu... Cisco ThousandEyes Enterprise Agent BrowserBot Command Injection Vulnerability 12d ago A vulnerability in the BrowserBot component of Cisco ThousandEyes Enterprise Agent could have allowed an authenticated, remote attacker to execute arbitrary commands on Agents on behalf of the BrowserBot synthetics orchestration process. Ci... Continued Evolution of Persistence Mechanism Against Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense 12d ago On April 23, 2026, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued an update to V1: Emergency Directive (ED) 25-03: Identify and Mitigate Potential Compromise of Cisco Devices related to Cisco Secure Firewall Adaptiv... Cisco Catalyst SD-WAN Manager Vulnerabilities 18d ago Multiple vulnerabilities in Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow a remote attacker to gain access to sensitive information, elevate privileges, or gain unauthorized access to the application. For more informat... Cisco Crosswork Network Controller and Cisco Network Services Orchestrator Advisory 18d ago Following the initial publication of the Security Advisory about a denial of service (DoS) condition in Cisco Crosswork Network Controller and Cisco Network Services Orchestrator (NSO), additional information has been made available to the ... Cisco Unity Connection Remote Code Execution and Server-Side Request Forgery Vulnerabilities 26d ago Multiple vulnerabilities in Cisco Unity Connection could allow a remote attacker to execute arbitrary code on or conduct server-side request forgery (SSRF) attacks through an affected device. For more information about these vulnerabilities... Cisco Enterprise Chat and Email Lite Agent File Upload Vulnerability 26d ago A vulnerability in the Lite Agent feature of Cisco Enterprise Chat and Email (ECE) could allow an authenticated, remote attacker to conduct browser-based attacks. To exploit this vulnerability, the attacker must have valid credentials for a...
20 loaded
PN
Proofpoint News Feed
5d ago · 10 items
Proofpoint Introduces Active Exploits Protection to Help Organizations Prioritize Vulnerability Patching for Real-World Attacks in the AI Era 5d ago New solution reduces exposure to actively exploited vulnerabilities in minutes by turning intelligence into immediate protection across primary attack paths Disrupts AI-powered exploit- Verizon DBIR: Healthcare Fends Off Increased Social Engineering Attacks 10d ago Proofpoint Integrates with the Claude Compliance API to Extend Data Security and Governance to Claude 11d ago New product integrations bring data protection, insider risk detection, and governance into Claude Enterprise and Claude Platform activity Organizations gain unified visibility across Proofpoint Launches Dedicated MSP Business Unit and Introduces 365 Total Protection for North America 19d ago New MSP Platform business unit, AI-powered all-in-one Microsoft 365 protection, and Marketplace partnership with Pax8 strengthen Proofpoint’s commitment to channel and small and mid-size The spy who logged me in. 23d ago ⁠Mark Kelly⁠, Staff Threat Researcher at ⁠Proofpoint⁠, is discussing their work on "I’d come running back to EU again: TA416 resumes European government espionage campaigns." China-linked threat group TA416 has resumed large-scale phishing ... Proofpoint Establishes Innovation Precedent for Source-Agnostic Modern Enterprise Investigations 26d ago Proofpoint Prism Investigator positioned as first fully autonomous Agentic AI solution to significantly streamline investigations for highly regulated and highly AI and the New Threat Landscape | Sumit Dhawan with NightDragon | RSAC 2026 27d ago The Most Powerful Women Of The Channel 2026: Power 100 28d ago The Power 100 is culled from the ranks of CRN’s 2026 Women of the Channel and spotlights the female executives at vendors and distributors whose insight and influence help drive channel success. AI Security Gaps Create New MSSP Opportunity: Proofpoint 32d ago Claude Mythos Fears Startle Japan's Financial Services Sector 33d ago
HS
Heimdal Security Blog
6d ago · 15 items
Protected: The State of AI Risk Management in 2026 6d ago There is no excerpt because this is a protected post. AI Will Absorb 99.98% of SOC Triage Within a Year, as 79% of IT teams brace for AI-driven workload shift 20d ago Morten Kjaersgaard expects fewer than 500 of three million monthly alerts to need a human analyst in the year ahead. The role is being rebuilt around cases that warrant judgement. Top 10 Cybersecurity Companies in Europe 26d ago Over the last 10-15 years, the cybersecurity scene has gotten increasingly complex, as organizations adopt new technology and hackers evolve more innovative ways to target them. At the same time, data protection and compliance have become m... Heimdal Expands AI Strategy with AI Wingman and Third-Party AI Containment 41d ago Heimdal today unveiled the next phase of its AI strategy, expanding AI Wingman with three new layers - Assist, Triage and SOC - alongside the introduction of Third-Party AI Containment. You Only Know What You’ve Got When Its Gone 66d ago Prepare for the expected. Rehearse an action plan in case of technology failure or cyberattacks. We all know they can happen. Nordic MSPs Can Now Access Heimdal’s Unified Security and Compliance Platform Through Elovade 75d ago Heimdal has appointed Elovade as its official distributor in the Nordic region. The move gives MSPs and resellers across Sweden, Norway, Denmark, Iceland, and Finland direct access to Heimdal's consolidated cybersecurity platform through a ... OpenClaw Incidents Show Why AI Adoption Pressure Puts Companies at Risk 88d ago The OpenClaw security failures show how hasty AI adoption can expose businesses and supply chains to major cyber risk. Heimdal Claims Industry First With a Cyber Essentials Control Mapping for PEDM to Help Organisations Prove Least Privilege 112d ago Heimdal is the first vendor to publish a dedicated Cyber Essentials control mapping for PEDM, setting out how privilege management supports Cyber Essentials requirements and what evidence can be produced to support assessment and assurance. Five Predictions for Cyber Security Trends in 2026 117d ago Morten Kjaersgaard, Heimdal’s Founder, and Adam Pilton, a former cybercrime investigator, predict five cyber security trends for 2026. Heimdal Achieves OPSWAT Gold Certification for Anti-Malware 137d ago Heimdal today announced that its Next-Gen Antivirus (NGAV) with Extended Threat Protection (XTP) has achieved OPSWAT Gold Certification for Anti-Malware, validating its compatibility and effectiveness within OPSWAT’s industry-leading Access...
15 loaded
TM
Smart Contracts for C&C: How ClearFake Hid in Plain Sight on BSC Testnet 6d ago Analyzing Void Dokkaebi’s Cython-Compiled InvisibleFerret Malware 10d ago Inside SHADOW-WATER-063’s Banana RAT: From Build Server to Banking Fraud 13d ago Agentic Governance: Why It Matters Now 14d ago AI agents now act inside the trust boundary with real credentials, and agentic governance is what keeps them from quietly breaking things at machine speed. Analyzing TeamPCP’s Supply Chain Attacks: Checkmarx KICS and elementary-data in CI/CD Credential Theft 19d ago Vibe Hacking: Two AI-Augmented Campaigns Target Government and Financial Sectors in Latin America 21d ago What Is the Instructure Canvas Breach? Impact, Risks, and What Institutions Should Do 22d ago Supporting the National Cyber Strategy: How TrendAI™ Helps 26d ago InstallFix and Claude Code: How Fake Install Pages Lead to Real Compromise 27d ago Quasar Linux (QLNX) – A Silent Foothold in the Supply Chain: Inside a Full-Featured Linux RAT With Rootkit, PAM Backdoor, Credential Harvesting Capabilities 28d ago
20 loaded
KO
Krebs on Security
7d ago · 10 items
Netherlands Seizes 800 Servers, Arrests 2 for Aiding Cyberattacks 7d ago Authorities in the Netherlands have arrested the co-owners of two related Internet hosting companies for operating IT infrastructure used by Russia to carry out cyberattacks, influence operations and disinformation campaigns inside the Euro... Lawmakers Demand Answers as CISA Tries to Contain Data Leak 10d ago Lawmakers in both houses of Congress are demanding answers from the U.S. Cybersecurity & Infrastructure Security Agency (CISA) after KrebsOnSecurity reported this week that a CISA contractor intentionally published AWS GovCloud keys and a v... Alleged Kimwolf Botmaster ‘Dort’ Arrested, Charged in U.S. and Canada 10d ago Canadian authorities on Wednesday arrested a 23-year-old Ottawa man on suspicion of building and operating Kimwolf, a fast spreading Internet-of-Things botnet that enslaved millions of devices for use in a series of massive distributed deni... CISA Admin Leaked AWS GovCloud Keys on Github 13d ago Until this past weekend, a contractor for the Cybersecurity & Infrastructure Security Agency (CISA) maintained a public GitHub repository that exposed credentials to several highly privileged AWS GovCloud accounts and a large number of inte... Patch Tuesday, May 2026 Edition 19d ago Artificial intelligence platforms may be just as susceptible to social engineering as human beings, but they are proving remarkably good at finding security vulnerabilities in human-made computer code. That reality is on full display this m... Canvas Breach Disrupts Schools & Colleges Nationwide 24d ago An ongoing data extortion attack targeting the widely-used education technology platform Canvas disrupted classes and coursework at school districts and universities across the United States today, after a cybercrime group defaced the servi... Anti-DDoS Firm Heaped Attacks on Brazilian ISPs 32d ago A Brazilian tech firm that specializes in protecting networks from distributed denial-of-service (DDoS) attacks has been enabling a botnet responsible for an extended campaign of massive DDoS attacks against other network operators in Brazi... ‘Scattered Spider’ Member ‘Tylerb’ Pleads Guilty 41d ago A 24-year-old British national and senior member of the cybercrime group "Scattered Spider" has pleaded guilty to wire fraud conspiracy and aggravated identity theft. Tyler Robert Buchanan admitted his role in a series of text-message phish... Patch Tuesday, April 2026 Edition 47d ago Microsoft today pushed software updates to fix a staggering 167 security vulnerabilities in its Windows operating systems and related software, including a SharePoint Server zero-day and a publicly disclosed weakness in Windows Defender dub... Russia Hacked Routers to Steal Microsoft Office Tokens 55d ago Hackers linked to Russia's military intelligence units are using known flaws in older Internet routers to mass harvest authentication tokens from Microsoft Office users, security experts warned today. The spying campaign allowed state-backe...
SK
STÖK
8d ago · 15 items
☔️🌅 8d ago Life in the Nordics 🌲 | Foraging Blueberries, Mushrooms & Nosework Training with Our Dogs 281d ago Winter vanlife = good times 883d ago What an experience! Getting a Christmas tree from our own piece of land. #movingupnorth! 889d ago Had to much GLÖGG and lost my camera during - 13371122 - Intigriti + Visma 896d ago IS THIS THE END? 956d ago Escaping the grind and decompiling python 3.9 pyc files to find vulnerabilites 1110d ago How to turn bugs into a "passive" income stream! ft Detectify's Almroot 1351d ago HOW DID THIS HAPPEN!? (13370822 LHE VLOG) 1364d ago Q: How to write a BUG BOUNTY report that actually gets paid? 1481d ago
15 loaded
WE
WeLiveSecurity
10d ago · 28 items
Foul play: Fake FIFA websites target soccer fans looking for World Cup tickets, merchandise 10d ago Webworm: New burrowing techniques 12d ago The quest for greater tech independence 13d ago Why geopolitical turmoil is a gift for scammers, and how to stay safe 17d ago FrostyNeighbor: Fresh mischief and digital shenanigans 18d ago Eyes wide open: How to mitigate the security and privacy risks of smart glasses 21d ago Fake call logs, real payments: How CallPhantom tricks Android users 25d ago Fixing the password problem is as easy as 123456 25d ago A rigged game: ScarCruft compromises gaming platform in a supply-chain attack 27d ago This month in security with Tony Anscombe – April 2026 edition 32d ago
28 loaded
RF
Recorded Future
11d ago · 20 items
The Vulnerability Flood Is Now a Board Conversation. Here's How to Lead It. 11d ago Boards are asking about AI-driven vulnerability discovery. The leaders who answer that question well will come out with more credibility and more resources. Here's how to be one of them. At Mythos Speed: A Defender's Playbook for the AI Vulnerability Surge in 2026 13d ago Frontier AI models like Mythos are making vulnerability discovery fast and cheap. Here's how defenders use threat intelligence and agentic processing to prioritize and act at the same speed. April 2026 CVE Landscape 17d ago In April 2026, Insikt Group® identified 37 high-impact vulnerabilities that should be prioritized for remediation, 35 of which had a Very Critical Recorded Future Risk Score. This represents a 19% increase from last month. NIST NVD Enrichment Policy Change: Prioritizing Vulnerabilities with Attacker Behavior Signals 18d ago NVD enrichment now covers only 15–20% of CVEs. Learn how Recorded Future Vulnerability Intelligence prioritizes risk using real attacker behavior signals. Beyond Acceleration and Automation: How AI + Intelligence Changes Cyber Defense 18d ago The real question in modern cyber defense isn't who has more technology. It's who uses their resources more efficiently. Here's how AI fused with threat intelligence tips that balance. Working in London at the World’s Largest Intelligence Company 24d ago See what it is like to work at the Recorded Future London office. Quantum Risk Explained 25d ago Learn how the "Harvest Now, Decrypt Later" (HNDL) risk exposes long-lived sensitive data today, regardless of when Cryptographically Relevant Quantum Computers (CRQCs) arrive. Recorded Future Named a Leader in the 2026 Gartner® Magic Quadrant™ for Cyberthreat Intelligence Technologies. And there’s more. 26d ago Recorded Future shares exciting developments since being named a leader. Threat Activity Enablers: The Backbone of Today’s Threat Landscape 26d ago Behind every ransomware demand, botnet, or threat activity group is a server sitting in a data center. Hacking Embodied AI 27d ago Embodied AI, intelligent systems in physical forms such as humanoid and quadruped robots, is moving from spectacle to staffing plans.
20 loaded
TL
The Last Watchdog
12d ago · 16 items
GUEST ESSAY: AI can speed up communication, but it can also weaken human connection 12d ago The first warning sign came on stage. Related: Carol Sturka declares her agency I had turned to ChatGPT to help organize research notes for an upcoming keynote. I was pressed for time and wanted help spotting patterns I might have missed. T... News alert: Orchid Security study finds invisible identities now outnumber managed accounts 12d ago NEW YORK, May 19, 2026, CyberNewswireŌĆöOrchid Security, the company solving identity at its core, today released its Identity Gap: 2026 Snapshot report, revealing that the majority of enterprise identity now exists outside the view of iden... MY TAKE: AI agents force a rethink of enterprise service lines as vendors move up the tech stack 14d ago ORLANDO — Companies are pulling AI agents into their daily operations through a dozen side doors. Related: SaaS and AI agents converge One of them was in focus at KB4-CON, KnowBe4’s annual customer conference at the Marriott World Cente... LW ROUNDTABLE: Microsoft Edge normalizes credential exposure — security pros push back 19d ago By design. Two words that have done an awful lot of heavy lifting in the cybersecurity industry over the years. They tend to surface whenever a vendor wants to wave off a serious finding without fixing it. Related: The unending password pro... FIRESIDE CHAT: Cyber insurers deepen SMB security role as supply chain attacks spread 20d ago The cyber insurance industry set out to manage financial risk. Along the way, it has quietly became the security operations provider for a significant share of American small businesses. An $11 billion acquisition agreement announced earlie... News Alert: Lyrie.ai joins Anthropic verification program, unveils protocol for securing AI agents 20d ago DUBAI, United Arab Emirates, May 11, 2026, CyberNewswire—Dubai-founded OTT Cybersecurity LLC today announced acceptance into Anthropic’s Cyber Verification Program and unveiled the Agent Trust Protocol (ATP), an open cryptographic stand... News alert: LuxSci launches HIPAA-compliant email platform for mid-size healthcare market 26d ago CAMBRIDGE, Mass., May 5, 2026, CyberNewswireŌĆöLuxSci, a leading provider of HIPAA compliant secure healthcare communications, today announced the launch of LuxSci Secure High Volume Email for mid-sized healthcare organizations, the industr... SHARED INTEL Q&A: PKI’s unfinished business—’digital passports’ for content, models and agents 32d ago As if keeping track of machine identities wasnŌĆÖt hard enough. AI agents are now arriving by the thousands ŌĆö and most enterprises are just handing them borrowed credentials and hoping for the best. Meanwhile, the cryptographic infrastruc... GUEST ESSAY: How augmented reality (AR) can turn building images into ad space with no control 34d ago Every major building in America has three things: a physical address, a legal owner, and an unmonitored attack surface. Related: Sam Altman's quest to usurp the browswer That surface extends from the ground up through every floor, every fac... FIRESIDE CHAT: Leaked secrets are now the go-to attack vector — and AI is accelerating exposures 35d ago A consequential shift is underway in how enterprise breaches begin. The leaked credential ‚Äî once treated as a hygiene problem ‚Äî has become the primary on-ramp. Related: No easy fixes for AI risk Last August‚Äôs Salesloft campaign was th...
16 loaded
CD
Cyber Defense Magazine
15d ago · 35 items
Why Is Cybersecurity Now A Business Priority, Not Just An IT Function? 15d ago The Security Mistakes Being Repeated With Ai 16d ago The Hidden Risk For IT Subcontractors: When Insurance, Not Security, Costs You The Contract 17d ago Innovator Spotlight: Klever Compliance 17d ago Innovator Spotlight: Radware 17d ago Innovator Spotlight: JScrambler 17d ago Innovators Spotlight: OPSWAT 18d ago The Board Is Asking The Wrong Security Question 19d ago Synthetic Identity Fraud Requires An Equal Focus On Biometrics And Document Verification 20d ago Innovator Spotlight: Iru 20d ago
35 loaded
BF
Blog – Forter
17d ago · 10 items
Japan’s 3DS Mandate: One Year In 17d ago One-Click Refunds Are Not as Hard as You Think 26d ago Toys“R”Us Japan Implements Forter’s Fraud Management and Payment Optimization Solutions 33d ago More of What Matters: Forter’s April Product Release 34d ago If AI Agents Can’t Find You, Do You Even Exist? 34d ago Return Policy Abuse Is Theft. It’s Time to Treat It That Way. 47d ago What Is Return Abuse and Why Is It Getting Harder to Stop? 47d ago Return Abuse Prevention Starts with the Person, Not the Policy 47d ago Shoptalk 2026: Retail in the Age of AI 56d ago Visa’s Updated VAMP Program: What Merchants Need to Know 67d ago
M3
Microsoft 365 Blog
20d ago · 10 items
New and improved: Agent governance, intelligent workflows, and connected app experiences 20d ago See what's new in Copilot Studio, April 2026: updates to workflows, more control over agent operations, and an expanded agent usage estimator. Copilot Cowork: From conversation to action across skills, integrations, and devices 27d ago Today, we’re announcing additional capabilities in Cowork to expand on what it can make possible for you. Microsoft 365 Copilot, human agency, and the opportunity for every organization 27d ago Empower your organization with Microsoft 365 Copilot—AI that bridges human potential and business outcomes for the future of work. Microsoft Agent 365, now generally available, expands capabilities and integrations 31d ago ​We’re announcing the general availability of Agent 365, plus previews of new capabilities to discover and manage shadow AI agents. Learn more. Copilot’s agentic capabilities in Word, Excel, and PowerPoint are generally available 39d ago Copilot's newest features are now generally available as the default experience across all Microsoft 365 subscriptions. Bring your everyday business apps into the flow of work with agents in Microsoft 365 Copilot 49d ago Discover how apps integrate with AI agents to power Copilot experiences, streamline workflows, and turn business context into action. New and improved: Multi-agent orchestration, connected experiences, and faster prompt iteration 60d ago Explore what's new in Copilot Studio: Multi-agent systems now generally available, plus updates to the Prompt Editor and governance controls. Copilot Cowork: Now available in Frontier 63d ago Today, Copilot Cowork—designed for long-running, multi-step work in Microsoft 365—is available via the Frontier program. Copilot Cowork: A new way of getting work done 84d ago Copilot Cowork turns intent into action across Microsoft 365—automating tasks, coordinating workflows, and keeping you in control. See how. Powering Frontier Transformation with Copilot and agents 84d ago Wave 3 of Microsoft 365 Copilot introduces Copilot Cowork, multi‑model intelligence, and enterprise‑ready AI—built to get real work done.
SM
Azure IaaS: Defense in depth built on secure-by-design principles 28d ago Explore how Azure IaaS uses defense in depth and secure-by-design principles to deliver layered, scalable cloud security across compute, network, and data. Enforcing trust and transparency: Open-sourcing the Azure Integrated HSM 31d ago Learn how Microsoft Azure Integrated HSM delivers hardware‑enforced key protection in the cloud, combining FIPS Level 3 assurances with transparency and open‑source collaboration. Azure IaaS: Keep critical applications running with built-in resiliency at scale 61d ago Learn how Azure IaaS helps organizations start from a resilient platform foundation with availability, continuity, and recovery capabilities. Azure IaaS: Explore new resources for building a stronger, more efficient infrastructure 89d ago Learn how Azure IaaS helps you modernize infrastructure, improve performance and resilience, optimize costs, and prepare for AI workloads. Read more. Azure reliability, resiliency, and recoverability: Build continuity by design 104d ago Learn how Azure reliability, resiliency, and recovery capabilities work together to improve cloud continuity. Read more. Microsoft strengthens sovereign cloud capabilities with new services 208d ago Discover new Microsoft digital sovereignty capabilities and upcoming features across AI, security, and productivity, to address sovereign cloud needs. Enhancing software supply chain security with Microsoft’s Signing Transparency 210d ago Microsoft Signing Transparency delivers verifiable code integrity and tamper-evident software releases for stronger supply chain security. Oracle Database@Azure offers new features, regions, and programs to unlock data and AI innovation 229d ago Migrate Oracle solutions to the cloud with a trusted, enterprise-ready platform from Microsoft and Oracle. Learn more. Building secure, scalable AI in the cloud with Microsoft Azure 335d ago Forrester Research shows how Azure helps enterprises scale generative AI securely, unlocking real business value. Learn more. Enhance AI security with Azure Prompt Shields and Azure AI Content Safety 361d ago Learn how Prompt Shields and Azure AI Content Safety can help guard against direct and indirect threats to your LLM-based solution.
DE
DEFCONConference
33d ago · 15 items
DEF CON 34 - DEF CON Policy Announcement - Katie Noble, Heather West 33d ago DEF CON 33 - DisguiseDelimit: Exploiting Synology NAS with Delimiters and Novel Tricks - Ryan Emmon 102d ago DEF CON 33 - Browser Extension Clickjacking: One Click and Your Credit Card Is Stolen - Marek Tóth 102d ago DEF CON 33 - Can't Stop the ROP: Automating Universal ASLR Bypasses - Bramwell Brizendine 102d ago DEF CON 33 Recon Village - How to Become One of Them: Deep Cover Ops - Sean Jones, Kaloyan Ivanov 152d ago DEF CON 33 Recon Village - Inside the Shadows Tracking RaaS Groups, Cyber Threats - John Dilgen 152d ago DEF CON 33 Recon Village - Autonomous Video Hunter AI Agents for Real Time OSINT - Kevin Dela Rosa 152d ago DEF CON 33 Recon Village - A Playbook for Integration Servers - Ryan Bonner, Guðmundur Karlsson 152d ago DEF CON 33 Recon Village - Mapping the Shadow War From Estonia to Ukraine - Evgueni Erchov 152d ago DEF CON 33 Recon Village - Building Local Knowledge Graphs for OSINT - Donald Pellegrino 152d ago
15 loaded
CC
CISA Cybersecurity Advisories
41d ago · 10 items
Defending Against China-Nexus Covert Networks of Compromised Devices 41d ago Iranian-Affiliated Cyber Actors Exploit Programmable Logic Controllers Across US Critical Infrastructure 56d ago U.S. organizations should review the TTPs and IOCs in this advisory for indications of current or historical activity on their networks, and apply the Pro-Russia Hacktivists Conduct Opportunistic Attacks Against US and Global Critical Infrastructure 177d ago The authoring organizations encourage critical infrastructure organizations to implement the recommendations in this advisory to reduce the likelihood and CISA Shares Lessons Learned from an Incident Response Engagement 252d ago Countering Chinese State-Sponsored Actors Compromise of Networks Worldwide to Feed Global Espionage System 280d ago The authoring agencies strongly urge network defenders to hunt for malicious activity and to apply the mitigations in this CSA to reduce the threat of Chinese CISA and USCG Identify Areas for Cyber Hygiene Improvement After Conducting Proactive Threat Hunt at US Critical Infrastructure Organization 306d ago #StopRansomware: Interlock 315d ago Ransomware Actors Exploit Unpatched SimpleHelp Remote Monitoring and Management to Compromise Utility Billing Software Provider 354d ago CISA urges software vendors, downstream customers, and end users to immediately implement the Mitigations listed in this advisory based on confirmed compromise Threat Actors Deploy LummaC2 Malware to Exfiltrate Sensitive Data from Organizations 376d ago Russian GRU Targeting Western Logistics Entities and Technology Companies 385d ago Executives and network defenders should recognize the elevated threat of unit 26165 targeting, increase monitoring and threat hunting for known TTPs and IOCs
BA
Business Fraud at Network Scale: What the $3.5B Medicare Hospice Crisis Reveals About Know Your Business 45d ago What is Customer Due Diligence (CDD) 69d ago Why Legacy Identity Verification Can’t Stop AI-Enabled Fraud 72d ago AML, KYC and Identity Verification in Australia 81d ago When Fraud Becomes Background Noise: The Industrialization of Digital Deception 147d ago The Efficiency Era of KYC: Reverification and Reusable Identity Take Center Stage 147d ago The End of Static KYB: Business Identity in Constant Motion 147d ago Know Your Agent: The Next Chapter in Digital Trust 147d ago When Rules Move Faster Than Readiness: Regulatory Adaptability as a Competitive Advantage 147d ago Digital Identity Trends 2026: AI Fraud, Compliance, and Orchestration 166d ago
13 loaded
LI
LiveOverflow
88d ago · 15 items
Security-driven Rapid Release - Pwn2Own Documentary (Part 4) 88d ago Firefox JIT Bug - Pwn2Own Documentary (Part 3) 91d ago The First Exploit - Pwn2Own Documentary (Part 2) 95d ago The World's Hardest Hacking Competition - Pwn2Own Documentary (Part 1) 98d ago From Zero to Zero Day (and beyond) - Life of a Hacker: Jonathan Jacobi 418d ago The German Hacking Championship 444d ago Do you know this common Go vulnerability? 458d ago Google's Mobile VRP Behind the Scenes with Kristoffer Blasiak (Hextree Podcast Ep.1) 593d ago My theory on how the webp 0day was discovered #short 609d ago My theory on how the webp 0day was discovered (BLASTPASS) 610d ago
15 loaded
HA
HackerSploit
418d ago · 15 items
How FIN6 Exfiltrates Files Over FTP 418d ago Emulating FIN6 - Active Directory Enumeration Made EASY 469d ago The SECRET to Embedding Metasploit Payloads in VBA Macros 474d ago Offensive VBA 0x4 - Reverse Shell Macro with Powercat 482d ago Offensive VBA 0x3 - Developing PowerShell Droppers 488d ago Offensive VBA 0x2 - Program & Command Execution 493d ago Offensive VBA 0x1 - Your First Macro 495d ago Emulating FIN6 - Gaining Initial Access (Office Word Macro) 500d ago FIN6 Adversary Emulation Plan (TTPs & Tooling) 504d ago Developing An Adversary Emulation Plan 504d ago
15 loaded
TH
Threatpost
1370d ago · 10 items
Student Loan Breach Exposes 2.5M Records 1370d ago 2.5 million people were affected, in a breach that could spell more trouble down the line. Watering Hole Attacks Push ScanBox Keylogger 1371d ago Researchers uncover a watering hole attack likely carried out by APT TA423, which attempts to plant the ScanBox JavaScript-based reconnaissance tool. Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms 1372d ago Over 130 companies tangled in sprawling phishing campaign that spoofed a multi-factor authentication system. Ransomware Attacks are on the Rise 1375d ago Lockbit is by far this summer’s most prolific ransomware group, trailed by two offshoots of the Conti group. Cybercriminals Are Selling Access to Chinese Surveillance Cameras 1375d ago Tens of thousands of cameras have failed to patch a critical, 11-month-old CVE, leaving thousands of organizations exposed. Twitter Whistleblower Complaint: The TL;DR Version 1377d ago Twitter is blasted for security and privacy lapses by the company’s former head of security who alleges the social media giant’s actions amount to a national security risk. Firewall Bug Under Active Attack Triggers CISA Warning 1378d ago CISA is warning that Palo Alto Networks’ PAN-OS is under active attack and needs to be patched ASAP. Fake Reservation Links Prey on Weary Travelers 1379d ago Fake travel reservations are exacting more pain from the travel weary, already dealing with the misery of canceled flights and overbooked hotels. iPhone Users Urged to Update to Patch 2 Zero-Days 1382d ago Separate fixes to macOS and iOS patch respective flaws in the kernel and WebKit that can allow threat actors to take over devices and are under attack. Google Patches Chrome’s Fifth Zero-Day of the Year 1383d ago An insufficient validation input flaw, one of 11 patched in an update this week, could allow for arbitrary code execution and is under active attack.

No matching sources found.