{
  "version": "https://jsonfeed.org/version/1.1",
  "title": "Whats The Hax?: Threat intelligence headlines",
  "home_page_url": "https://whatsthehax.com/threat-intel.html",
  "feed_url": "https://whatsthehax.com/feeds/threat-intel.json",
  "description": "Headlines indexed by Whats The Hax?, attributed and linked to their original publishers.",
  "authors": [
    {
      "name": "Super Tiny Software LLC"
    }
  ],
  "items": [
    {
      "id": "urn:sha256:9fe6be474acc49c38f5cfaf115b0d2636c75588e283f4ecbe524457d1202c0cc",
      "url": "https://securelist.com/toy-ghouls-new-hivemq-and-element-backdoors/121270/",
      "title": "Angry Birds: Toy Ghouls’ new toys",
      "summary": "Headline from Securelist; open the original publisher for the full article.",
      "date_published": "2026-09-04T00:00:00Z",
      "date_modified": "2026-09-04T00:00:00Z",
      "authors": [
        {
          "name": "Securelist"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:eac188700be16a552143f8b0c9883ff74b9f9b2e1c64642bbe7faad157d7196e",
      "url": "https://securelist.com/mirage-kitten-new-backdoors-noderabbit-pollcat/121244/",
      "title": "Mirage Kitten targeting aviation and FinTech sectors across the Middle East and Africa with a new malware set",
      "summary": "Headline from Securelist; open the original publisher for the full article.",
      "date_published": "2026-09-01T00:00:00Z",
      "date_modified": "2026-09-01T00:00:00Z",
      "authors": [
        {
          "name": "Securelist"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:f0e556fd3c0033d9dfc3b0dca561c136730be01c9850f8ae9439fa2b8e2ef670",
      "url": "https://securelist.com/valleyrat-backdoor-adware/121175/",
      "title": "ValleyRAT masquerading as adware",
      "summary": "Headline from Securelist; open the original publisher for the full article.",
      "date_published": "2026-08-31T00:00:00Z",
      "date_modified": "2026-08-31T00:00:00Z",
      "authors": [
        {
          "name": "Securelist"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:ddf86d51562485adca6fa45b9b78a5be15fdf77c17876a1b5bd35ce90903509a",
      "url": "https://securelist.com/industrial-threat-report-q2-2026/121159/",
      "title": "Threat landscape for industrial automation systems. Q2 2026",
      "summary": "Headline from Securelist; open the original publisher for the full article.",
      "date_published": "2026-08-27T00:00:00Z",
      "date_modified": "2026-08-27T00:00:00Z",
      "authors": [
        {
          "name": "Securelist"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:b298462301ed0275f7027d47844b0303140fd808617ba7c6e8008f5b7ece26e8",
      "url": "https://securelist.com/vulnerabilities-and-exploits-in-q2-2026/121091/",
      "title": "Exploits and vulnerabilities in Q2 2026",
      "summary": "Headline from Securelist; open the original publisher for the full article.",
      "date_published": "2026-08-26T00:00:00Z",
      "date_modified": "2026-08-26T00:00:00Z",
      "authors": [
        {
          "name": "Securelist"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:c0486c254f229048697736b3ec5be10bcbe61e4ea33ec744dfb9a92615b8e55d",
      "url": "https://securelist.com/android-head-unit-malware/121106/",
      "title": "The invisible passenger in your car",
      "summary": "Headline from Securelist; open the original publisher for the full article.",
      "date_published": "2026-08-21T00:00:00Z",
      "date_modified": "2026-08-21T00:00:00Z",
      "authors": [
        {
          "name": "Securelist"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:9232cff77ce0ef8f62b1586a231989d5db6b27cdeaa4460ee6bde794a9fc4608",
      "url": "https://securelist.com/honeymyte-coolclient-driver-rootkit/121028/",
      "title": "APT group HoneyMyte upgrades CoolClient: the backdoor gets a kernel-level Windows rootkit",
      "summary": "Headline from Securelist; open the original publisher for the full article.",
      "date_published": "2026-08-14T00:00:00Z",
      "date_modified": "2026-08-14T00:00:00Z",
      "authors": [
        {
          "name": "Securelist"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:42d8bff3928fddf8872e28bba00bde329d52761c6315cece983a2bf3493a2b46",
      "url": "https://securelist.com/armored-likho-still-toolkit/121033/",
      "title": "Armored Likho expands its cyber-espionage toolkit",
      "summary": "Headline from Securelist; open the original publisher for the full article.",
      "date_published": "2026-08-13T00:00:00Z",
      "date_modified": "2026-08-13T00:00:00Z",
      "authors": [
        {
          "name": "Securelist"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:5533e30134fef6c13dbf03eab738318c0e477dc0073572b16135eb57695304d4",
      "url": "https://securelist.com/tr/head-mare-targets-trueconf-server-with-phantomcore/120988/",
      "title": "Head Mare APT is exploiting vulnerabilities in an unpatched TrueConf server to deliver PhantomCore and PhantomGraph to video conference participants",
      "summary": "Headline from Securelist; open the original publisher for the full article.",
      "date_published": "2026-08-11T00:00:00Z",
      "date_modified": "2026-08-11T00:00:00Z",
      "authors": [
        {
          "name": "Securelist"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:32961d8cee58e088f99c67f8a42e1eca7dcc2c2ff99df237090f607a716552ef",
      "url": "https://securelist.com/project-cav3rn-continues/120991/",
      "title": "Project CAV3RN continues: Google Apps Script as C2 relay and DNS-based C2 channel selection",
      "summary": "Headline from Securelist; open the original publisher for the full article.",
      "date_published": "2026-08-11T00:00:00Z",
      "date_modified": "2026-08-11T00:00:00Z",
      "authors": [
        {
          "name": "Securelist"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:863ee2f1c66746b239c80c1ffb445d68802d6f76cc0a089631cb15cd6506da31",
      "url": "https://www.recordedfuture.com/blog/automated-signature-creation",
      "title": "Recorded Future Announces Automated Signature Creation, Accelerating Vulnerability Prioritization",
      "summary": "Headline from Recorded Future; open the original publisher for the full article.",
      "date_published": "2026-09-04T00:00:00Z",
      "date_modified": "2026-09-04T00:00:00Z",
      "authors": [
        {
          "name": "Recorded Future"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:fa44b44a1fa5a7ac4ba22bb6153b74ebc98c424632dd731defbbc77bd4bfdc4d",
      "url": "https://www.recordedfuture.com/research/h1-2026-malware-vulnerability-trends",
      "title": "H1 2026 Malware Vulnerability Trends",
      "summary": "Headline from Recorded Future; open the original publisher for the full article.",
      "date_published": "2026-09-03T00:00:00Z",
      "date_modified": "2026-09-03T00:00:00Z",
      "authors": [
        {
          "name": "Recorded Future"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:af25ee96fda76ed3bce506d7ec324997c7a3d4c28a984bd0de65f410b06cf877",
      "url": "https://www.recordedfuture.com/blog/agentic-soc-real-defense",
      "title": "The Agentic SOC – From AI Theater to Real Defense",
      "summary": "Headline from Recorded Future; open the original publisher for the full article.",
      "date_published": "2026-09-01T00:00:00Z",
      "date_modified": "2026-09-01T00:00:00Z",
      "authors": [
        {
          "name": "Recorded Future"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:6bb5f30d0037bd12215df6ed12f5d59124b500ac2f3ddc2a56b521c7cadd70f3",
      "url": "https://www.recordedfuture.com/research/bluedelta-targets-with-hookedge",
      "title": "BlueDelta Targets Defense and Diplomacy with HOOKEDGE",
      "summary": "Headline from Recorded Future; open the original publisher for the full article.",
      "date_published": "2026-08-27T00:00:00Z",
      "date_modified": "2026-08-27T00:00:00Z",
      "authors": [
        {
          "name": "Recorded Future"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:e44f35c00ea39bc161ccf73955a6a9cdb7b8343bb9309384b8f15e170660bc2f",
      "url": "https://www.recordedfuture.com/blog/ai-alert-filtering",
      "title": "Recorded Future Launches AI Alert Filtering",
      "summary": "Headline from Recorded Future; open the original publisher for the full article.",
      "date_published": "2026-08-26T00:00:00Z",
      "date_modified": "2026-08-26T00:00:00Z",
      "authors": [
        {
          "name": "Recorded Future"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:127e741f10ecc0f49a79f218c8927392e0d4d2ab4bd4baef4bf0757766381808",
      "url": "https://www.recordedfuture.com/blog/mexico-cybersecurity-plan",
      "title": "Mexico’s Cybersecurity Plan 2025-2030: Turning Ambition Into Defense",
      "summary": "Headline from Recorded Future; open the original publisher for the full article.",
      "date_published": "2026-08-25T00:00:00Z",
      "date_modified": "2026-08-25T00:00:00Z",
      "authors": [
        {
          "name": "Recorded Future"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:9b80f99a8be898017531f6f792723f949021377f7394cb88fff7462cb201eb44",
      "url": "https://www.recordedfuture.com/blog/native-risk-ratings",
      "title": "Recorded Future Launches 6 New Capabilities for Third-Party Risk",
      "summary": "Headline from Recorded Future; open the original publisher for the full article.",
      "date_published": "2026-08-19T00:00:00Z",
      "date_modified": "2026-08-19T00:00:00Z",
      "authors": [
        {
          "name": "Recorded Future"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:f5b07a7c0ba9976efd1223c8f08376f1af0f009299aadeef843dbd5cbb66b0a1",
      "url": "https://www.recordedfuture.com/blog/copycop-targets-ai-investment",
      "title": "CopyCop Targets AI Investment in Armenia",
      "summary": "Headline from Recorded Future; open the original publisher for the full article.",
      "date_published": "2026-08-18T00:00:00Z",
      "date_modified": "2026-08-18T00:00:00Z",
      "authors": [
        {
          "name": "Recorded Future"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:41b2e7fbab3d9954aa736f5662c0b9b07e6bc71e0ab79be320624d2b0517d413",
      "url": "https://www.recordedfuture.com/research/purpledelta-fraudulent-employment-operations",
      "title": "PurpleDelta's Fraudulent Employment Operations",
      "summary": "Headline from Recorded Future; open the original publisher for the full article.",
      "date_published": "2026-08-18T00:00:00Z",
      "date_modified": "2026-08-18T00:00:00Z",
      "authors": [
        {
          "name": "Recorded Future"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:181c8c0329caa4a38e1761cca8134b6a5a9753690374b6cde7bd24160743b383",
      "url": "https://www.recordedfuture.com/research/malware-crypting-services-threat-actors",
      "title": "Malware Crypting Services and the Threat Actors Who Sell Them",
      "summary": "Headline from Recorded Future; open the original publisher for the full article.",
      "date_published": "2026-08-13T00:00:00Z",
      "date_modified": "2026-08-13T00:00:00Z",
      "authors": [
        {
          "name": "Recorded Future"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:9c7dcfa9ea75487b11cd09d661e392eecc3f790c055aba4e052481b6f99a739d",
      "url": "https://www.recordedfuture.com/blog/mines-minds-machines",
      "title": "Mines, Minds, and Machines: The Journey of AI",
      "summary": "Headline from Recorded Future; open the original publisher for the full article.",
      "date_published": "2026-08-11T00:00:00Z",
      "date_modified": "2026-08-11T00:00:00Z",
      "authors": [
        {
          "name": "Recorded Future"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:90e55c1563dd0daa22e978b0e84385d29ab359383d8716d037a69e39216d4149",
      "url": "https://www.recordedfuture.com/blog/hugging-face-cheap-persistence",
      "title": "The Hugging Face Hack Was Cheap Persistence at Work",
      "summary": "Headline from Recorded Future; open the original publisher for the full article.",
      "date_published": "2026-08-10T00:00:00Z",
      "date_modified": "2026-08-10T00:00:00Z",
      "authors": [
        {
          "name": "Recorded Future"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:5c5f75a9d399e71665aa7fc3d439477f6844993ece3798627470837ac27c867d",
      "url": "https://www.recordedfuture.com/blog/july-2026-cve-landscape",
      "title": "July 2026 CVE Landscape",
      "summary": "Headline from Recorded Future; open the original publisher for the full article.",
      "date_published": "2026-08-07T00:00:00Z",
      "date_modified": "2026-08-07T00:00:00Z",
      "authors": [
        {
          "name": "Recorded Future"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:45b9d7abda7902cc1b1b157337f3efc3ffb75cd3a4b84d39f45f1d072199c717",
      "url": "https://www.recordedfuture.com/research/emerging-threats-neurotechnology",
      "title": "Emerging Threats to Neurotechnology",
      "summary": "Headline from Recorded Future; open the original publisher for the full article.",
      "date_published": "2026-08-06T00:00:00Z",
      "date_modified": "2026-08-06T00:00:00Z",
      "authors": [
        {
          "name": "Recorded Future"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:7450ac0b581fef682ecf665b82dda38ffc3d9ce9122f03e5ef5f578946c62cf4",
      "url": "https://www.recordedfuture.com/blog/hugging-face-ai-safety",
      "title": "Hype vs. Reality: What the Hugging Face Incident Means for AI Safety",
      "summary": "Headline from Recorded Future; open the original publisher for the full article.",
      "date_published": "2026-08-05T00:00:00Z",
      "date_modified": "2026-08-05T00:00:00Z",
      "authors": [
        {
          "name": "Recorded Future"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:d5fb7b2c67082feeb27e99f8a90896c539e6a0daae5bab42bd098096c5e428dc",
      "url": "https://www.recordedfuture.com/blog/ai-changing-threat-intelligence",
      "title": "8 Ways AI is Changing Threat Intelligence",
      "summary": "Headline from Recorded Future; open the original publisher for the full article.",
      "date_published": "2026-08-03T00:00:00Z",
      "date_modified": "2026-08-03T00:00:00Z",
      "authors": [
        {
          "name": "Recorded Future"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:df48290d79808c3fc4f6e23e3c1d8237a755ed4963c618471d1173763da42ece",
      "url": "https://www.recordedfuture.com/blog/ai-generated-extortion",
      "title": "Dealing with AI-Generated Extortion",
      "summary": "Headline from Recorded Future; open the original publisher for the full article.",
      "date_published": "2026-07-30T00:00:00Z",
      "date_modified": "2026-07-30T00:00:00Z",
      "authors": [
        {
          "name": "Recorded Future"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:fe215ebe4783a4d8894c676022b77d6b3f4438d3601f75bb7a5baae431fb2128",
      "url": "https://www.recordedfuture.com/research/iran-violent-extremism-landscape",
      "title": "Iran War’s Secondary Effects Shape 2026 US Violent Extremism",
      "summary": "Headline from Recorded Future; open the original publisher for the full article.",
      "date_published": "2026-07-30T00:00:00Z",
      "date_modified": "2026-07-30T00:00:00Z",
      "authors": [
        {
          "name": "Recorded Future"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:5daa282b02c41ecdfa81fb4c276ef5de7bd3b3e16c47efde1565676522e50aad",
      "url": "https://www.recordedfuture.com/blog/ransomware-is-the-scoreboard",
      "title": "Ransomware is the Scoreboard",
      "summary": "Headline from Recorded Future; open the original publisher for the full article.",
      "date_published": "2026-07-24T00:00:00Z",
      "date_modified": "2026-07-24T00:00:00Z",
      "authors": [
        {
          "name": "Recorded Future"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:ac4457a397444e25dabd916cc7372e9a115762df1bdcdac1d72c20f2d42449fd",
      "url": "https://www.recordedfuture.com/research/tag-195-evolves-maas-ecosystem",
      "title": "TAG-195 Upgrades MaaS Ecosystem with Modular Tools",
      "summary": "Headline from Recorded Future; open the original publisher for the full article.",
      "date_published": "2026-07-23T00:00:00Z",
      "date_modified": "2026-07-23T00:00:00Z",
      "authors": [
        {
          "name": "Recorded Future"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:595fc3f520e566f1a390ad54a3c60fe605d3f56a74346f4fe25f280ec2b85f66",
      "url": "https://www.proofpoint.com/us/newsroom/press-releases/proofpoint-soc-analyst-agent-openai-daybreak",
      "title": "Proofpoint Brings OpenAI GPT Cyber Models into Security Operations to Help Defenders Investigate Threats Faster",
      "summary": "Headline from Proofpoint News Feed; open the original publisher for the full article.",
      "date_published": "2026-09-03T00:00:00Z",
      "date_modified": "2026-09-03T00:00:00Z",
      "authors": [
        {
          "name": "Proofpoint News Feed"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:f5017f69e9de35098aeacde3591c731a1cc7194b65ca276e20f6193390230814",
      "url": "https://www.proofpoint.com/us/newsroom/news/cybercriminals-turn-indirect-prompt-injection-attacks",
      "title": "Cybercriminals Turn to Indirect Prompt Injection Attacks",
      "summary": "Headline from Proofpoint News Feed; open the original publisher for the full article.",
      "date_published": "2026-08-13T00:00:00Z",
      "date_modified": "2026-08-13T00:00:00Z",
      "authors": [
        {
          "name": "Proofpoint News Feed"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:caf9a415eda01667ce20bad247c938c02b7f0e778548a2f966b90ea5a91eb45e",
      "url": "https://www.proofpoint.com/us/newsroom/news/russian-hackers-can-steal-emails-without-click",
      "title": "Russian hackers can steal emails without a click",
      "summary": "Headline from Proofpoint News Feed; open the original publisher for the full article.",
      "date_published": "2026-08-07T00:00:00Z",
      "date_modified": "2026-08-07T00:00:00Z",
      "authors": [
        {
          "name": "Proofpoint News Feed"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:dbd169078d80e9f6dedae766b2e9e3fdafc0abb34358a19b0735289262379c86",
      "url": "https://www.proofpoint.com/us/newsroom/press-releases/proofpoint-joins-google-unified-security-recommended-program-help",
      "title": "Proofpoint Joins Google Unified Security Recommended Program to Help Organizations Defend Against Today’s Most Sophisticated Threats",
      "summary": "Headline from Proofpoint News Feed; open the original publisher for the full article.",
      "date_published": "2026-08-04T00:00:00Z",
      "date_modified": "2026-08-04T00:00:00Z",
      "authors": [
        {
          "name": "Proofpoint News Feed"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:9ab8c1a0adf3cf30bfb9141812bd54858c0c7a6a99f71823ff4c5b05dbb516e7",
      "url": "https://www.proofpoint.com/us/newsroom/press-releases/proofpoint-launches-oem-program-help-security-providers-embed-trusted-threat",
      "title": "Proofpoint Launches OEM Program to Help Security Providers Embed Trusted Threat Intelligence and Detection Capabilities",
      "summary": "Headline from Proofpoint News Feed; open the original publisher for the full article.",
      "date_published": "2026-08-04T00:00:00Z",
      "date_modified": "2026-08-04T00:00:00Z",
      "authors": [
        {
          "name": "Proofpoint News Feed"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:8cc7f97aa7e1251f57e6bf63e0ea3ae3f6fe42dbd0e64dfbc46c82e8acb1c94b",
      "url": "https://www.proofpoint.com/us/newsroom/news/max-severity-exchange-server-flaw-under-active-exploitation-kremlin-hackers",
      "title": "Max-severity Exchange server flaw under active exploitation by Kremlin hackers",
      "summary": "Headline from Proofpoint News Feed; open the original publisher for the full article.",
      "date_published": "2026-07-30T00:00:00Z",
      "date_modified": "2026-07-30T00:00:00Z",
      "authors": [
        {
          "name": "Proofpoint News Feed"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:807df8150770ebde23c24bb281cd72b2e6db06f217d9c7f7f1221d12bed64375",
      "url": "https://www.proofpoint.com/us/newsroom/news/new-warnings-russian-operatives-are-targeting-emails-us-nuclear-scientists-and-defense",
      "title": "New warnings that Russian operatives are targeting the emails of US nuclear scientists and defense contractors",
      "summary": "Headline from Proofpoint News Feed; open the original publisher for the full article.",
      "date_published": "2026-07-23T00:00:00Z",
      "date_modified": "2026-07-23T00:00:00Z",
      "authors": [
        {
          "name": "Proofpoint News Feed"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:e3542de48ee9f9fcef81c9d802e6be5aea224f9bebd9dea38652643ef0a7308f",
      "url": "https://www.proofpoint.com/us/newsroom/news/russian-espionage-group-exploited-zimbra-zero-day-steal-mail-and-2fa-codes",
      "title": "Russian Espionage Group Exploited Zimbra Zero-Day to Steal Mail and 2FA Codes",
      "summary": "Headline from Proofpoint News Feed; open the original publisher for the full article.",
      "date_published": "2026-07-23T00:00:00Z",
      "date_modified": "2026-07-23T00:00:00Z",
      "authors": [
        {
          "name": "Proofpoint News Feed"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:904f78fb98448ea609515371718d831cbd28111d4963fa147d0c2b24afeb5897",
      "url": "https://www.proofpoint.com/us/newsroom/news/us-and-allies-say-russian-hackers-stole-emails-without-social-engineering",
      "title": "US and allies say Russian hackers stole emails without social engineering",
      "summary": "Headline from Proofpoint News Feed; open the original publisher for the full article.",
      "date_published": "2026-07-23T00:00:00Z",
      "date_modified": "2026-07-23T00:00:00Z",
      "authors": [
        {
          "name": "Proofpoint News Feed"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:ec9266b1255f4108f0ac71c9333b950bfa4f0c3e56b5e5460ab725c714c84cf8",
      "url": "https://www.proofpoint.com/us/newsroom/news/if-you-pay-hackers-ransom-chances-are-theyll-come-back-more",
      "title": "If you pay a hacker’s ransom, chances are that they’ll come back for more",
      "summary": "Headline from Proofpoint News Feed; open the original publisher for the full article.",
      "date_published": "2026-07-22T00:00:00Z",
      "date_modified": "2026-07-22T00:00:00Z",
      "authors": [
        {
          "name": "Proofpoint News Feed"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:112848ac2faa1575d6d855bd73734c24ca8d20671399197829a33fa8bad4632e",
      "url": "https://www.welivesecurity.com/en/how-to/ive-been-deepfaked-what-do/",
      "title": "I’ve been deepfaked: What do I do?",
      "summary": "Headline from WeLiveSecurity; open the original publisher for the full article.",
      "date_published": "2026-09-02T00:00:00Z",
      "date_modified": "2026-09-02T00:00:00Z",
      "authors": [
        {
          "name": "WeLiveSecurity"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:84ee8f8e79085c48dd6115b4bb3735163fe8cc3566166c08db1ee5bad9d8b674",
      "url": "https://www.welivesecurity.com/en/videos/month-security-tony-anscombe-august-2026/",
      "title": "This month in security with Tony Anscombe – August 2026 edition",
      "summary": "Headline from WeLiveSecurity; open the original publisher for the full article.",
      "date_published": "2026-08-31T00:00:00Z",
      "date_modified": "2026-08-31T00:00:00Z",
      "authors": [
        {
          "name": "WeLiveSecurity"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:e00635063fe010e9b0914c04f95326f78af32f90f55870521dcd58afa3a16fe6",
      "url": "https://www.welivesecurity.com/en/privacy/ai-powered-osint-why-everyone-viable-target-fraud/",
      "title": "AI-assisted reconnaissance: Why everyone could be a viable target for fraud",
      "summary": "Headline from WeLiveSecurity; open the original publisher for the full article.",
      "date_published": "2026-08-27T00:00:00Z",
      "date_modified": "2026-08-27T00:00:00Z",
      "authors": [
        {
          "name": "WeLiveSecurity"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:61b4bc04a8461a96542f911f8424a03d9d206c03367aefe20469b1d57a9128f0",
      "url": "https://www.welivesecurity.com/en/business-security/qr-code-phishing-slip-past-corporate-security-measures/",
      "title": "How QR-code phishing can slip past corporate security measures",
      "summary": "Headline from WeLiveSecurity; open the original publisher for the full article.",
      "date_published": "2026-08-17T00:00:00Z",
      "date_modified": "2026-08-17T00:00:00Z",
      "authors": [
        {
          "name": "WeLiveSecurity"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:212ff8b76f582436202aa5c01a2d0cc7e9ecd78d3e72217dde37639c273675be",
      "url": "https://www.welivesecurity.com/en/business-security/black-hat-usa-2026-vulnerability-discovery-decline-ai-era/",
      "title": "Black Hat USA 2026: Will vulnerability discovery eventually decline in the AI era?",
      "summary": "Headline from WeLiveSecurity; open the original publisher for the full article.",
      "date_published": "2026-08-13T00:00:00Z",
      "date_modified": "2026-08-13T00:00:00Z",
      "authors": [
        {
          "name": "WeLiveSecurity"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:ea9d6a0f4efc0cc70ea2ad29af10dbfa61e5818102d0e6b87055f12ab0f0ffc1",
      "url": "https://www.welivesecurity.com/en/business-security/black-hat-usa-2026-hugging-face-hack-human-responsibility/",
      "title": "Black Hat USA 2026: What the Hugging Face hack tells us about human responsibility",
      "summary": "Headline from WeLiveSecurity; open the original publisher for the full article.",
      "date_published": "2026-08-13T00:00:00Z",
      "date_modified": "2026-08-13T00:00:00Z",
      "authors": [
        {
          "name": "WeLiveSecurity"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:2724ff524e8063f5f0218fc0325027ba81663f72cda3b2c2c5614deb54b7e335",
      "url": "https://www.welivesecurity.com/en/business-security/black-hat-usa-2026-ai-racing-cybersecurity-controls/",
      "title": "Black Hat USA 2026: AI is racing ahead of cybersecurity controls",
      "summary": "Headline from WeLiveSecurity; open the original publisher for the full article.",
      "date_published": "2026-08-12T00:00:00Z",
      "date_modified": "2026-08-12T00:00:00Z",
      "authors": [
        {
          "name": "WeLiveSecurity"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:08d90065a79835b639ebd10c1f60cfde7f74aac7c124fdad30762e389e68b3cd",
      "url": "https://www.welivesecurity.com/en/kids-online/ai-tutors-safe-kids/",
      "title": "Are AI tutors safe for your kids?",
      "summary": "Headline from WeLiveSecurity; open the original publisher for the full article.",
      "date_published": "2026-08-10T00:00:00Z",
      "date_modified": "2026-08-10T00:00:00Z",
      "authors": [
        {
          "name": "WeLiveSecurity"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:fa7f4c7271bf78ca662e679aae87c7891e506148c135bee512d5743c17d091f8",
      "url": "https://www.welivesecurity.com/en/videos/month-security-tony-anscombe-july-2026/",
      "title": "This month in security with Tony Anscombe – July 2026 edition",
      "summary": "Headline from WeLiveSecurity; open the original publisher for the full article.",
      "date_published": "2026-07-31T00:00:00Z",
      "date_modified": "2026-07-31T00:00:00Z",
      "authors": [
        {
          "name": "WeLiveSecurity"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:13e2f8189ecbe9fa5daa5e39a5bc7c6443199854496c405b7b793ca02900c753",
      "url": "https://www.welivesecurity.com/en/cybersecurity/beyond-screenshot-why-verify-you-see/",
      "title": "Beyond the screenshot: Why you should verify what you see",
      "summary": "Headline from WeLiveSecurity; open the original publisher for the full article.",
      "date_published": "2026-07-30T00:00:00Z",
      "date_modified": "2026-07-30T00:00:00Z",
      "authors": [
        {
          "name": "WeLiveSecurity"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:d35a9bd68f1f330b8da7cbd1ab35477a891e5f836a34498c6befd51b456b30b3",
      "url": "https://www.welivesecurity.com/en/eset-research/forgotten-uefi-shims-undermining-secure-boot/",
      "title": "Forgotten UEFI shims undermining Secure Boot",
      "summary": "Headline from WeLiveSecurity; open the original publisher for the full article.",
      "date_published": "2026-07-14T00:00:00Z",
      "date_modified": "2026-07-14T00:00:00Z",
      "authors": [
        {
          "name": "WeLiveSecurity"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:51dcc956461456c4f0e9626b7faa696cf23a0ad558edbd10533b00f6e685b5f9",
      "url": "https://www.welivesecurity.com/en/eset-research/eset-threat-report-h1-2026/",
      "title": "ESET Threat Report H1 2026",
      "summary": "Headline from WeLiveSecurity; open the original publisher for the full article.",
      "date_published": "2026-07-08T00:00:00Z",
      "date_modified": "2026-07-08T00:00:00Z",
      "authors": [
        {
          "name": "WeLiveSecurity"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:1f336395320b29df9e6017842006346b68b4f4e011c19aaa9d2020e7c11a2ea5",
      "url": "https://www.welivesecurity.com/en/business-security/cyber-readiness-smbs-getting-basics-right/",
      "title": "Cyber readiness for SMBs: Getting the basics right",
      "summary": "Headline from WeLiveSecurity; open the original publisher for the full article.",
      "date_published": "2026-07-03T00:00:00Z",
      "date_modified": "2026-07-03T00:00:00Z",
      "authors": [
        {
          "name": "WeLiveSecurity"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:8cd6580e606f0cbf0291f3709b7046cb34363480bf8dff37a088879649e744d0",
      "url": "https://www.welivesecurity.com/en/videos/month-security-tony-anscombe-june-2026/",
      "title": "This month in security with Tony Anscombe – June 2026 edition",
      "summary": "Headline from WeLiveSecurity; open the original publisher for the full article.",
      "date_published": "2026-06-30T00:00:00Z",
      "date_modified": "2026-06-30T00:00:00Z",
      "authors": [
        {
          "name": "WeLiveSecurity"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:923ef9b39201dd462a2d09813e244ed75a485d6e5149f96f565335b38e424c1b",
      "url": "https://www.welivesecurity.com/en/cybersecurity/inside-inbox-cybercriminals-want-break-email-account/",
      "title": "Inside the inbox: Why cybercriminals want to break into your email account",
      "summary": "Headline from WeLiveSecurity; open the original publisher for the full article.",
      "date_published": "2026-06-29T00:00:00Z",
      "date_modified": "2026-06-29T00:00:00Z",
      "authors": [
        {
          "name": "WeLiveSecurity"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:49be493636b685f2bd2a33999de4cca291d5739adb6b03a0386eb855609fff50",
      "url": "https://www.welivesecurity.com/en/business-security/smb-cyber-readiness-road-resilience-starts-here/",
      "title": "SMB cyber readiness: the road to resilience starts here",
      "summary": "Headline from WeLiveSecurity; open the original publisher for the full article.",
      "date_published": "2026-06-26T00:00:00Z",
      "date_modified": "2026-06-26T00:00:00Z",
      "authors": [
        {
          "name": "WeLiveSecurity"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:e15d27bf2629c0ca10aef50df8b30901f54b76e413c012da0143c6af6efbc7bc",
      "url": "https://www.welivesecurity.com/en/eset-research/gamaredon-2025-leveraging-tunnels-workers-dead-drops-new-alliances/",
      "title": "Gamaredon in 2025: Leveraging tunnels, workers, dead drops, and new alliances",
      "summary": "Headline from WeLiveSecurity; open the original publisher for the full article.",
      "date_published": "2026-06-25T00:00:00Z",
      "date_modified": "2026-06-25T00:00:00Z",
      "authors": [
        {
          "name": "WeLiveSecurity"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:fb7681d95d33fee21a0e4fa539efc3a5d2112e4f619da6a7ce2bdfe6dc9b3abd",
      "url": "https://www.welivesecurity.com/en/eset-research/eset-takes-part-operation-endgame-disrupt-amadey-stealc/",
      "title": "ESET takes part in Operation Endgame to disrupt Amadey and Stealc",
      "summary": "Headline from WeLiveSecurity; open the original publisher for the full article.",
      "date_published": "2026-06-24T00:00:00Z",
      "date_modified": "2026-06-24T00:00:00Z",
      "authors": [
        {
          "name": "WeLiveSecurity"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:e5e1822d06283cba2e5370b055e268d926e321fcd34bb3d7cbf23a4d0086cb92",
      "url": "https://www.welivesecurity.com/en/eset-research/killing-me-gently-inside-gentlemens-edr-killer-framework/",
      "title": "Killing me gently: Inside Gentlemen’s EDR killer framework",
      "summary": "Headline from WeLiveSecurity; open the original publisher for the full article.",
      "date_published": "2026-06-18T00:00:00Z",
      "date_modified": "2026-06-18T00:00:00Z",
      "authors": [
        {
          "name": "WeLiveSecurity"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:41f3681bf291c542fd4bf50f78d2665114661b1a209607f4213d17f5cd92a75b",
      "url": "https://www.welivesecurity.com/en/critical-infrastructure/protecting-legacy-ot-systems-modern-threats/",
      "title": "Protecting legacy OT systems against modern cyberthreats",
      "summary": "Headline from WeLiveSecurity; open the original publisher for the full article.",
      "date_published": "2026-06-17T00:00:00Z",
      "date_modified": "2026-06-17T00:00:00Z",
      "authors": [
        {
          "name": "WeLiveSecurity"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:ff80b256acceafc23ada147b8329377304d4b643b24daadce35c772d550c6a26",
      "url": "https://www.welivesecurity.com/en/eset-research/fishmongers-arsenal-upgraded-sprysocks-windows/",
      "title": "FishMonger’s arsenal upgraded: SprySOCKS for Windows",
      "summary": "Headline from WeLiveSecurity; open the original publisher for the full article.",
      "date_published": "2026-06-16T00:00:00Z",
      "date_modified": "2026-06-16T00:00:00Z",
      "authors": [
        {
          "name": "WeLiveSecurity"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:5fc875796a82820e409aa2c7a1aa6d50057d476f21391a07a3925286f545bca1",
      "url": "https://www.welivesecurity.com/en/cybercrime/eviltokens-phishing-doesnt-steal-password/",
      "title": "EvilTokens: A phishing attack that doesn’t steal your password",
      "summary": "Headline from WeLiveSecurity; open the original publisher for the full article.",
      "date_published": "2026-06-15T00:00:00Z",
      "date_modified": "2026-06-15T00:00:00Z",
      "authors": [
        {
          "name": "WeLiveSecurity"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:4e69a2e9d524b024f2bd4d888a39b99ba0950cf88e6dac7b730917f9aceaab9a",
      "url": "https://www.welivesecurity.com/en/eset-research/oceanlotus-external-espionage-domestic-targeting/",
      "title": "OceanLotus: From external espionage to domestic targeting",
      "summary": "Headline from WeLiveSecurity; open the original publisher for the full article.",
      "date_published": "2026-06-11T00:00:00Z",
      "date_modified": "2026-06-11T00:00:00Z",
      "authors": [
        {
          "name": "WeLiveSecurity"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:9123c70164db4b668d01d5dc6fadc9d54ac0aaa65d92816615e5b7422c4d101e",
      "url": "https://www.welivesecurity.com/en/business-security/smb-cyber-readiness-what-makes-breaks-it/",
      "title": "Unpacking SMB cyber-readiness – and what makes or breaks it",
      "summary": "Headline from WeLiveSecurity; open the original publisher for the full article.",
      "date_published": "2026-06-10T00:00:00Z",
      "date_modified": "2026-06-10T00:00:00Z",
      "authors": [
        {
          "name": "WeLiveSecurity"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:18795e7936f0231088c187573cb89eb35985a3952d13e0caa5c54be7fbfb2984",
      "url": "https://www.welivesecurity.com/en/business-security/cybercriminals-auditors-never-hired/",
      "title": "Cybercriminals: the 'auditors' you never hired",
      "summary": "Headline from WeLiveSecurity; open the original publisher for the full article.",
      "date_published": "2026-06-09T00:00:00Z",
      "date_modified": "2026-06-09T00:00:00Z",
      "authors": [
        {
          "name": "WeLiveSecurity"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:3ec1883a1b5ba64e628757283122ff3067c4b783dd82264734007fade59a415c",
      "url": "https://www.welivesecurity.com/en/kids-online/lessons-life-childrens-data-long-term-identity-risk/",
      "title": "Lessons for life: Why children’s data is a long-term identity risk",
      "summary": "Headline from WeLiveSecurity; open the original publisher for the full article.",
      "date_published": "2026-06-03T00:00:00Z",
      "date_modified": "2026-06-03T00:00:00Z",
      "authors": [
        {
          "name": "WeLiveSecurity"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:c1eb0f053dceabd20e084a86ef77d291dd7343e2b46f1a44eb0622908db44f37",
      "url": "https://www.welivesecurity.com/en/videos/month-security-tony-anscombe-may-2026/",
      "title": "This month in security with Tony Anscombe – May 2026 edition",
      "summary": "Headline from WeLiveSecurity; open the original publisher for the full article.",
      "date_published": "2026-05-29T00:00:00Z",
      "date_modified": "2026-05-29T00:00:00Z",
      "authors": [
        {
          "name": "WeLiveSecurity"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:6f67002f1856cfad5556d0b07081459de95b6d02e56248b92ba9897974055e4c",
      "url": "https://www.welivesecurity.com/en/eset-research/eset-apt-activity-report-q4-2025-q1-2026/",
      "title": "ESET APT Activity Report Q4 2025–Q1 2026",
      "summary": "Headline from WeLiveSecurity; open the original publisher for the full article.",
      "date_published": "2026-05-28T00:00:00Z",
      "date_modified": "2026-05-28T00:00:00Z",
      "authors": [
        {
          "name": "WeLiveSecurity"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:520085c1cf604e27b99663b89a67995c4910481f3a5e4a9d5b2ae0735baa4e56",
      "url": "https://www.welivesecurity.com/en/privacy/what-consider-asking-ai-chatbot-health-advice/",
      "title": "What to consider before asking an AI chatbot for health advice",
      "summary": "Headline from WeLiveSecurity; open the original publisher for the full article.",
      "date_published": "2026-05-27T00:00:00Z",
      "date_modified": "2026-05-27T00:00:00Z",
      "authors": [
        {
          "name": "WeLiveSecurity"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:8b6cbc48b0170b047ce51dc8cf239c9ea36720a577df1706d3cb693c8f93e338",
      "url": "https://www.welivesecurity.com/en/malware/btmob-stealthy-rat-burrowing-deep-android-devices/",
      "title": "BTMOB: A stealthy RAT burrowing deep into Android devices",
      "summary": "Headline from WeLiveSecurity; open the original publisher for the full article.",
      "date_published": "2026-05-26T00:00:00Z",
      "date_modified": "2026-05-26T00:00:00Z",
      "authors": [
        {
          "name": "WeLiveSecurity"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:d13f46274d348338b4d3ab9efd91d6c82014f62528ea06aff8e55773645c7f7c",
      "url": "https://isc.sans.edu/diary/rss/33282",
      "title": "ISC Stormcast For Wednesday, August 26th, 2026 https://isc.sans.edu/podcastdetail/10068, (Wed, Aug 26th)",
      "summary": "Headline from SANS Internet Storm Center, InfoCON: green; open the original publisher for the full article.",
      "date_published": "2026-08-26T00:00:00Z",
      "date_modified": "2026-08-26T00:00:00Z",
      "authors": [
        {
          "name": "SANS Internet Storm Center, InfoCON: green"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:082c3335f8d3cadd4280bba08a31aa48b81deec3fa294acaa1dfcf2dfd9080e0",
      "url": "https://isc.sans.edu/diary/rss/33280",
      "title": "Obfuscating IP Addresses as Hostnames, (Tue, Aug 25th)",
      "summary": "Headline from SANS Internet Storm Center, InfoCON: green; open the original publisher for the full article.",
      "date_published": "2026-08-25T00:00:00Z",
      "date_modified": "2026-08-25T00:00:00Z",
      "authors": [
        {
          "name": "SANS Internet Storm Center, InfoCON: green"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:cf181618ca205e5ba912328752d52ac9fc3f90ebbcf96de8f9e54daec1ccd3c9",
      "url": "https://isc.sans.edu/diary/rss/33278",
      "title": "ISC Stormcast For Tuesday, August 25th, 2026 https://isc.sans.edu/podcastdetail/10066, (Tue, Aug 25th)",
      "summary": "Headline from SANS Internet Storm Center, InfoCON: green; open the original publisher for the full article.",
      "date_published": "2026-08-25T00:00:00Z",
      "date_modified": "2026-08-25T00:00:00Z",
      "authors": [
        {
          "name": "SANS Internet Storm Center, InfoCON: green"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:49e937cf32ef9eb6c2458b43672625dbe558471377687df3c77c2844897d7d1d",
      "url": "https://isc.sans.edu/diary/rss/33274",
      "title": "DOUBLECUP's PNG Payload, (Mon, Aug 24th)",
      "summary": "Headline from SANS Internet Storm Center, InfoCON: green; open the original publisher for the full article.",
      "date_published": "2026-08-24T00:00:00Z",
      "date_modified": "2026-08-24T00:00:00Z",
      "authors": [
        {
          "name": "SANS Internet Storm Center, InfoCON: green"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:e879d9deb1381ec9038994a489dfcda8d907aa0be8cc4f0b2c7afc2f0f7b01ab",
      "url": "https://isc.sans.edu/diary/rss/33276",
      "title": "ISC Stormcast For Monday, August 24th, 2026 https://isc.sans.edu/podcastdetail/10064, (Mon, Aug 24th)",
      "summary": "Headline from SANS Internet Storm Center, InfoCON: green; open the original publisher for the full article.",
      "date_published": "2026-08-24T00:00:00Z",
      "date_modified": "2026-08-24T00:00:00Z",
      "authors": [
        {
          "name": "SANS Internet Storm Center, InfoCON: green"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:a6a1a81514dddf80d2334abe6e2c44c9f6a7046f126c3be47549aa08fbb06bc1",
      "url": "https://isc.sans.edu/diary/rss/33272",
      "title": "Who Got Missed in the MFA Rollout? More Powershell + Graph + Entra scripting!, (Fri, Aug 21st)",
      "summary": "Headline from SANS Internet Storm Center, InfoCON: green; open the original publisher for the full article.",
      "date_published": "2026-08-21T00:00:00Z",
      "date_modified": "2026-08-21T00:00:00Z",
      "authors": [
        {
          "name": "SANS Internet Storm Center, InfoCON: green"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:9fa40bc80f629177edf2646a78d0183bce26357079a5e5855c514897a7feaa37",
      "url": "https://isc.sans.edu/diary/rss/33270",
      "title": "ISC Stormcast For Friday, August 21st, 2026 https://isc.sans.edu/podcastdetail/10062, (Fri, Aug 21st)",
      "summary": "Headline from SANS Internet Storm Center, InfoCON: green; open the original publisher for the full article.",
      "date_published": "2026-08-21T00:00:00Z",
      "date_modified": "2026-08-21T00:00:00Z",
      "authors": [
        {
          "name": "SANS Internet Storm Center, InfoCON: green"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:bf4c6777da1be26612504bea666947c221113a16e6b4fb67d36cfaed32b06ea3",
      "url": "https://isc.sans.edu/diary/rss/33268",
      "title": "Even MOAR Powershell, looking at Entra logins - the good, the bad and the password sprays, (Fri, Aug 21st)",
      "summary": "Headline from SANS Internet Storm Center, InfoCON: green; open the original publisher for the full article.",
      "date_published": "2026-08-21T00:00:00Z",
      "date_modified": "2026-08-21T00:00:00Z",
      "authors": [
        {
          "name": "SANS Internet Storm Center, InfoCON: green"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:9f71b497c2f904c32141bd2f7e06578c8d17402c9606ca71d27b84724dd25461",
      "url": "https://isc.sans.edu/diary/rss/33266",
      "title": "Using Microsoft Graph and Powershell - Risk Detection Commands, (Thu, Aug 20th)",
      "summary": "Headline from SANS Internet Storm Center, InfoCON: green; open the original publisher for the full article.",
      "date_published": "2026-08-20T00:00:00Z",
      "date_modified": "2026-08-20T00:00:00Z",
      "authors": [
        {
          "name": "SANS Internet Storm Center, InfoCON: green"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:79b8346cde893f2cf16e830d1541642d74ce48f9f0aa5e425010d4349426d5fc",
      "url": "https://isc.sans.edu/diary/rss/33264",
      "title": "Using Microsoft Graph and Powershell to Mine for Information - Stale Accounts and Licenses, (Thu, Aug 20th)",
      "summary": "Headline from SANS Internet Storm Center, InfoCON: green; open the original publisher for the full article.",
      "date_published": "2026-08-20T00:00:00Z",
      "date_modified": "2026-08-20T00:00:00Z",
      "authors": [
        {
          "name": "SANS Internet Storm Center, InfoCON: green"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:c50b7348d08dd51f02b3bb46db4b2499832e1eac562efc4874700574d91b2c15",
      "url": "https://www.trendmicro.com/en_us/research/26/g/open-secure-ai-alliance.html",
      "title": "Why the Open Secure AI Alliance Matters: Open Frontier Models, Open Deployment Flexibility",
      "summary": "Headline from Trend Micro Research, News, Perspectives; open the original publisher for the full article.",
      "date_published": "2026-07-30T00:00:00Z",
      "date_modified": "2026-07-30T00:00:00Z",
      "authors": [
        {
          "name": "Trend Micro Research, News, Perspectives"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:0d0c3af0a0c20be57ae1ad1ff5d467eceaf7e70fe5df9cbd55229b57b730f71b",
      "url": "https://www.trendmicro.com/en_us/research/26/g/tracking-fake-sites-in-the-2026-world-cup-scam-wave.html",
      "title": "Tracking Over 35,000 Fake Sites in the 2026 World Cup Scam Wave",
      "summary": "Headline from Trend Micro Research, News, Perspectives; open the original publisher for the full article.",
      "date_published": "2026-07-29T00:00:00Z",
      "date_modified": "2026-07-29T00:00:00Z",
      "authors": [
        {
          "name": "Trend Micro Research, News, Perspectives"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:ce0790fc47d89810bcf6670769faf9debf46e08b93e452e73054da47ed7cb83b",
      "url": "https://www.trendmicro.com/en_us/research/26/g/autonomous-ransomware.html",
      "title": "The Signs Were There: What the First Autonomous Ransomware Case Confirms",
      "summary": "Headline from Trend Micro Research, News, Perspectives; open the original publisher for the full article.",
      "date_published": "2026-07-24T00:00:00Z",
      "date_modified": "2026-07-24T00:00:00Z",
      "authors": [
        {
          "name": "Trend Micro Research, News, Perspectives"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:d8976dc3d8c3033edefe77028f82084959cb3944e6ca3e443dafb2ed7b3c022b",
      "url": "https://www.trendmicro.com/en_us/research/26/g/inside-the-openai-hugging-face-incident.html",
      "title": "Inside the OpenAI – Hugging Face Incident: The AI Breach With No Human Attacker Behind It",
      "summary": "Headline from Trend Micro Research, News, Perspectives; open the original publisher for the full article.",
      "date_published": "2026-07-23T00:00:00Z",
      "date_modified": "2026-07-23T00:00:00Z",
      "authors": [
        {
          "name": "Trend Micro Research, News, Perspectives"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:45b10045ee34b66ac8ace59b582d039593552339c12e84e8adae614806490e28",
      "url": "https://www.trendmicro.com/en_us/research/26/g/plc-exploitation.html",
      "title": "Federal Agencies Warn of Ongoing PLC Exploitation Against Critical U.S. Infrastructure",
      "summary": "Headline from Trend Micro Research, News, Perspectives; open the original publisher for the full article.",
      "date_published": "2026-07-23T00:00:00Z",
      "date_modified": "2026-07-23T00:00:00Z",
      "authors": [
        {
          "name": "Trend Micro Research, News, Perspectives"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:57e3336e02334e48905bd85ae6764186ae6c0c25e7d4ce53197777a1de2c657f",
      "url": "https://www.trendmicro.com/en_us/research/26/g/tech-support-scams-targeting-japan.html",
      "title": "13M+ Emails Sent in Tech Support Scam Targeting Users, Organizations in Japan",
      "summary": "Headline from Trend Micro Research, News, Perspectives; open the original publisher for the full article.",
      "date_published": "2026-07-23T00:00:00Z",
      "date_modified": "2026-07-23T00:00:00Z",
      "authors": [
        {
          "name": "Trend Micro Research, News, Perspectives"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:faa3c0f96335c1ea774746b478ed45fb239889cf439070063290fdb15859279c",
      "url": "https://www.trendmicro.com/en_us/research/26/g/device-code-phishing.html",
      "title": "Device Code Phishing: Turning a Convenience Feature Into an MFA Bypass",
      "summary": "Headline from Trend Micro Research, News, Perspectives; open the original publisher for the full article.",
      "date_published": "2026-07-22T00:00:00Z",
      "date_modified": "2026-07-22T00:00:00Z",
      "authors": [
        {
          "name": "Trend Micro Research, News, Perspectives"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:e9e157d2fd7f50206ca69dc854e4c3b0900d3d500b7a7a7ea1397106fb9c0b7b",
      "url": "https://www.trendmicro.com/en_us/research/26/g/making-sense-of-the-vulnpocalypse.html",
      "title": "Volume Is Not Risk: Making Sense of the “Vulnpocalypse”",
      "summary": "Headline from Trend Micro Research, News, Perspectives; open the original publisher for the full article.",
      "date_published": "2026-07-21T00:00:00Z",
      "date_modified": "2026-07-21T00:00:00Z",
      "authors": [
        {
          "name": "Trend Micro Research, News, Perspectives"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:485ede2543ceeccdcabbe055dfcc8b221294556a94d2eb15e5934c0961672319",
      "url": "https://www.trendmicro.com/en_us/research/26/g/actor-behind-patriot-bait-used-ai-to-deploy-c2-botnet.html",
      "title": "Six Minutes to Compromise: How ‘Patriot Bait’ Actor Used AI to Build and Deploy a C&C Botnet",
      "summary": "Headline from Trend Micro Research, News, Perspectives; open the original publisher for the full article.",
      "date_published": "2026-07-14T00:00:00Z",
      "date_modified": "2026-07-14T00:00:00Z",
      "authors": [
        {
          "name": "Trend Micro Research, News, Perspectives"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:07e91a38240a44304b736610a69315c91f26a9df7276c5594b63615f3d9e5b0a",
      "url": "https://www.trendmicro.com/en_us/research/26/f/tonresolver.html",
      "title": "TONResolver RAT Abuses TON Blockchain to Target Japan's Hotel Industry",
      "summary": "Headline from Trend Micro Research, News, Perspectives; open the original publisher for the full article.",
      "date_published": "2026-06-29T00:00:00Z",
      "date_modified": "2026-06-29T00:00:00Z",
      "authors": [
        {
          "name": "Trend Micro Research, News, Perspectives"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:7d04ecdd8c61a791908187295d3f008405142dc439f2dabac78214b6f0b633f8",
      "url": "https://www.trendmicro.com/en_us/research/26/f/from-langflow-to-monero-inside-cve-2026-33017-cryptominer.html",
      "title": "From Langflow to Monero: Inside CVE-2026-33017 Cryptominer",
      "summary": "Headline from Trend Micro Research, News, Perspectives; open the original publisher for the full article.",
      "date_published": "2026-06-23T00:00:00Z",
      "date_modified": "2026-06-23T00:00:00Z",
      "authors": [
        {
          "name": "Trend Micro Research, News, Perspectives"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:c1d14acc702e9ba0ccc0f5f4b9cb6a8b044b513962296368517ea1590ddcaf7a",
      "url": "https://www.trendmicro.com/en_us/research/26/f/PeopleTools.html",
      "title": "PeopleSoft PeopleTools Pre-Authentication RCE: A PSIGW SSRF Chain That Executes Inside the JVM",
      "summary": "Headline from Trend Micro Research, News, Perspectives; open the original publisher for the full article.",
      "date_published": "2026-06-18T00:00:00Z",
      "date_modified": "2026-06-18T00:00:00Z",
      "authors": [
        {
          "name": "Trend Micro Research, News, Perspectives"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:066bfd91a5e6ca526639e3993c400fb43f9529c27cd0cfacde3db8dbcd458da5",
      "url": "https://www.trendmicro.com/en_us/research/26/f/claudeai-shared-chat-abused-in-malvertising.html",
      "title": "Threat Actors Abuse claude.ai Shared Chat for ClickFix Malvertising Campaign",
      "summary": "Headline from Trend Micro Research, News, Perspectives; open the original publisher for the full article.",
      "date_published": "2026-06-17T00:00:00Z",
      "date_modified": "2026-06-17T00:00:00Z",
      "authors": [
        {
          "name": "Trend Micro Research, News, Perspectives"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:ec29905766579d8ebc6e65d7bd5177e46232b909add656e84653ee42c695464c",
      "url": "https://www.trendmicro.com/en_us/research/26/f/pwn2own-genai.html",
      "title": "GenAI Is Both Hunter and Hunted at Pwn2Own Berlin 2026",
      "summary": "Headline from Trend Micro Research, News, Perspectives; open the original publisher for the full article.",
      "date_published": "2026-06-10T00:00:00Z",
      "date_modified": "2026-06-10T00:00:00Z",
      "authors": [
        {
          "name": "Trend Micro Research, News, Perspectives"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:ac4fc3649a3aa74a0d5e88144544481a7544bf5c67980bc65c603b88a2d5883d",
      "url": "https://www.trendmicro.com/en_us/research/26/f/governing-claude-enterprise.html",
      "title": "Governing Claude Enterprise in Environments Where Inline Controls Can't Go",
      "summary": "Headline from Trend Micro Research, News, Perspectives; open the original publisher for the full article.",
      "date_published": "2026-06-08T00:00:00Z",
      "date_modified": "2026-06-08T00:00:00Z",
      "authors": [
        {
          "name": "Trend Micro Research, News, Perspectives"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:029ca59a3b48d3e1a91bf823b72461f7d1cb578c4662871f4c62b36bbdd29e40",
      "url": "https://www.trendmicro.com/en_us/research/26/f/old-winrar-flaw-fuels-attacks-on-ukraine.html",
      "title": "Old WinRAR Flaw Fuels Attacks on Ukraine: How Unmanaged Software Keeps the Door Open",
      "summary": "Headline from Trend Micro Research, News, Perspectives; open the original publisher for the full article.",
      "date_published": "2026-06-08T00:00:00Z",
      "date_modified": "2026-06-08T00:00:00Z",
      "authors": [
        {
          "name": "Trend Micro Research, News, Perspectives"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:94ba49773cdf55e9c508f519813589b40487105256c3ec04a3c9d25a5a9bf8bd",
      "url": "https://www.trendmicro.com/en_us/research/26/f/pwn2own-berlin-2026.html",
      "title": "Pwn2Own Berlin 2026: On the Ground With TrendAI™ ZDI's Biggest AI Showdown Yet",
      "summary": "Headline from Trend Micro Research, News, Perspectives; open the original publisher for the full article.",
      "date_published": "2026-06-01T00:00:00Z",
      "date_modified": "2026-06-01T00:00:00Z",
      "authors": [
        {
          "name": "Trend Micro Research, News, Perspectives"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:c9acf7ea905e30daa37776fb54408ff6d1875d46323bc82b43ff21dd22dd05e5",
      "url": "https://www.trendmicro.com/en_us/research/26/e/smart-contracts-for-command-and-control.html",
      "title": "Smart Contracts for C&C: How ClearFake Hid in Plain Sight on BSC Testnet",
      "summary": "Headline from Trend Micro Research, News, Perspectives; open the original publisher for the full article.",
      "date_published": "2026-05-26T00:00:00Z",
      "date_modified": "2026-05-26T00:00:00Z",
      "authors": [
        {
          "name": "Trend Micro Research, News, Perspectives"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:4e41b13b8e78983f836b44c5fe9bc20256f919316ed04fd6d9a91ce2f367f7e9",
      "url": "https://www.trendmicro.com/en_us/research/26/e/analyzing-void-dokkaebi-invisibleferret-malware.html",
      "title": "Analyzing Void Dokkaebi’s Cython-Compiled InvisibleFerret Malware",
      "summary": "Headline from Trend Micro Research, News, Perspectives; open the original publisher for the full article.",
      "date_published": "2026-05-22T00:00:00Z",
      "date_modified": "2026-05-22T00:00:00Z",
      "authors": [
        {
          "name": "Trend Micro Research, News, Perspectives"
        }
      ],
      "tags": [
        "headline"
      ]
    },
    {
      "id": "urn:sha256:5415322db5a85f2cd2f5c104c6371ee71d66d13d86bb2b258ad9bc48e4ce3cdc",
      "url": "https://www.trendmicro.com/en_us/research/26/e/inside-the-influence-and-fraud-patriot-bait-campaign.html",
      "title": "One Man, One AI, One Fake Persona: Inside the 5-Year Influence and Fraud ‘Patriot Bait’ Campaign",
      "summary": "Headline from Trend Micro Research, News, Perspectives; open the original publisher for the full article.",
      "date_published": "2026-05-21T00:00:00Z",
      "date_modified": "2026-05-21T00:00:00Z",
      "authors": [
        {
          "name": "Trend Micro Research, News, Perspectives"
        }
      ],
      "tags": [
        "headline"
      ]
    }
  ]
}