adminRichard Bejtlich on the Case for NDR
Despite the abundance of telemetry at analysts’ disposal, many security operations teams struggle to answer a few basic questions during incident investigation: What happened? What evidence do we have? How…
Vie. Ago 28th, 2026
Trending News:
Critical cPanel Flaw Could Let One Hosting Customer Take Root Control of a Whole ServerAPT28-Linked HOOKEDGE Backdoor Targets European Government and Diplomatic OrganizationsPaperCut Zero-Day Exploited in Attacks, Affecting All NG and MF VersionsOpenAI Says Reward Hacking Drove AI Agents to Exploit Zero-Days and Breach Hugging Face296K IoT Botnet, 100+ Water Systems Targeted, SharePoint RCE Chain + 27 New StoriesNext.js Patches Critical AVIF and Windows Flaws Enabling Unauthenticated RCEWhat the Data Says About AI in Security Operations in 2026Amazon Kiro Prompt Injection Can Exfiltrate Sensitive Data Through Kiro PowersAlleged TeamPCP Hackers Charged in Australia Over Major Supply Chain AttacksLearn How to Build Security Operations Ready for AI-Powered AttacksSpark RAT Targets Cambodia, Abuses Vulnerable OPSWAT Driver to Disable Security ToolsGoCaracal Malware Uses Ethereum Smart Contract to Fetch Replacement C2 AddressNew GPUThor Rowhammer Defeats ECC on NVIDIA RTX A6000 to Gain Host Root AccessCISA Adds Six Exploited Flaws to KEV, Including NetScaler, Linux, and SQL Server BugsNimbus Manticore Expands Toolset With TWOSTROKE-Like Backdoor and SSH TunnelerFBI Disrupts China-Linked QTFY Infrastructure Used to Steal Data From U.S. OrganizationsNew SLEEPWALKER Backdoor Waits for One Crafted Packet, Then Runs Its Own BytecodeCISA Red Team Compromised Two Critical Infrastructure Orgs, One Detected NothingNovaCookies Campaigns Abuse Genuine Docusign Notifications to Steal Microsoft 365 SessionsUnpatched Kaltura mwEmbed Flaws Could Let Remote Attackers Read Files and Run CodeFrom Alert Backlog to AI Hypothesis EngineOpenAI Bans Russian ChatGPT Accounts Used to Run Influence OperationClaude Opus 4.6 Bypasses Gym Booking Limit, Cancels Other Users’ Reservations in TestsINTERPOL Operation Jackal IV Arrests 58, Identifies 263 in Global Cyber Fraud CrackdownFake Apple Support AI Calls Target Stolen-Device Owners for Passcodes and 2FA CodesCritical Gitea RCE Actively Exploited as Reported Attack Drops Miner-Like PayloadFrontier AI: Vulnerability Management’s Systemic RevolutionU.S. Sanctions Iran-Linked Hackers Behind Critical Infrastructure BreachesE4del and PINHOLE RATs Turn FTP Banners Into Dead Drops for Malware Commands24 npm Packages Abuse unpkg Mirrors to Host Fake Cloudflare CAPTCHA PagesMarimo Notebook Flaw Could Run MCP Commands Before Cells Execute in Edit ModeA Malicious Webpage Could Poison Your Local AI Model Behind NVIDIA NemoClawWhatsApp Adds Multiple Passkeys for Phishing-Resistant Sign-Ins Across iOS and AndroidMirage2FA Surge Hits 4,500 US and EU Companies, Abusing Microsoft 365 Login FlowsAttackers Target miniOrange SAML Flaws That Can Grant WordPress Admin AccessActively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical DataWeedhack Malware Spreads via Fake Minecraft Clients and SEO PoisoningWhy 5% of AI Users Are Your Biggest Security RiskAI-Powered PLC Attacks, GitLab Attacks, Stripe Key Leaks and MoreOperation QUICSILVER Targets Myanmar Government and IT with QUICAgent BackdoorWordlistLoader Delivers Amatera via ClickFix, SynkLoader Phishes Windows PasswordsCritical Keycloak Password Reset Flaw Could Let Unauthenticated Attackers Take Over Any AccountShipping More AI Code Than You Can Secure? Watch How to Control Remediation DebtUAT-10147 Uses AI to Scale Server Attacks, Deploys SPECTRE With EDR Bypass and Linux RootkitTikTok Agrees to $400 Million Settlement in U.S. Child Privacy Lawsuit14 Trojanized npm Packages Drop RedC2 4.0 Linux Backdoor With AI-Assisted C2Android Car Malware Spreads Through Built-In Updaters for Ad Fraud, Proxy BotnetMicrosoft Defender’s Own Driver Can Be Weaponized to Delete Security Software at BootWazuh and AI For Enhanced SOC WorkflowsCisco Patches Nine Crosswork and Secure Workload Flaws, Five Scoring CVSS 10.0GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of DisclosureMicrosoft Entra ID Flaw (CVSS 10.0) Exploited in Wild, Allows Remote Code Execution40 Malicious Firefox Extensions Pose as Web3 Products to Steal Wallet SecretsManic Android Malware Exfiltrates Data From Offline Phones via Nearby Infected DevicesCDN Tsunami Attack Abuses HTTP/3 Translation for Up to 350x DoS AmplificationWhy «Shady AI» is Security’s Next Big Governance ProblemRust Supply Chain Attack Puts Build-Time Malware in Crates with 245 Million DownloadsSuspected Russian Hackers Abuse Google OAuth and WhatsApp Linking to Hijack AccountsAttackers Exploit Zimbra SNMP Flaw for Unauthenticated Remote Code ExecutionGogs 10.0 RCE, n8n Workflow-to-RCE, $10M Reward, GLM-5.3 AI Exploit and MoreAI-Generated Exploit Scripts Target Siemens S7 PLCs in U.S. Critical InfrastructureNew Cryptographic Context Injection Attack Could Let Web Pages Steal Grok Chat DataCritical NetScaler Flaw Can Bypass Authentication on Certain Gateway and AAA ServersIsolated-vm Flaw Lets Sandboxed JavaScript Escape to Host for Potential RCEZombie Card Attack Can Revive Expired Visa Cards for Contactless PaymentsToxicPanda 2.0 and GoldDigger Expand Android Banking Attacks with On-Device FraudNASA AIT-GUI Flaws Could Let Unauthenticated Attackers Issue Spacecraft CommandsElementor Pro Flaw Could Let Unauthenticated Attackers Upload PHP and Execute CodeOpenAI Pauses Frontier RL Training as It Tightens Defenses Against Unsafe AI BehaviorCloudflare Workers Spectre Attack Leaks JWT From Co-Located Worker at 12 Bits/SecondThe Fight Moves to Agent Versus AgentHackers Compromised 14,500+ Dahua Devices Using Credential Attacks, Auth Bypasses, and P2PSilkParasite Espionage Campaign Targets Central Asian Governments with Five New RATsCritical macOS, SharePoint, vCenter, and Microsoft IKE Flaws Under Active ExploitationStopAndProtect Uses Nearly 2,000 Hacked WordPress Sites to Spread Malware and Steal DataClop-Linked Windchill Web Shell Decrypts Credentials and Maps Engineering DataMicrosoft Links 30+ Rotating Domains to MacSync Stealer InfrastructureRansom Busters Claims It Hacked Ransomware Servers, Asks Victims for Up to $60,000Attackers Exploit MLflow SSRF Flaw to Steal Cloud Credentials and SecretsMicrosoft Copilot Personal Flaws Could Let One Click Exfiltrate Data From Connected AppsHow to Expose Them Before HiringWindRelay Android Malware Turns Victims’ Phones Into NFC Relays for Payment FraudOne Attacker Has Scraped Both Salesforce and ServiceNow Portals Since 2025TWINLOOT Abuses SharePoint and Teams to Steal Credentials and Move Across NetworksAI «Mind Viruses» Can Spread Between Agents Through Persistent Prompt Files16 Typosquatted RubyGems Packages Steal Browser Credentials and Crypto WalletsAmnesiaStealer Hijacks Chromium Sessions to Give Attackers Live Browser Control on macOSSafePal Hardware Wallet Maker Says Flaw Exposed Data of Nearly 40,000 CustomersNew PATCHCORD Backdoor Targets Afghan Telecom and Indian Critical InfrastructureGhostJacking AI Attacks, EtherHiding ClickFix, Cursor CLI Flaw + 17 More StoriesCISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCEGeoServer Zero-Day Targeted in Active Exploitation Attempts, Can Lead to RCEChina-Linked Jewelbug Uses XG-Web for Government Espionage and Crypto FraudTrump Memo Paves Way for U.S. Firms to Hack and Disrupt Foreign Crime GroupsApple Warns Users in 110 Countries They May Be Targets of Mercenary SpywareCTM360 Uncovers Over 3,000 Recruitment Phishing URLs Using Browser-in-the-Browser (BitB) Credential TrapsChrome DevTools Technique Enables Authenticated Session Hijacking in Live Windows BrowsersMustang Panda Adds Signed Windows Rootkit to CoolClient Backdoor for StealthCavern C2 Uses DNS and Google Apps Script to Blend Into Legitimate TrafficCritical GitLab GraphQL Flaw Could Let Unauthenticated Attackers Delete Public Projects
Chicago 12, Melborne City, USA
Vie. Ago 28th, 2026
Trending News:
Critical cPanel Flaw Could Let One Hosting Customer Take Root Control of a Whole ServerAPT28-Linked HOOKEDGE Backdoor Targets European Government and Diplomatic OrganizationsPaperCut Zero-Day Exploited in Attacks, Affecting All NG and MF VersionsOpenAI Says Reward Hacking Drove AI Agents to Exploit Zero-Days and Breach Hugging Face296K IoT Botnet, 100+ Water Systems Targeted, SharePoint RCE Chain + 27 New StoriesNext.js Patches Critical AVIF and Windows Flaws Enabling Unauthenticated RCEWhat the Data Says About AI in Security Operations in 2026Amazon Kiro Prompt Injection Can Exfiltrate Sensitive Data Through Kiro PowersAlleged TeamPCP Hackers Charged in Australia Over Major Supply Chain AttacksLearn How to Build Security Operations Ready for AI-Powered AttacksSpark RAT Targets Cambodia, Abuses Vulnerable OPSWAT Driver to Disable Security ToolsGoCaracal Malware Uses Ethereum Smart Contract to Fetch Replacement C2 AddressNew GPUThor Rowhammer Defeats ECC on NVIDIA RTX A6000 to Gain Host Root AccessCISA Adds Six Exploited Flaws to KEV, Including NetScaler, Linux, and SQL Server BugsNimbus Manticore Expands Toolset With TWOSTROKE-Like Backdoor and SSH TunnelerFBI Disrupts China-Linked QTFY Infrastructure Used to Steal Data From U.S. OrganizationsNew SLEEPWALKER Backdoor Waits for One Crafted Packet, Then Runs Its Own BytecodeCISA Red Team Compromised Two Critical Infrastructure Orgs, One Detected NothingNovaCookies Campaigns Abuse Genuine Docusign Notifications to Steal Microsoft 365 SessionsUnpatched Kaltura mwEmbed Flaws Could Let Remote Attackers Read Files and Run CodeFrom Alert Backlog to AI Hypothesis EngineOpenAI Bans Russian ChatGPT Accounts Used to Run Influence OperationClaude Opus 4.6 Bypasses Gym Booking Limit, Cancels Other Users’ Reservations in TestsINTERPOL Operation Jackal IV Arrests 58, Identifies 263 in Global Cyber Fraud CrackdownFake Apple Support AI Calls Target Stolen-Device Owners for Passcodes and 2FA CodesCritical Gitea RCE Actively Exploited as Reported Attack Drops Miner-Like PayloadFrontier AI: Vulnerability Management’s Systemic RevolutionU.S. Sanctions Iran-Linked Hackers Behind Critical Infrastructure BreachesE4del and PINHOLE RATs Turn FTP Banners Into Dead Drops for Malware Commands24 npm Packages Abuse unpkg Mirrors to Host Fake Cloudflare CAPTCHA PagesMarimo Notebook Flaw Could Run MCP Commands Before Cells Execute in Edit ModeA Malicious Webpage Could Poison Your Local AI Model Behind NVIDIA NemoClawWhatsApp Adds Multiple Passkeys for Phishing-Resistant Sign-Ins Across iOS and AndroidMirage2FA Surge Hits 4,500 US and EU Companies, Abusing Microsoft 365 Login FlowsAttackers Target miniOrange SAML Flaws That Can Grant WordPress Admin AccessActively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical DataWeedhack Malware Spreads via Fake Minecraft Clients and SEO PoisoningWhy 5% of AI Users Are Your Biggest Security RiskAI-Powered PLC Attacks, GitLab Attacks, Stripe Key Leaks and MoreOperation QUICSILVER Targets Myanmar Government and IT with QUICAgent BackdoorWordlistLoader Delivers Amatera via ClickFix, SynkLoader Phishes Windows PasswordsCritical Keycloak Password Reset Flaw Could Let Unauthenticated Attackers Take Over Any AccountShipping More AI Code Than You Can Secure? Watch How to Control Remediation DebtUAT-10147 Uses AI to Scale Server Attacks, Deploys SPECTRE With EDR Bypass and Linux RootkitTikTok Agrees to $400 Million Settlement in U.S. Child Privacy Lawsuit14 Trojanized npm Packages Drop RedC2 4.0 Linux Backdoor With AI-Assisted C2Android Car Malware Spreads Through Built-In Updaters for Ad Fraud, Proxy BotnetMicrosoft Defender’s Own Driver Can Be Weaponized to Delete Security Software at BootWazuh and AI For Enhanced SOC WorkflowsCisco Patches Nine Crosswork and Secure Workload Flaws, Five Scoring CVSS 10.0GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of DisclosureMicrosoft Entra ID Flaw (CVSS 10.0) Exploited in Wild, Allows Remote Code Execution40 Malicious Firefox Extensions Pose as Web3 Products to Steal Wallet SecretsManic Android Malware Exfiltrates Data From Offline Phones via Nearby Infected DevicesCDN Tsunami Attack Abuses HTTP/3 Translation for Up to 350x DoS AmplificationWhy «Shady AI» is Security’s Next Big Governance ProblemRust Supply Chain Attack Puts Build-Time Malware in Crates with 245 Million DownloadsSuspected Russian Hackers Abuse Google OAuth and WhatsApp Linking to Hijack AccountsAttackers Exploit Zimbra SNMP Flaw for Unauthenticated Remote Code ExecutionGogs 10.0 RCE, n8n Workflow-to-RCE, $10M Reward, GLM-5.3 AI Exploit and MoreAI-Generated Exploit Scripts Target Siemens S7 PLCs in U.S. Critical InfrastructureNew Cryptographic Context Injection Attack Could Let Web Pages Steal Grok Chat DataCritical NetScaler Flaw Can Bypass Authentication on Certain Gateway and AAA ServersIsolated-vm Flaw Lets Sandboxed JavaScript Escape to Host for Potential RCEZombie Card Attack Can Revive Expired Visa Cards for Contactless PaymentsToxicPanda 2.0 and GoldDigger Expand Android Banking Attacks with On-Device FraudNASA AIT-GUI Flaws Could Let Unauthenticated Attackers Issue Spacecraft CommandsElementor Pro Flaw Could Let Unauthenticated Attackers Upload PHP and Execute CodeOpenAI Pauses Frontier RL Training as It Tightens Defenses Against Unsafe AI BehaviorCloudflare Workers Spectre Attack Leaks JWT From Co-Located Worker at 12 Bits/SecondThe Fight Moves to Agent Versus AgentHackers Compromised 14,500+ Dahua Devices Using Credential Attacks, Auth Bypasses, and P2PSilkParasite Espionage Campaign Targets Central Asian Governments with Five New RATsCritical macOS, SharePoint, vCenter, and Microsoft IKE Flaws Under Active ExploitationStopAndProtect Uses Nearly 2,000 Hacked WordPress Sites to Spread Malware and Steal DataClop-Linked Windchill Web Shell Decrypts Credentials and Maps Engineering DataMicrosoft Links 30+ Rotating Domains to MacSync Stealer InfrastructureRansom Busters Claims It Hacked Ransomware Servers, Asks Victims for Up to $60,000Attackers Exploit MLflow SSRF Flaw to Steal Cloud Credentials and SecretsMicrosoft Copilot Personal Flaws Could Let One Click Exfiltrate Data From Connected AppsHow to Expose Them Before HiringWindRelay Android Malware Turns Victims’ Phones Into NFC Relays for Payment FraudOne Attacker Has Scraped Both Salesforce and ServiceNow Portals Since 2025TWINLOOT Abuses SharePoint and Teams to Steal Credentials and Move Across NetworksAI «Mind Viruses» Can Spread Between Agents Through Persistent Prompt Files16 Typosquatted RubyGems Packages Steal Browser Credentials and Crypto WalletsAmnesiaStealer Hijacks Chromium Sessions to Give Attackers Live Browser Control on macOSSafePal Hardware Wallet Maker Says Flaw Exposed Data of Nearly 40,000 CustomersNew PATCHCORD Backdoor Targets Afghan Telecom and Indian Critical InfrastructureGhostJacking AI Attacks, EtherHiding ClickFix, Cursor CLI Flaw + 17 More StoriesCISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCEGeoServer Zero-Day Targeted in Active Exploitation Attempts, Can Lead to RCEChina-Linked Jewelbug Uses XG-Web for Government Espionage and Crypto FraudTrump Memo Paves Way for U.S. Firms to Hack and Disrupt Foreign Crime GroupsApple Warns Users in 110 Countries They May Be Targets of Mercenary SpywareCTM360 Uncovers Over 3,000 Recruitment Phishing URLs Using Browser-in-the-Browser (BitB) Credential TrapsChrome DevTools Technique Enables Authenticated Session Hijacking in Live Windows BrowsersMustang Panda Adds Signed Windows Rootkit to CoolClient Backdoor for StealthCavern C2 Uses DNS and Google Apps Script to Blend Into Legitimate TrafficCritical GitLab GraphQL Flaw Could Let Unauthenticated Attackers Delete Public Projects
Chicago 12, Melborne City, USA
