Archive
New
-
Fake Kernel Threads Are Hiding Backdoors on Linux Servers and Appliances↗
-
AI Gave Your Incident Archive a Second Job
-
Fake security tools on GitHub push backdoors and infostealers
-
What are Security Logs? Part 1
-
The extension you never installed: KREMLIN forges Chrome's own integrity checks to steal banking sessions
-
Cloud Threat Emulation on Autopilot: Context is Everything
-
Introducing AlertZero: Inbox zero for your alert queue
-
M365 Token Spray and Replay Campaign Compromises Business Email Accounts
-
Cybersecurity Dive: Hackers could poison AI models by tampering with core infrastructure
-
Your Next Insider Threat Won’t be Human: Securing AI Agents From the Outside in
-
AI-powered fuzzing with the GitHub Security Lab Taskflow Agent
-
GitHub’s model for secret detection: Finding more secrets with less noise
-
Recorded Future Introduces AI Infrastructure Indicator Lists, Strengthening AI Governance
-
Vulnerability Discovery and Exploitation Trends in the AI Era
-
Proactive Defense: Hardening Code Pipelines and CI/CD Infrastructure
-
ShinyHunters Renewed Mass Exploitation Campaign Targeting Oracle PeopleSoft
-
Investigating Ephemeral Supply Chain Tampering
-
MadApe: The Code That Opens the Door
-
IMSI vs IMEI: What Your Phone Broadcasts and Who Can Read It
-
YARA-X 1.22.1 Release, (Sat, Oct 31st)
-
Malicious Browser Extensions Could Use Claude Dispatch to Run Code on Users' Computers
-
mSecure password manager hack prompts password reset warnings
-
How Adversaries Are Turning the Vulnerability Ecosystem Against Defenders
-
Backporting security fixes at scale with Codex
-
Microsoft Paint RCE Fix Now Available, but Windows Update Won't Deliver It
-
OneNote File Extraction, (Sun, Nov 1st)
-
Managed for Malice: How Attackers Turn MDM into Remote Access
-
Threat actors use agentic AI tooling to find and abuse exposed secrets
-
Modernising threat hunting: Using Semantic Search to Find Risky AI Agent Behavior
-
Making HTTP header injection critical with one prompt