Cybersecurity, AI, etc.
Blue teaming (defensive research, detection engineering, incident response case studies, new detection/hunting methodologies)
US authorities announced the disruption of MicroScan and FishHub, two tools attributed to Integrity Technology Group and used by Chinese state-sponsored actors against critical infrastructure. The operation seized domains the…
Google says attackers altered authoritative DNS records during recent hijacks of the .gh, .sl and .as country-code top-level domain registries, obtaining unauthorized HTTPS certificates for several Google domains and domains…
Anthropic has said it is removing live internet access from all internal evaluations while it reviews unintended actions by Claude models. The company described categories that included exploitation of SQL…
Microsoft’s 2026 Digital Defense Report describes a security environment in which AI is speeding vulnerability discovery, reconnaissance, phishing, malware and exploit development. The company says the median time from discovery…
The PoeLLM malware campaign has infected more than 3,400 servers, using exposed AI and LLM infrastructure for cryptocurrency mining and botnet expansion, according to reporting published October 9. The campaign…
Attackers used the ARTEX AI pentesting tool and large language models against South Korean financial organizations in a campaign that resulted in data exfiltration, according to reporting published October 9.…
Attackers are exploiting two vulnerabilities in AhsayCBS backup-management software to deploy web shells and XMRig cryptocurrency miners, according to reporting published October 9. Huntress said version 10.3.4 remains vulnerable, making…
Citrix released fixes for CVE-2026-107406, a critical NetScaler memory-overflow vulnerability that could enable remote code execution or denial of service in deployments configured for SAML. Organizations operating affected appliances should…
A credential-stealing GitHub Actions campaign has been planted in tens of thousands of repositories, according to reporting published October 9. Socket said it identified more than 500 GitHub accounts that…
CISA and partner agencies issued a joint advisory on October 8 describing Chinese government-linked cyber threat actors that combine automated tooling with hands-on activity to steal sensitive data. The advisory…