Cybersecurity, AI, etc.
Blue teaming (defensive research, detection engineering, incident response case studies, new detection/hunting methodologies)
Security researchers have disclosed a campaign against South Korean financial organizations that reportedly used ARTEX, an AI-driven penetration-testing tool, alongside large language models. CrowdStrike Intelligence said the activity ran from…
Security reporting has highlighted CVE-2026-105192, a critical vulnerability in LMCache, a cache layer used alongside vLLM deployments. The reported issue is an insecure-deserialization path in multiprocess or distributed deployments that…
A reported flaw in GoBalance, a Go implementation used by some hidden services for availability, can allow recovery of the private key controlling an affected .onion address from public information.…
Researchers have described PoeLLM, a cryptomining-focused malware campaign that uses a GitHub-hosted poem to recover command-and-control information. The campaign reportedly affected more than 3,400 servers, with AI-serving and tooling environments…
Huntress has reported active exploitation of two AhsayCBS backup-management vulnerabilities, CVE-2026-105133 and CVE-2026-105134. Reporting says the flaws can be chained to bypass authentication and execute operating-system commands on exposed systems.…
CISA and international partners issued a joint advisory on China-linked activity enabled by Integrity Technology Group. The agencies say the actors combined automated scanning, botnets, VPN infrastructure and hands-on intrusion…
Splunk has released security updates for CVE-2026-76268, a critical Splunk Enterprise vulnerability reported to allow unauthenticated remote operating-system command execution. The vulnerability carries a CVSS v3.1 score of 9.8. Because…
Researchers have identified 16 malicious Mozilla Firefox extensions that impersonate Rabby and OKX wallet tools and can steal cryptocurrency-wallet recovery phrases and private keys. Browser extensions can inherit broad access…
A Tensorlake npm package was reportedly compromised to distribute the Shai-Hulud credential-stealing worm. Researchers cited by the report said the first rogue commit appeared on October 7, 2026. Supply-chain incidents…
SonicWall has released fixes for four SMA1000 vulnerabilities, including a pre-authentication server-side request forgery issue rated CVSS 10.0. The company said the flaws were not known to be exploited at…