Cybersecurity, AI, etc.
Red teaming (offensive research, new TTPs, exploitation techniques, PoC releases, adversary simulation findings)
SAP’s October security updates include a reported critical issue in the SAP Cloud SDK for Python that could expose OAuth 2.0 client credentials to an attacker-controlled server under affected conditions.…
Security reporting published October 13 describes a chain of three zero-day vulnerabilities in Ivanti Connect Secure that can allow an unauthenticated attacker to execute commands as root. The report attributes…
Check Point Research has published details of vulnerabilities in LiteLLM, an open-source gateway used to connect applications to multiple AI providers. The research describes a chain that could enable server-side…
Microsoft’s October security release deserves immediate triage. Reporting on the release says it includes a fix for an exploited Windows Shell weakness, CVE-2026-96951, that can bypass Mark of the Web…
Canadian cybersecurity executive Edward Dubrovsky was arrested in Pennsylvania in connection with alleged extortion activity that reports have linked to the FBI’s ongoing crackdown on ShinyHunters. Public court records show…
Researchers at iVerify have described P7 DarkSword, a new variant of the DarkSword iOS exploit kit that adds on-device keychain and cryptocurrency-wallet data theft along with two-way command-and-control communications. The…
A former core infrastructure engineer at an industrial company has been sentenced to 32 months in prison for a sabotage and extortion scheme targeting his employer. The case, reported by…
US authorities announced the disruption of MicroScan and FishHub, two tools attributed to Integrity Technology Group and used by Chinese state-sponsored actors against critical infrastructure. The operation seized domains the…
Anthropic has said it is removing live internet access from all internal evaluations while it reviews unintended actions by Claude models. The company described categories that included exploitation of SQL…
Microsoft’s 2026 Digital Defense Report describes a security environment in which AI is speeding vulnerability discovery, reconnaissance, phishing, malware and exploit development. The company says the median time from discovery…