Cybersecurity, AI, etc.
Red teaming (offensive research, new TTPs, exploitation techniques, PoC releases, adversary simulation findings)
ANY.RUN threat researchers have exposed PhantomEnigma, an active campaign that has compromised over 20 legitimate Brazilian government websites (.gov.br domains) and the email accounts associated with them, using that trusted…
A new class of supply-chain attack is emerging that doesn’t target software bugs — it targets AI hallucinations. Researchers have documented several related techniques under the umbrella of “AI squatting,”…
Summary Security researchers have identified a new data-stealing trojan named ChocoPoC being distributed through a campaign specifically targeting vulnerability researchers, red teamers, and purple team operators. The malware is concealed…
Summary On July 14, 2026, security researchers at Wiz and Microsoft disclosed a coordinated supply chain attack against the @asyncapi npm organization — one of the most widely used open…
Summary Security researchers publicly disclosed a critical zero-day vulnerability in the Cursor AI code editor this week, dubbed DuneSlide, that enables zero-click prompt injection leading to full OS-level remote code…
Summary Within days of Microsoft’s record July Patch Tuesday, a researcher publicly released a proof-of-concept exploit for a new Windows zero-day vulnerability in the User Profile Service, dubbed LegacyHive. The…
Summary Microsoft issued a warning on July 14, 2026, that ShinyHunters — the prolific threat group behind multiple massive 2026 breaches — has pivoted from direct credential theft to OAuth…
Summary On July 11, 2026, researchers disclosed Ghostcommit, a novel attack technique that exploits a blind spot in AI-assisted software development workflows. The attack exfiltrates sensitive .env file contents by…
Two major research disclosures this weekend reveal that AI-powered browsers have become a serious attack surface for prompt injection and remote code execution — and that operators don’t need to…
Ubiquiti disclosed seven critical vulnerabilities across its UniFi product line in early July 2026, including a maximum-severity flaw (CVSS 10.0) that allows unauthenticated network attackers to execute arbitrary operating system…