Cybersecurity, AI, etc.
Red teaming (offensive research, new TTPs, exploitation techniques, PoC releases, adversary simulation findings)
Summary Security researchers at Paradigm Shift have publicly disclosed “usbliter8,” a new unpatchable BootROM exploit affecting Apple’s A12 and A13 chips along with S4 and S5 SoCs. The exploit and…
Summary Microsoft has attributed a sweeping supply chain attack on the Mastra AI npm ecosystem to North Korea’s Sapphire Sleet group (also tracked as BlueNoroff/UNC1069). Over 140 packages within the…
Summary Researchers at OALABS (Open Analysis) have published a damning report detailing how a low-skilled attacker successfully breached at least 14 companies using Anthropic’s Claude Code and OpenAI’s Codex as…
Summary Prolific exploit researcher Nightmare Eclipse (also known as Chaotic Eclipse) has publicly released “GreatXML,” a zero-day exploit that bypasses Windows BitLocker encryption by abusing the trust boundary between the…
Summary The DragonForce ransomware group has been caught deploying a custom Go-based backdoor called “Backdoor.Turn” that abuses Microsoft Teams TURN (Traversal Using Relays around NAT) relay servers to disguise command-and-control…
Summary Equixly, an AI-powered offensive security platform, has launched a Model Context Protocol (MCP) integration that embeds continuous penetration testing capabilities directly into AI coding assistants like GitHub Copilot and…
Summary ShinyHunters — the prolific data-theft and extortion group tracked by Mandiant as UNC6240 — has exploited a critical zero-day vulnerability in Oracle PeopleSoft to breach more than 100 organizations,…
Summary The Miasma supply chain worm — an evolved variant of the Mini Shai-Hulud worm family — has dramatically expanded its reach beyond the initial Red Hat NPM compromise. On…
Summary Sygnia’s new Operation Highland report describes a China-nexus Velvet Ant intrusion that maintained access inside an internal network for nearly a decade, with forensic artifacts dating back to 2016.…