SANS 2026 Detection Engineering Report: 80% of Practitioners Falling Behind the Threat Landscape
Summary The 2026 SANS State of Detection Engineering Report, developed in partnership with Anvilogic, paints a sobering picture of the defensive security profession. Based on a survey of over 300…
Low-Skilled Attacker Uses Claude Code and OpenAI Codex to Breach 14 Companies — Recovered AI Logs Reveal the Full Kill Chain
Summary Researchers at OALABS (Open Analysis) have published a damning report detailing how a low-skilled attacker successfully breached at least 14 companies using Anthropic’s Claude Code and OpenAI’s Codex as…
Critical Splunk Enterprise Flaw Actively Exploited Days After Disclosure — CISA Orders Emergency Patch by Sunday
Summary A critical vulnerability in Splunk Enterprise (CVE-2026-20253) with a perfect CVSS score of 9.8 is now being actively exploited in the wild, just days after its disclosure on June…
HTTP/2 Bomb — AI-Discovered DoS Vulnerabilities Can Knock Web Servers Offline in Seconds
Summary A pair of newly disclosed HTTP/2 denial-of-service vulnerabilities dubbed the “HTTP/2 Bomb” are sending shockwaves through the web infrastructure community. CVE-2026-49975 affects the default HTTP/2 configurations of Apache HTTP…
ShinyHunters Breaches Madison Square Garden — 26 Million Customer Records and 45 GB of Corporate Data Stolen
Summary The ShinyHunters extortion group has claimed responsibility for breaching Madison Square Garden (MSG), exfiltrating 45 GB of corporate and customer data including 26 million customer records, customer support email…
SpaceX Acquires AI Coding Giant Cursor for $60 Billion in Largest Startup M&A Deal of 2026
Summary SpaceX has announced the acquisition of Cursor (Anysphere, Inc.) in a $60 billion all-stock deal — the largest startup M&A transaction of 2026. Cursor, the AI coding assistant founded…
The Gentlemen Ransomware Gang Standardizes EDR-Killing Toolkit — Targeting 48 Security Products With 400+ Process Kills
Summary ESET researchers have published a detailed analysis of The Gentlemen ransomware group’s industrialized approach to neutralizing endpoint security. The gang, led by Russian-speaking threat actor LARVA-368, has built a…
DragonForce Ransomware Deploys Novel Go-Based Backdoor That Hides C2 Traffic Inside Microsoft Teams Relay Servers
Summary The DragonForce ransomware group has been caught deploying a custom Go-based backdoor called “Backdoor.Turn” that abuses Microsoft Teams TURN (Traversal Using Relays around NAT) relay servers to disguise command-and-control…
Three Critical Fortinet FortiSandbox Vulnerabilities Now Under Active Exploitation
Summary Attackers are actively exploiting three critical Fortinet FortiSandbox vulnerabilities — CVE-2026-39808, CVE-2026-39813, and CVE-2026-25089 — all carrying CVSS scores of 9.1. The flaws include OS command injection and path-traversal…
Kodak Confirms Data Breach as ShinyHunters Claims 2.2 Million Stolen Records
Summary Kodak has confirmed that an unauthorized third party gained temporary access to company data in a breach now claimed by the ShinyHunters extortion group. The threat actors allege they…