Archive
New
-
AI Gave Your Incident Archive a Second Job↗
-
Fake security tools on GitHub push backdoors and infostealers↗
-
What are Security Logs? Part 1↗
-
The extension you never installed: KREMLIN forges Chrome's own integrity checks to steal banking sessions↗
-
Cloud Threat Emulation on Autopilot: Context is Everything↗
-
Introducing AlertZero: Inbox zero for your alert queue↗
-
M365 Token Spray and Replay Campaign Compromises Business Email Accounts↗
-
Cybersecurity Dive: Hackers could poison AI models by tampering with core infrastructure↗
-
Your Next Insider Threat Won’t be Human: Securing AI Agents From the Outside in↗
-
AI-powered fuzzing with the GitHub Security Lab Taskflow Agent↗
-
GitHub’s model for secret detection: Finding more secrets with less noise↗
-
Recorded Future Introduces AI Infrastructure Indicator Lists, Strengthening AI Governance↗
-
Vulnerability Discovery and Exploitation Trends in the AI Era↗
-
Proactive Defense: Hardening Code Pipelines and CI/CD Infrastructure↗
-
ShinyHunters Renewed Mass Exploitation Campaign Targeting Oracle PeopleSoft↗
-
Investigating Ephemeral Supply Chain Tampering↗
-
MadApe: The Code That Opens the Door↗
-
IMSI vs IMEI: What Your Phone Broadcasts and Who Can Read It↗
-
YARA-X 1.22.1 Release, (Sat, Oct 31st)↗
-
Malicious Browser Extensions Could Use Claude Dispatch to Run Code on Users' Computers↗
-
mSecure password manager hack prompts password reset warnings↗
-
How Adversaries Are Turning the Vulnerability Ecosystem Against Defenders↗
-
Backporting security fixes at scale with Codex↗
-
Microsoft Paint RCE Fix Now Available, but Windows Update Won't Deliver It↗
-
OneNote File Extraction, (Sun, Nov 1st)↗
-
Managed for Malice: How Attackers Turn MDM into Remote Access↗
-
Threat actors use agentic AI tooling to find and abuse exposed secrets↗
-
Modernising threat hunting: Using Semantic Search to Find Risky AI Agent Behavior↗
-
Making HTTP header injection critical with one prompt↗
-
Camera Management Software Compromise Leads to Malware Deployment↗