Collaborate Disseminate
Notepad++ has released a security fix to plug gaps that were exploited by an advanced threat actor from China to hijack the software update mechanism to selectively deliver malware to targets of interest.
The version 8.9.2 update incorporates what main… Continue reading Notepad++ Fixes Hijacked Update Mechanism Used to Deliver Targeted Malware
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added four security flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation in the wild.
The list of vulnerabilities is as follows –
… Continue reading CISA Flags Four Security Flaws Under Active Exploitation in Latest KEV Update
Cybersecurity researchers have disclosed that artificial intelligence (AI) assistants that support web browsing or URL fetching capabilities can be turned into stealthy command-and-control (C2) relays, a technique that could allow attackers to blend in… Continue reading Researchers Show Copilot and Grok Can Be Abused as Malware C2 Proxies
A new Android backdoor that’s embedded deep into the device firmware can silently harvest data and remotely control its behavior, according to new findings from Kaspersky.
The Russian cybersecurity vendor said it discovered the backdoor, dubbed Keenadu… Continue reading Keenadu Firmware Backdoor Infects Android Tablets via Signed OTA Updates
Cybersecurity researchers have disclosed details of a new SmartLoader campaign that involves distributing a trojanized version of a Model Context Protocol (MCP) server associated with Oura Health to deliver an information stealer known as StealC.
“The … Continue reading SmartLoader Attack Uses Trojanized Oura MCP Server to Deploy StealC Infostealer
Cloud attacks move fast — faster than most incident response teams.
In data centers, investigations had time. Teams could collect disk images, review logs, and build timelines over days. In the cloud, infrastructure is short-lived. A compromised instan… Continue reading Webinar: How Modern SOC Teams Use AI and Context to Investigate Cloud Breaches Faster
My objectiveThe role of NDR in SOC workflowsStarting up the NDR systemHow AI complements the human responseWhat else did I try out?What could I see with NDR that I wouldn’t otherwise?Am I ready to be a network security analyst now?
My objective
A… Continue reading My Day Getting My Hands Dirty with an NDR System
New research from Microsoft has revealed that legitimate businesses are gaming artificial intelligence (AI) chatbots via the “Summarize with AI” button that’s being increasingly placed on websites in ways that mirror classic search engine poisoning (AI… Continue reading Microsoft Finds “Summarize with AI” Prompts Manipulating Chatbot Recommendations
Apple on Monday released a new developer beta of iOS and iPadOS with support for end-to-end encryption (E2EE) in Rich Communications Services (RCS) messages.
The feature is currently available for testing in iOS and iPadOS 26.4 Beta, and is expected to… Continue reading Apple Tests End-to-End Encrypted RCS Messaging in iOS 26.4 Developer Beta
Cybersecurity researchers disclosed they have detected a case of an information stealer infection successfully exfiltrating a victim’s OpenClaw (formerly Clawdbot and Moltbot) configuration environment.
“This finding marks a significant milestone in th… Continue reading Infostealer Steals OpenClaw AI Agent Configuration Files and Gateway Tokens