Collaborate Disseminate
Datadog Security Labs is warning of “several overlapping campaigns” that are systematically enumerating corporate GitHub organizations, repositories, and user accounts through the GitHub API.
“Operators rely on automated scraping tooling with cus… Continue reading Dormant GitHub Accounts Help Attackers Blend In While Mapping Corporate Orgs
Microsoft has taken apart a destructive Windows backdoor it calls GigaWiper. What stands out is how it is built: not one tool but three older destructive programs bolted into one, offered as commands the operator can choose from.
Each is a different w… Continue reading New GigaWiper Windows Backdoor Bundles Disk Wiping, Fake Ransomware, and Spyware
GitHub has officially announced the release of npm version 12 with install scripts disabled by default, along with deprecating granular access tokens (GATs) designed to bypass two-factor authentication (2FA).
The Microsoft-owned subsidiary noted that … Continue reading npm 12 Disables Install Scripts by Default to Reduce Supply Chain Risk
Most security mess starts as admin work. A link gets clicked. A tool gets trusted. A bucket name gets reused. A setting stays loose because nobody wants to touch it.
This week is full of that kind of damage. Not loud. Not clever. Just small gaps … Continue reading ThreatsDay: Cloud Bucket Hijacking, Windows LPE Chain, Global Fraud Bust + 17 More Stories
AI has changed how fast attacks move. Work that once took an attacker days now takes minutes. Using models like Mythos, attackers write tailored bait, pick targets, test what lands, and jump to the next host before your team clears the first alert.
Th… Continue reading AI Attacks Move in Minutes. Join This Webinar on Building a Defense That Keeps Up
Everyone seems to have announced a clearinghouse over the past few weeks. We did too. Ours is called Athena, and the main thing that sets it apart is that it was already real and running when we announced it — built quietly months earlier, heads down, … Continue reading Summer of Clearinghouses
Cybersecurity researchers have flagged a new ransomware family called GodDamn that employs the PoisonX kernel driver to neutralize security software as part of its defense evasion strategy.
According to a new report published by the Threat Hunter Team… Continue reading GodDamn Ransomware Uses PoisonX Driver to Disable Endpoint Defenses
Microsoft has released security updates for a Defender vulnerability known as RoguePlanet, nearly a month after details of the flaw became public.
The vulnerability, tracked as CVE-2026-50656 (CVSS score: 7.8), is a privilege escalation issue in the M… Continue reading Microsoft Patches RoguePlanet Defender Flaw That Can Grant SYSTEM Privileges
Meta has announced that its new artificial intelligence (AI) model Muse Image lets people use public Instagram posts and reels to generate AI content, and it’s enabled by default.
“You can also @-mention Instagram accounts in the Meta AI app to bring … Continue reading Meta’s New AI Image Tool Lets Others Use Your Public Instagram Photos in AI Images
Ask an AI coding agent to scan open-source code for security holes, and it might run the attacker’s code on your own machine instead.
That is the finding in a proof-of-concept published Wednesday by the AI Now Institute, an attack it calls “… Continue reading Top AI Agents Built to Catch Malicious Code Can Be Tricked Into Running It