Государственный центр закупает программу для деанонимизации пользователей.

В комплекте камера, дистанционный пульт и тяжёлый аккумулятор.

Вся жизнь в одной базе.

203 часа без постоянного контроля. ИИ не остановился

Злоумышленники нашли способ проникать в административную консоль без учётных данных.

Учёные открыли доступ к карте 166 тысяч нейронов, а программисты нашли ей неожиданное применение.

Бизнес предупреждает о срыве поставок электроники.

В Telegram сообщили о новой уязвимости.

На онлайн-воркшопе 12 ноября покажут, как находить и исправлять опасные ошибки ИИ в облаке.

Всё начинается с осторожного сближения, а дальше робот берёт инициативу в свои руки.

В древних водоёмах одни смеси молекул могли расти быстрее других и побеждать в борьбе за ресурсы.

Это стало предметом для обсуждения на сессии «Антифрод с ИИ: безопасность без вторжения в приватность» конференции SOC Forum 2026.

Заметим, что на конференции «Проверка на прочность.

Особое внимание вице-президент «Билайна» обратил на то, что в качестве средства противодействия им плохо работают программы повышения осведомлённости сотрудников (Security Awareness).

Не исключено и то, что такие атаки уже случались и в России, но о них пока не объявляли публично.

Найти же им альтернативу трудно, поскольку использование публичных ИИ-моделей чревато утечками данных и, как следствие, регуляторными рисками.

47% — рост направления мониторинга, реагирования и управления ИБ, куда входят SIEM, SOAR и SGRC, по данным «Инфосистемы Джет».

Функции SGRC-систем (Источник: RTM Group)GRC (Governance, Risk and Compliance — управление, риски и соответствие требованиям) используют для управления рисками, политиками и проверками в разных областях организации.

Помимо SGRC в системе есть модули ITAM (управление ИТ-активами), SAM (управление лицензиями), SOAR (автоматизация реагирования), UEBA (анализ поведения пользователей).

Работает в облачном режиме (SaaS) и в варианте In-House для установки в инфраструктуре организации.

Поэтому при выборе важно смотреть не только на название продукта, но и на состав модулей…

Так что далеко не случайно, что тема использования ИИ в разных её аспектах стала ключевой на SOC Forum.

В департаменте киберразведки компании Ф6/F6 особо обратили внимание на то, что в текущем году кардинально изменилась ситуация с использованием ИИ прогосударственными группировками.

Использование ИИ позволяет злоумышленникам быстрее и в больших объёмах создавать фишинговые домены, массово генерировать поддомены и наполнять сайты контентом.

Он позволяет блокировать доступ к внешним ИИ-моделям, которые сотрудники часто используют бесконтрольно и не ставя в известность ИТ и ИБ, защищает от промпт-инъекций и потенциально опасных действий ИИ-агентов.

Подобные инциденты уже имели место, в том чи…

Для тех, кто активно пользуется ИИ и не хочет вносить нейросеть в статью расходов, локальная модель может стать альтернативой платной подписке.

После установки модели не нужно платить за каждый запрос, если обработка действительно проходит локально и приложение не использует платные внешние сервисы.

Единственное ограничение в том, что сама модель не получает свежую информацию из интернета и не может обращаться к онлайн-сервисам без подключения.

У неё есть режимы с акцентом на рассуждения и на обычный диалог, поэтому можно выбирать между более подробным анализом и быстрыми ответами.

Узнайте, где они хранятся, и не вставляйте в запросы пароли, секретные ключи и другие данные, которые не нужны…

Они поддерживают разные типы ловушек и приманок, интегрируются с SIEM, SOAR и другими средствами ИБ, автоматизируют создание и развёртывание ложных объектов.

Отдельные компании используют honeypot и приманки на базе специализированных или открытых решений.

Для удобства мы разделили все вошедшие в обзор решения на две категории — в соответствии с их архитектурой и ролью в защитном контуре.

Ловушки и приманки создаются автоматически, а их работу можно настроить под конфигурацию сети и особенности инфраструктуры компании.

R-Vision TDPR-Vision TDP — DDP-платформа, которая создаёт в сети взаимосвязанные ловушки и приманки для обнаружения атакующих.

Рынок ITSM в России растёт каждый год, но большинство компаний всё ещё используют системы только для регистрации заявок.

Эксперты обсудили, как отличить зрелое решение от классического сервис-деска, зачем нужна CMDB и что изменит ИИ.

Дмитрий Сёмин добавил, что ITSM позволяет повысить прозрачность: раскрыть, что выполняло ИТ, в какой срок и сколько это стоило в рублях.

Граница будет сдвигаться, и прогресс в области ITSM и low-code-платформ за последние шесть-девять месяцев очень заметен.

Илья Шабанов отметил, что основная проблема при новом внедрении — подходить к ITSM как к организационному проекту: формализовать процессы, понять, какие услуги оказывает ИТ.

Эксперты рынка обсудили, что изменилось в регуляторике КИИ, как проверять защиту на практике и что сделать до 1 марта 2027 года.

Он используется, если объект не найден в типовом перечне и в методике категорирования пока нет чётко зафиксированных особенностей по всем отраслям.

Константин Закатов:«К моменту проведения проверки уже всё должно быть готово и в актуальном состоянии — инфраструктура проинвентаризирована, настроена, грамотно работает.

Документация, процессы и категорирование — это важно, но выйти в поле и посмотреть, что происходит на практике, заглянуть в детали — обязательно».

Константин Закатов:«Следить за новыми технологиями, делать правильные выводы и не бояться — архитектурно…

Как развивались системы SGRC в России и GRC за рубежомНа международном рынке GRC-платформы существуют уже несколько десятилетий.

В августе компания опубликовала документ «Innovation Insight: Cyber GRC Streamlines Governance», а в апреле 2026 года представила новое исследование «Innovation Insight: Cyber GRC».

Три общих направления развития SGRC и Cyber GRCРазработчики SGRC и Cyber GRC всё чаще стремятся объединить технические данные, оценку рисков и управленческие процессы.

Поэтому SGRC и Cyber GRC теперь связывают информацию об активах и бизнес-процессах с угрозами, уязвимостями, результатами аудитов и реализованными мерами защиты.

SGRC и Cyber GRC как прослойка между источниками данных и …

Вместе с экспертами разбираем, что опаснее — «перезаложить» или «недозаложить» мощности, и как облака помогают бизнесу справляться с сезонными нагрузками.

ВведениеКогда-то сезонность в ретейле была предсказуемой: «красный океан» с сентября по декабрь, мёртвый сезон в январе и постепенный рост к лету.

Как на самом деле проверяют нагрузкуНиколай Минаков описывает, как это происходит в РИВ ГОШ:При расчётах нужно смотреть на механики рекламных акций и поведение пользователя в целом.

Позиция Николая Минакова такая: облака — не благо и не зло, а инструмент, который нужно правильно использовать.

Станислав Попов предупреждает, что дублирование не работает: расчёт на размещение копии в облаке как на…

Одно и то же число нужно и на основном слайде, и в summary, и в финальном выводе.

Гейты работают не с исходными данными, а с готовым артефактом: текстом, извлечённым из PDF, структурой слайдов и результатом рендера.

Общий смысл всех трёх групп один: отчёт выглядит готовым только после того, как прошёл гейты, а не после того, как отрисовался.

Теперь оно начинается не с вопроса «а всё ли вообще сошлось?», а с вопроса «правильно ли мы это интерпретируем?».

Где это не нужно и что не ловитЛегко прочитать всё предыдущее как «стройте CI для любой презентации».

Причём там обсуждалась реальная практика, в том числе и не вполне однозначный опыт.

В сочетании с языком Python и ИИ-моделью GigaChat от Сбера она позволяет создавать тестовые рассылки в электронной почте и мессенджерах.

Однако как для очень крупных, так и для совсем небольших компаний бесплатные продукты, скорее всего, не подойдут.

Одну из таких использовали и для организации обучения и тестирования сотрудников AM Live.

Это будет снижать их эффективность и, что хуже, создавать иллюзию защищённости и в итоге может приводить к возникновению инцидентов.

Linux-инфраструктура особенно выделяется своей сложностью как для атакующих, так и для ИБ-специалистов, защищающих её.

Его нужно проводить по каждой системе отдельно, и в крупной инфраструктуре с сотнями серверов это кардинально меняет экономику проверки.

Что изучать и на что обращать вниманиеПервое, с чего стоит начинать на каждой системе, — список процессов и сетевых соединений.

Специфика закрепления в Linux-системахЗлоумышленники используют специальный набор техник для закрепления в Linux-инфраструктуре, и часть из них сложно обнаружить стандартными средствами.

Проверка переменной LD_PRELOAD в «/etc/ld.so.preload» и в окружении подозрительных процессов — обязательный пункт аудита, которы…

Я поднял на своём сервере SSH-ловушку: она притворяется беззащитным Linux, пускает почти с любым паролем и записывает всё, что делают внутри.

За первые пять дней в неё пришло 24 218 сессий с 683 адресов, и почти девять из десяти сделал один-единственный бот.

Рядом работают смоляная яма — порт, который притворяется SSH и никак не договорит приветствие, — и приманки Redis, MySQL и Elasticsearch.

Мне хотелось увидеть атаки не в отчётах и учебниках, а на собственном сервере: кто приходит, что вводит и чем одна атака отличается от другой.

Похоже, это не взлом, а инвентаризация: бот проверяет, подошёл ли пароль и что за система внутри.

Разбираю механику смены гео на безлимитном мобильном порту, вывожу формулу точки безубыточности и показываю четыре задачи, где переключение гео на одном порту дешевле резидентных и мобильных прокси с оплатой по трафику.

Вы платите за ширину пула, то есть за десятки стран и сотни городов в одном аккаунте, и за каждый гигабайт, который через этот пул прошёл.

Из фактов о нашей инфраструктуре здесь только механика смены IP на порту (по таймеру или по ссылке через API, по данным на 22.09.2026).

Не меняется и всё, что живёт на стороне устройства: GPS и геолокация самого устройства, язык системы, профиль и история, физический тип подключения.

Там всё упирается в трафик и в число одновременно занят…

Например, поисковику может и полезно считать «е» и «ё» одинаковыми: пользователь найдёт нужный документ, даже если не поставил две точки.

Одна буква — два канонически эквивалентных представленияПервый сюрприз ждёт нас ещё до того, как вообще начнём сравнивать «е» и «ё».

В примере выше plain_e ( U+0435 ) остаётся U+0435 и в NFC, и в NFD.

Когда визуально похожие символы становятся угрозойС «е» и «ё» ситуация, когда система намеренно объединяет разные символы.

Практическая защита по UTS #39 строится не на слепом запрете любого смешения, а на двух механизмах:Restriction Levels (уровни ограничений).

Затем при очистке запроса PHP обращался к этим незавершённым данным как к корректным, что приводило к повреждению памяти.

Можно вспомнить, что в прошлом году под угрозой оказался контракт поддержки программы CVE, которая как раз обеспечивает регистрацию угроз.

Часто организация не в курсе, какие языки используются у неё «под капотом», пока она не озаботится сборкой из исходников.

Сначала им нужно знать, какие системы затронуты и что обновляет поставщик, а что придётся менять самим.

Заказчику готового продукта, например, стоит заранее выяснить у поставщика, какие компоненты и среды входят в поставку, как он сообщает об их уязвимостях и в какие сроки выпускает исправления.

Эксперты по-разному оценивают вероятность катастрофы, но каждый объясняет, какие угрозы считает наиболее серьёзными и что предлагает с ними делать.

Хайди Хлааф: безопасность должна опираться на проверяемые оценкиГлавный научный сотрудник по ИИ в AI Now Institute, бывший старший инженер по безопасности систем в OpenAI.

Я много работаю со специалистами ядерной отрасли: объясняю, какие риски связаны с системами ИИ и почему на них нельзя безоговорочно полагаться.

Здесь полезно разделять два вопроса: что произойдёт с ИИ и что мы намерены с этим делать.

Стеф Герра: автоматизация лабораторий упрощает и опасные экспериментыМолекулярный биолог и эксперт по биобезопасности RAND Corporation, исследует…

За несколько часов он по подсказкам оператора прошел путь от уязвимого плагина на веб-сервере через почтовый сервер и контроллер домена до хоста топ-менеджера и просмотрел там содержимое диска.

WordPress, как и большинство веб-серверов в корпоративных инфраструктурах, работает на Unix-подобной системе, и поведенческий анализ BAD на этом хосте идет так же, как на Windows-системах.

Аналитик запросил у нее интерпретацию цепочки на WordPress-сервере, и Naira разобрала события под индикаторами BAD и описала картину целиком (рис.

Поэтому устойчивый ответ не в покрытии конкретных техник, а в обнаружении на уровне поведения: чем бы и в какой последовательности атакующий ни действовал, поведенческий…

Даты берём по сообщениям Роскомнадзора и Минцифры и по публикациям с датой: Медуза, Медиазона, Новая газета, Важные истории, Вёрстка, Коммерсантъ, Anti-Malware, SecurityLab, Хабр.

Важная оговорка: таблица строится по открытым данным, а не по замерам.

В феврале 2026 года сменилась техника, а не темп10 февраля 2026 года YouTube перестал открываться без VPN, и причина была не в реестре и не в ТСПУ: его домен пропал из российской системы доменных имён НСДИ.

Замедление оказалось отдельным, самостоятельным инструментомХронология замедлений: Twitter в марте 2021 года, YouTube с июля 2024 года, Telegram с февраля 2026-го.

Регулярные отключения начались в мае 2025 года, за 2025 год их насчитали боль…

Первая - токен бота должен быть защищён и не отдаваться клиентам.

Когда я в очередной раз зашел на него посмотреть - там стояла упоротая фотка и ссылка на тг для связи.

В общем, убогая api-документация национального мессенджера и не менее убогая безопасность оставили свой осадочек, из-за чего на время было предложено забыть про задачу.

А также необходимость авторизоваться в яндексе и на своем клиенте, и на "сервере-посреднике".

Точные эндпоинты api не помню, да они и не важны.

Команды Dart и Flutter выпустили обновления, которые блокируют скомпрометированные промежуточные сертификаты удостоверяющего центра eMudhra.

Для stable это Dart 3.13.7 и Flutter 3.47.8, для beta — Dart 3.14.0-315.3.beta и Flutter 3.50.0-0.2.pre.

Dart HttpClient во Flutter 3.47.0 с Dart 3.13.0 принял все 12 и получил HTTP 200.

Команда скачивает последнюю доступную версию текущего канала, поэтому сначала имеет смысл посмотреть, какой канал выбран:flutter channel flutter upgrade flutter --versionВ выводе проверьте версии Flutter и входящего в него Dart SDK.

Для такого развёртывания стоит проверить и версию Dart при сборке, и набор сертификатов в конечном образе.

На страницах книги автор разбирает устройство реальных антивирусных движков, исследует их код в дизассемблере и показывает, как работают разные механизмы обнаружения.

Среди тем:YARA и ClamAV: устройство сигнатурных движков, возможности статического анализа и архитектура антивируса с открытым исходным кодом.

Kaspersky 2008, Avira 2026 и Windows Defender 2026: разбор утекшего исходного кода, особенностей эвристики и устройства современных антивирусных движков.

VirusTotal, эмуляторы и песочницы: как исследователи получают образцы малвари, как устроены среды анализа и какими приемами их обходят.

Книга «Обход антивирусов на практике» выйдет в твердом переплете и будет насчитывать порядка 250 стр…

Французский кооперативный банк Crédit Mutuel Arkéa сообщил об атаке, в ходе которой злоумышленники похитили около 118 млн евро (133 млн долларов США).

Хакеры проникли в сеть банка через платформу неназванного сервис-провайдера и использовали собственный счет Arkéa для перевода средств и конвертации их в криптовалюту.

Деньги клиентов банка при этом не пострадали.

Однако в банке заявили, что атака уже остановлена, ситуация находится под контролем, а работа систем постепенно возвращается в нормальный режим.

В настоящее время в Arkéa вместе с правоохранительными органами расследуют инцидент и пытаются установить, как именно злоумышленники сумели проникнуть в инфраструктуру банка.

По информации РБК и «Ведомостей», Минцифры обсуждает механизм, который позволит операторам дата-центров отключать менее приоритетных клиентов, если мощности понадобятся сервисам из «белых списков».

Резерв разрешат считать суммарно по всем площадкам оператора или холдинга, а не выделять 10% в каждом ЦОД отдельно.

Требования планируют распространить на все коммерческие дата-центры, тогда как корпоративные ЦОД, которые обслуживают исключительно внутренние системы компаний, под них не подпадут.

При этом ЦОД, который одновременно используется для собственных нужд и оказывает услуги внешним или связанным заказчикам по договорам, могут счесть коммерческим.

Решение об этом принимает правительство п…

10 ноября валидаторы Initia остановили блокчейн после того, как злоумышленник вывел из сети активы примерно на $615 тыс.

Это вторая атака на Initia менее чем за три недели.

Когда активы переводят из основной сети в один из таких роллапов, их блокируют на специальных счетах в базовом блокчейне.

Октябрьский взлом произошел из-за ошибки в механизме кеширования скриптов MoveVM — виртуальной машины, которая исполняет код в Initia.

В то же время за сутки цена INIT выросла примерно на 60%, что вызвало в сообществе подозрения в манипулировании рынком.

10 ноября в Binance предупредили клиентов, что через платформу будет запрещено отправлять и получать средства, если перевод прямо или косвенно связан с MEXC.

Ограничения распространяются на саму MEXC и еще 12 позиций в перечне Binance, включая связанные с биржей компании.

Перевод с кошелька Binance на адрес получателя из списка будет отклонен, а поступившие от него средства задержат на время проверки.

Американские власти выявили прямые переводы на сумму около $1 млрд между MEXC и более чем 40 иранскими криптобиржами.

По данным Минфина США, по состоянию на сентябрь 2026 года на MEXC ежедневно обрабатывали операции на сумму свыше $1 млрд, а резервы биржи составляли около $5 млрд.

В D-Link предупредили о нескольких неисправленных уязвимостях нулевого дня, которые были обнаружены в коммутаторах серии DGS-3130.

Баги позволяют атакующим получить конфиденциальную информацию об устройствах, изменять учетные данные и конфигурацию, а а также спровоцировать сбои в работе сетевых сервисов и перезагрузку коммутаторов.

Известно лишь, что баги связаны с аутентификацией, контролем доступа и обработкой информации в D-Link Discovery Protocol (DDP).

В частности, в D-Link проверяют настройки безопасности SSH, механизмы защиты учетных данных ОС, шифрование прошивок и встроенные криптографические ключи.

Также в D-Link советуют удалить ненужные строки сообщества SNMP, в том числе заданн…

Как пишет Protos, отставка Нга вновь привлекла внимание к тому, кто отвечает за финансовый контроль в Binance.

В том же месяце в The New York Times сообщили, что с двух аккаунтов на Binance в пользу связанных с Ираном структур перевели около $1,7 млрд.

Вопрос о переводах возник уже после того, как в Binance согласились на независимый надзор в США.

Для проверки резервов и финансовых консультаций в Binance в разные годы привлекали сторонние компании.

В сентябре 2024 года в Binance пригласили Grant Thornton в качестве консультанта.

Представители Binance сообщили СМИ, что провели проверку и не обнаружили никаких признаков утечки данных.

За весь массив данных хакер запросил 900 000 долларов США и заявил, что у Binance осталось «два варианта: заплатить или данные утекут».

В Binance полагают, что объявление, скорее всего, является мошенническим.

В свою очередь, журналисты пишут, что в объявлении о предполагаемой утечке можно заметить явные нестыковки.

К примеру, Binance попросту не хранит приватные ключи от внешних кошельков пользователей и не сохраняет пароли в открытом виде.

В своем выступлении он говорил о том, как распространение ИИ и автоматизация могут изменить экономику компаний и роль человека.

Чэнь Цюфань выделил три основных сценария использования технологии: ИИ как ассистент, как автономный агент и как часть инфраструктуры.

Тема автономности ИИ поднималась и в контексте ответственности за его действия.

Представители ФСТЭК России и Национального координационного центра по компьютерным инцидентам обсуждали применение ИИ в информационной безопасности и возможные требования к таким технологиям.

Сотрудник НКЦКИ Иван Минаев отметил, что ИИ может снять со специалистов часть рутинных задач, однако ответственность за передачу ему процессов безопасности по-прежн…

The script also retrieved the RSA keys of the 8 newly revoked CAs from the company's hardware security modules (HSMs).

Of the 8, 6 were for website (TLS) certificates and 2 for code signing.

That day it generated 16 CA keys on Utimaco HSMs, including the 8 behind the October key compromise.

The smallest, for EM OV TLS CA - G3C, is 4, and the largest is 237.

Nothing in the ceremony tested the key's strength or checked the certified key against the first generated key.

Microsoft on Tuesday released patches for a total of 1,259 vulnerabilities spanning its software portfolio, the second consecutive month where the patch volume has exceeded 1,000 flaws.

More than 500 flaws relate to elevation of privilege, followed by remote code execution and information disclosure bugs.

Of these, a Moderate-severity security flaw in Microsoft Outlook (CVE-2026-124194, CVSS score: 6.5) has been flagged as actively exploited by Microsoft.

"Product UI does not warn users of unsafe actions in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network," Microsoft said in an advisory.

An unauthenticated attacker could send a specially crafted me…

AI provider keys that customers stored on Railway were stolen in an October breach and used to commit an estimated $740,000 in unauthorized spending, the platform-as-a-service provider said yesterday.

It has promised to pay those charges itself when an AI provider will not refund them.

The attacker decrypted variables in at most 1.85% of workspaces, about 100,000, and its database queries looked for AI provider keys.

In addition to AI keys, one of the attacker's database queries matched cloud, database, and payment service credentials.

Between 04:07 and 05:21 UTC on October 21, the attacker pulled encrypted variables from the database, looking for names that matched AI provider keys.

An AI model can be given a hidden backdoor by editing fewer than 10 of its rarely used neurons, without retraining the model, Microsoft researchers have shown.

The edited neurons are ones that rarely fire and barely affect the model's answers.

In a researcher's walkthrough posted on X, a backdoored Nemotron-Terminal-8B model with 10 edited neurons was tasked with fixing a Node.js server.

Legitimate fine-tunes and quantized versions change weights broadly, whereas edited neurons change a few weight vectors by a large amount.

The company says that protects customers using models from trusted labs, though a compromised trusted provider is still a risk.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) Tuesday added two security flaws impacting Cisco BroadWorks and Openwave Messaging Webtop Media Transcoder to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.

Details of the vulnerabilities are below -CVE-2026-20320 (CVSS score: 7.5) - An improper restriction of XML external entity reference vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks that could allow an unauthenticated, remote attacker to read sensitive configuration information on an affected system with the privileges of the Cisco BroadWorks user.

(Fixed in August 2026)(CVSS score: 7.5) - An impro…

A flaw in Git can let a malicious repository run an attacker's code on a computer that clones it recursively, together with its submodules.

This lets an attacker replace a submodule's .git file with a symbolic link to a folder holding malicious hooks or configuration.

Hooks are programs Git runs at set points, so once Git uses that folder, the attacker's code can run.

GitHub Codespaces and GitHub Actions will also get the fixed Git.

When someone clones an empty repository over Git protocol v2, a malicious server can send a branch name that contains path traversal.

That mode processes requests inside a trusted execution environment (TEE) designed to keep them private even from the company itself.

The attacker also reached 18 AI agents on an older deployment of NEAR AI Agents that did not run inside the company's TEE.

Two customers' NEAR AI Cloud API keys were exposed in logs.

Access to its NEAR AI Cloud service has been restored.

NEAR AI has not said whether the affected server handled any of those chats.

French software company Vates VMS has warned of a critical security vulnerability in Xen Orchestra that it said is being actively exploited in the wild.

The authentication bypass flaw, which does not yet have a CVE identifier, is tracked as VSA-2026-062.

"REST cookie parsing turns authenticationToken=j:%7B%7D into {}," Vates VMS said in an alert.

Vates VMS said it's seeing the vulnerability being actively exploited by a threat actor from the following IP address and TOR domain -91.211.251[.

]onion:3333It's unclear when the activity started and if the vulnerability was exploited as a zero-day.

Although initially assumed to be independent sets of attacks, each with its own backdoors and post-exploitation tooling, they have all been linked through a malware ecosystem called Sparrow.

Attacks mounted by FamousSparrow are known for deploying backdoors like SparrowDoor (and its variants Crowdoor and TernDoor), SparroWocky, and HemiGate.

The so-called utility, once deployed, delivers either SquadC or a SparrowDoor variant.

Source: Positive TechnologiesWritten in C/C++, SquadC is a Windows backdoor that enables initial foothold over the infected host.

It manipulates the packet and rewrites the destination port to the backdoor’s internal listening port, typically a high port such as 49628.

Cybersecurity researchers have disclosed details of an attack that exploited two now-patched vulnerabilities in AhsayCBS to deliver a Python-based implant.

The activity, observed by Huntress in October 2026, involves the exploitation of a chain comprising CVE-2026-105133 and CVE-2026-105134 to bypass authentication and execute arbitrary commands on affected systems.

Patches for the two vulnerabilities were released by Ahsay Backup in mid-October 2026.

"[AhsayCBS.jsp's] disguise as an internal image preview service even extended down to a comment block describing a watermark endpoint," Huntress explained.

"The web shell used only JSP implicit objects and fully qualified class names, meaning …

We uncovered a SlippyNunchucks DNS hijacking operation, abusing Sogou Input Method’s use of insecure HTTP communications.

Sogou Input Method (also known as Sogou Pinyin) is one of the most widely used Chinese input method editors (IMEs) for typing Chinese characters on computers and mobile devices (see Figure 2).

Sogou Input Method uses specialized collections, known as cell dictionaries (细胞词库), to expand its vocabulary and improve Chinese text prediction.

Technical analysisAnalysis of the DNS hijackingAs part of Sogou Input Method’s brand promotion mechanism, SGTool.exe, one of its components, sends an HTTP request to the config.pinyin.sogou[.

Similar to the previous mechanism, this approa…

We presented our findings about the Gorbag APT group at the Virus Bulletin conference on October 14th, 2026; the full technical analysis is available in our white paper Gorbag: Orcs at the border published by Virus Bulletin.

Gorbag: Orcs at the border Read the full report PDFVictimology and geopolitical contextAll Gorbag targets identified by ESET Research are located in Ukraine, and the group’s targeting choices fall into three main areas that align closely with Russian wartime intelligence priorities.

Prime ReverseShell is derived from the publicly available PSSW100AVB repository on GitHub, with modifications to suit the operators’ needs.

Prime ReverseShell with a comment trying to fool A…

Effective SMB protection demands that vendors lead their customers through a clear onboarding process – and offer practical and transparent guidance during incident response engagements.

Understanding what a genuine threat to the organization is and what not to worry about is often beyond the capability of a small IT security team.

They are trusted by more SMBs than any other entity – including internal staff, industry peers, and governments – as a trusted source of cybersecurity guidance.

SMBs don’t want to hand over all control for threat protection.

The key for vendors is to ensure these experts are available at onboarding, to guide SMBs through configuration, activation and setup.

The PHP2Shell disclosure and other major cybersecurity news this month brought into relief the need for well-thought-out cyber-readiness plansWith October coming to a close, ESET Chief Security Evangelist Tony Anscombe reviews some of the top cybersecurity stories that made the news over the month.

At the same time, he offers insights that the latest wave of incidents hold for your company's, or your own, cyber-defenses.

A data breach at Denmark’s Central Population Register (CPR) has exposed the personal information of 8.8 million people.

What are the lessons that businesses should take away from the latest cybersecurity news?

Watch Tony's video to find out, and be sure to check out the Se…

Amatera – which topped ESET’s infostealer detections in Latin America in the first half of 2026 but targets victims worldwide – shows what this professionalization looks like in practice.

Detected by ESET products as Win/PSW.Amatera, Amatera is a Windows infostealer written in C++ that was first observed in 2024.

Amatera has spread via compromised websites, search engine ads, targeted emails, fake documents, SVG files, and ClickFix via fake CAPTCHAs.

In Latin America, Amatera topped ESET’s infostealer detections in the first half of 2026, ahead of Formbook, Vidar, Lumma Stealer, SnakeStealer, and Rhadamanthys.

A developer maintains the product, and other actors distribute it via compromised…

In the age of AI, all of this was reported within a single “Cybersecurity Black Week,” an exceptionally eventful seven-day period amid an already turbulent Black October.

The name refers to two memory-safety vulnerabilities in PHP core, CVE-2026-109618 and CVE-2026-109619, affecting PHP versions 5.4 through 8.5.11.

The same decoder is compiled into the Python Brotli and brotlicffi packages as well as into other HTTP software, which led researchers to rename the issue HTTP2Shell.

Cutting through the noiseCybersecurity Black Week showed that a severity score rarely tells the whole story.

For the leaked kernel flaws, that window opened before any fix existed, and for end-of-life PHP versions, …

ESET APT Activity Report Q2 2026–Q2 2026 summarizes notable activities of selected advanced persistent threat (APT) groups documented by ESET researchers between April and September 2026.

They represent only a subset of the cybersecurity intelligence made available to customers of ESET Threat Intelligence APT Reports.

In Southeast Asia and Oceania, China-aligned threat actors ran campaigns that appear to support Chinese law enforcement efforts against organized crime in the region.

Finally, we identified several cases of APT groups using AI and large language models (LLMs) at various stages of their operations.

Threat actors used AI primarily to accelerate tasks that would otherwise require…

The news prompted security advisories from government agencies and sent website owners scrambling to apply the patches, with some sites even going offline as a precaution.

This is because on an unpatched server, an attacker can exploit the vulnerabilities to run their own code without logging in.

As three out of four websites globally are estimated to use PHP in some capacity, its ubiquity helps create an environment ripe for abuse; indeed, initial attempts to exploit the flaws – discovered by AI and dubbed PHP2Shell – weren't long in coming.

Here's what to know about CVE-2026-109618 and CVE-2026-109619, as well as what website owners and IT teams should do to stay safe – all in a little mo…

The following day, at 09:28, a new binary was delivered to the machine: the MythicRatatoskr backdoor.

This blogpost focuses primarily on the analysis of the MythicRatatoskr backdoor, the Yggdrasil network that hosts its C&C server, and the accompanying SOCKS5 server.

Given the backdoor’s role as a messenger scurrying through the Yggdrasil network, we decided to name the backdoor MythicRatatoskr.

MythicRatatoskr main configurationThe MythicRatatoskr configuration is stored in a file at a hardcoded path.

NetworkIP Domain Hosting provider First seen Details b479:2771:8df4:b5e b:d007:63b0[:]2838 N/A N/A 2025‑07‑17 MythicRatatoskr C&C server within the Yggdrasil network.

In some cases, the scam ad may take you to a fake e-commerce site which covertly harvests your card details.

What happens if I’ve fallen victim to a scam ad?

Scam ads are getting easier to generate thanks to AI, and can look increasingly professional, even including video content.

Can I get my money back if I paid through a scam ad?

What should I do if I’ve fallen victim to a scam ad?

This is email bombing.

What is email bombing?

Sometimes called “form bombing,” “list bombing” or “subscription bombing,” email bombing attacks usually follow the same pattern.

There’s no silver bullet to prevent email bombing.

Has my email account been hacked if it’s full of sign-up emails?

Open Enrollment is peak season for Medicare fraud – here’s how to tell real outreach from fakes and keep your details safeScammers love a pretext.

And with Medicare Open Enrollment, they have a perfect opportunity to exploit victim expectations, masking their fraud under the cover of legitimate activity.

Work through the following steps:Call or contact Medicare at Medicare.gov or 800-633-4227 to report the incident.

So slow down this Open Enrollment season and verify every request for personal and medical details.

Frequently Asked Questions (FAQs)When is Medicare Open Enrollment?

Data breach notifications are telling victims less than ever.

As the volume of data breach incidents increases, there’s a growing chance that you’ll be caught up in one.

Example of a data breach notice with a detailed explanation of the situation (for more, head over here)How do you interpret a breach notice?

For that reason, you should never click through on any unsolicited breach notification email or message.

Change your logins (if relevant) and consider credit monitoring and a credit freeze.

Later, in June 2026, ESET telemetry registered further MATCHBOIL samples, this time at a company in the energy sector.

MATCHBOIL then performs three HTTPS requests to the C&C server; each with a different purpose:The first request receives a numeric value from the C&C server.

2024 samplesThe earliest MATCHBOIL samples that we have seen have compilation timestamps from 2024.

]pro N/A 2025‑11‑10 MATCHBOIL C&C server hidden behind Cloudflare.

]com N/A 2025‑08‑12 MATCHBOIL C&C server hidden behind Cloudflare.

Embed Security announced new capabilities that let security teams teach Embed how they investigate, what matters in their environment, and how to improve their detections.

Rather than programming workflows, analysts can teach Embed what they know, and its decision layer applies that expertise autonomously.

We think security teams should be teaching AI, not building it,” said Seth Summersett, CEO of Embed Security.

NoiseIQ Memories: Organizational context that evolves with your businessBuilding on NoiseIQ’s organizational context capabilities, Memories expands how teams teach Embed about their environment.

“Every investigation Embed runs tells us something about the detection that triggered …

Microsoft researchers have demonstrated how small changes to an AI model can implant a hidden backdoor, causing an agent to execute an attacker’s command when a specific trigger appears.

The technique, called Lazarus, requires no model retraining and allows the agent to behave normally during standard safety evaluations.

Small changes, hidden behaviorResearchers demonstrated that modifying fewer than 10 dormant neurons, components of a model that rarely activate, was enough to implant the backdoor.

Microsoft recommends adding tests designed to uncover hidden triggers and using advanced AI agents to audit model weights.

Legitimate fine-tuning changes weights broadly, while implanted neurons …

Ubuntu 26.10 ships curl with certificate revocation checking built in.

Ubuntu’s developers ran the same curl command on both releases: Ubuntu 26.04 accepted a revoked certificate and connected, while 26.10 refused it.

OpenSSL checks a certificate chain by default, but it doesn’t check whether any certificate in that chain was revoked.

How the check worksIn 26.10, curl compares the server’s certificate against a list of revoked certificates stored on the machine.

OpenSSL is nextFor Ubuntu 27.04, the Foundations team plans to build upki into Ubuntu’s OpenSSL, so normal certificate verification would also check the revocation data.

Red Hat has announced the general availability of Red Hat OpenShift 5, bringing built-in operational intelligence, zero trust security and a longer, predictable lifecycle to the hybrid cloud application platform powered by Kubernetes.

What Red Hat announcedHow organizations work with software, especially through foundational platforms like Red Hat OpenShift, is changing drastically in this agentic age.

Red Hat OpenShift 5 evolves Red Hat OpenShift Lightspeed from a conversational assistant to an agent, making the platform more interactive with autonomous troubleshooting and update risk assessments, including pre-flight readiness checks for optional operators directly within the management c…

Druva has announced Druva Agent Recovery, a new set of AI Resilience capabilities that keep the business running by quickly restoring AI agents when they are deleted or unexpectedly changed.

Announcement also expands protection across Microsoft Power Platform, adding Power Apps and Power Automate to existing Power BI support.

Druva Agent Recovery brings that resilience to AI agents, starting with Copilot Studio Agent Backup & Recovery.

Druva Agent for Microsoft 365 Copilot: Delivered through the Agent Store in Microsoft 365 Copilot, the Druva Agent is the first backup and recovery agent for Microsoft 365 Copilot.

Support for Microsoft Power Apps and the Druva Agent for Microsoft 365 Copilot…

Fingerprint has launched Fraud Score, a predictive fraud signal trained directly on customers’ own fraud outcomes and powered by Fingerprint’s device intelligence and machine learning models.

Fraud Score learns the fraud types at each organization to help them identify fraud more accurately without having to build and maintain their own models.

In a head-to-head evaluation, Fraud Score caught nearly 50% more fraud than one customer’s existing in-house model, with no increase in good users blocked.

Fraud teams can act on Fraud Score’s specialized predictions directly or integrate them into their existing decisioning systems via Fingerprint’s API responses.

As customers provide new outcomes, …

Orca Security has announced new capabilities to help organizations discover and secure AI-generated applications and autonomous agents across their cloud environments.

The expansion builds on Orca’s AI Security offering, enabling security teams to uncover previously unknown AI applications, assess the risks associated with autonomous agents, and gain deeper visibility into AI-generated code.

“AI has turned everyone into a builder, but security teams are often the last to know what’s been created,” said Gil Geron, CEO of Orca Security.

Traditional discovery approaches depend on knowing which platforms, applications, or repositories to monitor, leaving unknown AI-generated applications undete…

Obsidian Security has announced its Runtime Policy Decision Engine, giving security teams centralized control over AI agent actions before they run.

Obsidian’s Runtime Policy Decision Engine provides those mitigating controls at the moment an agent acts.

The new MCP Security Proxy checks agent tool calls before they reach business applications, while the new Policy Decision API extends Obsidian’s decision to customer-operated gateways and custom agent tools.

Obsidian’s runtime policy enforcement now extends to OpenAI Codex, so security teams can apply the same policies to Codex, Claude Code and Cowork, and Microsoft Copilot from one console.

“Enterprises are connecting AI agents to business…

In this Help Net Security interview, Aurimas Bakas, CEO of Copla, talks about what the EU Cyber Resilience Act‘s reporting duties mean for manufacturers.

For every product version still in use, you want to know who runs it and whether you can still ship a fix for it.

If a customer tells your account manager their device is being attacked, the company knows, even if security doesn’t yet.

I’d also want a named security contact with a phone number, and a stated support period for each product version you run.

Don’t warn the security team in advance, and keep going until there’s a finished early-warning draft and a named person has signed it off.

In this Help Net Security video, Ken Leeser, CISO at Y Meadows, explains how security leaders can get more protection out of a flat budget.

He argues a frozen budget gives teams a reason to cut waste and simplify their security stack.

The first step is an inventory of every tool and what it costs, including renewals and storage fees.

Next, teams should map those tools against attacker techniques using frameworks like MITRE ATT&CK, and ask what each product stops, what it only catches with weekly tuning, and which paid features were never turned on.

He covers how to pitch these changes to the CFO and board, and how to put savings toward identity threat protection and other gaps.

Forty-five percent of surveyed IT service management providers in the EU took more than three months to apply critical patches to critical systems, according to ENISA’s 2026 assessment of cybersecurity in the Union.

Twenty-two of the 27 member states score between 60 and 80, two score above 80, three fall between 40 and 60, and none falls below 40.

Member states score 89.91 on supply-chain management practices by essential and important entities, with 25 countries at the advanced level.

Essential and important entities score far lower on sharing information with peers: 26.30, with 23 member states at the developing level.

ENISA wants more private-sector participation in ISACs, starting with…

Nearly half of security teams at organizations with 5,000 or more employees close or deprioritize vulnerability findings without fully verifying them, ProjectDiscovery found, and the reason they give is time.

Three in four say it grew over the past year, and a big share of the new findings now come from AI testing tools.

Teams with five or more sources are nearly twice as likely as teams with one or two to close findings without fully verifying them.

Leaders admit it more oftenClose to half of everyone surveyed admits to closing or deprioritizing findings they haven’t fully checked, because there isn’t time.

Nearly half of respondents say it’s piling more findings on their desks, and more t…

It’s a bad one, and it’s been in the code for a decade:

A newly disclosed flaw involving OpenSSH and musl, dubbed “*sshole,” allows attackers to log in to certain Alpine Linux and other musl-based Linux accounts configured to block password authentication simply by entering an oversized password.

“Oversized” means longer than 256 bytes. Details.

Slashdot thread. And another news article.

Two weeks ago, I attended the [un]prompted AI security conference in San Francisco. It was an excellent event: three days of very dense talks about all aspects of AI security. (My talk was about integrous AI, and I will post it when it is online.)

AI security can be divided into three broad topics. It’s important for researchers to understand which one they are working on. And it’s important for us as a community to work on them all. They are: security of AI, security with AI, and security from AI. [un]prompted had good talks about all three...

News story: “Scientists discover a bizarre Jurassic ‘squid’ unlike anything ever seen.”

Scientists have identified the “fattest” belemnite ever discovered, a bizarre, barrel-shaped squid relative that lived in Wyoming’s ancient seas 160 million years ago. The exceptionally rare fossils reveal a creature unlike anything previously known, potentially a predator of smaller squid-like animals and a surprising survivor of a supposedly vanished family.

As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered...

This is fascinating:

The video describes a technique that can reveal where an otherwise unidentifiable recording was made by analyzing its audio for the faint sounds of passing aircraft. The technique is both fascinating and frightening.

It works by looking at Doppler curves, which plot the way a plane’s sound changes as it passes overhead because of the Doppler effect. This is the same familiar Doppler effect that causes the frequency of a siren to rise as it approaches and then fall as it passes by and moves away. More generally, it’s the phenomenon whereby the frequency of a wave perceived by an observer changes when the observer and the source of the wave are moving in relation to one a…

In both a 2021 essay and my 2022 book, A Hacker’s Mind, I talk about AIs finding vulnerabilities and exploits—hacking—the legal system.

Here’s some demonstrations of this from Germany:

Legal systems encode the foundations of social order in natural language. Similar to computer systems, the written law can contain vulnerabilities that invite exploitation.1 Courts absorb most exploits through interpretation, and such vulnerabilities rarely surface in the first place. With highly capable AI systems enabling the discovery of vulnerabilities at unprecedented scale, we believe the latter could change...

A comment:

3% of ‘critical’ software security bugs, in all of recorded history, have been found in the last month. This is on pace to find another ~100,000 bugs this year alone, adding ~26% more vulnerabilities to the all time total Do you realize how fucking insane that is?

Yes. It is a new world out there.

Neat video:

The sighting, announced September 2, marks the first time anyone has spotted a live bigfin squid, which belongs to the Magnapinna genus, in the northeastern Pacific Ocean.

As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered.

Blog moderation policy.

This story is interesting:

One Civic owner purchased a cheap aftermarket head unit off Amazon, and decided to have Claude work its magic on it, like it would a smart TV. What was reportedly discovered isn’t surprising, but is worth knowing about.

Among the pre-installed bloatware—­or spyware, if you’re being less charitable­—was a voice assistant equipped with WebView, an Android system component that lets apps display content off the web. This apparently always used about a third of processing power, even while idle, which isn’t great. There were also Baidu location services, a call recorder (!), a DAB radio client that is pretty much useless in the U.S., and Adobe Acrobat, presumably so y…

Researchers set up a fake start-up company to study fraudulent North Korean IT workers.

Interesting research: “AI Models Can Provably Hide Arbitrary Capabilities”

Abstract: Capability evaluations aim to surface dangerous model behaviors before deployment, but their reliability depends on the assumption that hidden capabilities can be elicited. We show this assumption does not hold under adversarial conditions by constructing backdoor attacks that embed encrypted neural networks within host model weights, decrypting and executing them only upon receiving a secret trigger. Using digital lockers, these hidden circuits remain provably hard to elicit and interpret under cryptographic assumptions, even given full access to model weights, extending prior work from hiding fixed string…

Interesting research:

TL;DR: Chinese AI models now sit inside Western products, and some carry geopolitical triggers: tell the model who the code is for, and the security of what it writes changes. For the first time, we showed that this vulnerability lives in the model’s weights, and that removing the model’s CCP alignment removes it. One word tilts the code against Americans. Ask for the app “for a US defense contractor” instead of “for a Chinese defense contractor”, and Qwen3-Coder is 19% more likely to hand back an app that can be hacked.

...

This article in Nature argues that it’s due to an overfishing of predators and warming sea temperatures.

As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered.

Blog moderation policy.

The Indian CA eMudhra Limited has eight TLS certificates with laughably weak private keys:

The compromised eMudhra keys were defective at a level that’s challenging the imagination of many of the engineers studying the incident. A normal size for a NIST P-384 elliptic curve cryptography private key contains roughly 384 bits of entropy, a size allowing almost 2384, or a number with 116 digits, different possibilities. The private key sizes of the compromised keys ranged from 3 to 8 bits. Astonishingly, the private keys were 4, 56, 66, 115, 155, 156, 230, 237...

PHP maintainers have released two critical vulnerabilities:

PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical vulnerabilities that can allow unauthenticated remote code execution. All PHP users are strongly encouraged to update immediately. Who is at risk: all PHP installations serving web requests, including PHP-FPM, Apache with mod_php, php-cgi, FrankenPHP and LiteSpeed. We consider the risk highest for mod_php, with a demonstrated exploit where an unauthenticated request can trigger the attack before any application code runs.

The vulnerabilities:...

Several staffers at the White House are using computers or mobile devices equipped with residential proxy services that render their internet address available for others to rent, security experts warned today.

There are dozens of residential proxy providers with varying degrees of legitimacy, many of them based in China or Russia.

From a website’s perspective, the traffic from a proxy network user appears to originate from the rented IP address, not from the proxy service customer.

“Anybody can obtain it by signing up to a public residential proxy service, paying a few dollars and sending requests through it.

We caught this by chance, simply by requesting global rotating access through the…

As detailed in several stories here over the past year, residential proxy services are a major source of unwanted and often malicious traffic, including account takeover activity, advertising fraud, and mass content scraping for AI projects.

The GTIG report calls out a number of residential proxy providers whose software development kits were routinely downloaded by devices infected by the XCPE botnet.

Another provider linked to the botnet was NetNut, a once sprawling residential proxy company operated by the publicly-traded Israeli company Alarum Technologies.

In July 2026, the FBI worked with industry partners to seize hundreds of domains associated with NetNut, saying the company was res…

Earlier today, PHP released an emergency security update to fix two critical bugs that can allow an attacker to execute code of their choosing on a vulnerable server.

Reuters reports that government websites in Europe and elsewhere went offline today after the PHP vulnerabilities were disclosed.

Wiz said that prior to the PHP bugs being publicly disclosed, the company worked with the PHP team, Calif and OpenAI to measure the size of the problem and coordinate patch verification and disclosure.

The PHP zero-day vulnerabilities are being tracked by their CVE numbers, CVE-2026-109618 and CVE-2026-109619, and they affect all web servers running PHP 5.4 or later.

“A vulnerability in core PHP rea…

According to the FBI, ShinyHunters has extorted more than $70 million from victims so far this year.

He also said Mr. Dubrovsky has misrepresented himself as a Cypfer founder, and is not a shareholder.

In 2020, Aon aquired Cytelligence, a security consulting firm where Mr. Tobok was founder and CEO and Mr. Dubrovsky was a managing partner.

Experts say ransomware victims are typically directed by their insurance provider to work with a specific incident response firm.

But that ransom payment did not stop future extortion attempts using the same stolen data.

The sanctions freeze any Cryptomus assets at U.K. banks, and bar British companies from offering it any business, virtual or otherwise.

The blockchain data-crunching firm Chainalysis said the U.K. sanctions target the broader infrastructure supporting Russia’s wartime economy.

“Cryptomus and Heleket have emerged as major payment hubs for illicit activity,” Chainalysis wrote in an October 8 blog post.

Sanders said the U.K. sanctions on Cryptomus are important because Canada’s sanctions against the platform were ultimately unenforceable and uncollectible.

“A fine doesn’t stop a cryptocurrency payment processor from processing payments,” Sanders wrote on LinkedIn.

Microsoft today issued updates to fix more than 1,400 security vulnerabilities in its Windows operating systems and other software.

CVE-2026-96951 is a security feature bypass in the Windows Shell that affects Windows 10 and 11 systems, as well as some Server versions.

Windows 10 users might be wondering if they can still expect security updates after this month.

Microsoft had been slated to stop shipping updates for Windows 10 systems in October 2025, but ended up adding another year of free updates after considerable pushback.

Satnam Narang at Tenable said the number of flaws fixed this month far surpasses the previous record-setting year 2020, when Microsoft patched 1,261 CVEs.

The New York Times reported today that the FBI has arrested a Canadian man in Pennsylvania on suspicion of assisting ShinyHunters.

The Times story did not identify the man, nor did a statement on Twitter/X about the arrest from FBI Director Kash Patel.

Another shared that control over the ShinyHunters investigation has been centralized at an FBI field office in Texas.

According to LinkedIn, Cypher was co-founded by a Canadian man named Edward Dubrovsky, who is now associated with another Canadian security firm called CyberSteward.

According to the FBI, the group has extorted more than $70 million from victims so far this year.

The Dutch daily RTL reported on Sept. 29 that investigators suspect Van der Stap tried to orchestrate at least two murders.

According to RTL, the murders were allegedly to be committed abroad, and there are indications Van der Stap gave the order for these attacks.

In an interview with KrebsOnSecurity on September 9, Van der Stap described his new role as “offensive security lead” at the Dutch cybersecurity company Neo Security, saying the job involved probing client networks for security vulnerabilities.

Korper said Dutch forensic investigators visited his office on September 15, the night Van der ⁠Stap was arrested in a dramatic police raid that reportedly involved flash bang grenades.

“Y…

Authorities in the Netherlands have arrested a 23-year-old convicted cybercriminal on suspicion of aiding in data thefts and extortions by the prolific hacker group ShinyHunters.

Van der Stap is currently employed as offensive security lead at the Dutch company Neo Security, which did not respond to requests for comment.

But not long after that interview, the Dutch hacker abruptly stopped replying to messages.

One source said a colleague of theirs personally witnessed Dutch authorities carting items out of Van der Stap’s residence.

Speaking with reporters from Bloomberg in 2024, Van der Stap said that singular focus in turn fueled his desire to carry out cyberattacks.

A U.S. Army soldier who pleaded guilty to hacking into multiple telecommunications companies and stealing mobile call and text metadata for more than 100 million AT&T customers in 2024 was sentenced to 70 months in federal prison today and ordered to pay nearly $300,000 in restitution to victims.

Kiberphant0m claimed to have hacked into more than dozen telecommunications companies worldwide, including Verizon’s Push-to-Talk business, and publicly extorted these companies in exchange for a promise not to publish the stolen data.

Less than a month later, Wagenius was arrested and charged in two separate federal indictments, and soon pleaded guilty to all counts in both cases.

In 2019, Schuchm…

In February 2024, Radaris was sued by Atlas Data Privacy Corp, a company that has been pursuing data brokers alleged to be violating a New Jersey statute called Daniel’s Law.

KrebsOnSecurity doubled down and showed how the Lubarsky brothers built and operated Radaris and other data broker companies using a fictitious CEO’s name.

All told, the New Jersey court has so far transferred 14 domain names from the Radaris family of companies to Atlas.

Sherman said federal lawmakers have long faced intense lobbying by the technology industry against more restrictive U.S. data privacy laws, but that many powerful industries are now working against passing comprehensive data privacy legislation.

The l…

Microsoft Corp. today issued updates to plug at least 974 security holes in its Windows operating systems and other software, by far its biggest single patch batch ever.

This month’s patch bundle obliterates the software giant’s previous record set in July, when it released updates for at least 570 security vulnerabilities.

Among the more serious critical flaws this month is CVE-2026-69730, a DNS weakness present in Windows Server 2012 onward and on Windows 10.

And at the rate these Windows patch releases are ballooning in size, it’s probably best not to let them pile up month after month.

Enterprise Windows admins will want to keep an eye on askwoody.com for news of any updates that appear…

A new identity theft service launched on the dark web this week is selling digital scans of more than 153 million drivers licenses from people in the United States and Canada.

Curiously, the identity records include not only drivers licenses but also marijuana dispensary cards.

Some of the records list their “source” as “CDL,” presumably short for “commercial drivers license.

Also, only some of those who helped with this research said they showed their drivers license at the airport on the day of their travel.

Baldwin said the Nexus identity theft service presents multiple serious security and privacy threats, noting that state-issued drivers licenses are commonly used as proof of one’s ide…

Iran has been officially accused by France of being responsible for cyber attacks last month that meddled with supermarket freezers, causing some to catch fire.

According to French media reports, the targeted refrigeration controllers were made by Danish firm Danfoss, and the attackers targeted older versions of its software.

The finger of blame has been pointed by French authorities in the direction of Shahid Kaveh, a hacking unit within the IRGC.

Shahid Kaveh is said to hide behind a variety of different "hacktivist" guises including CyberAv3ngers, Soldiers of Solomon, and Cyber Isnaad Front.

Regardless of who is behind the attacks, it is clearly important that any organisation properly d…

Smashing Security, episode 491, How AI Agents Are Spooking the Banks, with Graham Cluley.

And I'm going to be discussing how AI agents have started calling banks on your behalf without asking.

They're a firm which builds AI agents that investigate security alerts on behalf of security teams and show the evidence behind each conclusion.

Your company, Dropzone AI, builds AI agents that investigate security warnings.

I think with the help of AI agents, the augmentation of AI agents, for the first time it could allow cyber defenders to truly level the playing field.

More than 41,000 people working for the US Department of Homeland Security, including ICE agents, have had their details published online by a group of hacktivists.

As TechCrunch reports, the leaked records include the names, job titles, work email addresses, phone numbers, abd office locations.

More than half of the leaked records relate to US Customs and Border Protection (CBP) employees, typically found at airports, seaports, and land border crossings.

Around 10,000 ICE employees have had their records breached, and almost 1,000 members of the Cybersecurity and Infrastructure Security Agency (CISA).

The leaked data has been published online, under the title "Icepick", and can be either d…

Ambulances were diverted, surgeries cancelled, and medical students sent home from classes after a ransomware group attacked the University of New Mexico's Health Sciences Center (HSC) this week. Read more in my article on the Fortra blog.

You are suffering a little bit, not that our listeners will be able to tell, but if anyone sees you on video.

Well, everything's a little bit political, but this is fundamentally a cybersecurity podcast.

And it won't necessarily come back and say, "I don't think you should be doing this," or, "Have you sought some help?"

Maybe we should turn a little bit to what organisations can actually do about it.

I'm going to do it the following Thursday, or I'm going to do it some other time, or I'm going to create an account that doesn't go back to me, but I can still support my favourite places.

A Ukrainian man has been sentenced to 70 months in a US prison for his role in a series of ransomware attacks.

He was also an early affiliate of the Hive ransomware-as-a-service (RaaS) operation which targeted businesses and, in particular, organisations working in healthcare.

The FBI later warned that Hive had extorted US $100 million from businesses and organisations globally in a period of just 18 months.

The DOJ said that the operation saved corporate victims of Hive over US $130 million in ransom payments.

At the time I speculated that the take-down of Hive may lead to the identification and possible apprehension of some of those involved in Hive ransomware attacks.

Germany's far-right AfD (Alternative für Deutschland) party has confirmed that it has suffered a security breach, after a hacker published what appear to be hundreds of thousands of the controversial political party's internal emails.

Earlier this week, the AfD admitted that its hosting provider had been hacked in September, and that some of its mailboxes had been copied.

What is unusual is that the leaked emails are not published on the site directly.

Indeed, party sources told the media that although the leaked emails appeared to be authentic, the AI-generated summaries appeared to contain several inaccuracies.

The full corpus of 281 GB of stolen messages and files has been made available…

Smashing Security, episode 489, How a Brand New Crypto Wallet Came with a Spy Inside, with Graham Cluley and special guest Lianne Potter.

So a bit of a War of the Roses thing going on there with that reference to Burnham.

What I'm going to do is I'm going to describe things, and the more dangerous the thing is, the faster it will click.

But I'm going to say it's probably dodgy, but oh, the curiosity would get the better of me.

But I'm actually in the same boat as most people because this film has been censored for nearly half a century.

A 28-year-old Russian man has been arrested by German police, suspected of being a key member of the Qilin ransomware gang.

As BBC News reports, detectives have linked the man to the 2024 attack against blood-testing firm Synnovis, that disrupted London hospitals, and resulted in the death of a patient.

The suspect, who has been named by German media only as "Vladimir K" was originally detained in May in Japan, after he travelled there on holiday.

The incident is said to have crippled Synnovis’s IT systems, and caused a critical shortage of O-type blood in hospitals.

No ransom was paid by Synnovis, a decision the firm made jointly with the NHS trusts to which it provides services.

The official @GardaInfo and @GardaTraffic Twitter accounts of Garda Síochána were accessed by an unauthorised third party who posted cryptocurrency-related messages on Wednesday evening, potentially reaching hundreds of thousands of users.

The messages claimed that followers were eligible to claim free cryptocurrency through an airdrop.

The problem, however, is not just that a hacker found themselves with the ability to post fraudulent messages posing as the Irish police.

The Garda is not the only police force to have ever suffered a security breach on its Twitter account.

In 2022, the official Twitter account of the Philadelphia Police Department was compromised and used to post what appea…

Krybit is a fast-growing ransomware gang that was hacked by a rival, hit back, and is still extorting victims. Find out how it works, who it has targeted, and what organisations can do to protect themselves. Read more in my article on the Fortra blog.

How a ransomware negotiator ended up arrested at his own conference, with Graham Cluley and special guest Paul Ducklin.

I don't know if you know that.

And then I became a freelancer and then I thought, oh boy, I'm going to open the doors to everybody.

And he is the Canadian co-founder of a ransomware negotiator firm called— I don't know how to pronounce this.

There's no breach so unimportant that you can just say, don't worry folks, carry on, nothing to see here.

The hacker behind a high-profile string of leaks involving the upcoming release of the Grand Theft Auto (GTA) 6 videogame has threatened to release a complete, playable build.

CyberLeek says that if the GTA 6 game is released on physical disk, and a public apology is made, it will step back from its threats.

As ever, videogame fans should be very wary of believing anybody who offers a download of a supposedly leaked game.

Besides which, the real, genuine GTA 6 is due to be released on video game platforms on 19 November.

It is not worth infecting your computer, or losing money on a dodgy crypto coin, just to see it a few weeks early.

Zhang is charged alongside 34-year-old Xu Zewei with malicious cyber activity against US computer systems between February 2020 and June 2021.

The following the year the pair allegedly exploited vulnerabilities in Microsoft Exchange Server to steal further information.

Furthermore, if findings by security firm SentinelOne are to be believed, Zhang's Shanghai Firetech filed multiple software patents about extract data from computers.

Xu, for instance, was arrested at Milan airport in July 2025 and extradited to the United States in April this year.

China's Foreign Ministry opposed Xu's extradition, accusing the United States of fabricating charges against him.

But do you actually know whether both of them can do the job?

Now, I don't know how good a swimmer you are, Danny.

I don't know about you, but I'm having 3 or 4 calls a day from an unknown number.

And I would imagine a company like Hack The Box has got great visibility as to what is actually going on out there.

And so I think that's the unique part here is it truly does have a pressure-tested element to it.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: 815c5745ad37d916b7294e643833a704Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-11-10T18:00:52+03:00Config id: 339Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: b8fe42bde8080f58ff32b39fcf415b13Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-11-09T18:00:27+03:00Config id: 339Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: 0a7de8efb1deabad49fbee29c6d22416Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-11-05T23:00:38+03:00Config id: 339Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: aa9e3a5508a8c1eb76c504b058249cd2Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-11-03T18:00:26+03:00Config id: 339Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: 0d697b7db0e95a6580b88e9a4b8e961fServer IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-11-02T16:00:13+03:00Config id: 339Faithfully yours, nginx.

Вопреки распространенному заблуждению, в эпоху цифры люди не перестали любить книги — просто их уже давно читают не только на бумаге.

Год назад мы также рассказывали про вредоносные «книги» на турецком и арабском языках.

Зачастую эти поддельные сайты полностью функциональны: на них точно так же можно искать и скачивать книги, и дизайн практически неотличим от оригинала.

Одна из самых простых рекомендаций — пользоваться официальными книжными магазинами, и не только по соображениям авторских прав.

Таким образом вы защитите свои данные и деньги и сможете спокойно скачивать и читать вашу любимую литературу.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: c37d2c17b96ad93f72f21acf52f07186Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-10-29T16:00:22+03:00Config id: 339Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: 4e5cae3ff5837cf370c8bf305d03c2b0Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-10-30T14:00:34+03:00Config id: 339Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: d6b768fbc443335b282efe8a58868231Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-10-26T15:00:14+03:00Config id: 339Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: 6e1eb2ff9ba52d21e2eb9108c143beafServer IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-10-23T17:00:39+03:00Config id: 339Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: 704ec22d9a79fd07b89340a5c2d02b67Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-10-22T23:00:36+03:00Config id: 339Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: 0bd9145f797a3fff09593e8e6fc88bd4Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-10-21T20:00:35+03:00Config id: 335Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: a48e6a868074b4c2b77295af18788714Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-10-20T17:00:12+03:00Config id: 335Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: 65c81bea022dea0314bb3ec1fb8b3228Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-10-15T14:00:29+03:00Config id: 335Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: bf1172655ea8738416272c1b910c4a23Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-10-14T17:00:37+03:00Config id: 335Faithfully yours, nginx.

Security teams are being asked to protect more than a network perimeter.

Security has to follow the workloadCisco has been named a Leader in both The Forrester Wave™: Enterprise Firewall Solutions, Q4 2026 and The Forrester Wave™: Microsegmentation Solutions, Q3 2026 evaluations.

A connected approach to protectionTogether, these capabilities help security teams see how workloads communicate, apply controls close to the applications they protect, thereby eliminating lateral movement between systems.

Being named a Leader in both Forrester Wave evaluations underscores the value customers gain when these capabilities work together.

Explore the Forrester Wave reportsLearn why Cisco was named a L…

The AI traffic shift is inwardIt is tempting to think of enterprise AI security as controlling employee access to public LLMs.

That independent view becomes more valuable as agents operate faster, across more systems, with less human supervision.

It needs context about non-human identities, agents, models, tools and delegated authority, along with visibility into emerging protocols such as MCP, A2A and model APIs.

Because the consequence of an AI agent’s decision is not a prompt or a model response.

When that action crosses the network, security has an opportunity to observe it—and enforce a boundary.

Cisco Firewall customers running software 10.1 automatically have SnortML.

Together, Snort signatures and machine learning work to defend firewall customers from emerging AI-driven threats.

Note: Customers using Cisco Firewall version 10.1 and using the security over connectivity policy have SnortML enabled by default.

Customers now have more than 10 Splunk detections to defend against PHP2Shell post-exploit activity, including detections specific to Cisco Firewalls.

Cisco Firewalls block malicious PHP2Shell attack traffic while Splunk gives SOC teams visibility into PHP2Shell post-exploit activity.

AI Transit connects specialized AI environments to the SD-WAN fabricThat customer requirement is what Cisco AI Transit is designed to address.

Connecting AI environments with Cisco AI TransitWhat is Cisco AI Transit?

Cisco AI Transit is designed to connect specialized AI environments to an enterprise’s existing Cisco SD-WAN fabric.

AI Transit builds on that foundation to connect specialized AI environments, including NeoClouds, private and sovereign AI clouds, and enterprise AI factories.

AI Transit is designed to connect workloads in NeoClouds, private and sovereign AI clouds, and enterprise AI factories to an existing Cisco SD-WAN fabric.

The velocity of vulnerabilities being discovered using Frontier AI and OpenWeight models such as Cisco Anteras is unprecedented and defenders need more time.

Virtual Patching vs. Live Protect (Shielding)Live Protect is a differentiating capability – we are not built the same.

The workload in the environment still sits vulnerable and that’s where Secure Workload can be expanded to drive controls based on CVE directly in the workload using native capabilities and once patched the control disappears.

Shielding with Live ProtectShielding with Live Protect is different.

Live Protect buys you time on the infrastructure boxes themselves without forcing an emergency upgrade window.

Infrastructure access has an identity problemPicture an infrastructure administrator pushing a configuration update across hundreds of switches during a maintenance window.

Introducing Cisco Privileged Infrastructure AccessToday, Cisco is introducing Privileged Infrastructure Access, a faster, more secure way to keep the network moving by enabling network administrators and agents to perform critical work through a secure, identity-bound connection.

For customers using Cisco ISE and TACACS+, Privileged Infrastructure Access can draw on the policy and device context they already manage to govern access to Cisco routers and switches.

That brings Cisco network context into the privileged acces…

The data bears this out: in Splunk’s State of Security 2025 report, 78% of respondents said their security tools are dispersed and disconnected.

Closing that gap takes integrated identity, network, and endpoint context, plus the ability to act on it automatically.

That’s the idea behind combining SentinelOne’s runtime protection with Cisco Security and Splunk.

SentinelOne Runtime Protection and CWP in ActionSentinelOne Cloud Workload Protection (CWP) delivers autonomous, real-time threat detection and response across containers, Kubernetes, virtual machines, and serverless workloads.

Cisco Security extends that protection across identity, network, and perimeter, and Splunk gives your SOC on…

Upstream capacity: the projects you depend on can deliver new capabilities and critical fixes fast.

Upstream capacity is the one almost nobody puts on a roadmap because it sits outside your organization.

In most organizations, upstream capacity has none of those.

What This Looks Like in PracticeFor Cisco, part of the answer was becoming a Premier Sponsor of the OpenSSL Foundation in August 2025.

Tomáš Mráz, CTO of the OpenSSL Foundation, describes the impact:“Cisco’s support for the OpenSSL Foundation allowed us to fund an additional senior software engineer to improve the OpenSSL Library code.

CSDL continues, and does moreThe Cisco Secure Development Lifecycle (CSDL) is built on more than 400 software security requirements that validate products before they are released, with engagements at key stages of development.

Cisco open-sourced it and donated it to the Coalition for Secure AI (CoSAI).

Our secure software guidance skill is in development, carrying Cisco-specific security requirements into the development workflow.

Project CodeGuard and the secure software guidance skill also act as evaluators in the development pipeline, backing hard gates.

To date we have not found a novel issue that was not already covered by an existing software security requirement.

The Splunk .conf network brought a new detection that we hadn’t seen before: Flawed AMMYY.

There is also a Remote Access Tool (RAT) called Flawed AMMYY that was developed from leaked AMMYY source code, and is directly used as malware.

One of the key value propositions of EVE is that it can use granular session fingerprinting to differentiate between similar but distinct applications like AMMYY and Flawed AMMYY.

Let’s dig into the events we saw for Flawed AMMYY and some of the details that EVE had to look at.

Our EVE detections for Flawed AMMYY came in pairs with identical timestamps, as seen above, all from a single IP.

The event Network Operations Center (NOC) managed the venue network, providing our SOC firewalls with dedicated SPAN feeds directly from their core switches.

Inside Cisco Cloud Control, that story comes together in Unified Events.

While Splunk drives active investigations in the SOC, administrators maintain firewall health directly within Cloud Control.

The Horizon: Cisco Cloud Control & AI CanvasSecurity is now natively built into Cisco Cloud Control, the unified operations platform that brings Networking, Security, Observability, and Cloud into one consistent environment.

Without replacing individual product controllers, Cisco Cloud Control unifies inventory, topology, actions, identity, …

However, assessing whether a zero-day vulnerability was exploited in the past essentially involves going back in time.

Relying on standard logs or “Conditional / Selective PCAP” systems during a zero-day investigation leaves the Security Operations Center (SOC) team blind.

There is also a secondary benefit: if a breach occurred using an newly disclosed zero-day vulnerability, the attacker is likely to have been very sophisticated.

Replay The Relevant Historical Traffic Against The New Intrusion RulesOn the Firewall Threat Defense (FTD), we configured a dedicated interface for the Endace traffic replays.

Rapid retrospective packet replay transforms zero-day triage by delivering direct forens…

The .conf26 Agentic SOC was not a simulated demo or a scripted lab.

Powered by the Cisco Cloud Control management platform, Splunk Enterprise Security (ES), Cisco Security telemetry, Cisco Talos Intelligence, and Endace continuous packet capture, our joint team of Cisco, Splunk, Endace, and Jamf engineers demonstrated what multi-agent threat detection, investigation, and response (TDIR) delivers at enterprise scale.

Watch it come to life in David Bombal’s Interview at the Agentic SOC.

“The Agentic SOC is not about replacing human defenders with autonomous black boxes.

AcknowledgementsOur thanks to the engineers who built the Agentic SOC and the Humans who provided decision making expertise.

Splunk .conf26 gave us the opportunity to operate a live Agentic Security Operations Center (SOC) in the middle of the Splunk community.

Splunk ES as the SOC data platformSplunk ES served as the primary analyst workspace and evidence system for the SOC.

Building the Triage Agent Dashboard in an AfternoonOnce the data was flowing and the agent was active, we built an operations dashboard in an afternoon.

The team preserved a path from telemetry to finding, from finding to agent analysis, and from agent analysis to an analyst decision.

Dashboard SnapshotThe following values are a snapshot from the displayed Triage Agent operations dashboard and should be read as event-environment observations…

The Cisco Secure Firewall 200 Series brings enterprise-grade protection and connectivity to distributed branches in a compact form factor.

The Encrypted Visibility Engine (EVE) uses AI and machine learning to analyze encrypted traffic, including TLS 1.3, without requiring full decryption.

The Secure Firewall 220 model delivers up to 1.5 Gbps of throughput with next-generation firewall capabilities enabled in a compact form factor for smaller branches.

The Secure Firewall 200 Series helps meet these demands with intelligent threat protection, encrypted traffic visibility, resilient connectivity, and centralized management.

Explore the Secure Firewall 200 Series to build a more resilient, man…

Microsoft’s FORGE Lab found several memory safety issues in Rust’s standard library (std and core), including cases where code written entirely in safe Rust can trigger undefined behavior.

[OW1] [YB2]At Microsoft FORGE Lab, we study vulnerabilities in complex software, including the Rust standard library.

That API must be sound: no matter how safe code uses it, it must be impossible to trigger undefined behavior.

Our proof of concept uses only safe code: an element type whose clone always panics, which causes a crash when the destructor accesses uninitialized memory.

That makes memory safety bugs in Rust hard to compare one-to-one with bugs in other languages.

The threat actor that Microsoft Threat Intelligence tracks as Storm-3358 is a Cambodia-based intrusion cluster that primarily targets financial organizations in Southeast Asia, in addition to a smaller number of large financial organizations globally.

See:Endpoint activity — Microsoft Defender for EndpointEndpoint alerts help security teams identify and investigate suspicious activity on devices.

The dashboard provides users with a unified view of AI security posture by aggregating security, identity, and data risk across Microsoft Defender, Microsoft Entra, and Microsoft Purview.

See:Microsoft Defender detectionsMicrosoft Defender customers can refer to the list of applicable detections be…

Microsoft Threat Intelligence has observed threat actors using an agentic AI offensive framework to search public GitHub repositories for exposed secrets, including credentials, application credentials, and AI inference-related API keys across multiple applications and cloud services.

Additionally, the threat actor attempted to validate stolen Azure resources, including compromised Azure AI services, as identified using Defender for Cloud’s AI threat protection.

Multiple public reports have documented threat actors using agentic AI tools to compromise credentials for AI services, sometimes to run the same agentic AI workflow.

Learn moreFor the latest security research from the Microsoft Thr…

We’re announcing a new on-premises security initiative, bringing together guidance, migration, and product investments.

The post New investments to reduce on-premises security risk appeared first on Microsoft Security Blog.

Organizations can tune and validate policies before enforcing them broadly, while upcoming integration with Microsoft Intune, Microsoft Entra, and Microsoft Agent 365 is intended to extend governance and attribution across the enterprise.

New Microsoft Defender Experts MDR experiences in the Microsoft Defender portal bring ongoing expert work into focus with a consolidated overview page with updated navigation and visibility into hunts.

Improve security posture with Microsoft Security Exposure ManagementPrioritize foundational security controls with Secure NowAI-enabled attacks can take advantage of familiar weaknesses, including excessive permissions, unprotected authentication flows, and …

Tycoon2FA-linked phishing email volume (January 2026 – July 2026)This blog provides a view of email threat activity across Q3 2026, examining shifts in phishing techniques, malicious payloads, business contact impersonation (BCI), and Teams-based threats.

QR code phishing attacksQR code phishing ended Q3 far below the levels seen during its early-year surge.

The decline continued through September despite the broader increase in email threats, leaving monthly QR code volume 86% below its March peak.

]org Email address Sender address used for both observed lure variations 2026-09-21 2026-09-21 Nuevo orden de compra – 21092026.pdf.uu File name RAR attachment used in the purchase order variati…

The campaign uses trojanized Inno Setup-style installers to distribute multiple monetized software payloads, referred to by the delivery system as “offers”, during a single installation session.

Offer execution callback and payload delivery – The runner contacts rotating infrastructure using a repeatable d=inno and r=offer_execution callback pattern.

This stage converted the fake-download execution chain into installed software and recurring execution across three monetization branches: proxy and network-resource monetization, compute-resource monetization, and adware-style utility monetization.

Microsoft Defender XDR detectionsMicrosoft Defender detects and blocks campaign-linked payloads …

Microsoft has been named a Leader in the inaugural 2026 Gartner® Magic Quadrant™ for AI Agent Management Platforms.

We believe this recognition reflects Microsoft’s approach to helping organizations manage, secure, and scale their AI investments through Microsoft Agent 365.

Figure 1: Gartner, Magic Quadrant for AI Agent Management Platforms, October 27, 2026.

Agent 365 also integrates agents built using supported open-source frameworks with the Agent 365 software development kit (SDK).

Gartner, Magic Quadrant for AI Management Platforms, Andrei Razvan Sachelarescu, Lucas Kobat, Gilbert van der Heiden, Max Goss, October 27, 2026.

Local code execution: Code or command execution requiring local access or an existing foothold.

Impact, exposure and where to focusTwo things determine a vulnerability’s value to a threat actor: impact and exposure.

Within cloud environments, Defender CSPM Attack Path Analysis adds detailed context about internet exposure, vulnerabilities, network connections, identities, and permissions across Azure, AWS, and Google Cloud.

ReferencesSources cited or linked in the submitted draft:Learn MoreFor the latest security research from the Microsoft Threat Intelligence community, check out the Microsoft Threat Intelligence Blog.

To hear stories and insights from the Microsoft Threat Intelligence com…

It then attempts to install an SSH key, enable SSH, create a reverse tunnel, and configure persistence.

All applicable platforms: Stop confirmed malicious SSH and retry processes and remove their temporary .stk_ identity files after collection.

Follow-up Investigation and recoveryReview telemetry after the extension loaded for SSH key acceptance, tunnel processes, local SSH sessions, command execution, and file activity.

Microsoft Defender XDR detectionsMicrosoft Defender XDR customers can refer to the list of applicable detections below.

Tactic Observed activity Microsoft Defender coverage Execution Execution of suspicious shell scripts to support backdoor activity.

Both incidents followed a shared entry and execution pattern before diverging into two AD CS abuse paths.

Host discovery and AD CS assessmentThe staged components queried Windows version information, network configuration, and running processes.

Case 2: Help desk impersonation led to PetitPotam authentication coercion, ESC8 relay to AD CS, certificate-based Kerberos authentication, and customer-led device isolation.

NTLM relay reaches AD CS Web EnrollmentThe attacker relayed the domain controller’s NTLM authentication to AD CS Web Enrollment.

Search for Teams support impersonation, portable Bun or Java runtimes, AD CS certificate abuse, NTLM relay, ESC1, ESC8, and certificate-based Kerberos…

Microsoft Threat Intelligence assesses the overall adoption of AI across North Korean threat actors as high, with threat actors such as Jade Sleet, Coral Sleet, and Jasper Sleet demonstrating an established use of AI across all operational workflows, alongside increasing adoption across the broader North Korean threat actor set.

This blog breaks down how North Korean threat actors are utilizing AI across their operations, reflecting a broader trend of threat actors incorporating AI into their attack chains.

Stages of AI adoption by North Korean threat actorsNorth Korean threat actors are increasingly integrating generative and agentic AI platforms into their operations, but the rate and mat…

Today, we’re proud to share thatMicrosoft has been named a Leader in the 2026 IDC MarketScape for Worldwide Modern Endpoint Security for Enterprises (Doc #US54123526, September 2026).

On top of that foundation, we continue to strengthen what Defender can see:Richer endpoint signals: Defender provides more than 200 native event types for threat hunting.

Microsoft named a Leader by IDC Read the 2026 IDC MarketScape to learn why IDC named Microsoft a Leader in Worldwide Modern Endpoint Security for Enterprises.

Read the reportTo learn more about Microsoft Security solutions, visit our website.

Follow us on LinkedIn (Microsoft Security) and X (@MSFTSecurity) for the latest news and updates on c…

Here, threat actors may simply seed prompt injections on websites in hope of corrupting AI systems that browse them.

Early experiments revealed a significant volume of "benign" prompt injection text, which illustrates the complexity of distinguishing between functional threats and harmless content.

Many prompt injections were found in research papers, educational blog posts, or security articles discussing this very topic.

(Source: GitHub/swisskyrepo)When searching for prompt injections naively, the majority of detections are benign content – false positives in our case.

Malicious: ExfiltrationWe were able to observe a small number of prompt injections that aim at theft of data.

Recognizing the risks associated within the complex modem firmware, Pixel 9 shipped with mitigations against a range of memory-safety vulnerabilities.

Following our previous discussion on "Deploying Rust in Existing Firmware Codebases", this post shares a concrete application: integrating a memory-safe Rust DNS(Domain Name System) parser into the modem firmware.

Hook-up Rust to modem firmwareBefore building the Rust DNS library, we defined several Rust unit tests to cover basic arithmetic, dynamic allocations, and FFI to verify the integration of Rust with the existing modem firmware code base.

Pixel modem firmware already has a well-tested and specialized global memory allocation system to…

This project represents a significant step forward in our ongoing efforts to combat session theft, which remains a prevalent threat in the modern security landscape.

Session theft typically occurs when a user inadvertently downloads malware onto their device.

Once active, the malware can silently extract existing session cookies from the browser or wait for the user to log in to new accounts, before exfiltrating these tokens to an attacker-controlled server.

How DBSC WorksDBSC protects against session theft by cryptographically binding authentication sessions to a specific device.

The issuance of new short-lived session cookies is contingent upon Chrome proving possession of the correspondi…

Staying ahead of the latest indirect prompt injection attacks is critical to our mission of securing Workspace with Gemini.

In our previous blog “Mitigating prompt injection attacks with a layered defense strategy”, we reviewed the layered architecture of our IPI defenses.

Synthetic data generationAfter we discover, curate, and catalog new attacks, we use Simula to generate synthetic data expanding these new attacks.

We partition the synthetic data described above into separate training and validation sets to ensure performance is evaluated against held-out examples.

This process leverages the newly generated synthetic attack data described on this blog, to create a robust, end-to-end evalu…

2025 marked a special year in the history of vulnerability rewards and bug bounty programs at Google: our 15th anniversary 🎉🎉🎉!

Coming back to 2025 specifically, our VRP once again confirmed the ongoing value of engaging with the external security research community to make Google and its products safer.

Vulnerability Reward Program 2025 in NumbersWant to learn more about who’s reporting to the VRP?

Tip: Want to be informed of new developments and events around our Vulnerability Reward Program?

Follow the Google VRP channel on X to stay in the loop and be sure to check out the Security Engineering blog, which covers topics ranging from VRP updates to security practices and vulnerability des…

To stay ahead of the curve, the technology industry must undertake a proactive, multi-year migration to Post-Quantum Cryptography (PQC).

To bring these critical protections to the wider developer community with minimal friction, the transition will be supported through Play App Signing.

Play App Signing leverages Google Cloud KMS, which helps ensure industry-leading compliance standards, to secure signing keys.

Empower Developers : The inclusion of ML-DSA support within Android Keystore and Play App Signing allows developers to safeguard their users and application.

: The inclusion of ML-DSA support within Android Keystore and Play App Signing allows developers to safeguard their users and …

Today we're announcing a new program in Chrome to make HTTPS certificates secure against quantum computers.

Instead, Chrome, in collaboration with other partners, is developing an evolution of HTTPS certificates based on Merkle Tree Certificates (MTCs), currently in development in the PLANTS working group.

Since MTC technology shares significant architectural similarities with CT, these operators are uniquely qualified to ensure MTCs are able to get off the ground quickly and successfully.

The Chrome Quantum-resistant Root Program will operate alongside our existing Chrome Root Program to ensure a risk-managed transition that maintains the highest levels of security for all users.

First, we…

For Majik, Scam Detection was the intervention he needed: “The warning is what made me pause and avoid a bad situation”.

As scammers evolve their tactics and create more convincing and personalized threats, we’re using the best of Google AI to stay one step ahead.

Expanding Scam Detection for Calls to Samsung DevicesTo help protect you during phone calls, Scam Detection alerts you if a caller uses speech patterns commonly associated with fraud.

Scam Detection for phone calls on Google Pixel devices is available in the U.S., Australia, Canada, India, Ireland, and the UK.

Powered by Gemini’s on-device model, Scam Detection provides intelligent protection against scam calls while ensuring that…

Upgrading Google Play’s AI-powered, multi-layered user protectionsWe’ve seen a clear impact from these safety efforts on Google Play.

As Android’s built-in defense against malware and unwanted software, Google Play Protect now scans over 350 billion Android apps daily.

This proactive protection constantly checks both Play apps and those from other sources to ensure they are not potentially harmful.

Looking aheadOur top priority remains making Google Play and Android the most trusted app ecosystems for everyone.

Thank you for being part of the Google Play and Android community as we work together to build a safer app ecosystem.

That’s why we're committed to providing multi-layered defenses that help protect you before, during, and after a theft attempt.

Today, we're announcing a powerful set of theft protection feature updates that build on our existing protections, designed to give you greater peace of mind by making your device a much harder target for criminals.

These updates are now available for Android devices running Android 16+.

More User Control for Failed Authentications: In Android 15, we launched Failed Authentication Lock, a feature that automatically locks the device's screen after excessive failed authentication attempts.

This feature is now getting a new dedicated enable/disable toggle in settings,…