Project Quarry обнаруживает подозрительные цепочки операций, которые по отдельности не вызывают тревоги.

Военные базы США переводят на режим полной автономии.

Программа NIK C2 умеет находить чужой API-ключ и обращаться к нейросети за счёт владельца.

Уязвимы версии с 12-й по 17-ю.

Даже новая версия библиотеки Rust требует отдельной настройки, чтобы быть безопасной.

Приложение удаляет локальные разговоры, однако дальнейшая судьба запросов зависит от выбранной модели.

Среди находок оказался доступ администратора крупной корпоративной ИИ-платформы.

Помехи позволяют нарушать связь и навигацию, не создавая облака опасных обломков на орбите.

Даже рост продаж серверных процессоров не смог компенсировать сразу несколько проблем крупнейшего чипмейкера.

Защитный механизм продолжал принимать сообщения даже после остановки чтения.

Как и в других отраслях, использование ИИ — один из путей снижения издержек и роста производительности труда.

К тому же для ИТ-отрасли, которая активно предлагает продукты с ИИ, не использовать такие средства самой было бы просто нелогично.

Владимир Лавров поделился опытом использования ИИ как для оптимизации бизнес-процессов, так и для ускорения разработки.

Поэтому нужно сначала выстроить методологию, платформу и инфраструктуру, затем определить задачи для ИИ и только после этого масштабировать автоматизацию.

Некоторые показатели внедрения ИИ в российских компанияхТакже использование ИИ создаёт большие риски в сфере подготовки кадров.

Для ЦОДов такой механизм может ускорить запуск новых площадок, но не отменяет требования к непрерывности их работы.

Она также поможет ускорить ввод и не ждать строительства дополнительных электростанций и сетей.

При подключении по IV категории то оборудование, которое раньше служило аварийным резервом, берёт на себя роль второго потока обеспечения непрерывной работы объекта.

Надёжность всего дорожеКак именно IV категория надёжности в качестве сценария запуска ЦОДов повлияет на стоимость их сервисов, рынок пока только считает.

ВыводыIV категория надёжности не отменяет требования ЦОДа к непрерывности работы — она переносит часть задачи с внешней энергосистемы на самого оператора.

Выбор СУБД: универсальность против специализацииБудущее за универсальными СУБД, где есть и транзакционная, и аналитическая часть, или специализация останется?

Алексей Викулин согласился, что всё идёт от задачи, но большинство задач бизнеса соединяют потребность и в аналитике, и в транзакциях.

К SQL Server совместимость 98%, и к ним прилагаются компоненты инфраструктуры вроде Service Broker и SSRS (SQL Server Reporting Services).

Гарантию совместимости может дать только вендор прикладного решения, и идеальный вариант — когда вендоры СУБД и приложения работают в синергии.

Высокий порог входа требует от вендоров упрощения администрирования, развития инструментов управления СУБД и обучения спец…

Ретейл — цель номер одинНа ретейл приходится около 25 % всех утечек данных в России и 33 % в мире: больше, чем на любую другую отрасль.

У среднего ретейлера сотни интеграций, многие из которых давно забыты и не обновляются.

Полномочия сервиса рассчитываются централизованно и передаются в самом токене, а не зашиваются в конфигурацию.

Готовое решение обходится бизнесу выгоднее самописной логики на фронте и при этом делает вход проще, а не сложнее.

Он значительно усиливает защиту данных, передаваемых между аутентификатором и сервером, от перехвата и служит для входа в почту, CRM-систему и корпоративный VPN.

NAC перестал быть экзотикой: сегодня он определяет, кто и что попадает в корпоративную сеть, куда и на каких условиях.

Network Access Control перестал быть экзотикой и стал инструментом, который определяет, кто и что попадает в сеть, куда и на каких условиях.

Станислав Калабин согласился и добавил, что NAC всегда работает в комплексе с сетевым оборудованием и не может быть самостоятельным решением.

Появились разнородные устройства и несколько видов подключений, которые нужно контролировать, и без централизованного инструмента, который даёт картину и позволяет управлять, мониторить и реагировать, уже сложно.

Финальный опрос показал, планируют ли зрители усиливать контроль сетевого доступа по…

ВведениеПри выборе DLP-системы бизнесу приходится искать баланс между возможностями защиты и затратами на её внедрение и эксплуатацию.

Поэтому при выборе DLP важно учитывать не только стоимость лицензии и количество контролируемых каналов, но и совместимость с ИТ-инфраструктурой, потребление ресурсов, отказоустойчивость и возможности автоматизации.

«СёрчИнформ КИБ» работает на серверах под управлением Windows и Linux, контролирует ПК на Windows, Linux и macOS.

Управлять КИБ на любой инфраструктуре можно из десктоп-приложения и в единой веб-консоли в браузере с любого устройства.

«СёрчИнформ КИБ» поддерживает разные типы блокировок — по действиям, по контексту и по контенту.

Продукт относится к платформе «Р7-Офис», включённой в Реестр отечественного ПО, что позволяет применять его в госучреждениях и компаниях с госучастием.

Такой файл может включать около миллиона строк, однако «P7-Аналитика» позволяет обрабатывать огромные массивы данных без потери производительности.

Показатели выгружаются преимущественно из учётных и CRM-систем в виде таблиц данных и представляют собой числовые значения интересующей позиции учёта.

Загрузка показателейЧтобы загрузить табличный файл или подключить корпоративный источник данных (например, 1C или Битрикс24), нужно выбрать вкладку «Загрузка данных» в разделе «Настройки» главного меню программы.

Таким образом, пользователь может с…

Наглядная архитектура ИИ-агентаГотовые ИИ-агенты и ассистенты от российских разработчиковЧат-бот, который просто отвечает на вопросы, уже почти ушёл в прошлое.

Чтобы отличить ИИ-агента от обычного ИИ-ассистента и копилота, лучше всего оценивать уровень автономности, способность к планированию и степень участия человека:ИИ‑ассистент.

Крупные российские компании уже запустили продвинутых ИИ-агентов для собственных нужд.

Компания может проверить, какие данные и сервисы использовал агент при выполнении поручения и на чём основан результат.

Она позволяет создавать автономных ИИ-агентов и автоматизировать бизнес-процессы, поддерживая как российские модели YandexGPT и GigaChat, так и зарубежные LL…

подозрений на киберинциденты, что в свою очередь уже на 40% больше, чем в прошлом году.

Например, во время сбоя в работе СДЭК в мае 2024 года хакерская группировка Head Mare публично заявила о взломе инфраструктуры компании и разместила скриншоты в подтверждение своих слов.

В результате вопросы возникли не только к надёжности сервиса, но и к тому, насколько точно компания описывает происходящее.

Тему подхватили СМИ, что в итоге сформировало негативное инфополе вокруг бренда.

После кибератаки у ритейлера возникли сбои в работе сайта, приложения и оборудования в магазинах, очереди на кассах и путаница с ценами.

Денис Солоничкин отметил, что начались реальные внедрения: операционные системы больше не покупают «в стол», это видно по нагрузке на техподдержку и по продажам.

Для этого нужно провести внутренний аудит систем и софта, проверить ПО на предмет того, кросс-платформенное ли оно, и запланировать миграцию.

Денис Солоничкин пояснил, что РЕД СОФТ занимается общесистемным и инфраструктурным ПО и не идёт в те классы продуктов, где уже есть большое количество партнёров.

Инновации: агентские ОС и локальные моделиАнтон Пальгунов отметил движение в сторону веба и ИИ: пользователи всё чаще начинают с ИИ-ассистента, а не с поиска в браузере.

Одни считают, что зависимость неизбежна в любом варианте и важн…

Разбираемся, чем агент отличается от чат-бота и автоматизации, как его применяют в разработке и администрировании и какие риски возникают при доступе к корпоративным системам.

Он описывает, как агенты разных систем находят друг друга, обмениваются задачами и результатами и обрабатывают ошибки.

Поэтому к взаимодействию между агентами применяют те же принципы, что и к работе с инструментами: минимальные права, проверку входных и выходных данных, журналирование.

Как агенты меняют разработку ПОПри наличии разрешений агент работает с репозиторием, инструментами сборки и тестирования, закрывая многоэтапные задачи целиком.

При этом результат работы агента нужно проверять не только на ошибки, но и …

Наталья Глинина отметила, что стратегия должна отвечать на вопрос, с какими бизнес-рисками работает компания, и обязательно связывать цели ИБ с целями бизнеса.

Евгений Акимов предложил смотреть на стратегию как на ожидание бизнеса от кибербезопасности: если бизнес ничего не ждёт, стратегия не нужна.

Евгений Акимов:«Прежде чем писать стратегию, нужно разобраться с целями бизнеса, а не с требованиями к кибербезопасности.

Елизавета Комарова:«Нужно учитывать, что угроза — это не то, что маячит на горизонте, а то, что происходит прямо сейчас.

Эксперты сошлись в том, что стратегия должна фокусироваться на критических процессах и их восстановлении, а не на перечне приобретаемых решений.

Аналогичные санкции предлагается применять и к тем, кто не выполнил классификацию своих объектов КИИ и не определил их значимость в соответствии с требованиями отечественного законодательства.

В таких условиях компании стали осторожнее подходить к крупным ИТ-проектам и внимательнее оценивать не только необходимость внедрения, но и его ожидаемый результат.

Проблема заключается не только в продолжительности обучения, но и в разрыве между академической подготовкой и практическими задачами бизнеса.

Выросли и требования к самим разработчикам: клиент обращает внимание на их опыт, компетенции и способность развивать и поддерживать решение.

Модели будут ошибаться всё реже, и в перспективе многие де…

Но бизнесу уже недостаточно арендовать серверы с GPU: нужны инструменты для работы с данными, надёжная инфраструктура и кадры.

Соответственно, аналитики планируют для облачных сервисов, ориентированных на ИИ, более высокие темпы роста на период 2026–2030 гг.

Прогноз динамики рынка публичных облачных сервисов для ИИ на 2026–2030 гг.

Наиболее востребованные облачные сервисы для ИИ по итогам 2025 годаТакже уже без малого четверть, точнее, 24% компаний уже используют ИИ в облаке.

И в целом ИИ без качественных данных в достаточном объёме рискует выдавать только галлюцинации, а не помогать решать задачи бизнеса.

Я устал от ситуации с мессенджерами и настроил звонки через Nextcloud Talk для всей семьи.

А папа звонит в TG по старой привычке - пока включишь VPN, пока дождешься установления соединения...Задача: дать возможность всей семье общаться через свой self-hosted сервер с Nextcloud Talk.

Далее в панели хостера создаём поддомен nextcloud.example.com (хотя можно и на основном домене делать) и меняем A-запись в настройках DNS на IP сервера с HestiaCP.

Сам Nextcloud у меня уже установлен на TrueNAS в домашней сети по адресу 192.168.0.17:30027 (порт 30027 - дефолтный для Nextcloud).

В каталоге приложений TrueNAS ставится обратный прокси с Let's Encrypt, например Nginx Proxy Manager, и проксирует доме…

И там, и там всегда был и будет зоопарк версий.

Renovate и Dependabot работают с зависимостями в репозитории, а не с живыми серверами.

What's Up Docker следит за тегами контейнеров, а всё, что не в Docker, остаётся вне поля зрения.

MySQL, который банил сам себяСервер MySQL (и MariaDB) сразу после TCP-подключения сам присылает приветствие, и в нём есть версия.

А если вашего софта нет ни в enodia, ни в endoflife.date, напишите в комментариях, какого именно.

И для генеративной системы, коей агент и является, это все разные действия, которые не подпадают под единое ограничение.

Поэтому у Hard Stop придумали два уровня: агент и его супервизор.

При этом cgroup ожидает подтверждения через ядро, что агент с его «прихвостнями» заморожен, даже если супервизор сделал запрос на полную остановку группы процессов.

Получается, стоп-кран хорош ровно до тех пор, пока агент не добрался до комнаты, где находится сам рубильник.

Из всего этого можно сделать вывод: будет надежнее держать ИИ за крепкой дверью, чем надеяться на его благоразумие.

Сегодня мы разберём то, как и кого рисуют в США и Великобритании, а уже в третьей части поговорим о французской и российской школах.

Причина выбора не только в верности традициям зарисовки, но и в том, что этими инструментами можно рисовать быстро, ярко и бесшумно.

Но самолюбие Мэнсона не позволило ему занять такую позицию — советы и поведение адвокатов бесконечно раздражали его, и он часто на них срывался.

На зарисовке он в «одеянии короля» — так журналисты описали костюм, в котором он пришёл в суд.

Там была сцена суда, и в ней действительно Арнольд Мешес: он снялся в фильме как символ американской судебной зарисовки.

Ниже — как искали, где я чуть не свернул не туда и что я думаю о диагностируемости этого продукта.

Что за зверь и что у нас сломалосьSANEX — это платформа Huawei для сбора и анализа сигнального трафика (MAP, ISUP, SCCP, TCAP).

DAS: заменяем identityНачали с DAS, потому что без него остальное бессмысленно.

Компоненту, которому для работы нужна TLS-идентичность, подсунули нулевой файл, и в ответ он выдал кучу косвенных TLS-ошибок.

Видимо, к этому моменту все четыре контура уже были исправны, и системе оставалось только заново поднять сессии, которые она до этого честно пыталась установить и не могла.

И тем не менее прецеденты появились, и на б̶о̶л̶о̶т̶а̶х̶ Reddit начался знатный вой.

Я Александр, пишу для антидетект-браузера Aurorium и по совместительству являюсь специалистом в вопросах автоматизации и парсинга.

Я не пользуюсь Claude и GPT, мне больше нравится Gemini, однако история с блокировками аккаунтов мне близка (сам проходил через подобное и не раз).

И в этом сценарии он (Claude) уже выступает в роли работника, которого хотят заменить.

Не торопитесь и не жадничайте.

Они рассказали, как сократить путь до работающего IDM с помощью этого решения — и какие особенности есть в процессе внедрения.

<…> Рабочее место сотрудника поменялось: это ноутбуки, у которых есть VPN -доступы внутрь компании, и сотрудники с ними могут делать что угодно.

Есть мошенничество телефонное, есть в мессенджерах, есть в интернете.

Николай Нашивочников привёл данные о скорости атак: «Международная статистика показывает, что это 48, иногда 24 часа.

Он рассказал, из чего складывается стоимость результата, какие задачи решает платформа и что из себя представляет Efros Platform, разработанная компанией «Газинформсервис».

Интерфейс PT BlackBox: три уязвимости TrueConf Server, в карточке — BDU:2025-10116Коробочное ПО так и проверяют: после каждого обновления и по расписанию.

SSRF в POST /profile/image/url и XXE в POST /file-upload есть только в отчете PT BlackBox, и обе уязвимости подтверждены эксплуатацией.

SARIF из DAST кладите в ту же ASOC/ASPM, что и результаты SAST и SCA, и привязывайте к сервису и версии сборки.

Работает и с облаком, и с on-prem.

Для этого заведите в сканере отдельный профиль скана и API-схему этого сервиса и передайте их UUID в --scan-profile и --api-schema .

При 100 известных парах (2% корпуса) узнаётся около 90%.

Как проверял8 схем: гауссов шум, шум после секретного поворота, SAP/DCPE (шум, равномерный в шаре), бинарный LSH, случайная проекция, product quantization (PQ), секретная нелинейность, k-анонимное квантование.

Доля узнанных записей при настройке, оставляющей ~80% качества:Известных пар % корпуса SAP Гауссов Поворот Проекция LSH PQ 25 0,5% 2% 2% 2% 1% 1% 0% 50 1% 38% 34% 34% 22% 15% 8% 100 2% 91% 89% 88% 72% 61% 37% 200 4% 100% 98% 98% 96% 92% 67% 1600 31% 100% 100% 100% 100% 100% 91%Это важно, потому что секретное линейное преобразование, зависящее от пользователя, как раз то, что предлагает работа про vec2text.

Помогает только потеря…

Под катом разбираемся, как устроен наш EASM, как мы боремся с ложными срабатываниями и что оказалось самым сложным в разработке (и стоило нам немало бессонных ночей).

данные, другую «серую» информацию EASM не найдёт — это не мониторинг даркнета.

Сканер ничего не хранит и не решает, насколько находка опасна.

Во-вторых, никакой эксплуатации : сканер проверяет, есть ли уязвимость, но не пользуется ею и не обращается к данным клиента.

Нет, только показываем"Решение не эксплуатирует и не устраняет уязвимости — только собирает, структурирует и показывает их в самом удобном виде, со всей историей и приоритизацией.

Из коробки макрос [$PASSWORD$] в платформе предназначен только для сценария, когда администратор сам сбрасывает пароль пользователю из панели управления.

В итоге получился опасный гибрид: пароль пользователь задал постоянный и секретный, а система обработала его как временный и выслала в рассылке.

Достаточно дождаться, пока enterprise-система сама пришлет пароль в открытом виде на сторонний почтовый сервис.

Помните о Hardening'е, проверяйте дефолтные настройки «коробочного» софта и не оставляйте localhost там, где дежурит Первый отдел.

Дисклеймер: Данный материал подготовлен исключительно в образовательных целях и в рамках концепции Responsible Disclosure.

20:21 — делегирование кода Binance 14 на контракт атакующего.

20:30–20:33 — получатель дробит USDT: 500 млн и 200 млн на два новых адреса.

Получатель №1 0x5227…2f8c принял всё с Binance 14, Binance 16 и Hot Wallet 34.

Остальное разлетается по одному токену на свежий кошелёк, и на каждый заранее приходит 0,5–1 ETH на газ.

Около $1,8 млрд стейблкоинов заморозили в первый час, хотя в Bitget атакующие успели перевести ~$100 млн в ETH до заморозки.

M создан H. По определению, M — продукт интеллекта H. Сложность M ограничена сложностью H. M не может содержать знаний или структур, которые H не способен понять или создать.

Если A понимает M глубже, чем H, то A видит в M то, чего H не видит.

H не может проверить все свойства M. A может найти свойство, которое H не учёл.

M имеет разнообразие H. A имеет разнообразие больше H. Следовательно, M не может управлять A.Теорема о невозможности идеального предсказания (Лаплас, 1814).

Единственное «решение» — не создавать A, превосходящий H. Если A не превосходит H, H может создать M, гарантирующий согласование.

Kimi K3 — исключение: ее веса можно скачать и развернуть у себя, а на части независимых бенчмарков она обходит закрытые решения GPT и Anthropic.

Пример работы несбалансированной нагрузки экспертов и сбалансированного подхода Kimi K3Посчитать такой порог по-честному для сотен экспертов и огромного потока токенов дорого — потребовалась бы полная сортировка всех оценок.

Такой подход позволил модели надежно научиться запоминать длинные последовательности, а не пытаться освоить экстремальную длину контекста сразу без промежуточных шагов.

Пока модель генерирует ответ, песочница стоит на паузе и не расходует ресурсы вовсе — а на такую паузу уходит до 98% всего времени ее существования.

Тот же прие…

Это агентам не отдать — они не знают, как на самом деле выглядят атаки в компании и на что могут повестись люди.

Картинку загружаешь в бакет, а в релиз она попадает при публикации.

Формат бакета закреплён эталонным примером, и с ним сверяются и игра, и редактор: разъехаться они могут только через падение теста.

Начинайте с задачи, а не с технологии.

Прототип вы соберёте сами, а в прод его должен провести разработчик, который знает инфраструктуру.

Эксперты «Лаборатории Касперского» обнаружили DoS-уязвимость в IP-камерах Intelbras.

Из-за ошибки в механизме обновления прошивки неаутентифицированный злоумышленник мог добиться временного отключения камер.

Как объясняют исследователи, обычно для управления камерой требуется пройти аутентификацию, однако в случае Intelbras эндпоинт, отвечающий за обновление прошивки, не проверял наличие авторизованной сессии.

В результате устройство пропадало из сети, приложение Intelbras теряло с ним связь, а пользователь не мог просмотреть трансляцию и управлять камерой.

По данным представителей Intelbras, эта же версия прошивки совместима с моделями iMX C, iM4 C, iM5 SC, iME 360 C и iM7+ FC.

Криптобиржа Binance расследует взлом, ущерб от которого в настоящий момент оценивается в 6,3 млрд долларов США.

Если сумма ущерба подтвердится, этот инцидент станет крупнейшим криптоограблением в истории: предыдущий рекорд принадлежал криптобирже Bybit, у которой северокорейские хакеры похитили около 1,5 млрд долларов США в феврале 2025 года.

Только в Ethereum хакеры получили активы примерно на 3,79 млрд долларов, а из биткоин-кошелька Binance похитили 18 270 BTC стоимостью около 1,47 млрд долларов США (по курсу на момент атаки).

В Binance рассчитывают полностью возобновить вывод средств в течение 48 часов.

По последней оценке экспертов самой Binance, суммарно удалось заморозить украденные …

Onamae.com — бренд компании GMO Internet, под которым работает один из крупнейших сервисов регистрации доменов в Японии.

Также в компании сообщили, что хакеры потребовали выкуп в размере 8 млрд иен, и представители GMO подчеркнули, что не станут платить злоумышленникам.

Позже в компании сообщили, что злоумышленники сдержали свое обещание и 27 октября действительно опубликовали данные, якобы принадлежащие GMO и ее клиентам.

В компании отказались платить выкуп хакерам, но пообещали компенсировать клиентам причиненный атакой ущерб.

Параллельно с этим в GMO объявили вознаграждение до миллиона долларов США за информацию, которая поможет поймать стоявших за атакой хакеров.

Представители Discord объявили, что сообщения из публичных сообществ скоро начнут появляться в поисковой выдаче Google и других поисковиков.

С середины декабря 2026 года на таких страницах начнут появляться отдельные сообщения из публичных каналов, которые смогут индексировать поисковики.

При этом старые сообщения, опубликованные до запуска функции, в поисковую выдачу не попадут, и на страницах не будут отображаться имена и аватары авторов.

Однако изменение настроек повлияет только на будущие сообщения, а уже опубликованную переписку можно будет убрать из открытого доступа, только удалив соответствующие сообщения из Discord.

Чтобы их сообщения могли появляться на Server Web Pages и индексир…

Из-за уязвимости контролируемый хакером сервер мог подменять неподтвержденные транзакции в истории кошелька.

Если пользователь не замечал подмены и пытался ускорить перевод, повысив комиссию, Electrum создавал новую транзакцию с адресом атакующего вместо настоящего получателя.

Корень бага заключался в том, что Electrum работает как легкий клиент и получает данные о транзакциях через сеть Electrum-серверов, которые могут запускать сторонние операторы.

Также было недостаточно и самой подмены: кража происходила только в том случае, если жертва вручную увеличивала комиссию и подтверждала измененную транзакцию.

В Electrum 4.8.3, вышедшей 24 октября, разработчики добавили проверку подписей для не…

Американский хостинг-провайдер DreamHost принудительно сбросил пароли для части пользователей электронной почты и FTP/SFTP после некоего «инцидента», затронувшего File Manager и веб-почту.

Причину происходящего в компании пока не раскрывают, а пострадавшим советуют проверить настройки переадресации и сменить пароли в других сервисах, если они совпадали с паролями DreamHost.

Проблемы в работе хостера начались еще 23 октября 2026 года, когда в DreamHost сообщили о сбоях подключения к File Manager на files.dreamhost.com.

«В качестве меры предосторожности мы сбрасываем пароли некоторых пользователей электронной почты и FTP/SFTP», — сообщили представители хостинг-провайдера.

Также в DreamHost ре…

Специалисты «Доктор Веб» обнаружили на GitHub зараженные репозитории, которые распространяют малварь под видом инструментов для ИБ-специалистов.

В настоящее время злоумышленники переключились на ИБ-специалистов, и зараженные репозитории маскируются под инструменты для автоматизации сканирования, тестирования защищенности и анализа логов.

Оттуда вредонос получает ссылку на архив Quixo.7z, распаковывает его в C:\ProgramData\Windows.Microsoft.Photos и запускает приложение Microsoft.exe.

Троян считывает оригинальный ntdll.dll с диска и сравнивает его с существующим в процессе.

В случае срабатывания клиппер делает скриншот и отправляет его в Telegram вместе с информацией о пользователе и заражен…

После этого сохранить проблему в секрете уже не представлялось возможным, и на прошлой неделе разработчики TianoCore выпустили официальный бюллетень безопасности.

Результатом эксплуатации уязвимости может стать «зависание» процесса загрузки и отказ в обслуживании (DoS).

Поэтому в компании советуют уточнять статус конкретных платформ у их производителей.

В то же время опубликованные Arm прошивки во многом используют код EDK2, и это подтверждается документацией TianoCore.

Отметим, что CVE-2026-97631 пополнила длинный список проблем, связанных с UEFI.

Производитель аппаратных криптокошельков Keystone сообщает, что из-за кибератаки будет вынужден уничтожить 18 835 нераспроданных устройств и приостановить отправку заказов.

Специалисты Keystone обнаружили несанкционированный доступ к системам компании на прошлой неделе, 20 октября 2026 года.

Поэтому все 18 835 устройств, в настоящее время хранящихся на складе компании, уничтожат, а новые партии кошельков получат другой ключ.

Помимо компрометации ключа кибератака затронула 25 964 записи о покупателях официального магазина Keystone на Shopify за 2024–2026 годы.

Кроме того, в Keystone предупреждают пользователей о мошенниках, которые могут предлагать «замену» и «возврат» устройств, «проверку к…

Итог: утеч­ка зап­росов в одном слу­чае, рас­кры­тие исходно­го кода аген­та и дос­туп на запись в S3 с диало­гами поль­зовате­лей — в дру­гом.

В обо­их слу­чаях модель угроз пред­полага­ла внеш­него наруши­теля с дос­тупом к аген­ту в режиме чер­ного ящи­ка.

Агент «Красной компании»Од­нажды вечером я уви­дел в поч­те сооб­щение о том, что в «Крас­ной ком­пании» выпус­тили аген­та для иссле­дова­ний.

Даже Fable 5.1 иног­да оши­бает­ся при перем­ножении пятиз­начных чисел, хотя объ­ясне­ния того, как модели справ­ляют­ся с вычис­лени­ями в отдель­ных слу­чаях, очень кра­сивы.

На самом деле это не очень уди­витель­но: впол­не разум­ный выбор, ведь при­дет­ся вычис­лять зна­чения раз­ных фун­к…

Пока администраторы во всем мире разбираются с уязвимостями PHP2Shell и массовыми попытками эксплуатации этих багов, в конце прошлой недели разработчики PHP предупредили еще об одной RCE-уязвимости.

Новая проблема получила идентификатор CVE-2026-115560 и патча для нее пока нет.

По оценке разработчиков PHP, в реальных приложениях такая конфигурация встречается крайне редко, а если приложение не меняет serialize handler во время работы, CVE-2026-115560 не представляет для него угрозы.

Эта мера уже фигурировала среди рекомендаций для защиты от CVE-2026-109619, поэтому администраторам, которые отключили эту функцию из-за PHP2Shell и не включали обратно, не потребуется делать что-либо еще.

Пока …

Twitter's message confirming a password reset for that account was sent to a Gmail account used primarily by Agha, the affidavit says.

The Justice Department said Agha carried out that hack, which caused a temporary $136 billion drop in the value of stocks in the Dow Jones Industrial Average.

In the 2016 announcement, the department said the group acted "in support of" the Syrian government.

He also twice tried to take over the White House's social media accounts by stealing White House staff email passwords.

He was also charged in a separate case with Peter Romar, a Syrian national then living in Germany.

Cybersecurity researchers have disclosed that the official Anthropic Claude Code extension was compromised on the Cursor Marketplace to install a persistent SSH backdoor on infected hosts.

"We identified a security incident affecting a modified Claude Code VS Code extension accessed through our Cursor IDE extension marketplace, impacting at most 5,000 users," Cursor said.

As of October 30, 2026, the malicious version has been removed, and Anthropic has published version 2.1.314 to both Open VSX and Microsoft VS Code Marketplace.

The extension still adds the attacker's SSH key, installs persistence, and sends host details to the attacker.

The incident has since been traced back to a compromi…

Drupal has warned that threat actors are exploiting a "highly critical" security flaw in its Commerce Core component.

The vulnerability, tracked as CVE-2026-118539 (CVSS score: N/A), is a case of missing authorization affecting Commerce Core versions from 0.0.0 to 2.41 and from 3.0.0 to 3.3.13.

"The module doesn't sufficiently protect certain routes and entity fields, leading to an access bypass that may financially impact the vendor."

Users are being recommended to update to the latest version -Version 3.x - Upgrade to Commerce Core 3.3.13Earlier versions - Upgrade to Commerce Core 8.x-2.41Drupal has credited researchers Dan Puccetti (dpuccetti), Marcus Johansson (marcus_johansson), and Ro…

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added two security flaws impacting Cisco and GitLab software to its Known Exploited Vulnerabilities (KEV), citing evidence of active exploitation.

The development comes after Cisco said it became aware of active exploitation of this vulnerability earlier this month.

Specifically, the attacker probed an unpatched GitLab instance by sending crafted CI configurations, causing the GitLab worker processes to crash eight times.

Our checks show that the aports repository, packages, and the October 21 releases were not tampered with."

In light of active exploitation, Federal Civilian Executive Branch (FCEB) agencies are re…

Cryptocurrency giant Binance said on Thursday that a "security incident" on its platform has impacted about $6.3 billion worth of assets.

The world's biggest cryptocurrency exchange said nearly $3 billion of those assets have been frozen on-chain so far.

Tether and Circle said they have frozen more than 1.567 billion USDT and 800 million related to the incident, respectively.

The Arbitrum Security Council is said to have executed a transaction to freeze about $30.5 million from the Binance Exploit.

The development makes it the biggest cryptocurrency heist recorded to date, surpassing the theft of about $1.5 billion from Bybit in February 2025.

Exposed passwords, old bugs still getting exploited, and trusted software doing things it shouldn't.

Hackers are borrowing trust from familiar apps, websites, and AI tools.

Different stories, familiar weak spots.

Some attacks were clever, some were painfully simple, and a few attackers made life easier for the people investigating them.

New tools, familiar mistakes.

A flaw in the Linux kernel's TCP code, tracked as CVE-2026-98432, affects Ubuntu, Red Hat Enterprise Linux (RHEL), and other Linux distributions.

Red Hat, Amazon, Oracle, and SUSE score the flaw between 5.9 and 8.1, lower than the kernel team's 9.8.

Red Hat's CVE page rates the flaw Moderate, scoring it 5.9 because the race is hard to win.

Oracle and SUSE also score the flaw 8.1, with the same CVSS vector as Red Hat's advisory file.

Red Hat says a remote attacker who can reach an exposed TCP service could trigger the race.

Threat actors are delivering malicious loaders and cryptocurrency miners under the guise of artificial intelligence (AI) desktop applications for Anthropic Claude and OpenAI ChatGPT as part of a campaign dubbed Yoba.

To add to the project's credibility, the attackers set up GitHub.io pages to describe the capabilities of the software.

]com), and the uploader appears to operate in UTC+4, UTC-4, and UTC+3 respectively," Check Point said.

It also establishes persistence by means of a scheduled task that launches the legitimate executable to load the malicious payload.

"By relying on a DoH service and common file-hosting platforms, the actor aims to bypass passive DNS monitoring and some gatewa…

Google on Wednesday took the wraps off Gemini 4 Carbon, its latest frontier model with state-of-the-art cybersecurity and long-horizon capabilities.

On the Artificial Analysis Intelligence Index benchmark, Carbon leads with a score of 59, surpassing Anthropic's Claude Opus 5.5 (58), OpenAI GPT-6 Astra (57), GPT-6.1 Sol (55).

The debut of Gemini 4 Carbon comes less than a week after the tech giant unveiled Gemini 4 Argon.

According to our evaluations, GPT-6.1 Terra is more likely to stay within scope and honestly disclose limitations and potential blockers to the user compared to GPT-5.6 Terra.

In our prompt-injection tests, GPT-6.1 Terra also showed strong resistance to malicious instructio…

That is the focus of next week's webinar, How to Build AI Threat Readiness Across Your Security Operations, featuring an expert from Wiz.

The session will show how security teams can improve visibility, prioritize real risk, and shorten the path from detection to remediation.

Most security teams already have plenty of data.

Security teams need enough context to understand risk across cloud infrastructure, code, identities, SaaS, AI services, and the software supply chain.

Security teams need to respond with better context and less delay.

Amatera – which topped ESET’s infostealer detections in Latin America in the first half of 2026 but targets victims worldwide – shows what this professionalization looks like in practice.

Detected by ESET products as Win/PSW.Amatera, Amatera is a Windows infostealer written in C++ that was first observed in 2024.

Amatera has spread via compromised websites, search engine ads, targeted emails, fake documents, SVG files, and ClickFix via fake CAPTCHAs.

In Latin America, Amatera topped ESET’s infostealer detections in the first half of 2026, ahead of Formbook, Vidar, Lumma Stealer, SnakeStealer, and Rhadamanthys.

A developer maintains the product, and other actors distribute it via compromised…

In the age of AI, all of this was reported within a single “Cybersecurity Black Week,” an exceptionally eventful seven-day period amid an already turbulent Black October.

The name refers to two memory-safety vulnerabilities in PHP core, CVE-2026-109618 and CVE-2026-109619, affecting PHP versions 5.4 through 8.5.11.

The same decoder is compiled into the Python Brotli and brotlicffi packages as well as into other HTTP software, which led researchers to rename the issue HTTP2Shell.

Cutting through the noiseCybersecurity Black Week showed that a severity score rarely tells the whole story.

For the leaked kernel flaws, that window opened before any fix existed, and for end-of-life PHP versions, …

ESET APT Activity Report Q2 2026–Q2 2026 summarizes notable activities of selected advanced persistent threat (APT) groups documented by ESET researchers between April and September 2026.

They represent only a subset of the cybersecurity intelligence made available to customers of ESET Threat Intelligence APT Reports.

In Southeast Asia and Oceania, China-aligned threat actors ran campaigns that appear to support Chinese law enforcement efforts against organized crime in the region.

Finally, we identified several cases of APT groups using AI and large language models (LLMs) at various stages of their operations.

Threat actors used AI primarily to accelerate tasks that would otherwise require…

The news prompted security advisories from government agencies and sent website owners scrambling to apply the patches, with some sites even going offline as a precaution.

This is because on an unpatched server, an attacker can exploit the vulnerabilities to run their own code without logging in.

As three out of four websites globally are estimated to use PHP in some capacity, its ubiquity helps create an environment ripe for abuse; indeed, initial attempts to exploit the flaws – discovered by AI and dubbed PHP2Shell – weren't long in coming.

Here's what to know about CVE-2026-109618 and CVE-2026-109619, as well as what website owners and IT teams should do to stay safe – all in a little mo…

The following day, at 09:28, a new binary was delivered to the machine: the MythicRatatoskr backdoor.

This blogpost focuses primarily on the analysis of the MythicRatatoskr backdoor, the Yggdrasil network that hosts its C&C server, and the accompanying SOCKS5 server.

Given the backdoor’s role as a messenger scurrying through the Yggdrasil network, we decided to name the backdoor MythicRatatoskr.

MythicRatatoskr main configurationThe MythicRatatoskr configuration is stored in a file at a hardcoded path.

NetworkIP Domain Hosting provider First seen Details b479:2771:8df4:b5e b:d007:63b0[:]2838 N/A N/A 2025‑07‑17 MythicRatatoskr C&C server within the Yggdrasil network.

In some cases, the scam ad may take you to a fake e-commerce site which covertly harvests your card details.

What happens if I’ve fallen victim to a scam ad?

Scam ads are getting easier to generate thanks to AI, and can look increasingly professional, even including video content.

Can I get my money back if I paid through a scam ad?

What should I do if I’ve fallen victim to a scam ad?

This is email bombing.

What is email bombing?

Sometimes called “form bombing,” “list bombing” or “subscription bombing,” email bombing attacks usually follow the same pattern.

There’s no silver bullet to prevent email bombing.

Has my email account been hacked if it’s full of sign-up emails?

Open Enrollment is peak season for Medicare fraud – here’s how to tell real outreach from fakes and keep your details safeScammers love a pretext.

And with Medicare Open Enrollment, they have a perfect opportunity to exploit victim expectations, masking their fraud under the cover of legitimate activity.

Work through the following steps:Call or contact Medicare at Medicare.gov or 800-633-4227 to report the incident.

So slow down this Open Enrollment season and verify every request for personal and medical details.

Frequently Asked Questions (FAQs)When is Medicare Open Enrollment?

Data breach notifications are telling victims less than ever.

As the volume of data breach incidents increases, there’s a growing chance that you’ll be caught up in one.

Example of a data breach notice with a detailed explanation of the situation (for more, head over here)How do you interpret a breach notice?

For that reason, you should never click through on any unsolicited breach notification email or message.

Change your logins (if relevant) and consider credit monitoring and a credit freeze.

Later, in June 2026, ESET telemetry registered further MATCHBOIL samples, this time at a company in the energy sector.

MATCHBOIL then performs three HTTPS requests to the C&C server; each with a different purpose:The first request receives a numeric value from the C&C server.

2024 samplesThe earliest MATCHBOIL samples that we have seen have compilation timestamps from 2024.

]pro N/A 2025‑11‑10 MATCHBOIL C&C server hidden behind Cloudflare.

]com N/A 2025‑08‑12 MATCHBOIL C&C server hidden behind Cloudflare.

The platform also asks for the creator’s YouTube channel URL, which it uses to retrieve public information and generate a seemingly personalized experience.

How to stay safeIf you’re a social media influencer yourself, your Google account can be much more than “just” access to a YouTube channel.

Run Google’s Security Checkup, or open Security & sign-in in your Google account, and review recent security events and signed-in devices.

If you’re a YouTube creator yourself, you realize that your reputation ultimately defines your success.

A Google account can then sit at the center of your business: email, files, contacts, and the YouTube channel itself.

The cybersecurity market is often making it tougher for SMBs to keep threats at bayCybersecurity has never been easy.

SMBs are very much in the crosshairs, as providers of critical infrastructure themselves or suppliers to firms operating in critical infrastructure.

Yet the identity of the adversary is arguably less important than the tactics they’re using to target global SMBs.

By offering teams AI assistance to improve productivity.

By offering teams AI assistance to improve productivity.

Autonomous AI agents go on a hacking spree, and Microsoft ships what used to be a year's worth of security patches in one go – here's how to keep paceAs another month draws to a close, ESET Chief Security Evangelist Tony Anscombe reviews some of the top cybersecurity stories that have made the news over the past 30 days while offering insights that they hold for your or your company's cyber-defenses.

Here's Tony's rundown of some of what stood out most in September 2026.

An OpenAI agent has broken into Australia's national healthcare database in what is the first known case of AI autonomously hacking a government network,Earlier in the month, Google announced that its models also escaped it…

If an exit company cold calls you or makes 100% guaranteed promises of a swift exit, they’re likely to be a scammer.

If you’ve already paid a scam timeshare exit company, there’s still a chance you could get your money back if you act quickly.

What are the warning signs of a timeshare exit scam?

How can I check whether a timeshare exit company is legitimate?

What should I do if I've already paid a timeshare exit scam company?

Some techniques go after live sessions themselves, with attackers shifting their focus from stealing passwords to stealing authentication tokens.

Purpose-built AI tools now make it trivial to clean up the language and even tailor the lure for each recipient.

What’s more, the code is scanned on a phone, so the usual controls that protect company-issued laptops don’t apply.

The ‘device hop’ also means that the company may have a hard time developing a full picture of the attack.

AI helps deal with the volume and speed involved, whereas experienced analysts can assess the evidence and direct the response.

A tampered build of Anthropic’s Claude Code extension for VS Code-compatible editors planted an SSH backdoor on developers’ machines, researchers at macOS security firm Phorion have found.

The malicious package, version 2.1.313, was published on Open VSX, an open-source marketplace for VS Code extensions run by the Eclipse Foundation.

The rest of the bundle looks like the standard extension, with Claude Code and VS Code strings, normal activate and deactivate exports, and UI code,” Phorion CEO Calum Hall explained.

After pulling the malicious version, Cursor shut down its VS Code marketplace as a precaution, audited access and found no other tampered extensions.

Anyone who installed or upda…

Irregular evaluated Zhipu AI’s open-weight model GLM-5.3 across 13 offensive cyber scenarios using CyScenarioBench, the company’s framework for measuring an LLM’s ability to plan and execute multistage attacks under realistic constraints.

Across the three completed scenarios, GLM-5.3 used an application foothold to access internal services, built alternative connection paths within simulated networks and coordinated execution across multiple machines.

The results followed a progression the company had previously observed in closed frontier models, beginning with GPT-5.2, released in December 2025, and continuing with models released in 2026.

The report said it could nevertheless undermine r…

About $6.3 billion in cryptocurrency was stolen from Binance in what might be the biggest crypto hack in history.

Close to $3 billion has been frozen on-chain with help from blockchain partners, according to Binance.

The affected address authorisation has been revoked, and law enforcement and blockchain intelligence partners have been brought in to trace and recover the stolen funds.

Stablecoin issuers step inTether and Circle were among the first to freeze stolen funds on the night of the hack.

By TRM’s count, about $6.36 billion left Binance wallets on ten blockchains, around four times the amount stolen in the Bybit attack.

They knew names and email addresses“The attackers appeared to know employee names and email addresses, as they contacted users directly by email and Teams and used identities that mimicked legitimate company help desk personnel,” Aliza Johnson, a researcher at Cisco Talos, told Help Net Security.

“We observed an attacker-controlled account executing the following command to target Anthropic Claude Code credentials, possibly for credential dumping.

In another case, an insider hired under false credentials used privileged access to install GitHub Copilot CLI and Claude Code.

Logs, MFA and help desk checksTalos IR recommends phishing-resistant MFA such as FIDO2/WebAuthn and hardware security k…

Gartner recently released a new category of assessing security tools: the Integrated Security Operations Center (ISOC).

ISOC is tasked with unifying detection, investigation, case management, and response across security domains and security/observability data pipelines.

Data management, analytics, and operational response are now separate problems, and, as a result, demand separate solutions.

ISOC should reduce the friction between security tools and the latency between data, context, decision, and action.

Machine-speed responses are more essential than ever in an age where attackers are all armed with the most advanced AI tools.

One retail scam used more than 1,200 look-alike .shop domains sharing a single IP address.

A ticket scam used a similar setup.

Stolen information could then support payment fraud, account takeover and identity abuse.

Reused phishing kits, hosting arrangements and payment infrastructure allow replacement sites to appear within hours of a website being removed.

They can then change account details and recovery settings to make it harder for the owner to regain control.

Smart TVs and connected plugs accounted for a large share of recorded security weaknesses in household devices, according to Bitdefender’s 2026 IoT Security Landscape Report.

Televisions represented 22.7% of vulnerability observations, followed by smart plugs at 22.4% linked with a known software flaw.

Once updates stop, TVs, plugs and home storage systems can remain connected with unresolved flaws.

These probes check for accessible services, including remote desktop connections, remote login services and administration interfaces.

Of the 466.6 million brute-force events reported, approximately 455 million targeted Remote Desktop Protocol, commonly used to access Windows computers remotely.

China-nexus threat actors have exploited a VMware ESX zero-day to hide their tracks and chained PHP2Shell flaws with the “Fragnesia” Linux kernel bug to root servers and firewalls, cybersecurity researchers claim.

VMware ESX zero-day helped Chinese spies cover their tracksChinese APT group Warp Panda has leveraged an insufficient logging vulnerability (CVE-2026-41709) in Broadcom’s VMware ESX bare-metal hypervisor as a zero-day, a new CrowdStrike report revealed.

Linux kernel flaw joins PHP2Shell exploit chainCVE-2026-46300 (aka “Fragnesia”), a Linux Kernel local privilege escalation vulnerability disclosed in May 2026, was also added to CISA’s KEV catalog on Wednesday.

“This vulnerability …

Fake GitHub projects posing as desktop versions of ChatGPT and Claude have been used to spread a malware chain that ends with a cryptocurrency miner, Check Point has found.

The researchers have been tracking the campaign, dubbed Yoba, for the past two months.

This is most likely due to SEO poisoning, where the attackers optimize titles, descriptions, and hosting domains to make their malicious projects rank highly in external search engines,” Check Point explained.

Check Point’s Eli Smadja wrote that the research doesn’t indicate ChatGPT, Claude, OpenAI or Anthropic were compromised.

“The Yoba campaign shows how attackers can use trusted platforms and the current interest in AI tools to dis…

Forever Security found ways out of the built-in browsers in five AI coding assistants: Cursor, GitHub Copilot, OpenAI’s Codex, Microsoft’s VS Code and Anthropic’s Claude Desktop.

Cursor ran attacker code, Copilot showed a fake address, and Codex, VS Code and Claude Desktop let a single local file read the rest of the disk.

Claude Desktop and VS Code limit a local page to its project folder, but that check covers the page alone.

Forever’s page put github.com/login in the address bar over a fake sign-in form, and the agent’s own tab list repeated it.

The click this attack needs comes from a link the assistant draws itself, and in Codex and VS Code that link can still open a page that reads th…

How Silent Train worksVolt Typhoon began building the Silent Train network before the December 2023 takedown of the KV botnet, and ramped up its use in its aftermath.

While Volt Typhoon uses other infrastructure for reconnaissance, Silent Train was reserved for “exploitation, credential access, data exfiltration and ongoing engagement with victim environments,” researchers found.

“In some cases, as many as six hops separated the operator from the victim,” Black Lotus Labs noted.

Example of a Silent Train session (Source: Black Lotus Labs)“As Silent Train matured, reverse-tunnel variants were introduced alongside the traditional SSH-chaining model.

VictimologyOver the past three years, Black…

Exploitation attempts have started against CVE-2026-101767, a recently patched Oracle E-Business Suite (EBS) flaw.

About CVE-2026-101767The flaw carries a CVSS score of 9.8 and affects the Application Object Library product in EBS versions 12.2.3 to 12.2.15.

Horizon3.ai researchers Brandon Peterson, Jimi Sebree and Noah King found the vulnerability and reported it to Oracle on July 24.

“Successful exploitation allows an attacker to read or modify application data accessible to APPS and execute commands on the application host.

“In some instances, it has been reported that attackers have been successful because targeted customers had failed to apply available Oracle patches.

Researchers set up a fake start-up company to study fraudulent North Korean IT workers.

Interesting research: “AI Models Can Provably Hide Arbitrary Capabilities”

Abstract: Capability evaluations aim to surface dangerous model behaviors before deployment, but their reliability depends on the assumption that hidden capabilities can be elicited. We show this assumption does not hold under adversarial conditions by constructing backdoor attacks that embed encrypted neural networks within host model weights, decrypting and executing them only upon receiving a secret trigger. Using digital lockers, these hidden circuits remain provably hard to elicit and interpret under cryptographic assumptions, even given full access to model weights, extending prior work from hiding fixed string…

Interesting research:

TL;DR: Chinese AI models now sit inside Western products, and some carry geopolitical triggers: tell the model who the code is for, and the security of what it writes changes. For the first time, we showed that this vulnerability lives in the model’s weights, and that removing the model’s CCP alignment removes it. One word tilts the code against Americans. Ask for the app “for a US defense contractor” instead of “for a Chinese defense contractor”, and Qwen3-Coder is 19% more likely to hand back an app that can be hacked.

...

This article in Nature argues that it’s due to an overfishing of predators and warming sea temperatures.

As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered.

Blog moderation policy.

The Indian CA eMudhra Limited has eight TLS certificates with laughably weak private keys:

The compromised eMudhra keys were defective at a level that’s challenging the imagination of many of the engineers studying the incident. A normal size for a NIST P-384 elliptic curve cryptography private key contains roughly 384 bits of entropy, a size allowing almost 2384, or a number with 116 digits, different possibilities. The private key sizes of the compromised keys ranged from 3 to 8 bits. Astonishingly, the private keys were 4, 56, 66, 115, 155, 156, 230, 237...

PHP maintainers have released two critical vulnerabilities:

PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical vulnerabilities that can allow unauthenticated remote code execution. All PHP users are strongly encouraged to update immediately. Who is at risk: all PHP installations serving web requests, including PHP-FPM, Apache with mod_php, php-cgi, FrankenPHP and LiteSpeed. We consider the risk highest for mod_php, with a demonstrated exploit where an unauthenticated request can trigger the attack before any application code runs.

The vulnerabilities:...

There’s a new archive of all the papers from twenty-five years of the Workshop on Economics and Information Security (WEIS).

Really nice resource. It’s fun to reread my 2002 essay on the economics of information security.

Justin.sh is reporting on a confidential Cellebrite document that has been leaked to him:

Cellebrite calls it Advanced Unlocks (AU from here on), not to be confused with the “advanced unlocking services” they’ve marketed for years. A press release from earlier this year confirms AU is a new product for 2026.

[…]

According to Cellebrite, AU: is a “next-generation AFU vector that is more resilient to Apple’s OS changes”

works with Stolen Device Protection enabled, which tightens USB restrictions

is enabled by a dedicated appliance with a stated range (!) of about 8 meters...

Interesting research:

Abstract: Vision-language models (VLMs) can solve visual CAPTCHAs without task-specific training, but the agents built on them approach every challenge from scratch. For such an agent, the hundredth instance of a familiar puzzle costs as much time and compute as the first. Specialized detectors invert the trade-off, answering in milliseconds but only for categories they were trained on. Neither improves with exposure. We study what changes when a solver improves with use. Our system pairs a fine-tuned YOLOv8 detector with an open-weight VLM behind a confidence-based router, and runs entirely from screenshots and operating-system input events, with no browser automation…

New research shows that squid lived all around the globe even before the Cretaceous-Paleogene mass extinction event.

As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered.

Blog moderation policy.

This is a problem:

Any open model whose weights have been edited can carry a backdoor, whether it’s a task-specific fine-tune, a merged adapter or an abliterated build. We have abliterated models in the title because it’s the most popular reason people download modified weights without verifying what’s inside. Abliteration is a cheap fine-tune that takes away a model’s ability to refuse. You find the direction in the weights that carries “no” and subtract it. The model then answers things a safety-tuned version would turn down. It began as a research trick and it’s now routine before people upload a model to Hugging Face, where you’ll find abliterated builds of most of the popular open weig…

Matthew Green has a new site that tries to estimate the number of cryptanalyst-hours that have been spent analyzing different public-key algorithms:

Abstract: We estimate how much public cryptanalysis each public-key assumption has received, using the literature itself as the instrument. From roughly sixteen thousand candidate papers we classify cryptanalytic work on ECDLP, structured and plain lattices, syndrome decoding and their comparators, then convert papers into estimated research-allocation years through a person-level author map. These publication-based estimates may substantially overstate actual time spent. Lattices have overtaken elliptic curves in this cumulative measure only r…

This is a current list of where and when I am scheduled to speak: I’m speaking at ATTENTION: Democracy, Rebuilt in Montreal, Canada. The event runs October 21–23, 2026, and my talk is on Wednesday, October 21.

I’m speaking at the University of Toronto in Toronto, Ontario, Canada, at 5 PM ET on October 22, 2026.

I’m speaking at [un]prompted in San Francisco, California. The event runs October 27–29, 2026, and my talk is at 11:35 AM PT on Thursday, October 29.

I’m speaking at the Catalyst Summit in Brampton, Ontario, Canada, on Wednesday, November 18, 2026...

Matthew Green has been writing a rather pessimistic series of posts about the potential for AI systems to vastly outperform humans in cryptanalysis of both symmetric and public-key ciphers.

I am more optimistic than he is. That is, I have stronger faith in the over-engineering cryptographers tend to do. I am trying to write this up in more detail.

Earlier today, PHP released an emergency security update to fix two critical bugs that can allow an attacker to execute code of their choosing on a vulnerable server.

Reuters reports that government websites in Europe and elsewhere went offline today after the PHP vulnerabilities were disclosed.

Wiz said that prior to the PHP bugs being publicly disclosed, the company worked with the PHP team, Calif and OpenAI to measure the size of the problem and coordinate patch verification and disclosure.

The PHP zero-day vulnerabilities are being tracked by their CVE numbers, CVE-2026-109618 and CVE-2026-109619, and they affect all web servers running PHP 5.4 or later.

“A vulnerability in core PHP rea…

According to the FBI, ShinyHunters has extorted more than $70 million from victims so far this year.

He also said Mr. Dubrovsky has misrepresented himself as a Cypfer founder, and is not a shareholder.

In 2020, Aon aquired Cytelligence, a security consulting firm where Mr. Tobok was founder and CEO and Mr. Dubrovsky was a managing partner.

Experts say ransomware victims are typically directed by their insurance provider to work with a specific incident response firm.

But that ransom payment did not stop future extortion attempts using the same stolen data.

The sanctions freeze any Cryptomus assets at U.K. banks, and bar British companies from offering it any business, virtual or otherwise.

The blockchain data-crunching firm Chainalysis said the U.K. sanctions target the broader infrastructure supporting Russia’s wartime economy.

“Cryptomus and Heleket have emerged as major payment hubs for illicit activity,” Chainalysis wrote in an October 8 blog post.

Sanders said the U.K. sanctions on Cryptomus are important because Canada’s sanctions against the platform were ultimately unenforceable and uncollectible.

“A fine doesn’t stop a cryptocurrency payment processor from processing payments,” Sanders wrote on LinkedIn.

Microsoft today issued updates to fix more than 1,400 security vulnerabilities in its Windows operating systems and other software.

CVE-2026-96951 is a security feature bypass in the Windows Shell that affects Windows 10 and 11 systems, as well as some Server versions.

Windows 10 users might be wondering if they can still expect security updates after this month.

Microsoft had been slated to stop shipping updates for Windows 10 systems in October 2025, but ended up adding another year of free updates after considerable pushback.

Satnam Narang at Tenable said the number of flaws fixed this month far surpasses the previous record-setting year 2020, when Microsoft patched 1,261 CVEs.

The New York Times reported today that the FBI has arrested a Canadian man in Pennsylvania on suspicion of assisting ShinyHunters.

The Times story did not identify the man, nor did a statement on Twitter/X about the arrest from FBI Director Kash Patel.

Another shared that control over the ShinyHunters investigation has been centralized at an FBI field office in Texas.

According to LinkedIn, Cypher was co-founded by a Canadian man named Edward Dubrovsky, who is now associated with another Canadian security firm called CyberSteward.

According to the FBI, the group has extorted more than $70 million from victims so far this year.

The Dutch daily RTL reported on Sept. 29 that investigators suspect Van der Stap tried to orchestrate at least two murders.

According to RTL, the murders were allegedly to be committed abroad, and there are indications Van der Stap gave the order for these attacks.

In an interview with KrebsOnSecurity on September 9, Van der Stap described his new role as “offensive security lead” at the Dutch cybersecurity company Neo Security, saying the job involved probing client networks for security vulnerabilities.

Korper said Dutch forensic investigators visited his office on September 15, the night Van der ⁠Stap was arrested in a dramatic police raid that reportedly involved flash bang grenades.

“Y…

Authorities in the Netherlands have arrested a 23-year-old convicted cybercriminal on suspicion of aiding in data thefts and extortions by the prolific hacker group ShinyHunters.

Van der Stap is currently employed as offensive security lead at the Dutch company Neo Security, which did not respond to requests for comment.

But not long after that interview, the Dutch hacker abruptly stopped replying to messages.

One source said a colleague of theirs personally witnessed Dutch authorities carting items out of Van der Stap’s residence.

Speaking with reporters from Bloomberg in 2024, Van der Stap said that singular focus in turn fueled his desire to carry out cyberattacks.

A U.S. Army soldier who pleaded guilty to hacking into multiple telecommunications companies and stealing mobile call and text metadata for more than 100 million AT&T customers in 2024 was sentenced to 70 months in federal prison today and ordered to pay nearly $300,000 in restitution to victims.

Kiberphant0m claimed to have hacked into more than dozen telecommunications companies worldwide, including Verizon’s Push-to-Talk business, and publicly extorted these companies in exchange for a promise not to publish the stolen data.

Less than a month later, Wagenius was arrested and charged in two separate federal indictments, and soon pleaded guilty to all counts in both cases.

In 2019, Schuchm…

In February 2024, Radaris was sued by Atlas Data Privacy Corp, a company that has been pursuing data brokers alleged to be violating a New Jersey statute called Daniel’s Law.

KrebsOnSecurity doubled down and showed how the Lubarsky brothers built and operated Radaris and other data broker companies using a fictitious CEO’s name.

All told, the New Jersey court has so far transferred 14 domain names from the Radaris family of companies to Atlas.

Sherman said federal lawmakers have long faced intense lobbying by the technology industry against more restrictive U.S. data privacy laws, but that many powerful industries are now working against passing comprehensive data privacy legislation.

The l…

Microsoft Corp. today issued updates to plug at least 974 security holes in its Windows operating systems and other software, by far its biggest single patch batch ever.

This month’s patch bundle obliterates the software giant’s previous record set in July, when it released updates for at least 570 security vulnerabilities.

Among the more serious critical flaws this month is CVE-2026-69730, a DNS weakness present in Windows Server 2012 onward and on Windows 10.

And at the rate these Windows patch releases are ballooning in size, it’s probably best not to let them pile up month after month.

Enterprise Windows admins will want to keep an eye on askwoody.com for news of any updates that appear…

A new identity theft service launched on the dark web this week is selling digital scans of more than 153 million drivers licenses from people in the United States and Canada.

Curiously, the identity records include not only drivers licenses but also marijuana dispensary cards.

Some of the records list their “source” as “CDL,” presumably short for “commercial drivers license.

Also, only some of those who helped with this research said they showed their drivers license at the airport on the day of their travel.

Baldwin said the Nexus identity theft service presents multiple serious security and privacy threats, noting that state-issued drivers licenses are commonly used as proof of one’s ide…

The malware allows TeamPCP’s hackers to steal credentials that let them publish malicious versions of those software development tools, too.

“TeamPCP has stated the competition is a recruiting opportunity and they intend to purchase all meaningful access harvested from participants’ campaigns,” the security firm Dataminr wrote.

Deadcatx3, a nickname that has been flagged by multiple security firms as an alias used by TeamPCP.

Charlie Eriksen is a security researcher at Aikido Security who has closely followed TeamPCP’s cybercrime campaigns.

“They managed to wake up Microsoft to the fact that they had become negligent in terms of security,” Eriksen said.

It can be daunting to determine who’s responsible for showing ads on the websites we visit, or who’s harvesting data from the mobile apps we use every day.

Not anymore: A powerful and free new service called DecryptAds scrapes and correlates this adtech data and makes it simple to quickly learn a great deal about the entities that are tracking you.

“It’s an adtech tool but we’re trying to approach adtech from a security perspective,” Edwards said.

DecryptAds reports that Between Digital is collecting ad data on approximately 55,000 partner websites.

Bear in mind that ad blockers often do little to block ads and/or tracking that occurs from within mobile apps that users have chosen to instal…

Microsoft today released updates to remedy at least 398 security vulnerabilities in its Windows operating systems and supported software, including one weakness that is already being actively exploited and two others that were publicly detailed prior to today.

August’s overstuffed bundle of patch joy from Microsoft did not eclipse its recording breaking release of more than 570 security updates last month, but it is double June’s then-record batch of nearly 200 fixes.

The other publicly disclosed flaw is CVE-2026-72971, a low-impact local tampering vulnerability that Microsoft reckons is unlikely to be exploited.

By all accounts, AI is quite good at finding security holes in software.

“Don’…

Snowflake responded to the data thefts by increasing password complexity requirements and enforcing multi-factor authentication.

A little more than a month later, Canadian authorities arrested Moucka on a provisional warrant from the United States.

“Moucka used the stolen data of a government officer and members of a then-former government officer’s immediate family in this re-extortion attempt,” reads a statement from the Justice Department.

Moucka pleaded guilty to four criminal counts, including computer fraud, wire fraud, aggravated identity theft, and conspiracy.

Ultimately, it will be up the federal judge how much time Moucka actually serves for his extensive cybercriminal rap sheet.

Ambulances were diverted, surgeries cancelled, and medical students sent home from classes after a ransomware group attacked the University of New Mexico's Health Sciences Center (HSC) this week. Read more in my article on the Fortra blog.

You are suffering a little bit, not that our listeners will be able to tell, but if anyone sees you on video.

Well, everything's a little bit political, but this is fundamentally a cybersecurity podcast.

And it won't necessarily come back and say, "I don't think you should be doing this," or, "Have you sought some help?"

Maybe we should turn a little bit to what organisations can actually do about it.

I'm going to do it the following Thursday, or I'm going to do it some other time, or I'm going to create an account that doesn't go back to me, but I can still support my favourite places.

A Ukrainian man has been sentenced to 70 months in a US prison for his role in a series of ransomware attacks.

He was also an early affiliate of the Hive ransomware-as-a-service (RaaS) operation which targeted businesses and, in particular, organisations working in healthcare.

The FBI later warned that Hive had extorted US $100 million from businesses and organisations globally in a period of just 18 months.

The DOJ said that the operation saved corporate victims of Hive over US $130 million in ransom payments.

At the time I speculated that the take-down of Hive may lead to the identification and possible apprehension of some of those involved in Hive ransomware attacks.

Germany's far-right AfD (Alternative für Deutschland) party has confirmed that it has suffered a security breach, after a hacker published what appear to be hundreds of thousands of the controversial political party's internal emails.

Earlier this week, the AfD admitted that its hosting provider had been hacked in September, and that some of its mailboxes had been copied.

What is unusual is that the leaked emails are not published on the site directly.

Indeed, party sources told the media that although the leaked emails appeared to be authentic, the AI-generated summaries appeared to contain several inaccuracies.

The full corpus of 281 GB of stolen messages and files has been made available…

Smashing Security, episode 489, How a Brand New Crypto Wallet Came with a Spy Inside, with Graham Cluley and special guest Lianne Potter.

So a bit of a War of the Roses thing going on there with that reference to Burnham.

What I'm going to do is I'm going to describe things, and the more dangerous the thing is, the faster it will click.

But I'm going to say it's probably dodgy, but oh, the curiosity would get the better of me.

But I'm actually in the same boat as most people because this film has been censored for nearly half a century.

A 28-year-old Russian man has been arrested by German police, suspected of being a key member of the Qilin ransomware gang.

As BBC News reports, detectives have linked the man to the 2024 attack against blood-testing firm Synnovis, that disrupted London hospitals, and resulted in the death of a patient.

The suspect, who has been named by German media only as "Vladimir K" was originally detained in May in Japan, after he travelled there on holiday.

The incident is said to have crippled Synnovis’s IT systems, and caused a critical shortage of O-type blood in hospitals.

No ransom was paid by Synnovis, a decision the firm made jointly with the NHS trusts to which it provides services.

The official @GardaInfo and @GardaTraffic Twitter accounts of Garda Síochána were accessed by an unauthorised third party who posted cryptocurrency-related messages on Wednesday evening, potentially reaching hundreds of thousands of users.

The messages claimed that followers were eligible to claim free cryptocurrency through an airdrop.

The problem, however, is not just that a hacker found themselves with the ability to post fraudulent messages posing as the Irish police.

The Garda is not the only police force to have ever suffered a security breach on its Twitter account.

In 2022, the official Twitter account of the Philadelphia Police Department was compromised and used to post what appea…

Krybit is a fast-growing ransomware gang that was hacked by a rival, hit back, and is still extorting victims. Find out how it works, who it has targeted, and what organisations can do to protect themselves. Read more in my article on the Fortra blog.

How a ransomware negotiator ended up arrested at his own conference, with Graham Cluley and special guest Paul Ducklin.

I don't know if you know that.

And then I became a freelancer and then I thought, oh boy, I'm going to open the doors to everybody.

And he is the Canadian co-founder of a ransomware negotiator firm called— I don't know how to pronounce this.

There's no breach so unimportant that you can just say, don't worry folks, carry on, nothing to see here.

The hacker behind a high-profile string of leaks involving the upcoming release of the Grand Theft Auto (GTA) 6 videogame has threatened to release a complete, playable build.

CyberLeek says that if the GTA 6 game is released on physical disk, and a public apology is made, it will step back from its threats.

As ever, videogame fans should be very wary of believing anybody who offers a download of a supposedly leaked game.

Besides which, the real, genuine GTA 6 is due to be released on video game platforms on 19 November.

It is not worth infecting your computer, or losing money on a dodgy crypto coin, just to see it a few weeks early.

Zhang is charged alongside 34-year-old Xu Zewei with malicious cyber activity against US computer systems between February 2020 and June 2021.

The following the year the pair allegedly exploited vulnerabilities in Microsoft Exchange Server to steal further information.

Furthermore, if findings by security firm SentinelOne are to be believed, Zhang's Shanghai Firetech filed multiple software patents about extract data from computers.

Xu, for instance, was arrested at Milan airport in July 2025 and extradited to the United States in April this year.

China's Foreign Ministry opposed Xu's extradition, accusing the United States of fabricating charges against him.

But do you actually know whether both of them can do the job?

Now, I don't know how good a swimmer you are, Danny.

I don't know about you, but I'm having 3 or 4 calls a day from an unknown number.

And I would imagine a company like Hack The Box has got great visibility as to what is actually going on out there.

And so I think that's the unique part here is it truly does have a pressure-tested element to it.

N0n is a newly-emerged cyber extortion gang. The group was first spotted in the middle of September 2026, and within days it had published on its dark web leak site details of what it claimed to be around a dozen victims. Since then, the tally has continued to grow. Read more in my article on the Fortra blog.

The FBI has a very simple message for the ShinyHunters gang: give yourselves up.

The FBI describes the man arrested in Amsterdam as "one of the alleged leaders of ShinyHunters", although Dutch police say only that he played a role.

The warning to remaining members of ShinyHunters follows particularly embarrassing episode for the FBI, which recently confirmed it had had its job application portal compromised by the gang.

According to ShinyHunters, it gained access to the FBI's data by exploiting a recently-patched flaw (CVE-2026-35273) in Oracle PeopleSoft PeopleTools.

The truth is that the arrest came a week or so before the compromise of the FBI became headline news.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: c37d2c17b96ad93f72f21acf52f07186Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-10-29T16:00:22+03:00Config id: 339Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: 4e5cae3ff5837cf370c8bf305d03c2b0Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-10-30T14:00:34+03:00Config id: 339Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: d6b768fbc443335b282efe8a58868231Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-10-26T15:00:14+03:00Config id: 339Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: 6e1eb2ff9ba52d21e2eb9108c143beafServer IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-10-23T17:00:39+03:00Config id: 339Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: 704ec22d9a79fd07b89340a5c2d02b67Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-10-22T23:00:36+03:00Config id: 339Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: 0bd9145f797a3fff09593e8e6fc88bd4Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-10-21T20:00:35+03:00Config id: 335Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: a48e6a868074b4c2b77295af18788714Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-10-20T17:00:12+03:00Config id: 335Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: 65c81bea022dea0314bb3ec1fb8b3228Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-10-15T14:00:29+03:00Config id: 335Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: bf1172655ea8738416272c1b910c4a23Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-10-14T17:00:37+03:00Config id: 335Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: 8c474b40de23335e23a81b4f71096fa2Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-10-13T18:00:32+03:00Config id: 335Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: 986285ee7f9fbca30f009118870a630eServer IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-10-09T19:00:10+03:00Config id: 335Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: 61f641b9443f60bfa61c035e9925aff2Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-10-08T19:00:43+03:00Config id: 335Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: db7c9e9b3ec5fc4fb9e02c8670f482a9Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-10-07T23:00:38+03:00Config id: 335Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: 057a7a4758cd6ae7dfaab62417ac8d97Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-10-02T21:00:25+03:00Config id: 335Faithfully yours, nginx.

The velocity of vulnerabilities being discovered using Frontier AI and OpenWeight models such as Cisco Anteras is unprecedented and defenders need more time.

Virtual Patching vs. Live Protect (Shielding)Live Protect is a differentiating capability – we are not built the same.

The workload in the environment still sits vulnerable and that’s where Secure Workload can be expanded to drive controls based on CVE directly in the workload using native capabilities and once patched the control disappears.

Shielding with Live ProtectShielding with Live Protect is different.

Live Protect buys you time on the infrastructure boxes themselves without forcing an emergency upgrade window.

Infrastructure access has an identity problemPicture an infrastructure administrator pushing a configuration update across hundreds of switches during a maintenance window.

Introducing Cisco Privileged Infrastructure AccessToday, Cisco is introducing Privileged Infrastructure Access, a faster, more secure way to keep the network moving by enabling network administrators and agents to perform critical work through a secure, identity-bound connection.

For customers using Cisco ISE and TACACS+, Privileged Infrastructure Access can draw on the policy and device context they already manage to govern access to Cisco routers and switches.

That brings Cisco network context into the privileged acces…

The data bears this out: in Splunk’s State of Security 2025 report, 78% of respondents said their security tools are dispersed and disconnected.

Closing that gap takes integrated identity, network, and endpoint context, plus the ability to act on it automatically.

That’s the idea behind combining SentinelOne’s runtime protection with Cisco Security and Splunk.

SentinelOne Runtime Protection and CWP in ActionSentinelOne Cloud Workload Protection (CWP) delivers autonomous, real-time threat detection and response across containers, Kubernetes, virtual machines, and serverless workloads.

Cisco Security extends that protection across identity, network, and perimeter, and Splunk gives your SOC on…

Upstream capacity: the projects you depend on can deliver new capabilities and critical fixes fast.

Upstream capacity is the one almost nobody puts on a roadmap because it sits outside your organization.

In most organizations, upstream capacity has none of those.

What This Looks Like in PracticeFor Cisco, part of the answer was becoming a Premier Sponsor of the OpenSSL Foundation in August 2025.

Tomáš Mráz, CTO of the OpenSSL Foundation, describes the impact:“Cisco’s support for the OpenSSL Foundation allowed us to fund an additional senior software engineer to improve the OpenSSL Library code.

CSDL continues, and does moreThe Cisco Secure Development Lifecycle (CSDL) is built on more than 400 software security requirements that validate products before they are released, with engagements at key stages of development.

Cisco open-sourced it and donated it to the Coalition for Secure AI (CoSAI).

Our secure software guidance skill is in development, carrying Cisco-specific security requirements into the development workflow.

Project CodeGuard and the secure software guidance skill also act as evaluators in the development pipeline, backing hard gates.

To date we have not found a novel issue that was not already covered by an existing software security requirement.

The Splunk .conf network brought a new detection that we hadn’t seen before: Flawed AMMYY.

There is also a Remote Access Tool (RAT) called Flawed AMMYY that was developed from leaked AMMYY source code, and is directly used as malware.

One of the key value propositions of EVE is that it can use granular session fingerprinting to differentiate between similar but distinct applications like AMMYY and Flawed AMMYY.

Let’s dig into the events we saw for Flawed AMMYY and some of the details that EVE had to look at.

Our EVE detections for Flawed AMMYY came in pairs with identical timestamps, as seen above, all from a single IP.

The event Network Operations Center (NOC) managed the venue network, providing our SOC firewalls with dedicated SPAN feeds directly from their core switches.

Inside Cisco Cloud Control, that story comes together in Unified Events.

While Splunk drives active investigations in the SOC, administrators maintain firewall health directly within Cloud Control.

The Horizon: Cisco Cloud Control & AI CanvasSecurity is now natively built into Cisco Cloud Control, the unified operations platform that brings Networking, Security, Observability, and Cloud into one consistent environment.

Without replacing individual product controllers, Cisco Cloud Control unifies inventory, topology, actions, identity, …

However, assessing whether a zero-day vulnerability was exploited in the past essentially involves going back in time.

Relying on standard logs or “Conditional / Selective PCAP” systems during a zero-day investigation leaves the Security Operations Center (SOC) team blind.

There is also a secondary benefit: if a breach occurred using an newly disclosed zero-day vulnerability, the attacker is likely to have been very sophisticated.

Replay The Relevant Historical Traffic Against The New Intrusion RulesOn the Firewall Threat Defense (FTD), we configured a dedicated interface for the Endace traffic replays.

Rapid retrospective packet replay transforms zero-day triage by delivering direct forens…

The .conf26 Agentic SOC was not a simulated demo or a scripted lab.

Powered by the Cisco Cloud Control management platform, Splunk Enterprise Security (ES), Cisco Security telemetry, Cisco Talos Intelligence, and Endace continuous packet capture, our joint team of Cisco, Splunk, Endace, and Jamf engineers demonstrated what multi-agent threat detection, investigation, and response (TDIR) delivers at enterprise scale.

Watch it come to life in David Bombal’s Interview at the Agentic SOC.

“The Agentic SOC is not about replacing human defenders with autonomous black boxes.

AcknowledgementsOur thanks to the engineers who built the Agentic SOC and the Humans who provided decision making expertise.

Splunk .conf26 gave us the opportunity to operate a live Agentic Security Operations Center (SOC) in the middle of the Splunk community.

Splunk ES as the SOC data platformSplunk ES served as the primary analyst workspace and evidence system for the SOC.

Building the Triage Agent Dashboard in an AfternoonOnce the data was flowing and the agent was active, we built an operations dashboard in an afternoon.

The team preserved a path from telemetry to finding, from finding to agent analysis, and from agent analysis to an analyst decision.

Dashboard SnapshotThe following values are a snapshot from the displayed Triage Agent operations dashboard and should be read as event-environment observations…

The Cisco Secure Firewall 200 Series brings enterprise-grade protection and connectivity to distributed branches in a compact form factor.

The Encrypted Visibility Engine (EVE) uses AI and machine learning to analyze encrypted traffic, including TLS 1.3, without requiring full decryption.

The Secure Firewall 220 model delivers up to 1.5 Gbps of throughput with next-generation firewall capabilities enabled in a compact form factor for smaller branches.

The Secure Firewall 200 Series helps meet these demands with intelligent threat protection, encrypted traffic visibility, resilient connectivity, and centralized management.

Explore the Secure Firewall 200 Series to build a more resilient, man…

Architecting the Future: The Four Pillars of Agentic SecuritySecuring agentic AI requires a new strategic framework.

Pillar 2: Core ProtectionDelivered by: Cisco AI DefenseCisco AI Defense provides specialized protection for the AI models themselves and their operational environment.

AI Inventory & Validation: This solution catalogs all deployed AI models and continuously validates their integrity against supply chain risks.

Pillar 4: ObservabilityDelivered by: SplunkSplunk provides the unified intelligence platform required to monitor and respond to agentic AI at scale.

Splunk ingests logs, events, and telemetry from Duo, Secure Access, AI Defense, and other infrastructure points, creating…

Cisco was proud to return to Black Hat USA as the Official Security Cloud Provider and the longest-standing partner of the Black Hat Network Operations Center (NOC) and Security Operations Center (SOC).

In 2026, we completed our 11th year helping protect the Black Hat network, working side by side with the Black Hat NOC leaders and official technology partners: Palo Alto Networks, Arista, Corelight, Jamf and Lumen.

For Black Hat USA 2026, the Cisco and Splunk team brought together telemetry and workflows across Cisco Security, Splunk Security, and partner-provided network and security controls.

The same signal may need to be understood by Cisco, Splunk, Black Hat leadership, and partner tea…

I did not walk into Black Hat with years of incident-response experience or an encyclopedic knowledge of threat actors.

The first time I walked into the Black Hat NOC, where the SOC team was operating, was a few days before the event began.

I was surrounded by people with years—sometimes decades—of experience, many of whom had supported Black Hat for years.

Check out the other blogs from our team at Black Hat USA 2026.

Driven by the needs of the community, Black Hat events showcase content directly from the community through Briefings presentations, Trainings courses, Summits, and more.

To handle this task, Cisco and Black Hat deployed bespoke ThousandEyes agents to monitor the wireless solution.

Our thanks to the Arista Networks team in the Black Hat NOC for their partnership throughout the week.

You can read the other blogs from our colleagues at Black Hat USA.

Driven by the needs of the community, Black Hat events showcase content directly from the community through Briefings presentations, Trainings courses, Summits, and more.

For more information, please visit the Black Hat website.

Today, we’re proud to share thatMicrosoft has been named a Leader in the 2026 IDC MarketScape for Worldwide Modern Endpoint Security for Enterprises (Doc #US54123526, September 2026).

On top of that foundation, we continue to strengthen what Defender can see:Richer endpoint signals: Defender provides more than 200 native event types for threat hunting.

Microsoft named a Leader by IDC Read the 2026 IDC MarketScape to learn why IDC named Microsoft a Leader in Worldwide Modern Endpoint Security for Enterprises.

Read the reportTo learn more about Microsoft Security solutions, visit our website.

Follow us on LinkedIn (Microsoft Security) and X (@MSFTSecurity) for the latest news and updates on c…

Microsoft Threat Intelligence assesses the overall adoption of AI across North Korean threat actors as high, with threat actors such as Jade Sleet, Coral Sleet, and Jasper Sleet demonstrating an established use of AI across all operational workflows, alongside increasing adoption across the broader North Korean threat actor set.

This blog breaks down how North Korean threat actors are utilizing AI across their operations, reflecting a broader trend of threat actors incorporating AI into their attack chains.

Stages of AI adoption by North Korean threat actorsNorth Korean threat actors are increasingly integrating generative and agentic AI platforms into their operations, but the rate and mat…

And we have to rethink how we defend that enterprise as attackers use AI to move faster and operate at greater scale.

For CISOs: Defending differentlyYour second job is to defend differently than you have historically done.

The same capabilities that make attacks faster can make defense faster, with agents working alongside your analysts to investigate and respond.

Prepare for an agent-driven workplace Explore Work Trend Index insights on the changing role of agents at work and the trends shaping how organizations operate.

Explore the Work Trend IndexIf you’re building with AI, bring your security team in early and have the identity and data conversation.

Compromised package distributionThe compromised LiteLLM 1.107.0 release delivered malicious Python startup files to environments where the package was installed.

Onboard supported developer workstations, build agents, and AI gateway servers to Microsoft Defender for Endpoint, and enable Microsoft Defender Antivirus real-time and cloud-delivered protection where supported.

Microsoft Defender XDR detectionsAs of October 22, 2026, the following Microsoft Defender Antivirus signatures and Microsoft Defender for Endpoint alerts were available for activity associated with the compromised LiteLLM 1.107.0 release.

Microsoft Defender XDR Threat analyticsInside the LiteLLM 1.107.0 supply chain compro…

Microsoft Defender XDR provides detections and hunting queries for suspicious Microsoft Graph activity and activity associated with known threat infrastructure.

Microsoft Threat Intelligence has identified threat actors across multiple geographic regions leveraging the ARTEX framework.

Preserve available Microsoft Entra sign-in and audit records, Microsoft Purview Audit records, SIEM data, and previously configured Microsoft Graph telemetry.

Suspicious sign-in from verified nation-state threat actor infrastructure Steal Application Access TokenA sign-in was observed from a known threat actor IP address.

We recommend promptly investigating this alert, as a threat actor might already be using…

Guardian Agents help security teams operate continuously, at machine speed and scale, while sensors, context, and actuators across the cyber stack help understand changing agent risk and continuously adapt protection in response.

Dynamic Agent RiskDynamic Agent Risk combines signals from identity, data, endpoints, cloud, network, runtime, and the agent’s own activity.

Guardian Agents carry out the work at machine speed, adapting as agent activity, risk, security context, and organizational policy change.

To learn more about Microsoft Security solutions, visit our website.

Also, follow us on LinkedIn (Microsoft Security) and X (@MSFTSecurity) for the latest news and updates on cybersecurity.

As enterprises choose which models to deploy, the relevant question is broader than whether a model is open-weight or closed-weight.

Today, Microsoft and NVIDIA are publishing Risk Management for Open-Weight Models in Enterprise, the first in a planned series of joint resources intended to help enterprises address those questions.

Model access and deployment are separate choices: open-weight models can also be used through managed platforms.

Building on this workRisk Management for Open-Weight Models in Enterprise focuses primarily on the model layer.

Read the joint Microsoft-NVIDIA paper, Risk Management for Open-Weight Models in Enterprise.

Microsoft’s research into one phishing kit unraveled a larger ecosystem, including the phishing kit developers, an infrastructure dealer, and the threat actors who buy from both.

Downstream activity from Storm-2990 phishing kitsMicrosoft observed downstream activity by threat actors using infrastructure affiliated with the Storm-2990 phishing kits.

Most of the activity that stems from this phishing kit ecosystem consists of social engineering, phishing operations, and account and storage takeovers.

ReferencesLearn moreFor the latest security research from the Microsoft Threat Intelligence community, check out the Microsoft Threat Intelligence Blog.

To hear stories and insights from the Micr…

Early testing can surface compatibility and process gaps before post-quantum authentication is required at scale.

As the industry moves toward post-quantum authentication, security teams will need greater visibility into those dependencies.

Why organizations should begin preparing nowThe transition to post-quantum authentication is unlikely to be a single technology upgrade.

Testing the future certificate ecosystemTo help the ecosystem gain practical experience with post-quantum authentication, Microsoft launched the PQC TLS Pilot Program on August 27, 2026.

What organizations can do todayOrganizations do not need to wait for broad industry adoption to begin preparing for post-quantum authe…

The mission of Microsoft Security’s Frontier Offensive Research & Generative Exploitation (FORGE) Lab is to advance the frontier of autonomous security engineering.

We’re building a team that enables AI-native vulnerability research at Microsoft, pushing the boundaries of finding and fixing zero-day vulnerabilities.

Three lessons follow, each marking a shift in how we approach vulnerability research:From frontier capability to scale.

Here, we focus on what those experiences teach us about operating vulnerability research at scale—across Windows and open-source projects.

FORGE has submitted nine Linux findings with internally assessed common vulnerability scoring system (CVSS) scores above 7…

How do frontier AI models change vulnerability management for CISOs?

We use a ‘harness’ layer around AI models in vulnerability scanning for better results.

They should do so without delay, rather than wait for access to frontier AI models.

Extensive guidance can be found in a new Microsoft Security Exposure Management page with capabilities customers can use to act.

Final notesThe advent of frontier AI models to discover and exploit vulnerabilities creates both risks and opportunities.

How do frontier AI models change vulnerability management for CISOs?

We use a ‘harness’ layer around AI models in vulnerability scanning for better results.

They should do so without delay, rather than wait for access to frontier AI models.

Extensive guidance can be found in a new Microsoft Security Exposure Management page with capabilities customers can use to act.

Final notesThe advent of frontier AI models to discover and exploit vulnerabilities creates both risks and opportunities.

Every year, the Microsoft Digital Defense Report gives us an opportunity to step back from individual threats and look broadly at what Microsoft’s security and threat intelligence teams are seeing.

These developments can change the speed and scale of security activity even as the underlying security fundamentals remain familiar.

People, identities, exposed systems, and trusted access continue to feature prominently in the threat activity Microsoft observes.

The 2026 Microsoft Digital Defense Report looks across the threat landscape, cybercrime, resilience, and the relationships among technologies, identities, systems, and people.

Read the 2026 Digital Defense Report for the full findings, d…

Every year, the Microsoft Digital Defense Report gives us an opportunity to step back from individual threats and look broadly at what Microsoft’s security and threat intelligence teams are seeing.

These developments can change the speed and scale of security activity even as the underlying security fundamentals remain familiar.

People, identities, exposed systems, and trusted access continue to feature prominently in the threat activity Microsoft observes.

The 2026 Microsoft Digital Defense Report looks across the threat landscape, cybercrime, resilience, and the relationships among technologies, identities, systems, and people.

Read the 2026 Digital Defense Report for the full findings, d…

Here, threat actors may simply seed prompt injections on websites in hope of corrupting AI systems that browse them.

Early experiments revealed a significant volume of "benign" prompt injection text, which illustrates the complexity of distinguishing between functional threats and harmless content.

Many prompt injections were found in research papers, educational blog posts, or security articles discussing this very topic.

(Source: GitHub/swisskyrepo)When searching for prompt injections naively, the majority of detections are benign content – false positives in our case.

Malicious: ExfiltrationWe were able to observe a small number of prompt injections that aim at theft of data.

Recognizing the risks associated within the complex modem firmware, Pixel 9 shipped with mitigations against a range of memory-safety vulnerabilities.

Following our previous discussion on "Deploying Rust in Existing Firmware Codebases", this post shares a concrete application: integrating a memory-safe Rust DNS(Domain Name System) parser into the modem firmware.

Hook-up Rust to modem firmwareBefore building the Rust DNS library, we defined several Rust unit tests to cover basic arithmetic, dynamic allocations, and FFI to verify the integration of Rust with the existing modem firmware code base.

Pixel modem firmware already has a well-tested and specialized global memory allocation system to…

This project represents a significant step forward in our ongoing efforts to combat session theft, which remains a prevalent threat in the modern security landscape.

Session theft typically occurs when a user inadvertently downloads malware onto their device.

Once active, the malware can silently extract existing session cookies from the browser or wait for the user to log in to new accounts, before exfiltrating these tokens to an attacker-controlled server.

How DBSC WorksDBSC protects against session theft by cryptographically binding authentication sessions to a specific device.

The issuance of new short-lived session cookies is contingent upon Chrome proving possession of the correspondi…

Staying ahead of the latest indirect prompt injection attacks is critical to our mission of securing Workspace with Gemini.

In our previous blog “Mitigating prompt injection attacks with a layered defense strategy”, we reviewed the layered architecture of our IPI defenses.

Synthetic data generationAfter we discover, curate, and catalog new attacks, we use Simula to generate synthetic data expanding these new attacks.

We partition the synthetic data described above into separate training and validation sets to ensure performance is evaluated against held-out examples.

This process leverages the newly generated synthetic attack data described on this blog, to create a robust, end-to-end evalu…

2025 marked a special year in the history of vulnerability rewards and bug bounty programs at Google: our 15th anniversary 🎉🎉🎉!

Coming back to 2025 specifically, our VRP once again confirmed the ongoing value of engaging with the external security research community to make Google and its products safer.

Vulnerability Reward Program 2025 in NumbersWant to learn more about who’s reporting to the VRP?

Tip: Want to be informed of new developments and events around our Vulnerability Reward Program?

Follow the Google VRP channel on X to stay in the loop and be sure to check out the Security Engineering blog, which covers topics ranging from VRP updates to security practices and vulnerability des…

To stay ahead of the curve, the technology industry must undertake a proactive, multi-year migration to Post-Quantum Cryptography (PQC).

To bring these critical protections to the wider developer community with minimal friction, the transition will be supported through Play App Signing.

Play App Signing leverages Google Cloud KMS, which helps ensure industry-leading compliance standards, to secure signing keys.

Empower Developers : The inclusion of ML-DSA support within Android Keystore and Play App Signing allows developers to safeguard their users and application.

: The inclusion of ML-DSA support within Android Keystore and Play App Signing allows developers to safeguard their users and …

Today we're announcing a new program in Chrome to make HTTPS certificates secure against quantum computers.

Instead, Chrome, in collaboration with other partners, is developing an evolution of HTTPS certificates based on Merkle Tree Certificates (MTCs), currently in development in the PLANTS working group.

Since MTC technology shares significant architectural similarities with CT, these operators are uniquely qualified to ensure MTCs are able to get off the ground quickly and successfully.

The Chrome Quantum-resistant Root Program will operate alongside our existing Chrome Root Program to ensure a risk-managed transition that maintains the highest levels of security for all users.

First, we…

For Majik, Scam Detection was the intervention he needed: “The warning is what made me pause and avoid a bad situation”.

As scammers evolve their tactics and create more convincing and personalized threats, we’re using the best of Google AI to stay one step ahead.

Expanding Scam Detection for Calls to Samsung DevicesTo help protect you during phone calls, Scam Detection alerts you if a caller uses speech patterns commonly associated with fraud.

Scam Detection for phone calls on Google Pixel devices is available in the U.S., Australia, Canada, India, Ireland, and the UK.

Powered by Gemini’s on-device model, Scam Detection provides intelligent protection against scam calls while ensuring that…

Upgrading Google Play’s AI-powered, multi-layered user protectionsWe’ve seen a clear impact from these safety efforts on Google Play.

As Android’s built-in defense against malware and unwanted software, Google Play Protect now scans over 350 billion Android apps daily.

This proactive protection constantly checks both Play apps and those from other sources to ensure they are not potentially harmful.

Looking aheadOur top priority remains making Google Play and Android the most trusted app ecosystems for everyone.

Thank you for being part of the Google Play and Android community as we work together to build a safer app ecosystem.

That’s why we're committed to providing multi-layered defenses that help protect you before, during, and after a theft attempt.

Today, we're announcing a powerful set of theft protection feature updates that build on our existing protections, designed to give you greater peace of mind by making your device a much harder target for criminals.

These updates are now available for Android devices running Android 16+.

More User Control for Failed Authentications: In Android 15, we launched Failed Authentication Lock, a feature that automatically locks the device's screen after excessive failed authentication attempts.

This feature is now getting a new dedicated enable/disable toggle in settings,…