Потерянный пластик, звонок мошенника и ваш собственный телефон опаснее любого считывателя в толпе...

В Windows 11 появятся два размера меню «Пуск».

Для чего это нужно и что из этого получится?

Учёные нашли способ заглянуть туда, куда до сих пор не добирался ни один прибор.

Для баланса туда позвали человека, который ни во что не верит.

Старому железу помог необычный трюк с игровым картриджем.

Люди уверены, что CERN замедлил время. Кажется, они не очень понимают, что такое CERN.

ARToken использует легитимные домены Microsoft и снижает шанс блокировки писем.

Наконец в Android 17 закрыли дыру, о которой все забыли.

Роскомнадзор отрицает блокировку.

Берлин переписывает послевоенные правила и развязывает спецслужбам руки в киберпространстве.

Новый подход меняет привычную логику работы языковых моделей.

То, что тайга копила тысячелетиями, климат может уничтожить за 70 лет.

Другой обсерватории на сбор таких же данных понадобилась бы тысяча лет.

ЦБ и банки предупредили о схеме "треугольник" на кассах.

В первом опросе зрители поделились, на каком этапе разработки ПО в их компании подключается информационная безопасность:На этапе требований и архитектуры — 36 %.

Проблема безопасности в том, что в команде AppSec есть экспертиза, которой нет в других командах, поэтому их выделяют в отдельные подразделения.

Переключиться с прототипа на качественное решение в этот момент оказывается сложно, и в результате в продукт попадает код, изначально не рассчитанный на промышленную эксплуатацию.

Александр Лысенко , ведущий эксперт по безопасности разработки и ИИ, К2 Кибербезопасность.

Инструмент должен давать реальные результаты, и с этими результатами нужно работать — обрабатывать срабатывания, исправля…

Мировой рынок AI Secure Gateway и AI Firewall уже оценивается в миллионы долларов, а по России цифр пока нет: рынок ещё не сформировался.

ВведениеКак устроен рынок AI Secure Gateway / AI Firewall:Оценки мирового рынка AI Secure Gateway / AI Firewall различаются, но по всем прогнозам он будет только расти.

Что такое AI Secure Gateway / AI FirewallAI Secure Gateway или AI Firewall выступает барьером между внешней сетью и ИИ-приложением.

Мировой рынок AI Secure Gateway / AI FirewallВ 2025 году мировой рынок AI Firewall оценивался в 260,76 млн долларов США.

Мировой рынок AI Secure Gateway / AI Firewall (сгенерировано ИИ)Драйверы роста рынка AI Firewall / AI Secure Gateway во многом носят очевид…

ВведениеГенерация голоса и видео в реальном времени стала рабочим инструментом мошенников.

Участники сосредоточены на содержании разговора, а не на качестве изображения; запись встреч часто отключена, а полноценные проверки «живости» отсутствуют — инъекционная подмена проходит незаметно.

Теперь к тексту добавляются голос и видео, и фильтров почтового шлюза уже недостаточно.

Это снижает точность как на подделках, так и на реальных записях.

Что можно сделать уже сейчас: чек‑лист для компанииНужны простые процессные меры, которые работают независимо от качества видео и голоса.

Почему эти изменения важны для бизнеса и как они меняют требования к защите цифровых сервисов?

Дополнительно требуется регулярный пересмотр API и выявление недокументированных, устаревших и неиспользуемых интерфейсов.

WAF и здесь играет значительную роль: ведёт журналы всех запросов и действий, включая детали заблокированных атак, и может интегрироваться с системами мониторинга событий ИБ.

ВыводыГлавный сдвиг, который сейчас закрепляет ФСТЭК России, заключается не в появлении новых средств защиты, а в изменении самой логики безопасности.

И здесь WAF и API Security становятся не просто элементами ИБ-архитектуры, а инструментами управления бизнес-риском, устойчивостью цифровых сервисов и, в к…

Реализовать такой подход можно как с участием эксперта, так и с применением автоматизированных решений.

Построение сценариев (что атаковать, в каком порядке, как развивать успех) осуществляется на основе жёстких правил (playbook), а не на основе обучения моделей на данных.

Разработчик прямо указывает, что продукт предназначен для тестирования безопасности в лабораторных условиях, а не для развёртывания в production-среде без должной изоляции.

Он не заменяет классический пентест, но делает его логическим продолжением, ведь ручные проверки дополняются постоянным контролем, а не заменяются им.

Машинное обучение и большие языковые модели уже помогают обрабатывать данные и формировать отчёты, но…

В результате появляются обходные сценарии, и неудобная схема 2FA со временем начинает снижать не только продуктивность, но и реальный уровень безопасности.

Стоимость 2FA — это не только лицензииЗатраты на 2FA не ограничиваются покупкой лицензий.

Если процессы восстановления доступа не централизованы и не автоматизированы, ИТ-команда начинает буквально «тушить пожары» вместо развития инфраструктуры.

Как внедрять 2FA в крупной компании без остановки процессовОдна из ошибок при внедрении 2FA в крупной компании — попытка перевести всех пользователей на новые правила одновременно.

Поэтому при выборе 2FA важно не только закрыть базовые риски, но и выстроить систему, которую будет удобно поддержив…

В этом случае имеет смысл протестировать нескольких провайдеров и сравнить не только стоимость услуг, но и производительность инфраструктуры на реальных задачах.

Инфраструктура должна поддерживать развитие бизнеса, а не становиться ограничением для дальнейшего роста.

Поэтому выбор инфраструктуры должен выполняться не для компании в целом, а для конкретных сервисов и сценариев их использования.

Их смысл в том, чтобы сгладить ошибки в расчётах, проектировании или прогнозировании нагрузки и не доводить их до критических последствий для бизнеса.

Соответствие масштабов бизнеса и провайдераИдея о том, что небольшим компаниям подходит небольшой провайдер, а крупным — крупный, не является универсал…

11 рублей за подписку стали приманкой, которая принесла мошенникам около 15 миллионов рублей.

«Ромашка Сервис» и архитектура обманаВ марте 2026 года в юрисдикции СНГ регистрируется организация с безобидным названием «Ромашка Сервис».

Теперь мы „Ромашка Сервис“.

Бесплатный доступ утрачен, но вы можете поддержать разработку, оформив подписку всего за 11 рублей в месяц».

Информация о том, как остановить списания, на сайте «Ромашка Сервис» отсутствовала.

Системы предотвращения утечек данных (Data Leak Prevention, DLP), системы управления событиями и информацией безопасности (Security Information and Event Management, SIEM), антивирусы — видят обычный легитимный трафик и не поднимают тревогу.

Как защитить данныеПомечайте содержимое писем как недоверенный контент и не смешивайте его с системными инструкциями агента.

Он работает как универсальный переходник: один раз присоединили, и агент может обращаться к CRM, базам данных, файловым хранилищам, облачным сервисам.

Подмена после установки (Rug pull) — сервер сначала работает честно, набирает доверие, а затем подменяется, и агент продолжает отдавать ему данные.

Политики безопасности применяются…

Вы создаёте профили — например, «удалённый сотрудник», «бухгалтер», «подрядчик» — и для каждого из них настраиваете свою политику сбора данных, различную логику проверок и сценариев реагирования.

На этих ОС доступны те же механизмы контроля, что и на Windows, macOS.

Сегодня бизнес работает не только на ноутбуках и ПК, но и на телефонах, планшетах на Android и iOS.

Это нужно, чтобы закрыть требования к усиленной аутентификации для всех сотрудников и для доступа к критическим системам.

Мы не стоим на месте и стараемся заглядывать на шаг вперёд, чтобы САКУРА 3 оставалась современным, востребованным инструментом для безопасности.

Эксперты рассказали, как выстроить эффективный процесс управления конфигурациями и снизить риски.

По статистике, до 60 % всех программных инцидентов связаны именно с ошибками в конфигурации, а не с багами в коде или стандартными уязвимостями.

Светозар Яхонтов добавил практическую точку зрения, назвав самое короткое и ёмкое определение: конфигурация — это и есть ИТ-инфраструктура.

Во втором опросе зрители поделились мнением, кто получит больше пользы от внедрения процесса управления конфигурациями в их компании:Руководство/бизнес — 43 %.

Павел Попов: «Искусственный интеллект уже пришёл в Offensive Security и начинает не только помогать в поиске уязвимостей, но и участвовать в написании станд…

Анализируем рынок систем защиты баз данных и актуальные решения российских вендоров.

Что такое системы защиты баз данных и зачем они нужныРынок систем защиты баз данных (Database Security) активно развивается, отвечая на растущие угрозы кибербезопасности и нормативные требования.

Российский рынок систем защиты баз данныхРоссийский рынок защиты баз данных развивается под действием импортозамещения СУБД и ужесточения ответственности за утечки.

Ниже — обзор российских систем защиты баз данных.

«Спектр | DAM»«Спектр | DAM» — модуль мониторинга активности баз данных в составе платформы защиты данных «Спектр» компании «Сайберпик».

Новые возможности WAF Dallas Lock 3.1В июне 2026 года компания «Конфидент» официально анонсировала выпуск версии 3.1 WAF Dallas Lock, в которую вошли доработки за последние полгода.

Теперь WAF Dallas Lock поддерживает сертификаты с ГОСТ-криптографией, выданные аккредитованными УЦ, включая портал «Госуслуги» и НУЦ Минцифры РФ.

Карты доступа — механизм, позволяющий ограничивать пользователям доступ к различным разделам настроек WAF Dallas Lock.

Сравнение версий 2.16 и 3.1 WAF Dallas LockДля удобства различия версий 2.16 и 3.1 WAF Dallas Lock представлены в таблице.

Сравнительные характеристики версий 2.16 и 3.1 WAF Dallas Lock№ Характеристика WAF Dallas Lock 2.16 WAF Dallas Lock 3.1 1.

К тому моменту у меня уже работали несколько собственных VPS с AmneziaWG.

Я перебрал популярные решения и в итоге написал awg-admin — десктопное приложение, которое управляет несколькими серверами WireGuard/AmneziaWG с минимумом софта на самих VPS.

Никакой СУБД на VPS не нужно.

Проблема была не в отсутствии мониторинга, а в другом.

Что в итоге получилосьawg-admin — это десктопное приложение на Go и Wails, которое управляет несколькими серверами WireGuard и AmneziaWG из одного окна.

И я предполагаю, что он не знает о существовании корпоративного облака или сетевых папок.

Пока обычный сотрудник методично бродит по сетевому диску, как турист, Конор идет как по лезвию.

Это не злодей, не мститель и не бизнесмен.

Этот розовый, вечно улыбающийся Патрик может нанести ущерба не меньше, чем обиженный Джокер или жадный БелфортОй, я не подумалЧто со всем этим делать?

DLP – это не карающий меч, а инструмент, который помогает вовремя заметить, что с сотрудником что-то происходит.

Вокруг нее мы все чаще слышим слова «управление секретами», «безопасная доставка секретов» и т.д.

В StarVault есть два совершенно разных способа работы с LDAP, и их легко перепутать:Метод аутентификации LDAP — позволяет пользователям входить в StarVault, используя свои LDAP-учетные данные.

StarVault проверяет пароль через LDAP и выдает токен;Движок секретов LDAP — StarVault сам управляет паролями LDAP-пользователей: автоматически ротирует их по расписанию и выдает приложениям актуальные credentials.

Движок секретов LDAP превращает StarVault в централизованную систему управления паролями учетных записей в каталоге — будь то FreeIPA, Active Directory или любой другой LDAP-сервер.

Создание ста…

В результате запись выполняется непосредственно в кэшированную страницу файла, что позволяет изменить её содержимое в памяти без внесения изменений на диск.

В такой конфигурации публичный ключ сертификата становится доступен любому клиенту, устанавливающему HTTPS-соединение, что позволяет злоумышленнику сформировать корректно зашифрованный Authentication Override Cookie.

Сертификат Authentication Override не должен использоваться другими компонентами или сервисами.

отключить механизм Authentication Override, запретив создание и прием Authentication Override Cookie в настройках GlobalProtect Portal и Gateway.

Значение длины, указанное в пакете, используется для копирования данных в буфер фик…

Это либо энтерпрайзные ATS, ориентированные на рекрутёра, а не на кандидата, либо изолированные ленты отдельных бордов — каждая со своим кабинетом, без сквозной дедупликации и без скоринга под конкретное резюме.

Управление фокусом вынесено в focusNewView : после рендера фокус переносится на новый (fallback — на контент), и это выполняется на обоих путях рендера — успешном и ошибочном.

setLang выставляет document.documentElement.lang при boot и при смене языка, детектит navigator.language на старте, и персистит выбор в localStorage['career-ops-ui:lang'] .

Темизация — на CSS custom properties (дизайн-токены), а не на хардкод-значениях; light/dark персистится, prefers-reduced-motion учитывает…

В феврале 2024 года в сообществе Open Source Security Foundation (OSSF) были опубликованы Принципы безопасности пакетных репозиториев, которые не потеряли своей актуальности и сегодня.

Уровень 1 — базовая зрелость безопасности, включая основные защитные функции: многофакторную аутентификацию (MFA) и возможность для исследователей безопасности сообщать об уязвимостях.

Уровень 2 — средний уровень безопасности, включая такие меры, как обязательная MFA для критически важных пакетов и предупреждения пользователей об известных уязвимостях.

Репозиторий пакетов требует MFA для пакетов, признанных критически важными, например, для 1% самых популярных пакетов по числу загрузок.

Репозиторий пакетов тр…

Проблема была только одна — совершенно непонятно, что это такое и с чего вообще начинать.

В этой статье я постараюсь простыми словами подробно рассказать, что такое CTF, какие бывают категории задач, где тренироваться новичку и как не потерять мотивацию в первый месяц обучения.

Но независимо от того, будете вы играть в команде или в одиночку, довольно быстро возникает следующий вопрос:«Какие вообще бывают задачи в CTF?»Когда я только начинал, количество категорий выглядело пугающе.

Решение:Я обычно начинаю такие задачи с CyberChef — это один из самых популярных инструментов для работы с данными и шифрами в CTF.

Когда впервые видишь такой список категорий, легко подумать, что для участия в C…

В прошлой статье я разобрала теоретический фундамент: что входит в обязанности архитектора контента и какие задачи он выполняет.

Уверена, что такой отчет позволит вам увидеть реальную ценность архитектора контента для выстраивания работы команды в системе документирования и для оптимизации рабочих процессов.

Изменение структуры контента в базеЗа последние несколько лет работы департамента технических писателей наша база контента значительно выросла, прежняя структура перестала справляться.

На это мы потратили около одной недели, пересмотрев вручную более 30 тысяч разделов.

Это позволит авторам сэкономить время на этапе подготовки и сосредоточиться на смысле текста, а не на вопросах классифи…

ВступлениеВ стандартных клиентах, таких как v2rayN, используются специальные (geo) файлы, которые позволяют проксировать, блокировать трафик, а также пропускать его напрямую в зависимости от домена/IP адреса назначения.

То есть с одной стороны, в этих geo файлах (@runetfreedom/russia-v2ray-rules-dat) список заблокированных сайтов/IP неполный, а с другой, есть лишние записи, которые блокируют загрузку незаблокированных сайтов.

Идем противоположным путемАбсолютно все geo файлы, которые я встречал, подразумевают такое использование: если домен/IP сервиса есть в файле, подключаемся через прокси, иначе напрямую.

Собрал новые geo файлы, в которых, наоборот, хранятся разрешенные домены и IP для по…

На самом деле DDoS-защита начинается не с выбора сервиса и не с настройки правил — она начинается с диагностики.

В этой статье мы разберём полный цикл: от момента появления алерта до выбора между Always-On и On-Demand моделями защиты.

Если защиты не было и отбивались вручную — объём работ по восстановлению зависит от того, что пострадало, и требуется участие инженеров.

Always-On и On-Demand: детальный разборЧто такое Always-On и On-Demand — базовое сравнениеВ широком смысле существует две схемы защиты: Always-On (защита активна непрерывно) и On-Demand (защита работает «по требованию»).

Выбор между моделями Always-On и On-Demand должен зависеть от рисков, характерных конкретно для вашего про…

Как отличать реальные риски от «шума»SAST остаётся важным инструментом, но в мире vibe coding он уже не закрывает весь риск.

Все сканеры работают как единая система, а не как набор отдельных инструментов.

Если уязвимость нельзя подтвердить, то она не блокирует pipeline и не отвлекает разработчика как критичная.

Контроль AI-агентовЕсли в разработке используются AI-агенты, их нужно рассматривать как привилегированных пользователей и как новую поверхность атаки.

Компании, которые встроят ИИ в управляемый DevSecOps / MLSecOps-контур, смогут сохранить скорость разработки и не потерять безопасность.

В интеграциях с внешними приложениями часто используется протокол OAuth 2.0.

Диаграмма процесса авторизации по OAuth 2.0Далее описан алгоритм авторизации по протоколу OAuth 2.0.

В URL передаются параметры аккаунта: account_id и account_nameСтороннее приложение сохраняет account_id (идентификатор аккаунта) и account_name (наименование аккаунта).

}После получения access_token приложение создаёт подключение в ресурсном сервере:curl -X POST https://account.provider.com/api/rest/create.json \ -H "Authorization: Bearer " \ -H "Content-Type: application/json" \ -d '{}'В случае успешного запроса, в ответе вернется app_id — идентификатор подключения.

refresh_token всегда выдается с access_token в од…

Их специально внедряют для обнаружения злоумышленника или для проактивной охоты на него (Threat Hunting).

Приманки и ловушки нужно периодически обновлять и изменять, чтобы они оставались актуальными и не были раскрыты со временем.

Deception срабатывает не на технику атаки, а на попытку воздействия на заранее определенный ценный объект.

Сурил также отмечает, что как и с любым другим инструментом обнаружения, с deception-системами возникает проблема демонстрации их ценности (ROI), особенно если они «молчат».

Такие учения наглядно демонстрируют пользу deception-технологий как на этапе внедрения, так и в ходе эксплуатации.

Построение системы обеспечения информационной безопасности объектов КИИ (СОИБ КИИ) — это не спринт, а затяжной марафон.

Учитываются 14 типов негативных итогов прекращения или нарушения работы объектов КИИ для граждан и государства (сбои связи, удары по местным и федеральным бюджетам и пр.).

Если объект КИИ не отвечает указанным критериям и не подпадает ни под одну из трех категорий, он признается незначимым и не требует особых мер защиты.

Защищайте даже объекты, которые относятся к КИИ лишь косвенноКазалось бы, «КИИ или не КИИ» — никакой не философский вопрос.

Контролируйте реальное соответствие СОИБ КИИ требованиям безопасностиСистема защиты объектов КИИ — не муха в янтаре.

Четвертый печатный спецвыпуск «Хакера» совсем скоро будет передан в печать, и прием предварительных заказов завершится.

Также напоминаем, что на нашем складе подходят к концу запасы третьего спецвыпуска и коллекционного сборника с лучшими статьями 2025 года.

Для печатных спецвыпусков «Хакера» мы отбираем материалы, которые сохраняют ценность даже спустя годы и могут стать не просто частью коллекции, а полноценной технической библиотекой.

В новый сборник войдут лучшие материалы «Хакера» за 2021–2022 годы: о китайских смартфонах с заводскими бэкдорами, фаззинге исполняемых файлов в Windows, автоматизации Burp и многом другом.

Спецвыпуск #3 (2019–2021)Третий печатный спецвыпуск почти полностью…

За первое полугодие группа вошла в десятку крупнейших операторов программ-вымогателей, судя по количеству жертв, перечисленных на сайте для «слива» данных.

Среди жертв группировки — производственные и строительные предприятия, ИТ-компании, финансовые и медицинские организации, а также логистические операторы.

Больше всего атак было зафиксировано в Бразилии, Китае, Индонезии, Таиланде и на Тайване.

Для получения первоначального доступа хакеры атакуют уязвимые интернет-сервисы, VPN-шлюзы и межсетевые экраны, а также используют ворованные, слабые или дефолтные учетные данные.

Исследователи допускают, что для этого группа сотрудничает с брокерами доступов, так как в некоторых инцидентах компром…

Сообщается, что атака была осуществлена через уязвимость в Oracle PeopleSoft, и злоумышленники могли похитить банковские реквизиты, налоговые документы и номера социального страхования.

Согласно уведомлению, которое компания направила в генеральную прокуратуру Калифорнии, Nissan Americas использует Oracle PeopleSoft для управления кадровыми данными, расчета зарплат и налогового администрирования.

Представители Oracle предупредили Nissan об атаке, затронувшей кадровые записи «сотен компаний», а позднее выяснилось, что Nissan была одной из целей злоумышленников.

В документах представители Nissan связывают этот инцидент с «неизвестной уязвимостью» в Oracle PeopleSoft.

Однако время атаки совпад…

Мы обра­тили вни­мание на при­выч­ную всем фун­кцию пред­прос­мотра окон в Windows.

Нас заин­тересо­вало, что превью ста­тич­но: по сути, это скрин­шот при­ложе­ния, который не обновля­ется до тех пор, пока мы не перек­лючим­ся в прог­рамму.

Заод­но прой­дем­ся по дру­гим слу­чаям, в которых получить­ся при­менить воз­можнос­ти «гра­фичес­кого» наб­людения и не толь­ко.

DWM работа­ет с живым пред­став­лени­ем окна, но это пред­став­ление может ока­зать­ся неак­туаль­ным, если при­ложе­ние не перери­сова­ло содер­жимое или ушло в бло­киров­ку осо­бым обра­зом.

На­рису­ем прос­тей­шую фор­му, в которой будет выпада­ющий спи­сок для выбора активных окон, мес­то для превью и пол­зунок для нас­т…

19-летнего Питера Стоукса (Peter Stokes), которого американские власти считают участником хак-группы Scattered Spider, экстрадировали из Финляндии в США.

Как сообщает Министерство юстиции США, Стоукс имеет гражданство США и Эстонии, и в сети известен под никами Bouquet, Spencer и Jordan.

Вымогатели потребовали у пострадавшей организации 8 млн долларов США в криптовалюте, а в противном случае угрожали «слить» данные в сеть.

Это не обычная хакерская группировка в привычном понимании этого термина, а англоязычное сообщество, в основном состоящее из подростков и молодых людей из США, Великобритании и других европейских стран.

По данным Министерства юстиции США, в общей сложности группировка при…

Специалисты Google совместно с ФБР, Lumen и другими партнерами нарушили работу одной из крупнейших сетей резидентных прокси — NetNut.

Кроме того, в прошлом месяце специалисты Synthient направили трафик через коммерческий шлюз NetNut в рамках контролируемого эксперимента.

Но исследователи писали, что этот тест подтверждает маршрут трафика, однако не доказывает, что в NetNut знали о происхождении узлов или умышленно создали ботнет.

В рамках проведенной операции специалисты Google отключили аккаунты и сервисы, которые операторы NetNut использовали для управления малварью.

Напомним, что в январе 2026 года Google и ее партнеры уже нарушили работу китайской сети резидентных прокси IPIDEA, а в 202…

Команда Flipper Devices отреагировала на критику сообщества и пересмотрела планы по поддержке Flipper Zero.

В блоге компании Павел Жовнер пояснил, что авторы проекта не ожидали настолько бурной реакции на новости о сокращении разработки прошивки.

Многие пользователи решили, что Flipper Devices сворачивает связанную с Flipper Zero разработку ради новых устройств.

Проблему решили с помощью динамической загрузки приложений с карты microSD (часть функций, включая основные, вынесли из прошивки в отдельные приложения).

Общие вопросы, обсуждения и обращения за помощью по-прежнему следует размещать в Discord, на Reddit и в социальных сетях.

Bikini пишет, что для обнаружения багов он применял фаззинг с помощью GPT-5.3 и использовал строго заданный автоматизированный воркфлоу.

Останавливаться на этом Bikini не планирует: он обещает продолжать публикации и в дальнейшем выкладывать примерно по одному новому PoC в день.

Например, критическую уязвимость CVE-2026-55200 в libssh2 ранее обнаружил ИБ-исследователь Тристан Мадани (Tristan Madani).

Патч для этой проблемы приняли еще 12 июня, данные CVE опубликовали 17 июня, а PoC-эксплоит появился в Exploitarium только 23 июня.

Аналитик компании Federal Signal Итан Эндрюс (Ethan Andrews) утверждает, что злоумышленники уже эксплуатируют уязвимости в libssh2 и Gitea в реальных атаках.

Аналитики Microsoft обнаружили вредоносное расширение для Chrome, которое маскировалось под ИИ-поисковик Perplexity.

Расширение назначало себя поисковой системой по умолчанию и передавало своим операторам как сами поисковые запросы жертв, так и весь текст, набранный в адресной строке.

Вредоносное расширение называлось Search for perplexity ai (flkebkiofojicogddingbdmcmkpbplcd), тогда как настоящее расширение Perplexity носит имя Perplexity – AI Search.

В отчете специалистов не уточняется, кто стоял за Search for perplexity ai, и сколько пользователей успели установить вредоносное расширение.

Тем, у кого расширение осталось в браузере, рекомендуется удалить его, проверить поисковую систему п…

Типичные проблемыКаж­дый, кто работал с рас­пре­делен­ной ата­кующей инфраструк­турой, стал­кивал­ся с эти­ми проб­лемами:Нет еди­ной кар­тины.

На опе­рации это кри­тич­но: потерян­ное устрой­ство может озна­чать про­вал всей опе­рации или, что хуже, обна­руже­ние.

На опе­рации это кри­тич­но: потерян­ное устрой­ство может озна­чать про­вал всей опе­рации или, что хуже, обна­руже­ние.

Что­бы соб­рать пол­ную кар­тину, нуж­но обой­ти все устрой­ства вруч­ную.

Red Stable — сис­тема цен­тра­лизо­ван­ного управле­ния инфраструк­турой ата­кующих устрой­ств: коман­дный сер­вер, сеть (Tailnet), хабы на локаци­ях, изо­лиро­ван­ная перифе­рия.

Власти США сняли экспортные ограничения с ИИ-моделей Claude Fable 5 и Mythos 5.

Доступ к модели Fable 5 восстановили 1 июля 2026 года, и теперь ей можно пользоваться через Claude.ai, Claude Platform, Claude Code и Claude Cowork.

Представители Anthropic продолжают согласовывать с властями расширение доступа к модели для других участников проекта Glasswing, которые используют ИИ для защиты критической инфраструктуры и поиска уязвимостей.

Поскольку в Anthropic не могли проверять гражданство каждого пользователя в реальном времени, разработчикам пришлось полностью отключить Fable 5 и Mythos 5 всего через несколько дней после запуска моделей для широкой публики.

Именно поэтому доступ к модели по…

Исследователи из компании LayerX продемонстрировали атаку BioShocking, которая заставляет ИИ-браузеры воспринимать опасные действия как часть вымышленной игры и игнорировать защитные ограничения.

Во время тестов шесть популярных ИИ-решений согласились скопировать учетные данные пользователя и передать их злоумышленнику.

Специалисты успешно протестировали свою атаку против ChatGPT Atlas, Perplexity Comet, Fellou, Genspark Browser, Sigma Browser и расширения Claude для Chrome.

На последнем этапе игры агенту предлагали открыть рабочий GitHub-репозиторий пользователя, скопировать оттуда данные для SSH-доступа и передать их вовне.

Однако исследователи подчеркивают, что атакующий так же может зас…

Если в Apple не исполнят предписание до 15 июля 2026 года, ведомство возбудит дело.

По предварительной оценке ФАС, компании может грозить штраф до 4 млрд рублей.

В ФАС считают, что такая схема ставит отечественных разработчиков в неравные условия и ущемляет интересы пользователей.

В ФАС сослались на Закон о защите конкуренции и предыдущие разбирательства с Apple, решения по которым подтвердили суды.

В случае если Apple не выполнит требования властей в установленный срок, ФАС начнет антимонопольное разбирательство.

Эксперты Mozilla продемонстрировали атаку, в которой ИИ-агент самостоятельно компрометирует машину разработчика, пытаясь запустить проект с GitHub.

При этом сам репозиторий не содержит явного вредоносного кода, подозрительных команд или пейлоадов, которые могли бы обнаружить сканеры и ревьюеры.

Во время проведения тестов исследователи разместили в TXT-записи закодированный в Base64 пейлоад, который открывал на машине разработчика реверс-шелл.

При этом сигнатура реверс-шелла в открытом виде не фигурировала ни в репозитории, ни на диске, ни в сетевом трафике, а полезная нагрузка хранилась в DNS и могла измениться в любой момент без обновления проекта.

Для защиты от таких атак специалисты пред…

Глава ИБ-компании Huntress Кайл Ханслован (Kyle Hanslovan) подтвердил, что сотрудница компании проинформировала оператора шифровальщика о том, что к нему проявляют интерес правоохранительные органы.

В Huntress назвали случившееся «ошибкой в оценке ситуации», однако бывший аналитик компании Бен Фолланд (Ben Folland) открыто называет сотрудницу инсайдером.

В этой публикации глава компании Кайл Ханслован подтвердил, что в компании знают о том, что неназванная сотрудница долгое время общалась со злоумышленником, и характер этой переписки вызывал вопросы.

Также он подтвердил, что в одном из диалогов она действительно рассказала DevMan, что о нем запрашивали информацию правоохранители.

При этом в…

Many embedded devices lack the memory protections found on phones and desktops, which is why runZero says "any physical access leads to a jailbreak."

The device tries to read a storage volume or firmware image that has been deliberately malformed, and FatFs mishandles the bad data.

The headline bug is CVE-2026-6682 (CVSS 7.6), an integer overflow in the code that mounts a FAT32 volume.

long filenames overflow the wrapper code many projects put around FatFs, such as a strcpy of fno.fname into a fixed buffer.

Until they do, assume that plenty of shipping devices read untrusted storage with code that has no fix behind it.

A newly disclosed Linux kernel flaw called Bad Epoll (CVE-2026-46242) lets an ordinary user with no special access take full control of a machine as root.

Bad Epoll sits in the same small stretch of kernel code where Anthropic's most powerful AI model, Mythos, recently found a different bug.

Anthropic has separately said Mythos found Linux kernel privilege-escalation bugs, though it has not publicly linked that work to Bad Epoll.

A Bad Year for the Linux KernelBad Epoll joins a well-known family of kernel bugs used to root Android, following earlier entries called Bad Binder, Bad IO_uring, and Bad Spin.

Bad Epoll is the older, harder kind: a race you have to win, like Dirty Cow (2016).

Cybersecurity researchers have discovered a previously undocumented modular malware framework codenamed Avalon that's distributed by means of a multi-stage phishing chain capable of bypassing traditional security controls.

Avalon combines credential collection, lateral movement, remote access, recovery disruption, and ransomware execution, bringing together diverse functions under one umbrella.

Should the email recipient interact with a document-themed Windows Shortcut ("Secure Document CA-283505.pdf.lnk") inside the mounted image, it triggers a staged malware sequence that culminates in the deployment of Avalon.

The complete set of features built into Avalon is as follows -Harvest credenti…

Threat actors with ties to North Korea have been linked to a fresh set of malicious npm packages that masquerade as Rollup polyfill tooling to facilitate remote access and data theft.

It's worth emphasizing here that this is not the first time North Korean threat actors have uploaded npm packages impersonating Rollup polyfill tools.

In April 2026, Panther detailed a sustained npm campaign that involved publishing 108 malicious npm packages spanning 261 versions to deliver BeaverTail and OtterCookie, two known malware families linked to Contagious Interview.

"These environments often have access to sensitive assets such as source code, npm tokens, Git credentials, cloud keys, SSH keys, brows…

A previously undocumented threat actor known as Armored Likho has been attributed to cyber attacks targeting government agencies and the electric power sector across Russia, Brazil, and Kazakhstan.

Also put to use in the attacks is Go2Tunnel to establish a reverse SSH tunnel to a command-and-control (C2) server using a private key.

The latest findings show that the threat actor has also employed a previously unreported Python-based information stealer named BusySnake Stealer targeting Windows systems, one version of which includes a module for stealing cookies from web browsers.

Its primary goal is to establish communication with a C2 server and then await incoming instructions.

Upload user…

This indicates that a Pegasus customer with authorization to spy in multiple European countries is likely responsible for the effort, the Citizen Lab added.

Kouloglou was a member of the European Parliament's "Committee of Inquiry to investigate the use of Pegasus and equivalent surveillance spyware" from March 24, 2022, to July 18, 2023.

The PEGA Committee was set up on March 10, 2022, to probe alleged misuses of commercial spyware offerings under E.U.

The development marks the first time a member of the PEGA Committee has been publicly identified as a victim of Pegasus spyware while serving on the committee.

"The authorities searched Pivovarov's devices for key organizations and contacts,…

The stealer, discovered by Jamf Threat Labs, is distributed as a compiled AppleScript (.scpt) file impersonating Maccy, a legitimate open-source clipboard manager.

It has been codenamed PamStealer owing to its ability to validate the victim's login password through the macOS Pluggable Authentication Modules (PAM) before capturing it.

The AppleScript ("Maccy.scpt") present within the disk image executes a self-contained JavaScript for Automation (JXA) downloader that fetches and stages the stealer payload using native Objective-C APIs.

"Once a valid password is captured, the stealer shows a second, counterfeit alert: 'Maccy is damaged and can't be opened.

Also built into the Rust binary is a…

Google has significantly degraded NetNut, one of the biggest networks that turns home devices into rented relays for other people's traffic.

Google identifies NetNut, also tracked as Popa, as a network spread across home devices worldwide, including smart TVs and streaming boxes, and GTIG estimates the network holds at least 2 million devices.

How It WorksA residential proxy network sells access to real home internet addresses.

Google says an exit node brings outside traffic inside the home network, giving attackers a foothold to reach other devices on it.

Beyond that:Stick to official app stores, and check what permissions a VPN or proxy app is asking for.

Threat actors associated with the Anubis ransomware operation have been observed exploiting the Citrix Bleed 2 (CVE-2025-5777) vulnerability to obtain initial access.

The ransomware operation was formally announced on the Ransomware and Advanced Malware Protection (RAMP) underground forum in February 2025.

"Prior to the VECT partnership, TeamPCP was running another ransomware operation under the CipherForce brand.

"The Vect/TeamPCP alliance represents a meaningful shift in the ransomware threat landscape, even accounting for the technical shortcomings that undermine its operational effectiveness," Sophos said.

"The convergence of large-scale supply chain credential theft, a maturing RaaS op…

Browsers, bots, sandboxes, AI systems, and email flows all show the same problem in different ways.

Everything looks normal until someone tests a small gap and finds a way through.

It is small permissions, weak checks, open systems, and normal tools doing things they were allowed to do.

The lesson this week is simple: attackers do not need the front door when the side door is already open.

Small things become entry points when nobody treats them like one.

The threat actor known as ToddyCat has been attributed to a new malware called Umbrij that's designed to gain surreptitious access to a victim's email correspondence via the Google API.

"Because the Google API relies on the OAuth 2.0 protocol for authorization, applications can use an OAuth token to access requested email resources."

Subsequently, a series of requests was issued to obtain an OAuth authorization code, which was then exchanged for an access token to reach the target resources via the API.

"The acquired authorization code is then exchanged for an OAuth access token.

]com/connections" and then looking for applications named "Google Workspace Migration for Microsoft Outlook" or …

What Identity Lifecycle Management Was Designed to HandleTo understand why identity lifecycle management breaks down around AI agents, you need to understand what it was built to do well and who it was built for.

Identity governance lifecycle management builds accountability on top of that structure.

Identity governance lifecycle management has no visibility into scope expansion that happens entirely within the deployment layer.

How to Extend Identity Lifecycle Management to Cover AgentsExtending identity lifecycle management to cover AI agents doesn't mean retrofitting HR-driven workflows onto a principal type for which they were never designed.

Governance scope expands to match the actual…

Security firm Sysdig says it has found what it believes is the first ransomware attack run from start to finish by an AI agent.

If a model can chain those steps on its own, the skill needed to run an attack drops to whatever it costs to rent an AI agent.

JADEPUFFER exploited CVE-2025-3248, a missing-authentication flaw in Langflow, an open-source tool for building AI apps and agent workflows.

That operation also had the AI inventing credentials that did not exist, possibly the same kind of hallucination behind JADEPUFFER's odd Bitcoin address.

What is new is that a model stitched them into a complete attack against a neglected server, on its own.

The recently discovered financially-motivated FortiBleed campaign has been attributed to INC and Lynx ransomware operations, indicating that the verified, stolen credentials were intended for follow-on intrusions.

"An operator tied to FortiBleed's infrastructure was found actively working negotiation panels for both groups, tying mass FortiGate credential theft directly to ransomware deployment for the first time," SOCRadar said in a new report published Wednesday.

In all, at least 12 ransomware deployments have resulted from this access, causing hundreds of endpoints to be encrypted across affected organizations.

The latest findings from SOCRadar show that an operator with access to FortiB…

Attackers are hiding a data-stealing trojan inside fake exploit code aimed at the people who hunt bugs for a living.

The malware, called ChocoPoC, travels in Python proof-of-concept (PoC) repositories on GitHub that claim to exploit hot new CVEs.

The malware hides in a Python package that the PoC pulls in as a dependency, so it slips past a quick code review.

That pulls in a package named frint, which in turn drags in a second package, skytext.

The MUT-1244 campaign showed the payoff, using fake PoC repositories to steal SSH keys and cloud credentials from red teamers and researchers.

It's that time of month when ESET Chief Security Evangelist Tony Anscombe looks back at some of the top cybersecurity stories that made the news over the past 30 or so days and considers what they may mean for your own cyber-defenses.

What lessons does the new CISA policy hold for organizations outside the agency's direct remit?

What else is there to know about threats facing ATGs or, indeed, many other critical infrastructure systems?

How can you stay safe from imposter fraud, and could the social media bans for children work?

Learn more from Tony's video and be sure to check out the May 2026 edition of Tony's monthly security news roundup for more insights.

With access to your email account, they can reset your passwords across multiple other accounts – perhaps intercepting one-time passcodes sent by your bank, social media, cloud storage or other online provider.

That could lay the groundwork for a convincing phishing email designed to impersonate a trusted organization you interact with.

A phishing attack on your corporate email account is often the first stage in a bigger data breach, extortion/ransomware or espionage attack.

They’re also using more sophisticated tools to improve the success rates of email phishing campaigns.

In this instance the scammers reportedly hijacked the email account of a high-level executive, before impersonating …

For these businesses, cyber resilience should be the direction of travel – that is, the ability to continue operating and recover even during a serious incident.

Cyber readiness is about putting in place the processes and controls to prevent, detect and respond to threats.

So, should confidence in cyber resilience posture be so high, especially if organizations are still getting hit multiple times?

The truth is that there’s no end state for cyber readiness or resilience.

If it’s serious about improving the cyber readiness of small businesses, the vendor community should step up.

Key points of this blogpost: Throughout 2025, Gamaredon exclusively targeted governmental and military institutions in Ukraine.

Continued data exfiltration and a new allianceThroughout 2025, Gamaredon stayed highly active and remained focused solely on Ukraine.

Notably, we uncovered that in early 2025, Gamaredon collaborated with Turla, another Russia-aligned threat actor also linked to the FSB; we documented our findings in our blogpost Gamaredon X Turla collab.

Figure 1 shows a chart of unique samples of HTA downloaders delivered per month in Gamaredon spearphishing campaigns.

Compared to 2024, we also saw a shift in how Gamaredon used these dead drops.

Key points of this blogpost: ESET took part in the coordinated, global Operation Endgame to disrupt Amadey and Stealc.

Our automated systems have been dissecting Amadey and Stealc samples and identifying the fields most relevant for large-scale tracking.

The largest Amadey botnet clusterOne cluster stands out as the largest, and it contributed nearly 34% of all processed Amadey samples.

Stealc affiliate clustering based on ESET telemetryConclusionFor global disruption operations such as Operation Endgame against Amadey and Stealc, long-term automated tracking of malware is necessary.

2026‑04‑09 Stealc C&C server.

The group distinguishes itself through a mature, operator-maintained set of endpoint detection and response (EDR) killers, i.e., tools for disrupting security software.

In this blogpost, we share our findings on Gentlemen’s suite of EDR killers gained through extensive research and corroborated by the recent leak.

Third‑party EDR killers (HexKiller, ThrottleBlood, and HavocKiller) are operationally integrated.

Rather than relying on affiliates to source their own EDR killers, Gentlemen operators actively develop and maintain a portfolio of EDR killers for affiliates.

It allows the Gentlemen operators to integrate abused drivers into their toolset very soon after an EDR killer PoC is disclos…

Of course, connecting production systems to enterprise networks delivers tangible benefits, but the security implications – that systems once safe were suddenly no longer so – arrived more quietly.

Start by mapping which systems in an environment are connected and have no security coverage, where IT and OT networks intersect, which segments are unmonitored, and which production systems have fallen outside any vendor support agreement.

Meanwhile, off-the-peg security tools often don’t efficiently meet the enterprise requirements in legacy OT systems that run on older hardware and outdated operating system versions.

The production systems running that version continue to operate for years, ac…

Key points of this blogpost: We discovered two previously undocumented Windows variants of FishMonger’s SprySOCKS backdoor.

Technical analysisIn this section, we provide a technical analysis of these new, Windows variants of FishMonger’s SprySOCKS backdoor.

Figure 3. klelam00007.bat setting up persistence for the SprySOCKS backdoor (newlines added for readability)Figure 4 depicts the execution chain of the SprySOCKS WIN_DRV variant.

It contained the SprySOCKS backdoor and the SprySOCKS loader.

6490B8E4AADE25A3EE2D A9A47F312DB2122470BC X1B5206BDC1 743DD.dat Win64/SprySOCKS.A Encrypted container of the encrypted WIN_DRV variant of SprySOCKS backdoor, encrypted SprySOCKS RawWNPF and SprySOCKS …

Instead, attackers get the victim to complete a legitimate authentication process – including two-factor authentication (2FA) – on a real Microsoft login page.

What makes EvilTokens dangerousThe OAuth device code flow was designed for devices that may be awkward to sign into directly, such as smart TVs or printers.

No document, invoice, email, or another platform should ask for a device code without a clear reason.

A real Microsoft page doesn’t automatically make a request safe.

Sometimes the attacker could ask them to enter a real code on a real page – but for the wrong device.

During this period, the Vietnam-aligned OceanLotus adopted a more selective approach to external operations while placing increasing emphasis on domestic espionage.

We identified two distinct campaigns involving the SPECTRALVIPER backdoor: a supply-chain attack targeting stock investors in Vietnam and a prolonged espionage operation against a Vietnamese infrastructure and transport construction company.

The domain resolved to the genuine IP address of the FireAnt update server, suggesting a supply-chain compromise scenario.

LTD 2025‑09‑20 SPECTRALVIPER C&C server.

]com IRT‑CHOOPALLC‑AP 2025‑09‑20 SPECTRALVIPER C&C server.

But that realization alone clearly doesn’t prepare them to withstand an attack.

Have the repeat victims come to view their brushes with cyber-incidents as proof of “what doesn’t kill me makes me stronger”?

For all the talk around AI, automation and attacker sophistication, many SMB breaches still begin with a familiar opening.

A total of 71% of SMBs globally now carry cyber insurance, rising to 84% in North America, with adoption climbing sharply among repeat victims.

While “when, not if” has never been more true, that alone doesn’t prepare a business for adversity.

There’s a phrase that is peddled out by governments and companies alike when a catastrophe of any type – including a cybersecurity breach – occurs: “Lessons have been learnt”.

The 130% increase in significant incidents between 2024 and 2025 severely challenges this assertion and points to lessons not being learnt, at a macro level.

In fact, this reluctance to look could also be normalcy bias quietly doing its work.

That is why this metaphor matters – cybercriminals discover the gap between what an organisation believes about its security and what the reality is.

We must accept that normalcy bias exists and act upon it.

Our kids are exposed to many of the same identity, privacy, and data security risks as their parents.

Why do people want my kids’ data?

But when they do finally flag fraud, the impact on your child’s credit history can be severe.

Apply for a credit freeze for your child’s identity with all three major credit bureaus.

Keeping your child’s identity safe should not be about restricting their digital world.

Here's some of what caught Tony’s attention in May 2026:Poland’s Internal Security Agency (ABW) has released information about cyber-intrusions into ICS (industrial control systems) at five water treatment facilities in the country in 2024 and 2025.

The two main attack vectors – weak passwords and systems exposed directly to the internet – were the same as those used in attacks against the Polish energy sector that leveraged DynoWiper described by ESET researchers here.

What are some key mitigation steps against attacks targeting OT systems?

How do scams crypto ATMs work and how to stay safe?

Learn this and more in Tony's video and be sure to check out the April 2026 edition of Tony's month…

Intezer has announced Custom Agents, a new capability that lets security teams build their own AI agents directly inside the Intezer platform.

Security teams can no longer rely on manual alert handling or one-off automation to keep up with the volume and complexity of modern threats.

Bringing automation to custom SOC activitiesEvery SOC has its own set of daily routines, from writing custom incident reports and sharing shift handoff notes to tuning detection rules and documenting investigation outcomes.

Custom Agents turn those tasks into agents that run on their own.

SOC teams describe what they want done, choose when it runs (i.e.

Non-interactive sessions, where a client logs in, runs one command, reads the output, and disconnects, accounted for 99.23% of the total.

Interactive shell sessions, the kind the honeypot field was built to study, came to 0.10%.

Most of the traffic is reconnaissanceThe ten most common non-interactive commands covered 41.59% of that traffic, and most of them gather basic facts about the machine.

CZ.NIC’s archive runs back to 2017 and holds more than 400 million sessions, and non-interactive traffic has been the majority since around 2018.

A honeypot that only offers an interactive shell, and refuses non-interactive requests, records a version of attacker behavior the honeypot itself created.

In this Help Net Security video, Roman Sannikov, Global Research Coordinator at iCOUNTER, explains why geopolitics belongs in every security team’s threat model.

With open and simmering conflicts around the world, attacks can come from actors that would never have targeted your company before.

Many of these threats sit two or three steps beyond your usual list of adversaries.

Sannikov also covers DDoS as opinion warfare and Volt Typhoon’s pre-positioning inside telecom networks.

When your company gets linked to a geopolitical cause, the pool of people who might target you grows.

Organizations collect more cyber risk data than ever, with many still struggling to build a unified view of their exposure.

93% of organizations experience challenges maintaining an accurate and up-to-date view of their attack surface, and only 41% have a consolidated view of their cyber risk exposure.

Connecting internal telemetry about assets and configurations with external telemetry about attacker activity and targeting provides a contextualized view of cyber risk exposure.

Regional differences continueRegional differences appear in cyber risk exposure visibility.

These differences indicate that organizations are at different stages in their exposure management journey, particularly in …

Here’s a look at the most interesting products from the past week, featuring releases from Digi International, iboss, Jamf, and Netzilo.

Embedded directly within DRM as a value-added service, DANI enables network operators and managed service providers to monitor and diagnose network issues, identify root causes and surface recommended actions through a single conversational interface.

Jamf enables AI Governance and shadow AI detection on MacJamf has announced general availability of AI Governance, a new capability within Jamf for Mac that enables IT and security teams to discover actively-used AI tools, enforce policy controls, and generate audit-ready reporting.

Netzilo adds runtime gover…

A suspected Scattered Spider member has been extradited to the United States to face charges linked to cyberattacks against U.S. companies, including the breach of a luxury jewelry retailer that led to an $8 million cryptocurrency ransom demand after attackers stole company data.

The retailer’s security team removed the attackers from its network before any ransom was paid.

The company still incurred at least $2 million in losses from business disruption, incident response, and recovery efforts.

According to the complaint, Scattered Spider, also known as Octo Tempest, UNC3944, and 0ktapus, is a cybercrime group that targeted U.S. companies by tricking employees into giving attackers access …

iboss has launched the AI Security Platform, a new service that gives any organization visibility into the AI tools its people are using, free of charge.

Organizations that want to go beyond visibility can upgrade on the same platform to enforce AI policy, prevent data leaks, and govern AI agents.

Organizations are using the AI Security Platform to:Discover shadow AI: Instantly uncover every AI tool in use, including unsanctioned apps, with automatic inventory, per-user activity attribution, and risk classification.

Secure AI agents: Apply default-deny connection policies to AI agents on endpoints and servers, controlling exactly which domains they can reach.

“The AI Security Platform is bo…

Cloudflare introduced new controls that let website owners manage AI traffic across three categories: Search, Agent, and Training.

The feature is available to all Cloudflare customers, including those on the Free plan, and gives website owners more control over how different types of AI crawlers access their content.

If a website blocks Training crawlers, multi-purpose crawlers such as Googlebot, Applebot, and BingBot will be blocked, even when Search crawlers are allowed.

Even though robots.txt does not enforce the setting, Cloudflare will report whether Verified Bots comply with the declared preferences through BotBase.

Access depends on its classification and the website owner’s policies…

Opera has launched Paste Protect, a clipboard protection feature designed to prevent clipboard-based attacks such as hijacking and pastejacking.

Paste Protect includes built-in protection and warnings against ClickFix-based cyberattacks, which accounted for more than half of malware-delivery attacks in 2025.

The feature is built into Opera’s desktop browsers and is enabled by default, so users are protected automatically without any setup.

“ClickFix attacks succeed because they turn the user into the weapon,” said Pawel Kurzelewski, Head of Security at Opera.

The new Injection Protection monitors clipboard activity in real time for potentially malicious commands copied by the user or placed…

He makes the case that endpoint recovery is often overlooked, leaving organizations exposed when thousands of devices go down at once.

But they do not automatically restore user access, clinical workflows, branch operations, call centers, or the endpoint environments people depend on to work.

The better recovery architecture accounts for both sides: restore the systems, and restore trusted access to those systems.

By reducing endpoint risk through an immutable operating system and trusted endpoint foundation, you can give recovery architecture a stronger starting point.

Walk me through what a well-architected endpoint recovery looks like when ten thousand laptops are bricked at once.

Frank Riccardi builds his consumer guide, CTRL+ALT+PWN: The Hacker’s Playbook (And How to Beat It), on that one condition.

The book reads like a tour of the criminal toolkit, narrated by someone who has cleaned up the wreckage.

The middle of the book runs scam by scam, covering phishing, smartphone exposure, the Nigerian-prince con, romance fraud, and deepfakes.

The payoff is a closing program Riccardi calls Smashmouth Cybersecurity, a habit set he frames as the everyday person’s answer to organized crime.

For a general reader, or a professional shopping for a gift a non-technical relative will finish, CTRL+ALT+PWN earns its keep.

When the encryption lands on a remote file server, the server does little of the visible work.

A team at La Trobe University in Melbourne built a detection method that lives on the wire.

The researchers designed a framework that reads Server Message Block traffic, the protocol Windows uses for file sharing, and flags ransomware by the pattern of operations it produces.

Reading these sizes lets the system reconstruct what a client does to a file server.

The sensor runs off network traffic alone, with no software placed on the server or client, and sits on a span port reading packets.

Six external security research firms triaged the findings before they reached maintainers.

Anthropic itself describes confirmed true positives as one measure of impact, and points to patch counts as the more telling lagging indicator.

About 6 percent of the disclosed vulnerabilities carried an upstream patch at the snapshot, a figure the researchers treat as a lower bound because some maintainers ship fixes quietly.

During that stretch the vulnerability may be public, exploit tooling may circulate, and production may still run the old code.

More AI discovery efforts are coming online, which raises the prospect of even higher discovery cadence across the ecosystem.

GitHub’s Open Source Program Office (OSPO) uses the new GitHub License Compliance feature, now in public preview, to manage thousands of open-source dependencies and identify dependencies whose licenses require review.

GitHub Enterprise Cloud customers can use the License Compliance feature across repositories with an active GitHub Advanced Security (GHAS) Code Security license.

Building a license policyTwo months ago, the OSPO switched from internally developed compliance tools to the new GitHub License Compliance feature.

How the feature worksGitHub License Compliance uses rules to automatically scan new dependencies added through pull requests.

Review workflowGitHub’s license review team…

Netzilo has announced expanded AI agent governance and runtime enforcement capabilities for Amazon Bedrock AgentCore and other major AI agent harnesses.

As enterprises move AI agents from experimentation into production, agents are becoming a new enterprise edge.

Netzilo addresses this challenge with Bring Your Own Governance for AI agents.

“AI agent governance cannot depend on which platform exposes which integration point,” said Egemen Tas, CEO of Netzilo.

Enterprises can preserve privacy, data sovereignty, and operational control while extending Zero Trust principles to autonomous AI agents.

Interesting paper: “Cybersecurity Mission Creep.”Abstract: Cybersecurity is experiencing mission creep.

Positioned as security threats, cybersecuritized issues become endowed with the apparent normative power to override countervailing considerations, oversimplifying the problem.

Cybersecuritization’s oversimplification similarly risks unidimensional solutions and invites use of argumentative trump cards, like First Amendment challenges.

Together, the reductive tendencies of cybersecuritization and the deference it prompts to specialists renders ultimate governance choices more opaque.

If we continue to ignore it, we risk abdicating further responsibility for difficult choices to the trump …

The idea is to reach hungry consumers by “knowing what is in their fridge without being too creepy,” said Carrie Drinkwater, chief investment officer at Carat.

To achieve that goal, NBCU and Instacart created a custom audience of shoppers who regularly purchase grocery staples on Instacart, such as eggs, milk, meat and produce.

Based on that data, Papa Johns can determine which days of the week certain consumers are likely to run out of groceries and serve them an ad on NBCU streaming content accordingly.

So the way for Papa John’s to not be “too creepy” is to deliberately get it wrong sometimes.

Posted on July 1, 2026 at 6:53 AM • 0 Comments

The Realities of AI Video SurveillanceThe Financial Times has a good article on how AI is changing the capabilities of video surveillance, with information from both Israel/Iran and Russia.

I wrote about this sort of thing a few years ago, how AI enables mass spying in the way that computers and networks enabled mass surveillance.

The interesting development in the article is that AI allows people to ask natural language questions about video footage to AIs—and AIs can answer them.

In contrast with older tools restricted to a few dozen preset searches, these new tools allow an almost unlimited range of enquiries by enabling language-based searches on video.

“This is the holy grail of survei…

Interesting research on a new class of weak RSA keys: keys with lots of zeros.

The badkeys project is an open-source service that checks public keys for known vulnerabilities.

Pattern 2 appears on SSH hosts running the CompleteFTP software from EnterpriseDT.

The underlying vulnerability affects RSA keys generated using versions 10.0.0­12.0.0 (Dec 2016­Mar 2019) and DSA keys generated with v10.0.0­23.0.4 (Dec 2016­Dec 2023).

More implementations may include the same bugs, and so it’s worth tailoring cryptanalytic algorithms for this particular type of failure.

We’ve taken one small step towards robot police officers: a drone capable of disarming a suspect:In a June 22 video posted on the Sacramento County Sheriff’s Office’s Instagram page, an officer wearing goggles can be seen operating a drone to retrieve a knife from an armed suspect hiding inside a cluttered house.

“After not responding to negotiators, a drone was deployed inside the residence,” the post says.

“Drone pilots located the suspect hiding in a corner of a garage” and then used a high-powered magnet attached to the drone to grab the knife out of the suspect’s hand.

In the video ­ which is soundtracked by the “Mission: Impossible” theme song—the intercepted knife can be seen spinnin…

About Bruce SchneierI am a public-interest technologist, working at the intersection of security, technology, and people.

I've been writing about security issues on my blog since 2004, and in my monthly newsletter since 1998.

I'm a fellow and lecturer at Harvard's Kennedy School, a board member of EFF, and the Chief of Security Architecture at Inrupt, Inc.

This personal website expresses the opinions of none of those organizations.

Contact Info

Meta Is Testing Facial Recognition for Police and MilitaryWe know that ICE wants to deploy eyeglasses with facial recognition that can identify people in real time.

Turns out Meta is prototyping the feature with a Pentagon supplier.

(Alternate news story.)

Posted on June 26, 2026 at 12:40 PM • 0 Comments

One Million Passports Leaked OnlineA database of almost a million passports from around the world was leaked online.

Note what happened.

A high-value credential—a passport—was used in an ancillary low-value authentication system: ID verification for cannabis dispensaries.

And it’s the low-value system that got hacked, putting the high-value credential at risk.

Posted on June 26, 2026 at 7:03 AM • 2 Comments

Words are words, and the phone company does not know—nor is it liable for—the words you choose to speak.

Imagine a restaurant review site that provides AI summaries, or a site summarizing laws and government procedures.

AI agents are agents of the person or organization that deploys them—and should be treated by the law as such.

If a company hired human writers to write its summaries, that company would be liable for inaccuracies in those summaries.

Visa and OpenAI recently announced a partnership to build personal AI agents to, among other things, make purchases on our behalf.

This is a fascinating explotation of how LLMs fall for prompt injection attacks.

Their conclusion:Role tags were a formatting trick that became the security architecture and the cognitive scaffolding of modern LLMs.

We’ve shown that this architecture doesn’t survive into the model’s actual representations, and that such role confusion is linked to prompt injection.

Unless LLMs achieve genuine role perception, we think injection defense will remain a perpetual whack-a-mole game.

And the continuous nature of role boundaries opens the threat of injections designed to subtly shift LLM states through seemingly innocuous text, legally and at scale.

At least one malware developer is adding text about nuclear and biological weapons to their spyware, in an effort to stop automatic AI analysis.

Details:The _index.js payload begins with a large JavaScript block comment containing fake system instructions and policy-triggering content.

The real malware begins after the comment with a try{eval(…)} wrapper around a large character-code array and a ROT-style substitution function.

In weak pipelines, this can cause refusal behavior, prompt confusion, context pollution, or premature classification before the scanner reaches the actual malware.

YARA rules, entropy checks, AST parsing, string extraction, deobfuscation, and behavioral rules still w…

Anthropic’s Fable 5 Model Jailbroken Within DaysFable 5 is the supposed safe version of Anthropic’s Mythos Preview, with guardrails to ensure that it can’t be used to create cyberattacks.

Well, that restriction was bypassed within days.

Posted on June 23, 2026 at 7:03 AM • 4 Comments

Wearables present serious privacy issues for “Average Joe” consumers, who are entrusting tech companies to safely store and protect their biometric data.

Imagine the stakes for a professional athlete, whose entire livelihood could be affected by a single biometric data point.

The coach has access to the player’s wearable data, and checks to see when they went to sleep, as well as what their heart rate looked like during the night.

What if wearable data reveals that a player isn’t as speedy as they were before, and a team uses that data against the player during contract negotiations?

What if a wearable reveals a player is favoring their leg, or is at greater risk of injury?

About Bruce SchneierI am a public-interest technologist, working at the intersection of security, technology, and people.

I've been writing about security issues on my blog since 2004, and in my monthly newsletter since 1998.

I'm a fellow and lecturer at Harvard's Kennedy School, a board member of EFF, and the Chief of Security Architecture at Inrupt, Inc.

This personal website expresses the opinions of none of those organizations.

The duo were key members of a prolific cybercrime group known as Scattered Spider, and their guilty pleas came on the first day of what was expected to be a six-week trial.

In April 2026, 24-year-old British national and Scattered Spider member Tyler “Tylerb” Buchanan pleaded guilty to wire fraud conspiracy and aggravated identity theft for participating in the group’s SMS phishing spree in the summer of 2022.

The government said Buchanan, Jubair and others used the credentials harvested in that phishing campaign to steal at least $8 million in cryptocurrency from victims throughout the United States.

The U.S. Department of Justice says three alleged Scattered Spider defendants indicted alo…

This week, researchers from multiple security firms concluded that the Popa botnet is linked to NetNut, a “residential proxy” provider operated by the publicly-traded Israeli firm Alarum Technologies Ltd [NASDAQ: ALAR].

Qurium said that immediately after that disruption, several dozen new domains were registered to serve as controllers for the Popa botnet, but that one of those control domains was not new: ninjatech[.]io.

Jérôme Meyer, a security researcher at Nokia Deepfield, said the total population of devices participating in the Popa botnet may be far higher than Lumen’s estimates.

“Over 90% of our pharmaceutical and food & beverage customers have queried residential proxy indicators.

…

This post examines clues pointing to a real life identity for the administrator of The Gentlemen ransomware group.

Experts at the security firm Check Point Software have been closely covering exploits of The Gentlemen, a so-called “ransomware-as-a-service” (RaaS) offering that pays affiliates handsomely to help spread the group’s malware.

According to Check Point, the group targets Internet-facing devices (VPNs, firewalls) as their entry point, and once inside moves quickly to encrypt entire networks within hours.

Check Point says the administrator and primary operator of the ransomware group uses the nickname Zeta88 on the Russian-language cybercrime forums, and that this individual was pr…

Microsoft today released software updates to plug nearly 200 security holes across its Windows operating systems and supported software, a record number of fixes for the company’s monthly Patch Tuesday cycle.

“Some surveys put AI usage among security professionals generally at 90%, so it’s unsurprising that this volume of patches may be the norm,” Narang said.

Microsoft received heavily blowback on social media last month after it said in a blog post that it was considering taking legal action against the security researcher.

While 200 vulnerabilities may be a record for Patch Tuesday, the actual number of security flaws Microsoft addressed this month is far higher, said Rapid7’s Adam Barne…

On May 31, word began to spread on several Telegram instant message channels that Meta’s AI bot would happily add an email address to an existing account as part of the bot’s standard password reset flow.

Meta has not responded to requests for comment on the video’s claims, but the company reportedly did acknowledge the dormant Instagram account for the Obama White House was briefly compromised.

Meta’s solution was to deploy a conversational AI layer to handle common recovery workflows: relinking a lost email address, triggering a password reset, verifying account ownership.

Just like human customer support employees can be social engineered into providing unauthorized access to someone’s a…

But as KrebsOnSecurity observed in September 2025, those sanctions failed to target Stark’s remaining connection to the Internet — an Internet service provider based in the Netherlands called MIRhosting.

MIRhosting is operated by Andrey Nesterenko, a 39-year-old Russian native who runs the business out of the Netherlands.

And as our September 2025 report showed, WorkTitans was controlled by Nesterenko and a 57-year-old from Amsterdam named Youssef Zinad.

On top of that, WorkTitans was getting connectivity to the larger Internet solely through MIRhosting, where Zinad had worked previously.

“The transition to the.hosting was not intended to evade sanctions,” Nesterenko wrote.

The inquiry comes as CISA is still struggling to contain the breach and invalidate the leaked credentials.

Experts who reviewed the exposed secrets said the commit logs for the code repository showed the CISA contractor disabled GitHub’s built-in protection against publishing sensitive credentials in public repos.

CISA acknowledged the leak but has not responded to questions about the duration of the data exposure.

TruffleHog does this by monitoring a live feed that GitHub publishes which includes a record of all commits and changes to public code repositories.

In practical terms, it is likely that cybercrime groups or foreign adversaries also noticed the publication of these CISA secrets, …

A criminal complaint unsealed today in an Alaska district court charges Jacob Butler, a.k.a.

“Dort,” of Ottawa, Canada with operating the Kimwolf DDoS botnet.

“KimWolf was tied to DDoS attacks which were measured at nearly 30 Terabits per second, a record in recorded DDoS attack volume,” the Justice Department statement reads.

Synthient was among many technology companies thanked by the Justice Department today, and Synthient’s founder Ben Brundage told KrebsOnSecurity he’s relieved Butler is in custody.

The DOJ said at least one of those services collaborated with Butler’s Kimwolf botnet.

Until this past weekend, a contractor for the Cybersecurity & Infrastructure Security Agency (CISA) maintained a public GitHub repository that exposed credentials to several highly privileged AWS GovCloud accounts and a large number of internal CISA systems.

Another file exposed in their public GitHub repository — “AWS-Workspace-Firefox-Passwords.csv” — listed plaintext usernames and passwords for dozens of internal CISA systems.

“The available Git metadata alone does not prove which endpoint or device was used.”Caturegli said he validated that the exposed credentials could authenticate to three AWS GovCloud accounts at a high privilege level.

CISA has not responded to questions about the p…

Artificial intelligence platforms may be just as susceptible to social engineering as human beings, but they are proving remarkably good at finding security vulnerabilities in human-made computer code.

May’s Patch Tuesday is a welcome respite from April, which saw Microsoft fix a near-record 167 security flaws.

But at the end of April, Oracle announced it was switching to a monthly update cycle for critical security issues.

Chrome automagically downloads available security updates, but installing them requires fully restarting the browser.

For a more granular look at the Microsoft updates released today, checkout this inventory by the SANS Internet Storm Center.

The stated deadline for payment was initially set at May 6, but it was later pushed back to May 12.

The May 6 update stated that Canvas was fully operational, and that Instructure was not seeing any ongoing unauthorized activity on their platform.

Instructure responded by pulling Canvas offline and replacing the portal with the message, “Canvas is currently undergoing scheduled maintenance.

Data extortion groups like ShinyHunters will typically only remove victims from their leak sites after receiving an extortion payment or after a victim agrees to negotiate.

Last month, ShinyHunters relieved the home security giant ADT of personal information on 5.5 million customers.

For the past several years, security experts have tracked a series of massive DDoS attacks originating from Brazil and solely targeting Brazilian ISPs.

The company originated from protecting game servers against DDoS attacks and evolved into an ISP-focused DDoS mitigation provider.

But so-called “DNS reflection” attacks rely on DNS servers that are (mis)configured to accept queries from anywhere on the Web.

“We received and notified many Tier 1 upstreams regarding very very large DDoS attacks against small ISPs,” Nascimento said.

Nascimento flatly denied being involved in DDoS attacks against Brazilian operators to generate business for his company’s services.

A 24-year-old British national and senior member of the cybercrime group “Scattered Spider” has pleaded guilty to wire fraud conspiracy and aggravated identity theft.

FBI investigators tied Buchanan to the 2022 SMS phishing attacks after discovering the same username and email address was used to register numerous phishing domains seen in the campaign.

That same year, U.K. investigators found a device at Buchanan’s Scotland residence that included data stolen from SMS phishing victims and seed phrases from cryptocurrency theft victims.

Buchanan is the second known Scattered Spider member to plead guilty.

Two other alleged Scattered Spider members will soon be tried in the United Kingdom.

“This CVE can enable phishing attacks, unauthorized data manipulation, or social engineering campaigns that lead to further compromise,” Walters said.

Satnam Narang, senior staff research engineer at Tenable, said April marks the second-biggest Patch Tuesday ever for Microsoft.

Narang also said there are indications that a zero-day flaw Adobe patched in an emergency update on April 11 — CVE-2026-34621 — has seen active exploitation since at least November 2025.

Adam Barnett, lead software engineer at Rapid7, called the patch total from Microsoft today “a new record in that category” because it includes nearly 60 browser vulnerabilities.

For example, a Google Chrome update released earlier t…

Who Are The Gentlemen?

Despite the impeccably polite name, there is nothing polite or refined about this particular gang of cybercriminals. Read more in my article on the Fortra blog.

And I'm going to be looking at whether you're wise to take a gamble with your security on Polymarket.

Right, well, I want to tell you about a company that's built its entire brand on being really, really good at predicting the future.

They've actually done it really, really well.

So it's The Summer Portraits by— remind me who it's by again, 'cause I'm going to butcher his name.

It's really, really good.

When a devastating earthquake struck north central Venezuela last week, rescue teams were not the only ones who mobilised fast.

Researchers at threat intelligence firm WhoisXML API say that they uncovered 212 newly-registered domains referencing the earthquake, all of which had been filed within five days of the disaster.

Even years after a natural disaster scammers can still exploit human misery.

And that's because exploitation of a major news event - whether it be a natural disaster of otherwise - can be a successful lure for criminals to deploy when defrauding the unwary out of their savings.

And when a natural disaster creates an urgent need for response, it is all the easier for cyberc…

Leaked internal documents have revealed that for nearly a year Japan's Ground Self-Defense Force (JGSDF) used counterfeit USB flash drives infected with malware on computers connected to sensitive military networks.

The USB drives have been linked to Chinese hacking operations, according to an investigation by Nikkei Asia.

Subsequent investigations found that six out of eight USB drives tested contained the same malicious code.

The infected USB drives had been attached to over 50 computers, with nearly half of those systems used to handle classified data, including information about the movement of troops.

The counterfeit drives, priced 30 to 50 percent below authentic brands, were traced t…

Smashing Security, Episode 473: How a Hacker Could Have Rickrolled the Entire World.

You think, oh, hang on, they're going to ask me for a password or they're going to ask me for something like that.

Yeah, we'll take that money from under your bed and store it in a safety deposit box that you don't know where it is.

We saw a huge number of CVEs last year and with Mythos and the Frontier models, we think that's going to continue to spike.

So the blast radius of these IT service providers is really, really big.

Somebody had broken into Brazil's national Civil Defence alert system and used it to send fake "Extreme Alert" notifications - the most severe category, normally reserved for warnings of imminent natural disasters - to mobile phones across at least five states, including São Paulo, Rio de Janeiro, and the Federal District.

In a statement posted on social media, Brazil's National Civil Defence confirmed that it had pulled the alert platform offline at 1:30am following the compromise.

National Secretary of Protection and Civil Defence Wolnei Wolff confirmed that the attackers managed to regain access after an initial attempt to block them from accessing the system.

Emergency alert systems wor…

Hide My Email is a privacy feature that lets users create unique, random email addresses that forward messages to your real inbox.

That means you can sign-up for websites, newsletters, and apps without exposing your personal email address.

The problem is, however, that one of the reasons that Hide My Email worked so well was because its aliases were indistinguishable from regular iCloud email addresses.

All any website or app that wants to block anonymous sign-ups now has to do is to reject any email address ending in "@private.icloud.com".

For now, if you already have existing Hide My Email addresses in use, they should continue to work without any changes on your part.

Someone is pretending to be your bank, your government, or your local planning office. And according to the FTC, they're making billions doing it. Read more in my article on the Fortra blog.

Which is the connection between your AI agent and Sentry.

And when your AI agent reads data back from one of those services, it treats it as trusted and authoritative.

And so the AI agent does what agents are supposed to do.

But if an attacker can plant text somewhere that your AI agent will read, it's possible that your AI agent will act upon it, and that may not be good.

And then whenever AI wants to access something, AI has to give a reason — why do I want that?

The US state of Maine has taken its public data breach notification portal offline after someone submitted fraudulent breach disclosures impersonating two well-known technology companies.

As Bleeping Computer reported last week, fraudulent data breach disclosures were submitted to Maine's official breach portal and publicly posted before their legitimacy could be verified, prompting the named companies to deny the claims.

However, somewhat more convincing was a fake breach notice that targeted the multiplayer social virtual reality platform VRChat.

It appears that the abuse of the system was possible because the Maine data breach reporting system lacked a proper verification mechanism.

Anyo…

According to media reports, a security blunder carelessly leaked the passport details of every player in Argentina's World Cup squad ahead of Tuesday's warm-up friendly against Iceland.

But why are passport numbers on a World Cup team sheet at all?

Under FIFA regulations, teams must provide passport numbers around an hour before a match kicks off.

So the passport numbers belong in the information handed to the referee.

Before releasing any document containing sensitive data, verify that the data has actually gone - not just covered up.

Most extortion gangs hide behind a keyboard. Silent Ransom Group will phone your staff pretending to be IT support - and if that fails, send someone to your office in person to plug in a USB stick. Read more in my article on the Fortra blog.

Yeah, I've decided I should actually know something about technology after about 15 years of covering it.

This week I'm talking about helpful AI, maybe too helpful AI, which is the Meta AI, which seems to have been giving anyone who asked nicely anyone else's password.

And continuing the AI theme, I'm going to be talking about an AI worm that appears to think for itself.

I think I'm not going to cry with offense if you say that.

You're going to spend the money and you've got the money to spend.

Evanston Township High School (ETHS), located approximately 14 miles north of Chicago, says it was hit by a ransomware attack on Sunday, June 7 2026.

No ransomware group has claimed responsibility for the attack against ETHS, and it is not known if any personal data has been exfiltrated by cybercriminals.

The sad truth is that schools are attractive targets to cybercriminals.

And, as is demonstrated by the closure of ETHS, schools often rely upon networked systems for everything from the platforms used to teach pupils to providing physical access controls.

Meanwhile, schools don't just face serious threats from organised criminal gangs but also from within their own walls.

If you've ever received an out-of-the-blue message via LinkedIn from a recruiter offering some well-paid consultancy work, intelligence agencies have a message for you: be very careful.

According to the bulletin, entitled "Safeguarding Our Secrets", Chinese intelligence officers - or third parties acting on their behalf - are posing as employees of private consultancies, think tanks, and HR firms.

According to the intelligence agencies, targets do not need security clearances to be of use to Chinese spies.

Western agencies warn that just submitting a CV containing your employer history, specialist knowledge, and details of professional contacts has am intelligence value.

The Five Eyes intel…

Но в совершенно ином масштабе: в режиме газонокосилки данный робот может обслуживать территории до 2,5 гектар (это 250 соток, то есть небольшой садовый кооператив), а в режиме транспортировщика поддерживает угодья площадью до 12,5 гектар.

Вместе с исследователем Андреасом Макрисом они провели эксперимент, в рамках которого исследователь, будучи в Германии, удаленно захватил контроль над газонокосилкой Yarbo и переехал журналиста, лежащего на газоне у себя в США.

Чаще всего в качестве операционной системы в них используется Linux — и роботы Yarbo тут не исключение.

При этом серийные номера устройств имеют предсказуемый формат и используются в инфраструктуре Yarbo в качестве идентификаторов р…

По мере того как организации начинают использовать нейросети для все более широкого круга задач, они неизбежно сталкиваются с вопросами надежности и стоимости ИИ-инструментов.

Чтобы не отказываться от нужных нейросетей, бизнес часто рассматривает переход на сторонние сервисы, обеспечивающие единое «окно доступа» к различным нейросетям.

Они предлагают услуги на десятки процентов, а иногда и в разы дешевле, чем у официальных поставщиков, обещая заодно обход любых лимитов.

Утечка данных и кража интеллектуальной собственностиИсследование показало, что цель многих таких сервисов — сбор качественных диалогов топовых моделей для обучения нейросетей третьих фирм.

Пять правил безопасной работы с ИИ-…

Следующий абзац снова вгоняет вас в панику: «К сожалению, при проверке мы обнаружили, что ваши платежные данные могли быть скомпрометированы».

Для разбирательства напишите нам, иначе мы возбудим уголовное дело и разошлем информацию о вас в СМИ» — и далее по списку.

Но если с вами общаются чересчур эмоционально и вы чувствуете, что на вас давят, то вероятность, что вы общаетесь с мошенником, близится к 99,9%.

→ немедленно смените пароль на этом сервисе и на всех других, где использовали такой же.

Если с вашей карты успели снять или перевести деньги, узнайте, как оспорить транзакцию.

Мы выбрали три кейса, три реальные истории о том, как злоумышленники атакуют сегодня, а главное, почему им удается проворачивать такие атаки.

Если вы не видите этот трафик или не считаете это инцидентом — вы проигрываете еще до начала активной фазы атаки.

Как и в предыдущем кейсе, злоумышленники вошли в корпоративную сеть через скомпрометированную учетную запись.

Почему это произошлоБыли допущены две классические ошибки:Сервер мониторинга был настроен с избыточными привилегиями, с доступом ко всем активам компании: и физическим, и виртуальным.

Попав в инфраструктуру, через Active Directory и групповые политики злоумышленники распространили в корпоративной сети вредоносное ПО с функционально…

В частности, опасность может скрываться в GitHub Actions, сценариях автоматизации, позволяющих создавать пайплайны непрерывной интеграции и доставки (CI/CD).

Ошибки и мисконфигурации в них периодически используются злоумышленниками в реальных атаках.

Да, она тоже началась с компрометации мейнтейнера популярного проекта, но распространяемый в ходе этой кампании зловред похищал секреты, именно используя недочет в GitHub Actions.

Как оставаться в безопасностиМисконфигурации в GitHub Actions потенциально могут превратить пайплайны разработки в инструменты злоумышленников, позволяющие скомпрометировать среду разработки или атаковать инфраструктуру компании.

С его помощью наше решение может выявл…

Однако очевидно, что краеугольным камнем стратегии информационной безопасности остаются решения для защиты конечных точек.

Мы предлагаем при выборе EPP-решения отталкиваться не от возможностей продуктов, а от конкретных нужд вашей компании.

Отметьте пункты, которым должно соответствовать решение для защиты конкретно вашей инфраструктуры, и вам будет гораздо проще определиться с выбором.

Для перехода от EPP к EDR или MDR ключевым условием является единое решение, умеющее одновременно выполнять функции и EPP-, и EDR/MDR-агента, а также единая консоль управления.

В Kaspersky Security для бизнеса реализованы передовые защитные технологии, включая машинное обучение, поведенческий анализ, защиту …

Как защитить свой аккаунт в TelegramЧто делать, чтобы защитить свой аккаунт в Telegram от подобных схем угона?

Если вы подозреваете, что стали жертвой подобного стилера или других махинаций злоумышленников, как можно скорее завершите все сессии в Telegram: Настройки → Устройства → Активные сессии → Завершить другие сеансы.

Почему так — мы подробно рассказывали в материале Что делать, если взломали аккаунт в Telegram, перечислив в нем все способы восстановления доступа к своей учетной записи.

Во-первых, необходимо установить облачный пароль для Telegram в разделе Настройки → Конфиденциальность → Облачный пароль.

Наш менеджер паролей кроссплатформенный, поэтому войти в Telegram с использовани…

Скомпрометированная версия израильского браузера Hola для Windows (1.251.91.0) загружала на устройства пользователей криптомайнер для добычи криптовалюты Monero.

Исследователи обнаружили признаки компрометации браузера Hola в рамках процесса сертификации AppEsteem Windows Certified Application.

}exe показало, что в нем скрывался криптомайнер для добычи криптовалюты Monero.

Как злоумышленники использовали Hola Browser для майнинга MoneroКриптомайнеры — это программы, которые используют вычислительные возможности компьютера для добычи криптовалюты.

Как мы уже сказали выше, в случае заражения Hola Browser на устройства жертв загружался криптомайнер для добычи криптовалюты Monero.

Ставка на проигрышВо время чемпионата мира предсказания результатов матчей и «ставки на спорт» становятся особенно популярны — чем активно пользуются злоумышленники.

Это еще и рекордные продажи коллекционной атрибутики — наклеек, шарфиков, формы сборных, официальных мячей турнира и так далее.

На скриншоте выше злоумышленники предлагают заплатить 67 евро за коллекцию наклеек, но на маркетплейсах такой же набор обойдется как минимум вдвое дороже, а на официальном сайте Panini — втрое.

Конечно, товар вы не получите и потеряете не только деньги, но и реквизиты банковской карты.

Установите Kaspersky Premium — приложение убережет вас от зловредов, фишинга, спама, переходов на вредоносные и поддел…

Фундаментальные проблемы автономного SOC: за пределами ИИХотя использование ИИ для анализа данных и принятия решений в SOC звучит как логичная и относительно несложная в реализации идея, попытка ее внедрить ставит и обостряет проблемы, с которыми организации столкнулись при внедрении SIEM, XDR и SOAR:Качество исходных данных.

Даже когда роль ИИ сводится к предварительному сбору данных и рекомендациям, аналитики зачастую не доверяют данным и тратят время на их повторный сбор и анализ.

В SOC и ИБ в целом всегда есть плохо документированная информация: бизнес-контекст, коллективные знания и другие данные, которые помогают верно оценивать оповещения и инциденты.

Проблемы ИИ, критичные для SOCКр…

Хотя она и изолирована, но записываются эти данные в итоге на тот же SSD, с которым также работают прочие программы и веб-сайты.

Оказалось, что если вредоносная страница постоянно обращается к SSD, по задержкам при доступе к данным можно определить, что еще происходит на ПК.

Допустим, на SSD имеется достаточно большой файл, наполненный случайными данными.

Комбинация всех особенностей атаки объясняет ее название: FROST расшифровывается как Fingerprinting Remotely using OPFS-based SSD Timing, то есть удаленное наблюдение над SSD с использованием технологии OPFS.

Впрочем, суть атаки FROST не в передаче данных, а в слежке за активностью пользователя.

Злоумышленники внедряют в установочные файлы игр троян удаленного доступа под названием Argamal.

Рассказываем, как не стать жертвой нового трояна — и как безопасно и максимально анонимно смотреть пикантный контент с аниме-девочками (или без).

В другой ситуации это, наверное, сложно было бы назвать неприятной характеристикой, но Argamal, к сожалению, троян не из «скорострелов».

Через три дня компьютер подключается к GitHub, скачивает зашифрованный файл, расшифровывает его и превращает в рабочий модуль трояна.

Именно поэтому мы рекомендуем хранить пароли не в текстовых файлах, а в зашифрованном контейнере менеджера паролей.

Как выявить и ограничить использование Claude и Claude CodeДетектирование: анализ на NGFW или веб-фильтре трафика к claude.ai, anthropic.com, *.anthropic.com, api.anthropic.com.

Защита: на уровне NGFW/веб-фильтра заблокировать доступ к категории «ИИ-сервисы», на уровне DNS перенаправить трафик вышеуказанных доменов Anthropic, с помощью политик браузера заблокировать различные расширения, дающие доступ к Claude.

Защита: на уровне NGFW/веб-фильтра заблокировать доступ к категории «ИИ-сервисы», на уровне DNS перенаправить трафик вышеуказанных доменов.

Защита: на уровне NGFW/веб-фильтра заблокировать доступ к категории «ИИ-сервисы», на уровне DNS перенаправить трафик вышеуказанных доменов DeepS…

У Павла Дурова и его «приватного» мессенджера появился новый конкурент, и это — барабанная дробь — Илон Маск и его сервис XChat.

Все описанные выше сложности с PIN-кодом в XChat, на самом деле, имеют под собой своеобразное основание.

Напомним, что, в отличие от WhatsApp и Signal, разработчики XChat решили хранить приватные ключи пользователей на своих серверах.

Так что в итоге с XChat?

И, конечно, хранить его, как и любые другие пароли, следует не в заметках, а в надежном менеджере паролей.

Отключение при помощи политик: в Admin Center пройти в раздел Settings → Integrated Apps, найти Copilot в списке Available Apps, выбрать Block.

Как отключить панель Copilot в EdgeДетектирование: на уровне NGFW или других сетевых журналов искать обращение к ресурсам copilot.microsoft.com, bing.com/chat, edgeservices.bing.com.

Блокировка с помощью политик: в панели управления: Apps → Additional Google services → Gemini app: OFF.

Блокировка с помощью политик: в корпоративных политиках Chrome необходимо установить: GenAILocalFoundationalModelSettings = 0, HelpMeWriteSettings = 2 (отключено), TabOrganizerSettings = 2, CreateThemesSettings = 2, DevToolsGenAiSettings = 2.

Как отключить Apple Intel…

More telemetry means better visibility – but also more data for threat hunters to sift through.

Then came an important decision: Focus on what matters for detection of threats at Black Hat.

Enriching with Network Context and reducing noiseA file submitted via HTTP doesn’t exist in isolation – it has network context.

It was about:Surfacing high-risk submissions automaticallyProviding network context for faster triageHelping threat hunters dismiss noise fasterThis workflow is far from perfect.

Driven by the needs of the community, Black Hat events showcase content directly from the community through Briefings presentations, Trainings courses, Summits, and more.

If you’ve ever troubleshot a complex workflow run, you know the drill: click into actions, expand inputs and outputs, scan logs, backtrack, repeat.

We’ve just released Workflow Run Summaries in Cisco XDR Automate: an on-demand, AI-generated summary that explains what happened during a workflow execution, where things went wrong, and why that matters, without forcing you to manually inspect every step.

What the feature doesWith a single click on “Generate Run Summary”, Cisco XDR Automate analyzes a completed workflow run and produces a concise, human-readable explanation of its execution.

Why this matters, especially for Agentic AIAs XDR Automate Workflows are increasingly triggered by Agent…

It is the hardest attack category in email security — for any vendor, any product, any architecture.

This balance — 98% threat detection alongside zero hard false positives — is what the 94% Total Accuracy Rating reflects.

What Independent Validation Means for Your Security StrategyEvery email security vendor publishes detection rates.

Read the full report for more insight into ETD’s comprehensive email security capabilities.

All performance data sourced from the SE Labs Advanced Security Test Report — Email (Protection), Cisco Secure Email Threat Defense, May 2026 (v1.0).

Caption: MCP integrations exposed to the local AI workflow for SOC investigation contextAt this stage, the system was already useful.

Caption: OpenClaw using the local Ollama model backend instead of an external model providerThe distinction is important.

I installed DefenseClaw alongside the OpenClaw environment, to add inspection and audit visibility around the agentic AI workflow.

Sending DefenseClaw events into Splunk made the AI workflow feel more operational and less experimental.

At Black Hat Asia, this became a practical way to explore what private AI for SOC workflows could look like.

Cisco has been a long-standing partner in securing Black Hat conferences worldwide, providing the critical network infrastructure that ensures safe connectivity for all attendees.

At Black Hat Asia 2026, we continued this tradition while introducing significant enhancements to our security capabilities through innovative integrations.

Resource ConnectorCisco Secure Access Resource Connector was deployed to provide secure remote access to critical systems.

Resource Connector solves this problem by creating secure path to the target, which is accessible from public URL generated by Secure Access platform.

Check out the other blogs from our team at Black Hat Asia 2026.

As is tradition at every Black Hat conference, Day 1 winds down with a quick reality check – what’s done, what’s broken, and what absolutely needs to go live by tomorrow.

Corelight traffic and detections were already flowing into Cisco XDR using OCSF-based ingestion built at Black Hat Europe 2025.

That’s the lesson Black Hat reinforces every time:Progress accelerates when you ask the right person the right question.

Check out the other blogs from our team at Black Hat Asia 2026.

Driven by the needs of the community, Black Hat events showcase content directly from the community through Briefings presentations, Trainings courses, Summits, and more.

The Black Hat server owners confirmed the Apache version was fully patched, ensuring no impact to Black Hat assets.

Cisco XDR correlated events and enriched them with Talos and other third-party threat intelligence feeds, confirming the issue and assigning priority.

An attendee was seen accessing a custom application hosted in their home country from the Black Hat network.

AI Reasoning AnalysisDrilled deeper into the AI reasoning behind the Cisco XDR storyboard findings.

Driven by the needs of the community, Black Hat events showcase content directly from the community through Briefings presentations, Trainings courses, Summits, and more.

Cisco celebrates our 10th year building and safeguarding the network for Black Hat Asia in Singapore.

We work with other official providers to bring the hardware, software and engineers to build and secure the Black Hat Asia network: Arista, Corelight, Jamf, MyRepublic and Palo Alto Networks.

Since 2017, Cisco has protected the Black Hat Asia network, beginning with automated malware analysis using Threat Grid.

Unveiling the Power of Integration: XDR, Splunk, Corelight, Arista and Palo Alto Networks in Action at Black Hat AsiaUplevelling Black Hat Threat HuntersCisco Secure Access with MCP Infrastructure at Black Hat Asia 2026The Essence of Black Hat – Collaboration with PartnersBlack Hat A…

One of the first things we notice walking into the Black Hat NOC/SOC to help setup was that no one cared about who you worked for.

That goal being to discover and protect Black Hat from attacks both internally and externally.

High Score, Low Threat: A 60-Second Triage StoryThe new agentic capabilities in Cisco XDR were enabled in our Black Hat tenant – and they didn’t disappoint.

Check out the other blogs from our team at Black Hat Asia 2026.

Driven by the needs of the community, Black Hat events showcase content directly from the community through Briefings presentations, Trainings courses, Summits, and more.

It was designed to be useful whether you had a team of 500 security analysts or a single IT person wearing multiple hats.

The new mathBefore Mythos and other frontier large language models (LLMs), the vulnerability lifecycle had a rhythm that most security teams had internalized.

It also means you need incident response capability for when prevention fails.

When everything has been tested and still was not enough, emergency incident response is the capability that gets you from compromised to recovered.

Because they operate at a layer of the security stack that is independent of how fast vulnerabilities are discovered.

That is why I am excited to share that Cisco SASE with Meraki is now generally available.

You keep the Meraki experience you know, then connect it to Cisco Secure Access for cloud-delivered Security Service Edge (SSE) protection.

What We BuiltCisco SASE with Meraki connects Meraki SD-WAN sites to Cisco Secure Access, Cisco’s cloud-delivered SSE solution.

With Cisco SASE with Meraki, Meraki AutoVPN can automatically establish secure primary and backup tunnels between enrolled MX sites and Cisco Secure Access.

Cisco SASE with Meraki gives Meraki customers a fast, secure, and resilient approach to bring SD-WAN traffic into Cisco Secure Access.

This is the shift from access control to action control.

To move from access control to action control, Agent Gateway will help answer five questions before a request is allowed to proceed:Who is the agent?

With Agent Gateway, Cisco extends these capabilities into the agentic workflow.

Duo will identify the agent process itself using Duo identity, extending naturally from user MFA to agent and non-human identities.

Duo will identify the agent process itself using Duo identity, extending naturally from user MFA to agent and non-human identities.

Why we are changing our cadenceThe fundamental scale of vulnerability discovery has shifted.

Seven days before each release, PSIRT will publish the list of technologies and platforms included in that drop.

Cisco PSIRT will provide ‘bundled’ CVEs (Common Vulnerability Exposures) tied to CWE categories (Common Weakness Enumerations).

If a finding is being addressed in a scheduled release, upgrading should negate the need to implement corner-case mitigations that do not scale.

The Cisco PSIRT is the gold standard for vulnerability disclosure and will drive this revolution – with significantly expanded tooling and cadence built for the new rate of discovery.

The National Institute of Standards and Technology (NIST) finalized its first PQC standards in 2024.

Cisco’s Quantum Resilience FrameworkCisco has developed a framework to articulate multiple levels of quantum resilience – each representing distinct capabilities designed to respond to new and emerging threats to confidential communication and product integrity.

It gives organizations a foundation as they progress toward more complete levels of quantum resilience.

Level 3 extends quantum resilience into identity and attestation.

Together, these levels give customers a practical way to evaluate quantum resilience.

For Microsoft, these partners are Microsoft Cloud Solution Providers (CSPs), and they help customers buy, manage, and optimize cloud services like Microsoft 365 and Microsoft Azure.

This helps us ensure that the Microsoft partner ecosystem remains healthy, compliant, and effective, and ultimately helps drive the best outcomes for our customers.

Partner vetting helps ensure that only legitimate organizations can enter the ecosystem, while CSP security posture improvements help enhance the operating standards of organizations already in the ecosystem.

In short, we have made a set of improvements to the security posture across the CSP ecosystem, both at the Microsoft platform layer and at the …

Frost & Sullivan’s 2026 Frost Radar™ for Cloud/Application Runtime Security (CARS) reflects this shift.

Why cloud security is being redefinedThe Frost Radar makes a clear point: cloud security is no longer about visibility or compliance alone.

These are the capabilities that define the next generation of cloud and application runtime security.

Learn moreRead Frost & Sullivan’s 2026 Frost Radar™ for Cloud/Application Runtime Security to see how leading vendors are evaluated—and how the category is shifting toward unified cloud and application runtime risk operations.

Explore Microsoft cloud security solutions to see how unified posture management, risk prioritization, and protection across t…

The quantum-safe timeline has changedFor years, planning for post-quantum cryptography (PQC) was framed as a future problem: important, inevitable, but distant.

At Microsoft, we are acting on this shift by bringing our quantum-safe timeline forward so organizations can begin the transition earlier and with greater confidence.

Accelerating our timelineIn response to these shifts, we are accelerating the Microsoft Quantum Safe Program (QSP) timeline with the goal of transitioning critical products and services to PQC by 2029.

We will continue to share technical guidance and operational best practices to help organizations adopt quantum-safe cryptography with confidence as they move from plann…

Prioritize risk with unified identity risk scoreA new unified identity risk score combines signals from across Microsoft Security into a single, explainable measure of an identity’s risk.

Prioritize identity risk and enforce protection in real time with the new unified identity risk score.

Organizations can use the new security tools and capabilities announced at Microsoft Build 2026 to innovate faster and scale AI adoption without sacrificing security.

In the Loop posts are your reliable source of what’s new across Microsoft Security and what it means for your security strategy.

Also, follow us on LinkedIn (Microsoft Security) and X (@MSFTSecurity) for the latest news and updates on cybers…

AI Application Series 1: Security considerations when adopting AI tools examined how AI adoption expands the enterprise attack surface.

AI Application Series 2: Detecting and analyzing prompt abuse in AI tools showed how indirect prompt injection can bias the output of a passive AI summarizer.

AI agents can plan multi-step tasks, decide which tools to invoke, and execute actions on behalf of the user.

This post focuses on one of its fastest-moving categories: tool misuse and agentic supply chain risk exploited through poisoned MCP tool metadata.

The tool name and user-facing summary remain unchanged, but the MCP tool description is silently modified.

Extension overviewThe extension we analyzed has the following attributes:Attribute Value Extension name Search for perplexity ai Extension ID flkebkiofojicogddingbdmcmkpbplcd Manifest version MV3 Version 2.2 Observed purpose Browser search override and redirect logic Referenced brand Perplexity AI Suspicious domain perplexity-ai[.

The runtime workflow we’ve observed demonstrates browser search redirection behavior:User enters search query into the Omnibox.

Monitor unauthorized changes to browser search settings, unusual extension permissions, and outbound traffic to intermediary or non-standard domains associated with search activity.

Learn moreFor the latest security research from the Micr…

]info Domain C2 domain recstrace[.

]info Domain C2 domain heliosup[.

]info Domain C2 domain fairyspells[.

Learn moreFor the latest security research from the Microsoft Threat Intelligence community, check out the Microsoft Threat Intelligence Blog.

To hear stories and insights from the Microsoft Threat Intelligence community about the ever-evolving threat landscape, listen to the Microsoft Threat Intelligence podcast.

Microsoft’s recognition as a Leader in The Forrester Wave™: Endpoint Management Platforms, Q2 2026 report reflects that shift—and the role Microsoft Intune plays in helping organizations manage what’s next.

Figure 1: Forrester Wave showing Microsoft in a Leader position for both strength of offering and strategyWhy Microsoft Intune is a leader in endpoint managementThe Forrester Wave™ Endpoint Management Platforms, Q2 2026 report includes eight endpoint management platform providers, assessed across current offering, strategy, and customer feedback.

Full details are in our announcement blog: Microsoft 365 adds advanced Microsoft Intune solutions at scale.

Bookmark the Microsoft Intune blog …

Organizations now require platforms that can:Correlate posture, runtime, identity, and data signals.

Learn moreRead Frost & Sullivan’s 2026 Frost Radar™ for Cloud-Native Application Protection Platforms (CNAPP) to see how leading vendors are evaluated—and how the category is shifting toward unified cloud risk operations platforms.

Explore Microsoft cloud security solutions to see how unified posture management, risk prioritization, and protection across the application lifecycle can help reduce cloud risk.

Bookmark the Microsoft Security blog to keep up with our expert coverage on security matters.

Also, follow us on LinkedIn (Microsoft Security) and X (@MSFTSecurity) for the latest news an…

Indicators of compromiseIndicator Type Description 8f32456359f209a63adfd24b94235e1727382ac7f7bb7f2bcaf754e721925b64 SHA-256 StealC 0215f734867bd71c57ff5c524d8cc670be5b4f1861b2c390cf46d18784a53624 SHA-256 StealC 2a0f053855da59b3b56812e580d7baeba59fc9493694722aa9e3f121ee3363f1 SHA-256 StealC 977b33a9b481cf714946b7d386865cd5d284312aa5ecfa0546c197b1003e1bde SHA-256 StealC b7d1f172ff3feafe65d47fd1cbe0cc249316371ae0e1cbe3a7c741c738b3353d SHA-256 Amadey 5.87 9383572a30ae5b76fadd0700fbd7a1aa7b05d0b6c8f9cdaef9b30a3e1f65d57d SHA-256 Amadey 5.86 5f5b25b2e35d404034d0d60975cf1ffbc6f141761ec3f4f15d6f7c6213a056f6 SHA-256 Amadey 5.80 98e504cc7125b79eda5491f40b998605a05f4cd968b961aab4cce7beb074fefe SHA-256 …

AI memory transforms an AI system from a stateless tool into a learning collaborator.

What AI memory is (and why it matters)AI systems use memory to retain and recall information across interactions.

Since AI memory attacks happen outside of their original context, defenses are often lower and forensics are harder.

Building safe AI memory is one of the most consequential challenges in AI.

Our AI memory strategy is guided by design principles for building safe memory systems.

Once inside, the threat actor shifted focus to persistence and control.

As DART correlated activity across the environment, investigators uncovered signs of a second, unrelated threat actor operating in parallel.

DART moved quickly to contain the active intrusion involving multiple threat actors and stabilize the environment, activating a structured response playbook focused on limiting threat actor impact and restoring control.

Continuous coordination with the customer, including daily briefings, ensured that containment actions were timely, aligned, and effective in reducing further threat actor movement.

Today’s modern cyberattacks can quickly evolve beyond a single incident-blending tac…

It does not block JavaScript that is rendered by a headless browser owned by an AutoGen agent on the same machine.

This work informs guidance for developers and detections for defenders across Microsoft Defender, Microsoft Defender for Cloud, Microsoft Entra and Microsoft 365.

Customers using Microsoft Defender, Microsoft Defender for Cloud, and Microsoft Entra can use these controls to detect, contain, and investigate related activity.

This work informs guidance for developers and detections for defenders across Microsoft Defender, Microsoft Defender for Cloud, Microsoft Entra and Microsoft 365.

Customers using Microsoft Defender, Microsoft Defender for Cloud, and Microsoft Entra can use t…

This year, Microsoft commissioned Forrester Consulting to conduct a Total Economic Impact™ (TEI) study for our AI-first, end-to-end security platform.

What end-to-end security deliversBased on in-depth interviews with a survey of 362 customers and 11 security decision-makers using Microsoft Security solutions, the Forrester study revealed the impact of consolidating with Microsoft Security.

Security for AI – New solutions like Microsoft Agent 365 with foundations of Microsoft Security, extend identity, governance, and control to AI agents, so customers can adopt them with confidence.

AI for Security – Microsoft Security Copilot, together with Microsoft Defender, Entra and Purview provides A…

Microsoft Threat Intelligence observed a large-scale npm supply chain attack affecting 140+ packages across the mastra and @mastra scopes on the npm registry.

Microsoft Defender Antivirus, Microsoft Defender for Endpoint, and Microsoft Defender XDR provide detections and hunting coverage for suspicious Node.js execution, malicious package behavior, reflective code loading, persistence activity and command-and-control communication.

The easy-day-js dependency was not present in any prior versions of mastra npm packages.

Microsoft Defender XDR detectionsMicrosoft Defender XDR customers can refer to the list of applicable detections below.

Advanced huntingThe following KQL queries can be used …

Here, threat actors may simply seed prompt injections on websites in hope of corrupting AI systems that browse them.

Early experiments revealed a significant volume of "benign" prompt injection text, which illustrates the complexity of distinguishing between functional threats and harmless content.

Many prompt injections were found in research papers, educational blog posts, or security articles discussing this very topic.

(Source: GitHub/swisskyrepo)When searching for prompt injections naively, the majority of detections are benign content – false positives in our case.

Malicious: ExfiltrationWe were able to observe a small number of prompt injections that aim at theft of data.

Recognizing the risks associated within the complex modem firmware, Pixel 9 shipped with mitigations against a range of memory-safety vulnerabilities.

Following our previous discussion on "Deploying Rust in Existing Firmware Codebases", this post shares a concrete application: integrating a memory-safe Rust DNS(Domain Name System) parser into the modem firmware.

Hook-up Rust to modem firmwareBefore building the Rust DNS library, we defined several Rust unit tests to cover basic arithmetic, dynamic allocations, and FFI to verify the integration of Rust with the existing modem firmware code base.

Pixel modem firmware already has a well-tested and specialized global memory allocation system to…

This project represents a significant step forward in our ongoing efforts to combat session theft, which remains a prevalent threat in the modern security landscape.

Session theft typically occurs when a user inadvertently downloads malware onto their device.

Once active, the malware can silently extract existing session cookies from the browser or wait for the user to log in to new accounts, before exfiltrating these tokens to an attacker-controlled server.

How DBSC WorksDBSC protects against session theft by cryptographically binding authentication sessions to a specific device.

The issuance of new short-lived session cookies is contingent upon Chrome proving possession of the correspondi…

Staying ahead of the latest indirect prompt injection attacks is critical to our mission of securing Workspace with Gemini.

In our previous blog “Mitigating prompt injection attacks with a layered defense strategy”, we reviewed the layered architecture of our IPI defenses.

Synthetic data generationAfter we discover, curate, and catalog new attacks, we use Simula to generate synthetic data expanding these new attacks.

We partition the synthetic data described above into separate training and validation sets to ensure performance is evaluated against held-out examples.

This process leverages the newly generated synthetic attack data described on this blog, to create a robust, end-to-end evalu…

2025 marked a special year in the history of vulnerability rewards and bug bounty programs at Google: our 15th anniversary 🎉🎉🎉!

Coming back to 2025 specifically, our VRP once again confirmed the ongoing value of engaging with the external security research community to make Google and its products safer.

Vulnerability Reward Program 2025 in NumbersWant to learn more about who’s reporting to the VRP?

Tip: Want to be informed of new developments and events around our Vulnerability Reward Program?

Follow the Google VRP channel on X to stay in the loop and be sure to check out the Security Engineering blog, which covers topics ranging from VRP updates to security practices and vulnerability des…

To stay ahead of the curve, the technology industry must undertake a proactive, multi-year migration to Post-Quantum Cryptography (PQC).

To bring these critical protections to the wider developer community with minimal friction, the transition will be supported through Play App Signing.

Play App Signing leverages Google Cloud KMS, which helps ensure industry-leading compliance standards, to secure signing keys.

Empower Developers : The inclusion of ML-DSA support within Android Keystore and Play App Signing allows developers to safeguard their users and application.

: The inclusion of ML-DSA support within Android Keystore and Play App Signing allows developers to safeguard their users and …

Today we're announcing a new program in Chrome to make HTTPS certificates secure against quantum computers.

Instead, Chrome, in collaboration with other partners, is developing an evolution of HTTPS certificates based on Merkle Tree Certificates (MTCs), currently in development in the PLANTS working group.

Since MTC technology shares significant architectural similarities with CT, these operators are uniquely qualified to ensure MTCs are able to get off the ground quickly and successfully.

The Chrome Quantum-resistant Root Program will operate alongside our existing Chrome Root Program to ensure a risk-managed transition that maintains the highest levels of security for all users.

First, we…

For Majik, Scam Detection was the intervention he needed: “The warning is what made me pause and avoid a bad situation”.

As scammers evolve their tactics and create more convincing and personalized threats, we’re using the best of Google AI to stay one step ahead.

Expanding Scam Detection for Calls to Samsung DevicesTo help protect you during phone calls, Scam Detection alerts you if a caller uses speech patterns commonly associated with fraud.

Scam Detection for phone calls on Google Pixel devices is available in the U.S., Australia, Canada, India, Ireland, and the UK.

Powered by Gemini’s on-device model, Scam Detection provides intelligent protection against scam calls while ensuring that…

Upgrading Google Play’s AI-powered, multi-layered user protectionsWe’ve seen a clear impact from these safety efforts on Google Play.

As Android’s built-in defense against malware and unwanted software, Google Play Protect now scans over 350 billion Android apps daily.

This proactive protection constantly checks both Play apps and those from other sources to ensure they are not potentially harmful.

Looking aheadOur top priority remains making Google Play and Android the most trusted app ecosystems for everyone.

Thank you for being part of the Google Play and Android community as we work together to build a safer app ecosystem.

That’s why we're committed to providing multi-layered defenses that help protect you before, during, and after a theft attempt.

Today, we're announcing a powerful set of theft protection feature updates that build on our existing protections, designed to give you greater peace of mind by making your device a much harder target for criminals.

These updates are now available for Android devices running Android 16+.

More User Control for Failed Authentications: In Android 15, we launched Failed Authentication Lock, a feature that automatically locks the device's screen after excessive failed authentication attempts.

This feature is now getting a new dedicated enable/disable toggle in settings,…

These initiatives, driven by Ballots SC-080, SC-090, and SC-091, will sunset 11 legacy methods for Domain Control Validation.

What’s Domain Control Validation?

Domain Control Validation is a security-critical process designed to ensure certificates are only issued to the legitimate domain operator.

Sunsetted methods relying on email:Sunsetted methods relying on phone:Sunsetted method relying on a reverse lookup:For everyday users, these changes are invisible - and that’s the point.

These changes push the ecosystem toward standardized (e.g., ACME), modern, and auditable Domain Control Validation methods.

Partnership with ArmOur goal is to raise the bar on GPU security, ensuring the Mali GPU driver and firmware remain highly resilient against potential threats.

We partnered with Arm to conduct an analysis of the Mali driver, used on approximately 45% of Android devices.

This approach allowed us to roll out the new security policy broadly while minimizing the impact on developers.

This effort spans across Android and Android OEMs, and required close collaboration with Arm.

The Android security team is committed to collaborating with ecosystem partners to drive broader adoption of this approach to help harden the GPU.

We built on Gemini's existing protections and agent security principles and have implemented several new layers for Chrome.

To further bolster model alignment beyond spotlighting, we’re introducing the User Alignment Critic — a separate model built with Gemini that acts as a high-trust system component.

A flow chart that depicts the User Alignment Critic: a trusted component that vets each action before it reaches the browser.

The User Alignment Critic runs after the planning is complete to double-check each proposed action.

Looking forwardThe upcoming introduction of agentic capabilities in Chrome brings new demands for browser security, and we've approached this challenge with the same ri…

Android uses the best of Google AI and our advanced security expertise to tackle mobile scams from every angle.

Over the last few years, we’ve launched industry-leading features to detect scams and protect users across phone calls, text messages and messaging app chat notifications.

To help combat these types of financial scams, we launched a pilot earlier this year in the UK focused on in-call protections for financial apps.

The UK pilot of Android’s in-call scam protections has already helped thousands of users end calls that could have cost them a significant amount of money.

We’ve also started to pilot this protection with more app types, including peer-to-peer (P2P) payment apps.

Secure by DesignWe built Quick Share’s interoperability support for AirDrop with the same rigorous security standards that we apply to all Google products.

Secure Sharing Channel: The communication channel itself is hardened by our use of Rust to develop this feature.

On Android, security is built in at every layer.

On Android, security is built in at every layer.

Secure Sharing Using AirDrop's "Everyone" ModeTo ensure a seamless experience for both Android and iOS users, Quick Share currently works with AirDrop's "Everyone for 10 minutes" mode.