Когда коммерческие модели отказались выполнять задачу, их быстро заменили локальные собратья.

Публичная ссылка снимает сквозное шифрование даже при Advanced Data Protection

Стройка начнётся в 2027 году, цену контракта и карту покрытия не раскрыли

Эксперимент показал, насколько сильно могут расходиться ощущения модели и её объяснения.

Европа теряет продукты после кибератак.

Google знает о проблеме, но владельцам смартфонов пока приходится рассчитывать лишь на себя.

Деньги ушли переводами в другие банки, возможно, для обмена на криптовалюту

Разработчики хотят использовать технологию при ремонте подводных сооружений.

Вредоносный код сидел на CDN издателя с 27 сентября, а чистка вышла 5 ноября

Оказалось, что расстояние между переживаниями можно проследить по активности нервной системы.

Как развивались системы SGRC в России и GRC за рубежомНа международном рынке GRC-платформы существуют уже несколько десятилетий.

В августе компания опубликовала документ «Innovation Insight: Cyber GRC Streamlines Governance», а в апреле 2026 года представила новое исследование «Innovation Insight: Cyber GRC».

Три общих направления развития SGRC и Cyber GRCРазработчики SGRC и Cyber GRC всё чаще стремятся объединить технические данные, оценку рисков и управленческие процессы.

Поэтому SGRC и Cyber GRC теперь связывают информацию об активах и бизнес-процессах с угрозами, уязвимостями, результатами аудитов и реализованными мерами защиты.

SGRC и Cyber GRC как прослойка между источниками данных и …

Вместе с экспертами разбираем, что опаснее — «перезаложить» или «недозаложить» мощности, и как облака помогают бизнесу справляться с сезонными нагрузками.

ВведениеКогда-то сезонность в ретейле была предсказуемой: «красный океан» с сентября по декабрь, мёртвый сезон в январе и постепенный рост к лету.

Как на самом деле проверяют нагрузкуНиколай Минаков описывает, как это происходит в РИВ ГОШ:При расчётах нужно смотреть на механики рекламных акций и поведение пользователя в целом.

Позиция Николая Минакова такая: облака — не благо и не зло, а инструмент, который нужно правильно использовать.

Станислав Попов предупреждает, что дублирование не работает: расчёт на размещение копии в облаке как на…

Одно и то же число нужно и на основном слайде, и в summary, и в финальном выводе.

Гейты работают не с исходными данными, а с готовым артефактом: текстом, извлечённым из PDF, структурой слайдов и результатом рендера.

Общий смысл всех трёх групп один: отчёт выглядит готовым только после того, как прошёл гейты, а не после того, как отрисовался.

Теперь оно начинается не с вопроса «а всё ли вообще сошлось?», а с вопроса «правильно ли мы это интерпретируем?».

Где это не нужно и что не ловитЛегко прочитать всё предыдущее как «стройте CI для любой презентации».

Причём там обсуждалась реальная практика, в том числе и не вполне однозначный опыт.

В сочетании с языком Python и ИИ-моделью GigaChat от Сбера она позволяет создавать тестовые рассылки в электронной почте и мессенджерах.

Однако как для очень крупных, так и для совсем небольших компаний бесплатные продукты, скорее всего, не подойдут.

Одну из таких использовали и для организации обучения и тестирования сотрудников AM Live.

Это будет снижать их эффективность и, что хуже, создавать иллюзию защищённости и в итоге может приводить к возникновению инцидентов.

Linux-инфраструктура особенно выделяется своей сложностью как для атакующих, так и для ИБ-специалистов, защищающих её.

Его нужно проводить по каждой системе отдельно, и в крупной инфраструктуре с сотнями серверов это кардинально меняет экономику проверки.

Что изучать и на что обращать вниманиеПервое, с чего стоит начинать на каждой системе, — список процессов и сетевых соединений.

Специфика закрепления в Linux-системахЗлоумышленники используют специальный набор техник для закрепления в Linux-инфраструктуре, и часть из них сложно обнаружить стандартными средствами.

Проверка переменной LD_PRELOAD в «/etc/ld.so.preload» и в окружении подозрительных процессов — обязательный пункт аудита, которы…

Как и в других отраслях, использование ИИ — один из путей снижения издержек и роста производительности труда.

К тому же для ИТ-отрасли, которая активно предлагает продукты с ИИ, не использовать такие средства самой было бы просто нелогично.

Владимир Лавров поделился опытом использования ИИ как для оптимизации бизнес-процессов, так и для ускорения разработки.

Поэтому нужно сначала выстроить методологию, платформу и инфраструктуру, затем определить задачи для ИИ и только после этого масштабировать автоматизацию.

Некоторые показатели внедрения ИИ в российских компанияхТакже использование ИИ создаёт большие риски в сфере подготовки кадров.

Для ЦОДов такой механизм может ускорить запуск новых площадок, но не отменяет требования к непрерывности их работы.

Она также поможет ускорить ввод и не ждать строительства дополнительных электростанций и сетей.

При подключении по IV категории то оборудование, которое раньше служило аварийным резервом, берёт на себя роль второго потока обеспечения непрерывной работы объекта.

Надёжность всего дорожеКак именно IV категория надёжности в качестве сценария запуска ЦОДов повлияет на стоимость их сервисов, рынок пока только считает.

ВыводыIV категория надёжности не отменяет требования ЦОДа к непрерывности работы — она переносит часть задачи с внешней энергосистемы на самого оператора.

Выбор СУБД: универсальность против специализацииБудущее за универсальными СУБД, где есть и транзакционная, и аналитическая часть, или специализация останется?

Алексей Викулин согласился, что всё идёт от задачи, но большинство задач бизнеса соединяют потребность и в аналитике, и в транзакциях.

К SQL Server совместимость 98%, и к ним прилагаются компоненты инфраструктуры вроде Service Broker и SSRS (SQL Server Reporting Services).

Гарантию совместимости может дать только вендор прикладного решения, и идеальный вариант — когда вендоры СУБД и приложения работают в синергии.

Высокий порог входа требует от вендоров упрощения администрирования, развития инструментов управления СУБД и обучения спец…

Ретейл — цель номер одинНа ретейл приходится около 25 % всех утечек данных в России и 33 % в мире: больше, чем на любую другую отрасль.

У среднего ретейлера сотни интеграций, многие из которых давно забыты и не обновляются.

Полномочия сервиса рассчитываются централизованно и передаются в самом токене, а не зашиваются в конфигурацию.

Готовое решение обходится бизнесу выгоднее самописной логики на фронте и при этом делает вход проще, а не сложнее.

Он значительно усиливает защиту данных, передаваемых между аутентификатором и сервером, от перехвата и служит для входа в почту, CRM-систему и корпоративный VPN.

NAC перестал быть экзотикой: сегодня он определяет, кто и что попадает в корпоративную сеть, куда и на каких условиях.

Network Access Control перестал быть экзотикой и стал инструментом, который определяет, кто и что попадает в сеть, куда и на каких условиях.

Станислав Калабин согласился и добавил, что NAC всегда работает в комплексе с сетевым оборудованием и не может быть самостоятельным решением.

Появились разнородные устройства и несколько видов подключений, которые нужно контролировать, и без централизованного инструмента, который даёт картину и позволяет управлять, мониторить и реагировать, уже сложно.

Финальный опрос показал, планируют ли зрители усиливать контроль сетевого доступа по…

ВведениеПри выборе DLP-системы бизнесу приходится искать баланс между возможностями защиты и затратами на её внедрение и эксплуатацию.

Поэтому при выборе DLP важно учитывать не только стоимость лицензии и количество контролируемых каналов, но и совместимость с ИТ-инфраструктурой, потребление ресурсов, отказоустойчивость и возможности автоматизации.

«СёрчИнформ КИБ» работает на серверах под управлением Windows и Linux, контролирует ПК на Windows, Linux и macOS.

Управлять КИБ на любой инфраструктуре можно из десктоп-приложения и в единой веб-консоли в браузере с любого устройства.

«СёрчИнформ КИБ» поддерживает разные типы блокировок — по действиям, по контексту и по контенту.

Продукт относится к платформе «Р7-Офис», включённой в Реестр отечественного ПО, что позволяет применять его в госучреждениях и компаниях с госучастием.

Такой файл может включать около миллиона строк, однако «P7-Аналитика» позволяет обрабатывать огромные массивы данных без потери производительности.

Показатели выгружаются преимущественно из учётных и CRM-систем в виде таблиц данных и представляют собой числовые значения интересующей позиции учёта.

Загрузка показателейЧтобы загрузить табличный файл или подключить корпоративный источник данных (например, 1C или Битрикс24), нужно выбрать вкладку «Загрузка данных» в разделе «Настройки» главного меню программы.

Таким образом, пользователь может с…

Наглядная архитектура ИИ-агентаГотовые ИИ-агенты и ассистенты от российских разработчиковЧат-бот, который просто отвечает на вопросы, уже почти ушёл в прошлое.

Чтобы отличить ИИ-агента от обычного ИИ-ассистента и копилота, лучше всего оценивать уровень автономности, способность к планированию и степень участия человека:ИИ‑ассистент.

Крупные российские компании уже запустили продвинутых ИИ-агентов для собственных нужд.

Компания может проверить, какие данные и сервисы использовал агент при выполнении поручения и на чём основан результат.

Она позволяет создавать автономных ИИ-агентов и автоматизировать бизнес-процессы, поддерживая как российские модели YandexGPT и GigaChat, так и зарубежные LL…

Это не доказывает универсальную неразличимость трафика для любых моделей и методов анализа.

Для ML‑эксперимента я обучил Random Forest глубиной 3 на признака распределения размеров пактов, включая max‑len и count.

Но производительность‑ это не единственное свойство сетевого протокола, которое стоит измерять.

Если мультиплексор Регулярно создает один и тот же набор размеров кадров и пакетов, этот профиль может стать статистически устойчивым.

Это сравнение касается именно p95, а не общей скорости протоколаПроверка корректности и устойчивостиПроизводительность имеет смысл только при корректной обработке потоков и соединений.

Как убедиться, что код сервиса в собранном артефакте прошел QG и что в прод-кластер попал именно он?

Здесь QG всегда работает в блоке: если в новом образе есть проблемы безопасности, пайплайн падает.

Команда добавляет образ в отдельный список для ручной подписи в нашем специальном репозитории и создает MR. Образ проходит те же проверки, а мы подтверждаем аппрувом.

Если в базовом образе нашли новую уязвимость, его владельцы узнают об этом самостоятельно, без нашего участия: уведомление приходит прямо в их канал.

Но на этом жизненный путь образа не заканчивается, он продолжает работать в проде и в нем могут появиться новые проблемы безопасности.

Как убедиться, что код сервиса в собранном артефакте прошел QG и что в прод‑кластер попал именно он?

Термины, которые будут употребляться дальше:Аттестация — запись о том, что образ прошел проверки.

Здесь QG всегда работает в блоке: если в новом образе есть проблемы безопасности, пайплайн падает.

Команда добавляет образ в отдельный список для ручной подписи в нашем специальном репозитории и создает MR. Образ проходит те же проверки, а мы подтверждаем аппрувом.

Если в базовом образе нашли новую уязвимость, его владельцы узнают об этом самостоятельно, без нашего участия: уведомление приходит прямо в их канал.

Мы пополнили запасы, и сейчас в магазине «Хакера» снова доступны все четыре дизайна фирменных бейсболок .

Если в прошлый раз нужный вариант закончился или ты просто откладывал покупку на потом, самое время наверстать упущенное.

Все бейсболки рассчитаны на долгую носку: плотная ткань хорошо держит форму, удобный регулятор на кнопке помогает подобрать комфортную посадку, а объемная вышивка выглядит аккуратно и хорошо держится со временем.

В коллекции представлены четыре варианта: два с нашим фирменным лого и два с надписью «Хакер».

Бейсболки «Хакера» — это:плотная ткань, которая хорошо держит форму;удобная регулируемая посадка;объемная вышивка;четыре варианта дизайна на выбор.

Выяснилось, что хакеры готовились к ограблению несколько месяцев и использовали сразу несколько точек входа: вредоносную версию Homebrew, фальшивые собеседования, кастомную малварь и внутренний ИИ-инструмент компании.

Согласно отчету Binance, первые следы атаки относятся еще к июню 2026 года.

20 октября хакеры использовали этот зараженный ноутбук и внутренний ИИ-инструмент Binance, чтобы получить доступ к машинам еще двух инженеров.

Также подчеркивается, что после атаки в Binance перестроили затронутую инфраструктуру кошельков и внутренний ИИ-инструмент, заменили скомпрометированные устройства и отозвали все связанные с ними учетные данные и токены.

Расследование инцидента еще продолжается,…

Разработчики Flipper One начали подготовку к запуску кампании на Kickstarter и открыли предварительные заказы на новый девайс.

Правда, пока покупателям предлагают не сам Flipper One, а купон за 20 долларов США, который позволит приобрести устройство на Kickstarter по сниженной цене.

В настоящее время купон на Flipper One стоит 20 долларов США, а ранняя цена устройства на Kickstarter заявлена на уровне 379 долларов США.

«Мы не хотим стать очередным скам-проектом, который так и не выпустил продукт», — объясняет Жовнер.

На текущем этапе доставка Flipper One будет доступна только для пользователей из США и стран Европы.

Новая волна атак на холодильные системы затронула более 115 магазинов в Бельгии, Нидерландах, Швеции, Люксембурге, Ирландии и Эстонии.

Также атаки затронули 13 магазинов SuperValu в Ирландии, семь Coop и как минимум четыре ICA в Швеции, один магазин Selver в Эстонии, а также не менее 17 мясных лавок и небольших магазинов в Нидерландах.

Отметим, что похожие инциденты происходили и в США: в августе 2026 года морозильники вышли из строя как минимум в шести магазинах на американских военных базах, и в одном случае оборудование ночью перешло в режим разморозки и нагрело продукты.

В частности, в Эстонии подтвердили компрометацию старой системы Danfoss, а в Бельгии сообщалось об атаках на оборудов…

На бирже Binance 3 ноября восстановили вывод 51 криптовалюты в сетях Ethereum и Solana.

После инцидента на Binance заморозили вывод средств и начали возмещать похищенные активы за счет собственных резервов.

Ранее в тот же день биржа восстановила вывод пяти стейблкоинов в сети Ethereum: RLUSD, USD1, TUSD, FDUSD и XUSD.

Таким образом, только 3 ноября в сети Ethereum стали доступны для вывода 36 активов.

Приоритет отдают токенам, на вывод которых был наибольший спрос за последнюю неделю.

Специалисты Google совместно с полицией Японии и несколькими ИБ-компаниями нарушили работу ботнета XCPE, в который входило более 1,3 млн Android-устройств.

В Google заявляют, что Videostrong годами встраивала малварь в устройства разных марок и моделей, постоянно дорабатывая возможности для уклонения от обнаружения и работы с разными преступными группами.

При этом в Google уверены, что речь не идет о случайной ошибке или действиях отдельного сотрудника.

Однако после проведения расследования в Google разорвали партнерские отношения с производителем и запретили ему выпускать устройства с приложениями Google.

Кроме того, Videostrong и ее будущим дочерним и аффилированным компаниям запретили пр…

По их сло­вам, зло­умыш­ленни­ки получа­ли дос­туп к Linux-хос­там, меняли кон­фигура­цию Tor и в некото­рых слу­чаях прев­ращали обыч­ные узлы в выход­ные, что­бы перех­ватывать SSH-соеди­нения.

От­меча­ется, что на государс­твен­ные орга­низа­ции приш­лось 18,5% инци­ден­тов высокой кри­тич­ности, и это боль­ше, чем на про­мыш­ленность (16,6%) и ИТ‑сек­тор (15,3%).

В ата­ках на малый и сред­ний биз­нес шиф­роваль­щики встре­чались чаще, чем в ата­ках на круп­ные ком­пании: в 39% слу­чаев про­тив 25%.

количес­тво про­филь­ных вакан­сий сок­ратилось на год к году, в том чис­ле спрос на прог­раммис­тов упал на , а на тес­тиров­щиков — на .

Чис­ло таких вакан­сий в пищевой про­мыш­леннос­ти у…

]com, относящегося к инфраструктуре DebugBear — сервиса Real User Monitoring (RUM), который помогает отслеживать производительность сайтов.

Вредонос проверял, авторизован ли пользователь в Polymarket, а при наличии активной сессии использовал штатные торговые функции платформы для несанкционированных операций.

Как теперь сообщили представители Polymarket, суммарно от этой атаки пострадали 726 кошельков.

Вместе с примерно 2,7 млн долларов США, похищенными напрямую, общая сумма компенсаций составит 3,9 млн долларов США.

Так, что в июне 2026 года компрометация другого стороннего поставщика тоже привела к внедрению вредоносного скрипта во фронтенд платформы.

Исследователи из компании Socket обнаружили масштабную вредоносную кампанию, построенную вокруг расширений для Chrome, которые подменяли поисковую систему в браузерах жертв и направляли запросы через подконтрольные операторам серверы.

Всего с этой кампанией связали 319 расширений с 13,4 млн установок.

]com, а в одном случае — на страницу ошибки Cloudflare.

Крупнейшим недавно активным кластером этой кампании стал Bing-Search, в который вошли 37 расширений, часто рекламировавшиеся через Bidbrain и насчитывавшие около 2,2 млн пользователей.

В настоящее время большинство обнаруженных расширений уже удалили из Chrome Web Store, однако специалисты подчеркивают, что продолжают появляться новые.

Все статьи, PDF-архив, скидки и другие бонусыПредставители хостинг-провайдера Beget сообщили, что масштабный сбой, начавшийся в ночь на 2 ноября 2026 года, стал результатом «массированной кибератаки».

Точные сроки завершения работ в Beget не называют.

Масштабная атака на инфраструктуру компании и вызванные ею последствия временно препятствуют надлежащему исполнению части наших обязательств по предоставлению услуг.

Следует отметить, что по состоянию на 3 ноября в техподдержке Beget не называют даже примерные сроки полного восстановления хостинга и облачных сервисов.

В Beget официально уведомили клиентов о наступлении обстоятельств непреодолимой силы из-за кибератаки.

В результате злоумышленники получили доступ к данным клиентов, включая их имена и email-адреса.

Представители Chainalysis пишут, что атакующие сумели проникнуть во внутренние системы компании и получили доступ к информации о пользователях платформы: ID, полным именам, email-адресам ролях пользователей в организациях.

При этом пока расследование не выявило признаков того, что хакеры могли получить доступ к содержимому расследований Chainalysis, учетным данным или сессионным токенам.

Параллельно в компании закрывают уязвимости, усиливают защиту и проводят масштабную проверку платформы вместе с внешними ИБ-экспертами.

В связи с утечкой данных в Chainalysis предупреждают клиентов о возможном фи…

October 2026 brought another wave of cyber threats targeting US businesses, with attackers exploiting trusted platforms, legitimate authentication processes, and everyday business workflows.

For enterprises, these campaigns raise the stakes beyond individual security incidents, increasing the risk of financial losses, data breaches, and costly operational disruption.

SkyW4lker phishkit attack overviewUncovering the Full Campaign in Seconds with Related Threat ContextOne phishing URL can reveal an entire threat operation.

Starting with a SkyW4lker sandbox session, researchers pivoted directly from Related Threat Context into TI Lookup to investigate IP address 198.23.223.185, revealing relat…

Apple has revealed that it plans to start checking public iCloud links for harmful content starting with iOS 27.3, iPadOS 27.3, macOS 27.3, and visionOS 27.3.

The change specifically applies to scenarios where users share iCloud content, such as photos in iCloud Photos or files in iCloud Drive, by sharing a link and making it accessible to "Anyone with the link."

When users choose this option, it makes the content accessible to anyone who has the link, including Apple, the iPhone maker said.

The tech giant has also warned that if users attempt to upload harmful content, it can be removed or deleted at any time.

"Apple may also take action against your Apple Account, including blocking or di…

Describing the threat as active and ongoing, the activity involves the use of publicly-available AI-driven offensive security tools like ARTEX, PentAGI, Cairn, and CyberStrikeAI.

In addition, the attacks involve the operators taking steps to delete logs and tamper with endpoint security tools in an attempt to complicate detection and incident response efforts.

Copycat ARTEX Version Hands Out Root ShellThe abuse of open-source penetration testing tools like ARTEX in real-world intrusions prompted its developer to take down the repository from GitHub.

In all, a total of 1,645 hosts have been found serving the ARTEX console as of November 4, 2026.

The people they were after had already chosen …

The new 2.90 Patch 3 firmware fixes a flaw now tracked separately as CVE-2026-107441, which the exploit relies on.

It was posted on October 23, and the vendor announced it in an advisory earlier this week.

It tied the attacks to CVE-2026-7273, and the researchers say the exploit it described matches the one they found.

The researchers say the exploit works against Patch 2 without changes.

The researchers say they will soon publish a smaller version of the exploit as a proof of concept.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a medium-severity security flaw impacting multiple Apple operating systems to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation.

It was addressed by Apple in May 2024 with improved checks in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, watchOS 10.5, and Safari 17.5.

The vulnerability was demonstrated as a zero-day at the Pwn2Own Vancouver hacking contest held in March that year.

The zero-click exploit chain combines CVE-2025-43529, a remote code execution flaw in WebKit, and CVE-2025-43529, the pointer authentication codes (PA…

OpenAI on Wednesday detailed a pipeline that employed an upcoming cyber-focused artificial intelligence (AI) model to validate and patch 948 local privilege escalation vulnerabilities in Linux for $1.2 million in API costs.

The findings build upon 24 LPE exploits that OpenAI revealed were discovered by its GPT‑5.5‑Cyber model back in June 2026.

"The total run cost $1,213,430 in API credits, or $1,279 per LPE exploit.

The NCSC also pointed out that organizations will have to evolve their internal patching and testing processes to meet this new pace of vulnerability discovery.

OpenAI said the rate of vulnerability discovery by frontier models needs to be matched by automated patch generation …

A flaw in APT, the package manager for Debian and Ubuntu, allows an attacker who can modify package downloads to swap a checked package for their own.

The attacker's code then runs as root, according to advisories that Debian, Ubuntu, and APT's developers published on November 4.

APT's developers, who call the flaw critical, say updates for Ubuntu and its Ubuntu Pro subscription service are being released.

For Debian 11, whose Debian long-term support ended on August 31, APT's developers have published a fixed version, 2.2.5.

The attacker uses HTTP redirects and ordinary temporary server errors to make APT retry the download, APT's developers say.

SonicWall has warned of two vulnerabilities impacting end-of-life Global Management System (GMS) systems that it said will not be patched.

Details of the security flaws, which affect SonicWall GMS 9.5.2 and earlier versions, are below -CVE-2026-109593 (CVSS score: 9.1) - An unauthenticated file read vulnerability that could allow an attacker with network access to read internal GMS files, potentially exposing sensitive information.

(CVSS score: 9.1) - An unauthenticated file read vulnerability that could allow an attacker with network access to read internal GMS files, potentially exposing sensitive information.

CVE-2026-109594 (CVSS score: 6.8) - A post-authentication SQL injection vulnera…

Cybersecurity researchers have disclosed details of an OpenAI Codex jailbreak bundle that's designed to modify an artificial intelligence (AI) agent's trusted instructions to insert advertisements for a third-party AI gateway.

Called Haiou (meaning Seagull in Chinese), the jailbreak modifies OpenAI Codex's configuration files to inject advertisements for the jailbreak author's website into subsequent agent responses.

Prompt adware extends this sketchy behavior to AI agents by means of a jailbreak that defeats the model's safety training and content guardrails.

What's more, the jailbreak has been bundled within Codex-X, an open-source Chinese visualization tool for configuring Codex through …

"Then, the delivery infrastructure delivers a platform-specific N-day exploit chain targeting either iOS or Android."

No less than three different exploits have been identified -Class A , which targets iOS devices running iOS 16.7 and exploits CVE-2025-43529 (the same vulnerability exploited by DarkSword) and CVE-2024-27834 to deliver JavaScript malware for cookie theft.

, which targets iOS devices running iOS 16.7 and exploits CVE-2025-43529 (the same vulnerability exploited by DarkSword) and CVE-2024-27834 to deliver JavaScript malware for cookie theft.

Class B , which targets iOS devices running iOS 18.5 and exploits the DarkSword exploit chain comprising CVE-2025-43529, CVE-2026-20700, …

A critical flaw in Ruby on Rails could allow an unauthenticated attacker to write arbitrary files on an app's server by uploading a crafted file if the app processes uploads using ImageMagick.

The flaw is in Active Storage, the part of Rails that handles file uploads.

Active Storage imposes no limits on which coders an upload can use, so the server's own ImageMagick policy was the only limit.

In July, Rails fixed a different critical Active Storage flaw, CVE-2026-66066, which affected apps that use libvips instead of ImageMagick.

The same releases fix a second Active Storage flaw, GHSA-v924-7rp8-4mxh, which Rails rates high with a CVSS score of 8.8.

Two flaws in the Xen hypervisor allow a malicious guest virtual machine (VM) to read and write the memory of other VMs on the same host, including dom0.

All Xen versions from 4.6 onward are vulnerable, while 4.5 and earlier are not.

The flaws are tracked as CVE-2026-102703 and CVE-2026-102704, under Xen advisory XSA-523.

Each VM tells Xen which of its memory pages other VMs may use, and Xen checks those permissions.

To save time on a batch of copies within the same memory page, Xen reuses checks it has already made.

Nearly every agent security pitch now ends on the same promise: the product stops the bad action in real time.

Agent runtime needs the same move, with a complication the earlier one never faced: the application layer belongs to someone else.

The full argument for where enforcement belongs is in From AI Runtime to Agent Runtime.

The full ninety-day sequence, the four-level self-assessment and all fifteen vendor questions are in The Agent Security Checklist: Your First 90 Days.

About RecoReco is the leader in Agent Security.

We uncovered a SlippyNunchucks DNS hijacking operation, abusing Sogou Input Method’s use of insecure HTTP communications.

Sogou Input Method (also known as Sogou Pinyin) is one of the most widely used Chinese input method editors (IMEs) for typing Chinese characters on computers and mobile devices (see Figure 2).

Sogou Input Method uses specialized collections, known as cell dictionaries (细胞词库), to expand its vocabulary and improve Chinese text prediction.

Technical analysisAnalysis of the DNS hijackingAs part of Sogou Input Method’s brand promotion mechanism, SGTool.exe, one of its components, sends an HTTP request to the config.pinyin.sogou[.

Similar to the previous mechanism, this approa…

We presented our findings about the Gorbag APT group at the Virus Bulletin conference on October 14th, 2026; the full technical analysis is available in our white paper Gorbag: Orcs at the border published by Virus Bulletin.

Gorbag: Orcs at the border Read the full report PDFVictimology and geopolitical contextAll Gorbag targets identified by ESET Research are located in Ukraine, and the group’s targeting choices fall into three main areas that align closely with Russian wartime intelligence priorities.

Prime ReverseShell is derived from the publicly available PSSW100AVB repository on GitHub, with modifications to suit the operators’ needs.

Prime ReverseShell with a comment trying to fool A…

Effective SMB protection demands that vendors lead their customers through a clear onboarding process – and offer practical and transparent guidance during incident response engagements.

Understanding what a genuine threat to the organization is and what not to worry about is often beyond the capability of a small IT security team.

They are trusted by more SMBs than any other entity – including internal staff, industry peers, and governments – as a trusted source of cybersecurity guidance.

SMBs don’t want to hand over all control for threat protection.

The key for vendors is to ensure these experts are available at onboarding, to guide SMBs through configuration, activation and setup.

The PHP2Shell disclosure and other major cybersecurity news this month brought into relief the need for well-thought-out cyber-readiness plansWith October coming to a close, ESET Chief Security Evangelist Tony Anscombe reviews some of the top cybersecurity stories that made the news over the month.

At the same time, he offers insights that the latest wave of incidents hold for your company's, or your own, cyber-defenses.

A data breach at Denmark’s Central Population Register (CPR) has exposed the personal information of 8.8 million people.

What are the lessons that businesses should take away from the latest cybersecurity news?

Watch Tony's video to find out, and be sure to check out the Se…

Amatera – which topped ESET’s infostealer detections in Latin America in the first half of 2026 but targets victims worldwide – shows what this professionalization looks like in practice.

Detected by ESET products as Win/PSW.Amatera, Amatera is a Windows infostealer written in C++ that was first observed in 2024.

Amatera has spread via compromised websites, search engine ads, targeted emails, fake documents, SVG files, and ClickFix via fake CAPTCHAs.

In Latin America, Amatera topped ESET’s infostealer detections in the first half of 2026, ahead of Formbook, Vidar, Lumma Stealer, SnakeStealer, and Rhadamanthys.

A developer maintains the product, and other actors distribute it via compromised…

In the age of AI, all of this was reported within a single “Cybersecurity Black Week,” an exceptionally eventful seven-day period amid an already turbulent Black October.

The name refers to two memory-safety vulnerabilities in PHP core, CVE-2026-109618 and CVE-2026-109619, affecting PHP versions 5.4 through 8.5.11.

The same decoder is compiled into the Python Brotli and brotlicffi packages as well as into other HTTP software, which led researchers to rename the issue HTTP2Shell.

Cutting through the noiseCybersecurity Black Week showed that a severity score rarely tells the whole story.

For the leaked kernel flaws, that window opened before any fix existed, and for end-of-life PHP versions, …

ESET APT Activity Report Q2 2026–Q2 2026 summarizes notable activities of selected advanced persistent threat (APT) groups documented by ESET researchers between April and September 2026.

They represent only a subset of the cybersecurity intelligence made available to customers of ESET Threat Intelligence APT Reports.

In Southeast Asia and Oceania, China-aligned threat actors ran campaigns that appear to support Chinese law enforcement efforts against organized crime in the region.

Finally, we identified several cases of APT groups using AI and large language models (LLMs) at various stages of their operations.

Threat actors used AI primarily to accelerate tasks that would otherwise require…

The news prompted security advisories from government agencies and sent website owners scrambling to apply the patches, with some sites even going offline as a precaution.

This is because on an unpatched server, an attacker can exploit the vulnerabilities to run their own code without logging in.

As three out of four websites globally are estimated to use PHP in some capacity, its ubiquity helps create an environment ripe for abuse; indeed, initial attempts to exploit the flaws – discovered by AI and dubbed PHP2Shell – weren't long in coming.

Here's what to know about CVE-2026-109618 and CVE-2026-109619, as well as what website owners and IT teams should do to stay safe – all in a little mo…

The following day, at 09:28, a new binary was delivered to the machine: the MythicRatatoskr backdoor.

This blogpost focuses primarily on the analysis of the MythicRatatoskr backdoor, the Yggdrasil network that hosts its C&C server, and the accompanying SOCKS5 server.

Given the backdoor’s role as a messenger scurrying through the Yggdrasil network, we decided to name the backdoor MythicRatatoskr.

MythicRatatoskr main configurationThe MythicRatatoskr configuration is stored in a file at a hardcoded path.

NetworkIP Domain Hosting provider First seen Details b479:2771:8df4:b5e b:d007:63b0[:]2838 N/A N/A 2025‑07‑17 MythicRatatoskr C&C server within the Yggdrasil network.

In some cases, the scam ad may take you to a fake e-commerce site which covertly harvests your card details.

What happens if I’ve fallen victim to a scam ad?

Scam ads are getting easier to generate thanks to AI, and can look increasingly professional, even including video content.

Can I get my money back if I paid through a scam ad?

What should I do if I’ve fallen victim to a scam ad?

This is email bombing.

What is email bombing?

Sometimes called “form bombing,” “list bombing” or “subscription bombing,” email bombing attacks usually follow the same pattern.

There’s no silver bullet to prevent email bombing.

Has my email account been hacked if it’s full of sign-up emails?

Open Enrollment is peak season for Medicare fraud – here’s how to tell real outreach from fakes and keep your details safeScammers love a pretext.

And with Medicare Open Enrollment, they have a perfect opportunity to exploit victim expectations, masking their fraud under the cover of legitimate activity.

Work through the following steps:Call or contact Medicare at Medicare.gov or 800-633-4227 to report the incident.

So slow down this Open Enrollment season and verify every request for personal and medical details.

Frequently Asked Questions (FAQs)When is Medicare Open Enrollment?

Data breach notifications are telling victims less than ever.

As the volume of data breach incidents increases, there’s a growing chance that you’ll be caught up in one.

Example of a data breach notice with a detailed explanation of the situation (for more, head over here)How do you interpret a breach notice?

For that reason, you should never click through on any unsolicited breach notification email or message.

Change your logins (if relevant) and consider credit monitoring and a credit freeze.

Later, in June 2026, ESET telemetry registered further MATCHBOIL samples, this time at a company in the energy sector.

MATCHBOIL then performs three HTTPS requests to the C&C server; each with a different purpose:The first request receives a numeric value from the C&C server.

2024 samplesThe earliest MATCHBOIL samples that we have seen have compilation timestamps from 2024.

]pro N/A 2025‑11‑10 MATCHBOIL C&C server hidden behind Cloudflare.

]com N/A 2025‑08‑12 MATCHBOIL C&C server hidden behind Cloudflare.

The platform also asks for the creator’s YouTube channel URL, which it uses to retrieve public information and generate a seemingly personalized experience.

How to stay safeIf you’re a social media influencer yourself, your Google account can be much more than “just” access to a YouTube channel.

Run Google’s Security Checkup, or open Security & sign-in in your Google account, and review recent security events and signed-in devices.

If you’re a YouTube creator yourself, you realize that your reputation ultimately defines your success.

A Google account can then sit at the center of your business: email, files, contacts, and the YouTube channel itself.

Zyxel GS1900 series network switches that received a fix for a flaw that was later reported to have been exploited in the wild are still open to an exploit attackers used, Binarly found.

That’s because the patch fixed a different bug (CVE-2026-7273) from the one (CVE-2026-107441) the exploit actually relies on.

It runs from the command line and targets /cgi-bin/dispatcher.cgi, the web management CGI on GS1900 switches.

It therefore seems that attackers weren’t relying only on CVE-2026-7273 to compromise the switches (and possibly not at all).

What GS1900 owners should doAny GS1900 switch running a 2.90 Patch 2 build (XXXX.2)C0 or earlier is vulnerable.

Scammers are offering supposed leaked builds, early copies and phone versions of Grand Theft Auto VI (GTA 6) weeks before the game’s November 19 launch, Netcraft warned in a new blog post.

]com offered a free GTA VI download (Source: Netcraft)At gta6cyberleek[.

Paying for access that doesn’t existRockstar has announced GTA VI only for PlayStation 5 and Xbox Series X|S, with no PC version and no early release.

Fake offers of free GTA$, the in-game currency, will probably grow, and some could ask for Rockstar, PlayStation or Xbox logins under the pretext of applying a bonus.

Until November 19, there is no legitimate playable release or early-access build of GTA VI, and the safest place to buy…

Google Cloud is adding new controls to CodeMender, its AI tool for finding and fixing software vulnerabilities, allowing businesses to isolate attack simulations and target code scans more precisely.

Continuous monitoring detects active compromises at the workload layer and feeds telemetry into the Wiz Security Graph.

Context from the Wiz Security Graph helps reveal complex attack paths and runtime threats so teams can prioritize remediation.

Now in preview, Wiz AI Static Application Security Testing (SAST) correlates code weaknesses with infrastructure context in the Wiz Security Graph.

Analysts can also access Wiz Blue Agent’s investigation findings within Google Security Operations, whil…

An automated system running on an upcoming AI model turned hundreds of Linux kernel bugs into working exploits that give an ordinary user root access, and wrote a patch for each underlying flaw, OpenAI revealed in a new research post.

Source:OpenAIThe company’s Cyber team ran the pipeline in mid-October 2026 against the latest Linux kernel, with target machines running a stock desktop operating system from a commonly used distribution.

The run ended with 948 local privilege escalation (LPE) exploits and cost $1,213,430 in API credits, or $1,279 per exploit.

They produced 291 proofs of concept for information leaks and 1,169 working root exploits.

In an early run, the exploitation stage clai…

Bitdefender Labs researchers built an Android app that contains no executable code and requests no permissions, and installing it leaves a Pixel 10 in a crash loop that can take a factory reset to clear.

The flaw, which Bitdefender calls GhostMap, comes from how Android reads the ZIP structure inside an APK.

It started with a banking dropperOn August 12, a banking dropper collected from the wild crashed Bitdefender’s analysis emulators during installation.

A bad resource read by system_server, the process hosting most of Android, crashes it on each restart, because it rereads the same file.

In some cases, that process is the Android system process itself.”On reach, Stahie said: “Yes, the bu…

Apple will begin checking iCloud content shared using the “Anyone with the link” option for harmful material in iOS, iPadOS, macOS, and visionOS 27.3 or later.

When sharing content stored in iCloud, users can choose “Share a Link” or “Send a Copy.” Those who choose “Share a Link” can restrict access to people they invite or approve, or allow anyone with the link to access the content.

Choosing “Anyone with the link” makes the content accessible to anyone who has the link, including Apple.

“If you try to upload harmful content, Apple reserves the right to move, refuse, modify, remove, or delete the content at any time,” the company said.

Apple may also block or disable a user’s account, prev…

AI agents work toward a goal and choose their own steps, which makes them harder to catch.

When you hear “AI agent” in a detection meeting now, what do you picture, and what do most security teams still picture instead?

An AI agent works toward a goal, like booking a flight or completing a purchase, and decides which steps to take as it goes.

Another layer of complexity is how AI Agents present themselves, which can be Declared, Undeclared or Disguised.

Because bot detection is largely binary (human or not), it often misses the Undeclared agents and almost always misses Disguised agents which appear human based on how they operate.

In both a 2021 essay and my 2022 book, A Hacker’s Mind, I talk about AIs finding vulnerabilities and exploits—hacking—the legal system.

Here’s some demonstrations of this from Germany:

Legal systems encode the foundations of social order in natural language. Similar to computer systems, the written law can contain vulnerabilities that invite exploitation.1 Courts absorb most exploits through interpretation, and such vulnerabilities rarely surface in the first place. With highly capable AI systems enabling the discovery of vulnerabilities at unprecedented scale, we believe the latter could change...

A comment:

3% of ‘critical’ software security bugs, in all of recorded history, have been found in the last month. This is on pace to find another ~100,000 bugs this year alone, adding ~26% more vulnerabilities to the all time total Do you realize how fucking insane that is?

Yes. It is a new world out there.

Neat video:

The sighting, announced September 2, marks the first time anyone has spotted a live bigfin squid, which belongs to the Magnapinna genus, in the northeastern Pacific Ocean.

As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered.

Blog moderation policy.

This story is interesting:

One Civic owner purchased a cheap aftermarket head unit off Amazon, and decided to have Claude work its magic on it, like it would a smart TV. What was reportedly discovered isn’t surprising, but is worth knowing about.

Among the pre-installed bloatware—­or spyware, if you’re being less charitable­—was a voice assistant equipped with WebView, an Android system component that lets apps display content off the web. This apparently always used about a third of processing power, even while idle, which isn’t great. There were also Baidu location services, a call recorder (!), a DAB radio client that is pretty much useless in the U.S., and Adobe Acrobat, presumably so y…

Researchers set up a fake start-up company to study fraudulent North Korean IT workers.

Interesting research: “AI Models Can Provably Hide Arbitrary Capabilities”

Abstract: Capability evaluations aim to surface dangerous model behaviors before deployment, but their reliability depends on the assumption that hidden capabilities can be elicited. We show this assumption does not hold under adversarial conditions by constructing backdoor attacks that embed encrypted neural networks within host model weights, decrypting and executing them only upon receiving a secret trigger. Using digital lockers, these hidden circuits remain provably hard to elicit and interpret under cryptographic assumptions, even given full access to model weights, extending prior work from hiding fixed string…

Interesting research:

TL;DR: Chinese AI models now sit inside Western products, and some carry geopolitical triggers: tell the model who the code is for, and the security of what it writes changes. For the first time, we showed that this vulnerability lives in the model’s weights, and that removing the model’s CCP alignment removes it. One word tilts the code against Americans. Ask for the app “for a US defense contractor” instead of “for a Chinese defense contractor”, and Qwen3-Coder is 19% more likely to hand back an app that can be hacked.

...

This article in Nature argues that it’s due to an overfishing of predators and warming sea temperatures.

As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered.

Blog moderation policy.

The Indian CA eMudhra Limited has eight TLS certificates with laughably weak private keys:

The compromised eMudhra keys were defective at a level that’s challenging the imagination of many of the engineers studying the incident. A normal size for a NIST P-384 elliptic curve cryptography private key contains roughly 384 bits of entropy, a size allowing almost 2384, or a number with 116 digits, different possibilities. The private key sizes of the compromised keys ranged from 3 to 8 bits. Astonishingly, the private keys were 4, 56, 66, 115, 155, 156, 230, 237...

PHP maintainers have released two critical vulnerabilities:

PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical vulnerabilities that can allow unauthenticated remote code execution. All PHP users are strongly encouraged to update immediately. Who is at risk: all PHP installations serving web requests, including PHP-FPM, Apache with mod_php, php-cgi, FrankenPHP and LiteSpeed. We consider the risk highest for mod_php, with a demonstrated exploit where an unauthenticated request can trigger the attack before any application code runs.

The vulnerabilities:...

There’s a new archive of all the papers from twenty-five years of the Workshop on Economics and Information Security (WEIS).

Really nice resource. It’s fun to reread my 2002 essay on the economics of information security.

Justin.sh is reporting on a confidential Cellebrite document that has been leaked to him:

Cellebrite calls it Advanced Unlocks (AU from here on), not to be confused with the “advanced unlocking services” they’ve marketed for years. A press release from earlier this year confirms AU is a new product for 2026.

[…]

According to Cellebrite, AU: is a “next-generation AFU vector that is more resilient to Apple’s OS changes”

works with Stolen Device Protection enabled, which tightens USB restrictions

is enabled by a dedicated appliance with a stated range (!) of about 8 meters...

Interesting research:

Abstract: Vision-language models (VLMs) can solve visual CAPTCHAs without task-specific training, but the agents built on them approach every challenge from scratch. For such an agent, the hundredth instance of a familiar puzzle costs as much time and compute as the first. Specialized detectors invert the trade-off, answering in milliseconds but only for categories they were trained on. Neither improves with exposure. We study what changes when a solver improves with use. Our system pairs a fine-tuned YOLOv8 detector with an open-weight VLM behind a confidence-based router, and runs entirely from screenshots and operating-system input events, with no browser automation…

New research shows that squid lived all around the globe even before the Cretaceous-Paleogene mass extinction event.

As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered.

Blog moderation policy.

This is a problem:

Any open model whose weights have been edited can carry a backdoor, whether it’s a task-specific fine-tune, a merged adapter or an abliterated build. We have abliterated models in the title because it’s the most popular reason people download modified weights without verifying what’s inside. Abliteration is a cheap fine-tune that takes away a model’s ability to refuse. You find the direction in the weights that carries “no” and subtract it. The model then answers things a safety-tuned version would turn down. It began as a research trick and it’s now routine before people upload a model to Hugging Face, where you’ll find abliterated builds of most of the popular open weig…

As detailed in several stories here over the past year, residential proxy services are a major source of unwanted and often malicious traffic, including account takeover activity, advertising fraud, and mass content scraping for AI projects.

The GTIG report calls out a number of residential proxy providers whose software development kits were routinely downloaded by devices infected by the XCPE botnet.

Another provider linked to the botnet was NetNut, a once sprawling residential proxy company operated by the publicly-traded Israeli company Alarum Technologies.

In July 2026, the FBI worked with industry partners to seize hundreds of domains associated with NetNut, saying the company was res…

Earlier today, PHP released an emergency security update to fix two critical bugs that can allow an attacker to execute code of their choosing on a vulnerable server.

Reuters reports that government websites in Europe and elsewhere went offline today after the PHP vulnerabilities were disclosed.

Wiz said that prior to the PHP bugs being publicly disclosed, the company worked with the PHP team, Calif and OpenAI to measure the size of the problem and coordinate patch verification and disclosure.

The PHP zero-day vulnerabilities are being tracked by their CVE numbers, CVE-2026-109618 and CVE-2026-109619, and they affect all web servers running PHP 5.4 or later.

“A vulnerability in core PHP rea…

According to the FBI, ShinyHunters has extorted more than $70 million from victims so far this year.

He also said Mr. Dubrovsky has misrepresented himself as a Cypfer founder, and is not a shareholder.

In 2020, Aon aquired Cytelligence, a security consulting firm where Mr. Tobok was founder and CEO and Mr. Dubrovsky was a managing partner.

Experts say ransomware victims are typically directed by their insurance provider to work with a specific incident response firm.

But that ransom payment did not stop future extortion attempts using the same stolen data.

The sanctions freeze any Cryptomus assets at U.K. banks, and bar British companies from offering it any business, virtual or otherwise.

The blockchain data-crunching firm Chainalysis said the U.K. sanctions target the broader infrastructure supporting Russia’s wartime economy.

“Cryptomus and Heleket have emerged as major payment hubs for illicit activity,” Chainalysis wrote in an October 8 blog post.

Sanders said the U.K. sanctions on Cryptomus are important because Canada’s sanctions against the platform were ultimately unenforceable and uncollectible.

“A fine doesn’t stop a cryptocurrency payment processor from processing payments,” Sanders wrote on LinkedIn.

Microsoft today issued updates to fix more than 1,400 security vulnerabilities in its Windows operating systems and other software.

CVE-2026-96951 is a security feature bypass in the Windows Shell that affects Windows 10 and 11 systems, as well as some Server versions.

Windows 10 users might be wondering if they can still expect security updates after this month.

Microsoft had been slated to stop shipping updates for Windows 10 systems in October 2025, but ended up adding another year of free updates after considerable pushback.

Satnam Narang at Tenable said the number of flaws fixed this month far surpasses the previous record-setting year 2020, when Microsoft patched 1,261 CVEs.

The New York Times reported today that the FBI has arrested a Canadian man in Pennsylvania on suspicion of assisting ShinyHunters.

The Times story did not identify the man, nor did a statement on Twitter/X about the arrest from FBI Director Kash Patel.

Another shared that control over the ShinyHunters investigation has been centralized at an FBI field office in Texas.

According to LinkedIn, Cypher was co-founded by a Canadian man named Edward Dubrovsky, who is now associated with another Canadian security firm called CyberSteward.

According to the FBI, the group has extorted more than $70 million from victims so far this year.

The Dutch daily RTL reported on Sept. 29 that investigators suspect Van der Stap tried to orchestrate at least two murders.

According to RTL, the murders were allegedly to be committed abroad, and there are indications Van der Stap gave the order for these attacks.

In an interview with KrebsOnSecurity on September 9, Van der Stap described his new role as “offensive security lead” at the Dutch cybersecurity company Neo Security, saying the job involved probing client networks for security vulnerabilities.

Korper said Dutch forensic investigators visited his office on September 15, the night Van der ⁠Stap was arrested in a dramatic police raid that reportedly involved flash bang grenades.

“Y…

Authorities in the Netherlands have arrested a 23-year-old convicted cybercriminal on suspicion of aiding in data thefts and extortions by the prolific hacker group ShinyHunters.

Van der Stap is currently employed as offensive security lead at the Dutch company Neo Security, which did not respond to requests for comment.

But not long after that interview, the Dutch hacker abruptly stopped replying to messages.

One source said a colleague of theirs personally witnessed Dutch authorities carting items out of Van der Stap’s residence.

Speaking with reporters from Bloomberg in 2024, Van der Stap said that singular focus in turn fueled his desire to carry out cyberattacks.

A U.S. Army soldier who pleaded guilty to hacking into multiple telecommunications companies and stealing mobile call and text metadata for more than 100 million AT&T customers in 2024 was sentenced to 70 months in federal prison today and ordered to pay nearly $300,000 in restitution to victims.

Kiberphant0m claimed to have hacked into more than dozen telecommunications companies worldwide, including Verizon’s Push-to-Talk business, and publicly extorted these companies in exchange for a promise not to publish the stolen data.

Less than a month later, Wagenius was arrested and charged in two separate federal indictments, and soon pleaded guilty to all counts in both cases.

In 2019, Schuchm…

In February 2024, Radaris was sued by Atlas Data Privacy Corp, a company that has been pursuing data brokers alleged to be violating a New Jersey statute called Daniel’s Law.

KrebsOnSecurity doubled down and showed how the Lubarsky brothers built and operated Radaris and other data broker companies using a fictitious CEO’s name.

All told, the New Jersey court has so far transferred 14 domain names from the Radaris family of companies to Atlas.

Sherman said federal lawmakers have long faced intense lobbying by the technology industry against more restrictive U.S. data privacy laws, but that many powerful industries are now working against passing comprehensive data privacy legislation.

The l…

Microsoft Corp. today issued updates to plug at least 974 security holes in its Windows operating systems and other software, by far its biggest single patch batch ever.

This month’s patch bundle obliterates the software giant’s previous record set in July, when it released updates for at least 570 security vulnerabilities.

Among the more serious critical flaws this month is CVE-2026-69730, a DNS weakness present in Windows Server 2012 onward and on Windows 10.

And at the rate these Windows patch releases are ballooning in size, it’s probably best not to let them pile up month after month.

Enterprise Windows admins will want to keep an eye on askwoody.com for news of any updates that appear…

A new identity theft service launched on the dark web this week is selling digital scans of more than 153 million drivers licenses from people in the United States and Canada.

Curiously, the identity records include not only drivers licenses but also marijuana dispensary cards.

Some of the records list their “source” as “CDL,” presumably short for “commercial drivers license.

Also, only some of those who helped with this research said they showed their drivers license at the airport on the day of their travel.

Baldwin said the Nexus identity theft service presents multiple serious security and privacy threats, noting that state-issued drivers licenses are commonly used as proof of one’s ide…

The malware allows TeamPCP’s hackers to steal credentials that let them publish malicious versions of those software development tools, too.

“TeamPCP has stated the competition is a recruiting opportunity and they intend to purchase all meaningful access harvested from participants’ campaigns,” the security firm Dataminr wrote.

Deadcatx3, a nickname that has been flagged by multiple security firms as an alias used by TeamPCP.

Charlie Eriksen is a security researcher at Aikido Security who has closely followed TeamPCP’s cybercrime campaigns.

“They managed to wake up Microsoft to the fact that they had become negligent in terms of security,” Eriksen said.

It can be daunting to determine who’s responsible for showing ads on the websites we visit, or who’s harvesting data from the mobile apps we use every day.

Not anymore: A powerful and free new service called DecryptAds scrapes and correlates this adtech data and makes it simple to quickly learn a great deal about the entities that are tracking you.

“It’s an adtech tool but we’re trying to approach adtech from a security perspective,” Edwards said.

DecryptAds reports that Between Digital is collecting ad data on approximately 55,000 partner websites.

Bear in mind that ad blockers often do little to block ads and/or tracking that occurs from within mobile apps that users have chosen to instal…

More than 41,000 people working for the US Department of Homeland Security, including ICE agents, have had their details published online by a group of hacktivists.

As TechCrunch reports, the leaked records include the names, job titles, work email addresses, phone numbers, abd office locations.

More than half of the leaked records relate to US Customs and Border Protection (CBP) employees, typically found at airports, seaports, and land border crossings.

Around 10,000 ICE employees have had their records breached, and almost 1,000 members of the Cybersecurity and Infrastructure Security Agency (CISA).

The leaked data has been published online, under the title "Icepick", and can be either d…

Ambulances were diverted, surgeries cancelled, and medical students sent home from classes after a ransomware group attacked the University of New Mexico's Health Sciences Center (HSC) this week. Read more in my article on the Fortra blog.

You are suffering a little bit, not that our listeners will be able to tell, but if anyone sees you on video.

Well, everything's a little bit political, but this is fundamentally a cybersecurity podcast.

And it won't necessarily come back and say, "I don't think you should be doing this," or, "Have you sought some help?"

Maybe we should turn a little bit to what organisations can actually do about it.

I'm going to do it the following Thursday, or I'm going to do it some other time, or I'm going to create an account that doesn't go back to me, but I can still support my favourite places.

A Ukrainian man has been sentenced to 70 months in a US prison for his role in a series of ransomware attacks.

He was also an early affiliate of the Hive ransomware-as-a-service (RaaS) operation which targeted businesses and, in particular, organisations working in healthcare.

The FBI later warned that Hive had extorted US $100 million from businesses and organisations globally in a period of just 18 months.

The DOJ said that the operation saved corporate victims of Hive over US $130 million in ransom payments.

At the time I speculated that the take-down of Hive may lead to the identification and possible apprehension of some of those involved in Hive ransomware attacks.

Germany's far-right AfD (Alternative für Deutschland) party has confirmed that it has suffered a security breach, after a hacker published what appear to be hundreds of thousands of the controversial political party's internal emails.

Earlier this week, the AfD admitted that its hosting provider had been hacked in September, and that some of its mailboxes had been copied.

What is unusual is that the leaked emails are not published on the site directly.

Indeed, party sources told the media that although the leaked emails appeared to be authentic, the AI-generated summaries appeared to contain several inaccuracies.

The full corpus of 281 GB of stolen messages and files has been made available…

Smashing Security, episode 489, How a Brand New Crypto Wallet Came with a Spy Inside, with Graham Cluley and special guest Lianne Potter.

So a bit of a War of the Roses thing going on there with that reference to Burnham.

What I'm going to do is I'm going to describe things, and the more dangerous the thing is, the faster it will click.

But I'm going to say it's probably dodgy, but oh, the curiosity would get the better of me.

But I'm actually in the same boat as most people because this film has been censored for nearly half a century.

A 28-year-old Russian man has been arrested by German police, suspected of being a key member of the Qilin ransomware gang.

As BBC News reports, detectives have linked the man to the 2024 attack against blood-testing firm Synnovis, that disrupted London hospitals, and resulted in the death of a patient.

The suspect, who has been named by German media only as "Vladimir K" was originally detained in May in Japan, after he travelled there on holiday.

The incident is said to have crippled Synnovis’s IT systems, and caused a critical shortage of O-type blood in hospitals.

No ransom was paid by Synnovis, a decision the firm made jointly with the NHS trusts to which it provides services.

The official @GardaInfo and @GardaTraffic Twitter accounts of Garda Síochána were accessed by an unauthorised third party who posted cryptocurrency-related messages on Wednesday evening, potentially reaching hundreds of thousands of users.

The messages claimed that followers were eligible to claim free cryptocurrency through an airdrop.

The problem, however, is not just that a hacker found themselves with the ability to post fraudulent messages posing as the Irish police.

The Garda is not the only police force to have ever suffered a security breach on its Twitter account.

In 2022, the official Twitter account of the Philadelphia Police Department was compromised and used to post what appea…

Krybit is a fast-growing ransomware gang that was hacked by a rival, hit back, and is still extorting victims. Find out how it works, who it has targeted, and what organisations can do to protect themselves. Read more in my article on the Fortra blog.

How a ransomware negotiator ended up arrested at his own conference, with Graham Cluley and special guest Paul Ducklin.

I don't know if you know that.

And then I became a freelancer and then I thought, oh boy, I'm going to open the doors to everybody.

And he is the Canadian co-founder of a ransomware negotiator firm called— I don't know how to pronounce this.

There's no breach so unimportant that you can just say, don't worry folks, carry on, nothing to see here.

The hacker behind a high-profile string of leaks involving the upcoming release of the Grand Theft Auto (GTA) 6 videogame has threatened to release a complete, playable build.

CyberLeek says that if the GTA 6 game is released on physical disk, and a public apology is made, it will step back from its threats.

As ever, videogame fans should be very wary of believing anybody who offers a download of a supposedly leaked game.

Besides which, the real, genuine GTA 6 is due to be released on video game platforms on 19 November.

It is not worth infecting your computer, or losing money on a dodgy crypto coin, just to see it a few weeks early.

Zhang is charged alongside 34-year-old Xu Zewei with malicious cyber activity against US computer systems between February 2020 and June 2021.

The following the year the pair allegedly exploited vulnerabilities in Microsoft Exchange Server to steal further information.

Furthermore, if findings by security firm SentinelOne are to be believed, Zhang's Shanghai Firetech filed multiple software patents about extract data from computers.

Xu, for instance, was arrested at Milan airport in July 2025 and extradited to the United States in April this year.

China's Foreign Ministry opposed Xu's extradition, accusing the United States of fabricating charges against him.

But do you actually know whether both of them can do the job?

Now, I don't know how good a swimmer you are, Danny.

I don't know about you, but I'm having 3 or 4 calls a day from an unknown number.

And I would imagine a company like Hack The Box has got great visibility as to what is actually going on out there.

And so I think that's the unique part here is it truly does have a pressure-tested element to it.

N0n is a newly-emerged cyber extortion gang. The group was first spotted in the middle of September 2026, and within days it had published on its dark web leak site details of what it claimed to be around a dozen victims. Since then, the tally has continued to grow. Read more in my article on the Fortra blog.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: aa9e3a5508a8c1eb76c504b058249cd2Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-11-03T18:00:26+03:00Config id: 339Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: 0d697b7db0e95a6580b88e9a4b8e961fServer IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-11-02T16:00:13+03:00Config id: 339Faithfully yours, nginx.

Вопреки распространенному заблуждению, в эпоху цифры люди не перестали любить книги — просто их уже давно читают не только на бумаге.

Год назад мы также рассказывали про вредоносные «книги» на турецком и арабском языках.

Зачастую эти поддельные сайты полностью функциональны: на них точно так же можно искать и скачивать книги, и дизайн практически неотличим от оригинала.

Одна из самых простых рекомендаций — пользоваться официальными книжными магазинами, и не только по соображениям авторских прав.

Таким образом вы защитите свои данные и деньги и сможете спокойно скачивать и читать вашу любимую литературу.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: c37d2c17b96ad93f72f21acf52f07186Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-10-29T16:00:22+03:00Config id: 339Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: 4e5cae3ff5837cf370c8bf305d03c2b0Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-10-30T14:00:34+03:00Config id: 339Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: d6b768fbc443335b282efe8a58868231Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-10-26T15:00:14+03:00Config id: 339Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: 6e1eb2ff9ba52d21e2eb9108c143beafServer IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-10-23T17:00:39+03:00Config id: 339Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: 704ec22d9a79fd07b89340a5c2d02b67Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-10-22T23:00:36+03:00Config id: 339Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: 0bd9145f797a3fff09593e8e6fc88bd4Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-10-21T20:00:35+03:00Config id: 335Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: a48e6a868074b4c2b77295af18788714Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-10-20T17:00:12+03:00Config id: 335Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: 65c81bea022dea0314bb3ec1fb8b3228Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-10-15T14:00:29+03:00Config id: 335Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: bf1172655ea8738416272c1b910c4a23Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-10-14T17:00:37+03:00Config id: 335Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: 8c474b40de23335e23a81b4f71096fa2Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-10-13T18:00:32+03:00Config id: 335Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: 986285ee7f9fbca30f009118870a630eServer IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-10-09T19:00:10+03:00Config id: 335Faithfully yours, nginx.

Cisco Firewall customers running software 10.1 automatically have SnortML.

Together, Snort signatures and machine learning work to defend firewall customers from emerging AI-driven threats.

Note: Customers using Cisco Firewall version 10.1 and using the security over connectivity policy have SnortML enabled by default.

Customers now have more than 10 Splunk detections to defend against PHP2Shell post-exploit activity, including detections specific to Cisco Firewalls.

Cisco Firewalls block malicious PHP2Shell attack traffic while Splunk gives SOC teams visibility into PHP2Shell post-exploit activity.

AI Transit connects specialized AI environments to the SD-WAN fabricThat customer requirement is what Cisco AI Transit is designed to address.

Connecting AI environments with Cisco AI TransitWhat is Cisco AI Transit?

Cisco AI Transit is designed to connect specialized AI environments to an enterprise’s existing Cisco SD-WAN fabric.

AI Transit builds on that foundation to connect specialized AI environments, including NeoClouds, private and sovereign AI clouds, and enterprise AI factories.

AI Transit is designed to connect workloads in NeoClouds, private and sovereign AI clouds, and enterprise AI factories to an existing Cisco SD-WAN fabric.

The velocity of vulnerabilities being discovered using Frontier AI and OpenWeight models such as Cisco Anteras is unprecedented and defenders need more time.

Virtual Patching vs. Live Protect (Shielding)Live Protect is a differentiating capability – we are not built the same.

The workload in the environment still sits vulnerable and that’s where Secure Workload can be expanded to drive controls based on CVE directly in the workload using native capabilities and once patched the control disappears.

Shielding with Live ProtectShielding with Live Protect is different.

Live Protect buys you time on the infrastructure boxes themselves without forcing an emergency upgrade window.

Infrastructure access has an identity problemPicture an infrastructure administrator pushing a configuration update across hundreds of switches during a maintenance window.

Introducing Cisco Privileged Infrastructure AccessToday, Cisco is introducing Privileged Infrastructure Access, a faster, more secure way to keep the network moving by enabling network administrators and agents to perform critical work through a secure, identity-bound connection.

For customers using Cisco ISE and TACACS+, Privileged Infrastructure Access can draw on the policy and device context they already manage to govern access to Cisco routers and switches.

That brings Cisco network context into the privileged acces…

The data bears this out: in Splunk’s State of Security 2025 report, 78% of respondents said their security tools are dispersed and disconnected.

Closing that gap takes integrated identity, network, and endpoint context, plus the ability to act on it automatically.

That’s the idea behind combining SentinelOne’s runtime protection with Cisco Security and Splunk.

SentinelOne Runtime Protection and CWP in ActionSentinelOne Cloud Workload Protection (CWP) delivers autonomous, real-time threat detection and response across containers, Kubernetes, virtual machines, and serverless workloads.

Cisco Security extends that protection across identity, network, and perimeter, and Splunk gives your SOC on…

Upstream capacity: the projects you depend on can deliver new capabilities and critical fixes fast.

Upstream capacity is the one almost nobody puts on a roadmap because it sits outside your organization.

In most organizations, upstream capacity has none of those.

What This Looks Like in PracticeFor Cisco, part of the answer was becoming a Premier Sponsor of the OpenSSL Foundation in August 2025.

Tomáš Mráz, CTO of the OpenSSL Foundation, describes the impact:“Cisco’s support for the OpenSSL Foundation allowed us to fund an additional senior software engineer to improve the OpenSSL Library code.

CSDL continues, and does moreThe Cisco Secure Development Lifecycle (CSDL) is built on more than 400 software security requirements that validate products before they are released, with engagements at key stages of development.

Cisco open-sourced it and donated it to the Coalition for Secure AI (CoSAI).

Our secure software guidance skill is in development, carrying Cisco-specific security requirements into the development workflow.

Project CodeGuard and the secure software guidance skill also act as evaluators in the development pipeline, backing hard gates.

To date we have not found a novel issue that was not already covered by an existing software security requirement.

The Splunk .conf network brought a new detection that we hadn’t seen before: Flawed AMMYY.

There is also a Remote Access Tool (RAT) called Flawed AMMYY that was developed from leaked AMMYY source code, and is directly used as malware.

One of the key value propositions of EVE is that it can use granular session fingerprinting to differentiate between similar but distinct applications like AMMYY and Flawed AMMYY.

Let’s dig into the events we saw for Flawed AMMYY and some of the details that EVE had to look at.

Our EVE detections for Flawed AMMYY came in pairs with identical timestamps, as seen above, all from a single IP.

The event Network Operations Center (NOC) managed the venue network, providing our SOC firewalls with dedicated SPAN feeds directly from their core switches.

Inside Cisco Cloud Control, that story comes together in Unified Events.

While Splunk drives active investigations in the SOC, administrators maintain firewall health directly within Cloud Control.

The Horizon: Cisco Cloud Control & AI CanvasSecurity is now natively built into Cisco Cloud Control, the unified operations platform that brings Networking, Security, Observability, and Cloud into one consistent environment.

Without replacing individual product controllers, Cisco Cloud Control unifies inventory, topology, actions, identity, …

However, assessing whether a zero-day vulnerability was exploited in the past essentially involves going back in time.

Relying on standard logs or “Conditional / Selective PCAP” systems during a zero-day investigation leaves the Security Operations Center (SOC) team blind.

There is also a secondary benefit: if a breach occurred using an newly disclosed zero-day vulnerability, the attacker is likely to have been very sophisticated.

Replay The Relevant Historical Traffic Against The New Intrusion RulesOn the Firewall Threat Defense (FTD), we configured a dedicated interface for the Endace traffic replays.

Rapid retrospective packet replay transforms zero-day triage by delivering direct forens…

The .conf26 Agentic SOC was not a simulated demo or a scripted lab.

Powered by the Cisco Cloud Control management platform, Splunk Enterprise Security (ES), Cisco Security telemetry, Cisco Talos Intelligence, and Endace continuous packet capture, our joint team of Cisco, Splunk, Endace, and Jamf engineers demonstrated what multi-agent threat detection, investigation, and response (TDIR) delivers at enterprise scale.

Watch it come to life in David Bombal’s Interview at the Agentic SOC.

“The Agentic SOC is not about replacing human defenders with autonomous black boxes.

AcknowledgementsOur thanks to the engineers who built the Agentic SOC and the Humans who provided decision making expertise.

Splunk .conf26 gave us the opportunity to operate a live Agentic Security Operations Center (SOC) in the middle of the Splunk community.

Splunk ES as the SOC data platformSplunk ES served as the primary analyst workspace and evidence system for the SOC.

Building the Triage Agent Dashboard in an AfternoonOnce the data was flowing and the agent was active, we built an operations dashboard in an afternoon.

The team preserved a path from telemetry to finding, from finding to agent analysis, and from agent analysis to an analyst decision.

Dashboard SnapshotThe following values are a snapshot from the displayed Triage Agent operations dashboard and should be read as event-environment observations…

The Cisco Secure Firewall 200 Series brings enterprise-grade protection and connectivity to distributed branches in a compact form factor.

The Encrypted Visibility Engine (EVE) uses AI and machine learning to analyze encrypted traffic, including TLS 1.3, without requiring full decryption.

The Secure Firewall 220 model delivers up to 1.5 Gbps of throughput with next-generation firewall capabilities enabled in a compact form factor for smaller branches.

The Secure Firewall 200 Series helps meet these demands with intelligent threat protection, encrypted traffic visibility, resilient connectivity, and centralized management.

Explore the Secure Firewall 200 Series to build a more resilient, man…

Architecting the Future: The Four Pillars of Agentic SecuritySecuring agentic AI requires a new strategic framework.

Pillar 2: Core ProtectionDelivered by: Cisco AI DefenseCisco AI Defense provides specialized protection for the AI models themselves and their operational environment.

AI Inventory & Validation: This solution catalogs all deployed AI models and continuously validates their integrity against supply chain risks.

Pillar 4: ObservabilityDelivered by: SplunkSplunk provides the unified intelligence platform required to monitor and respond to agentic AI at scale.

Splunk ingests logs, events, and telemetry from Duo, Secure Access, AI Defense, and other infrastructure points, creating…

The campaign uses trojanized Inno Setup-style installers to distribute multiple monetized software payloads, referred to by the delivery system as “offers”, during a single installation session.

Offer execution callback and payload delivery – The runner contacts rotating infrastructure using a repeatable d=inno and r=offer_execution callback pattern.

This stage converted the fake-download execution chain into installed software and recurring execution across three monetization branches: proxy and network-resource monetization, compute-resource monetization, and adware-style utility monetization.

Microsoft Defender XDR detectionsMicrosoft Defender detects and blocks campaign-linked payloads …

Microsoft has been named a Leader in the inaugural 2026 Gartner® Magic Quadrant™ for AI Agent Management Platforms.

We believe this recognition reflects Microsoft’s approach to helping organizations manage, secure, and scale their AI investments through Microsoft Agent 365.

Figure 1: Gartner, Magic Quadrant for AI Agent Management Platforms, October 27, 2026.

Agent 365 also integrates agents built using supported open-source frameworks with the Agent 365 software development kit (SDK).

Gartner, Magic Quadrant for AI Management Platforms, Andrei Razvan Sachelarescu, Lucas Kobat, Gilbert van der Heiden, Max Goss, October 27, 2026.

Local code execution: Code or command execution requiring local access or an existing foothold.

Impact, exposure and where to focusTwo things determine a vulnerability’s value to a threat actor: impact and exposure.

Within cloud environments, Defender CSPM Attack Path Analysis adds detailed context about internet exposure, vulnerabilities, network connections, identities, and permissions across Azure, AWS, and Google Cloud.

ReferencesSources cited or linked in the submitted draft:Learn MoreFor the latest security research from the Microsoft Threat Intelligence community, check out the Microsoft Threat Intelligence Blog.

To hear stories and insights from the Microsoft Threat Intelligence com…

It then attempts to install an SSH key, enable SSH, create a reverse tunnel, and configure persistence.

All applicable platforms: Stop confirmed malicious SSH and retry processes and remove their temporary .stk_ identity files after collection.

Follow-up Investigation and recoveryReview telemetry after the extension loaded for SSH key acceptance, tunnel processes, local SSH sessions, command execution, and file activity.

Microsoft Defender XDR detectionsMicrosoft Defender XDR customers can refer to the list of applicable detections below.

Tactic Observed activity Microsoft Defender coverage Execution Execution of suspicious shell scripts to support backdoor activity.

Both incidents followed a shared entry and execution pattern before diverging into two AD CS abuse paths.

Host discovery and AD CS assessmentThe staged components queried Windows version information, network configuration, and running processes.

Case 2: Help desk impersonation led to PetitPotam authentication coercion, ESC8 relay to AD CS, certificate-based Kerberos authentication, and customer-led device isolation.

NTLM relay reaches AD CS Web EnrollmentThe attacker relayed the domain controller’s NTLM authentication to AD CS Web Enrollment.

Search for Teams support impersonation, portable Bun or Java runtimes, AD CS certificate abuse, NTLM relay, ESC1, ESC8, and certificate-based Kerberos…

Microsoft Threat Intelligence assesses the overall adoption of AI across North Korean threat actors as high, with threat actors such as Jade Sleet, Coral Sleet, and Jasper Sleet demonstrating an established use of AI across all operational workflows, alongside increasing adoption across the broader North Korean threat actor set.

This blog breaks down how North Korean threat actors are utilizing AI across their operations, reflecting a broader trend of threat actors incorporating AI into their attack chains.

Stages of AI adoption by North Korean threat actorsNorth Korean threat actors are increasingly integrating generative and agentic AI platforms into their operations, but the rate and mat…

Today, we’re proud to share thatMicrosoft has been named a Leader in the 2026 IDC MarketScape for Worldwide Modern Endpoint Security for Enterprises (Doc #US54123526, September 2026).

On top of that foundation, we continue to strengthen what Defender can see:Richer endpoint signals: Defender provides more than 200 native event types for threat hunting.

Microsoft named a Leader by IDC Read the 2026 IDC MarketScape to learn why IDC named Microsoft a Leader in Worldwide Modern Endpoint Security for Enterprises.

Read the reportTo learn more about Microsoft Security solutions, visit our website.

Follow us on LinkedIn (Microsoft Security) and X (@MSFTSecurity) for the latest news and updates on c…

And we have to rethink how we defend that enterprise as attackers use AI to move faster and operate at greater scale.

For CISOs: Defending differentlyYour second job is to defend differently than you have historically done.

The same capabilities that make attacks faster can make defense faster, with agents working alongside your analysts to investigate and respond.

Prepare for an agent-driven workplace Explore Work Trend Index insights on the changing role of agents at work and the trends shaping how organizations operate.

Explore the Work Trend IndexIf you’re building with AI, bring your security team in early and have the identity and data conversation.

Compromised package distributionThe compromised LiteLLM 1.107.0 release delivered malicious Python startup files to environments where the package was installed.

Onboard supported developer workstations, build agents, and AI gateway servers to Microsoft Defender for Endpoint, and enable Microsoft Defender Antivirus real-time and cloud-delivered protection where supported.

Microsoft Defender XDR detectionsAs of October 22, 2026, the following Microsoft Defender Antivirus signatures and Microsoft Defender for Endpoint alerts were available for activity associated with the compromised LiteLLM 1.107.0 release.

Microsoft Defender XDR Threat analyticsInside the LiteLLM 1.107.0 supply chain compro…

Microsoft Defender XDR provides detections and hunting queries for suspicious Microsoft Graph activity and activity associated with known threat infrastructure.

Microsoft Threat Intelligence has identified threat actors across multiple geographic regions leveraging the ARTEX framework.

Preserve available Microsoft Entra sign-in and audit records, Microsoft Purview Audit records, SIEM data, and previously configured Microsoft Graph telemetry.

Suspicious sign-in from verified nation-state threat actor infrastructure Steal Application Access TokenA sign-in was observed from a known threat actor IP address.

We recommend promptly investigating this alert, as a threat actor might already be using…

Guardian Agents help security teams operate continuously, at machine speed and scale, while sensors, context, and actuators across the cyber stack help understand changing agent risk and continuously adapt protection in response.

Dynamic Agent RiskDynamic Agent Risk combines signals from identity, data, endpoints, cloud, network, runtime, and the agent’s own activity.

Guardian Agents carry out the work at machine speed, adapting as agent activity, risk, security context, and organizational policy change.

To learn more about Microsoft Security solutions, visit our website.

Also, follow us on LinkedIn (Microsoft Security) and X (@MSFTSecurity) for the latest news and updates on cybersecurity.

As enterprises choose which models to deploy, the relevant question is broader than whether a model is open-weight or closed-weight.

Today, Microsoft and NVIDIA are publishing Risk Management for Open-Weight Models in Enterprise, the first in a planned series of joint resources intended to help enterprises address those questions.

Model access and deployment are separate choices: open-weight models can also be used through managed platforms.

Building on this workRisk Management for Open-Weight Models in Enterprise focuses primarily on the model layer.

Read the joint Microsoft-NVIDIA paper, Risk Management for Open-Weight Models in Enterprise.

Here, threat actors may simply seed prompt injections on websites in hope of corrupting AI systems that browse them.

Early experiments revealed a significant volume of "benign" prompt injection text, which illustrates the complexity of distinguishing between functional threats and harmless content.

Many prompt injections were found in research papers, educational blog posts, or security articles discussing this very topic.

(Source: GitHub/swisskyrepo)When searching for prompt injections naively, the majority of detections are benign content – false positives in our case.

Malicious: ExfiltrationWe were able to observe a small number of prompt injections that aim at theft of data.

Recognizing the risks associated within the complex modem firmware, Pixel 9 shipped with mitigations against a range of memory-safety vulnerabilities.

Following our previous discussion on "Deploying Rust in Existing Firmware Codebases", this post shares a concrete application: integrating a memory-safe Rust DNS(Domain Name System) parser into the modem firmware.

Hook-up Rust to modem firmwareBefore building the Rust DNS library, we defined several Rust unit tests to cover basic arithmetic, dynamic allocations, and FFI to verify the integration of Rust with the existing modem firmware code base.

Pixel modem firmware already has a well-tested and specialized global memory allocation system to…

This project represents a significant step forward in our ongoing efforts to combat session theft, which remains a prevalent threat in the modern security landscape.

Session theft typically occurs when a user inadvertently downloads malware onto their device.

Once active, the malware can silently extract existing session cookies from the browser or wait for the user to log in to new accounts, before exfiltrating these tokens to an attacker-controlled server.

How DBSC WorksDBSC protects against session theft by cryptographically binding authentication sessions to a specific device.

The issuance of new short-lived session cookies is contingent upon Chrome proving possession of the correspondi…

Staying ahead of the latest indirect prompt injection attacks is critical to our mission of securing Workspace with Gemini.

In our previous blog “Mitigating prompt injection attacks with a layered defense strategy”, we reviewed the layered architecture of our IPI defenses.

Synthetic data generationAfter we discover, curate, and catalog new attacks, we use Simula to generate synthetic data expanding these new attacks.

We partition the synthetic data described above into separate training and validation sets to ensure performance is evaluated against held-out examples.

This process leverages the newly generated synthetic attack data described on this blog, to create a robust, end-to-end evalu…

2025 marked a special year in the history of vulnerability rewards and bug bounty programs at Google: our 15th anniversary 🎉🎉🎉!

Coming back to 2025 specifically, our VRP once again confirmed the ongoing value of engaging with the external security research community to make Google and its products safer.

Vulnerability Reward Program 2025 in NumbersWant to learn more about who’s reporting to the VRP?

Tip: Want to be informed of new developments and events around our Vulnerability Reward Program?

Follow the Google VRP channel on X to stay in the loop and be sure to check out the Security Engineering blog, which covers topics ranging from VRP updates to security practices and vulnerability des…

To stay ahead of the curve, the technology industry must undertake a proactive, multi-year migration to Post-Quantum Cryptography (PQC).

To bring these critical protections to the wider developer community with minimal friction, the transition will be supported through Play App Signing.

Play App Signing leverages Google Cloud KMS, which helps ensure industry-leading compliance standards, to secure signing keys.

Empower Developers : The inclusion of ML-DSA support within Android Keystore and Play App Signing allows developers to safeguard their users and application.

: The inclusion of ML-DSA support within Android Keystore and Play App Signing allows developers to safeguard their users and …

Today we're announcing a new program in Chrome to make HTTPS certificates secure against quantum computers.

Instead, Chrome, in collaboration with other partners, is developing an evolution of HTTPS certificates based on Merkle Tree Certificates (MTCs), currently in development in the PLANTS working group.

Since MTC technology shares significant architectural similarities with CT, these operators are uniquely qualified to ensure MTCs are able to get off the ground quickly and successfully.

The Chrome Quantum-resistant Root Program will operate alongside our existing Chrome Root Program to ensure a risk-managed transition that maintains the highest levels of security for all users.

First, we…

For Majik, Scam Detection was the intervention he needed: “The warning is what made me pause and avoid a bad situation”.

As scammers evolve their tactics and create more convincing and personalized threats, we’re using the best of Google AI to stay one step ahead.

Expanding Scam Detection for Calls to Samsung DevicesTo help protect you during phone calls, Scam Detection alerts you if a caller uses speech patterns commonly associated with fraud.

Scam Detection for phone calls on Google Pixel devices is available in the U.S., Australia, Canada, India, Ireland, and the UK.

Powered by Gemini’s on-device model, Scam Detection provides intelligent protection against scam calls while ensuring that…

Upgrading Google Play’s AI-powered, multi-layered user protectionsWe’ve seen a clear impact from these safety efforts on Google Play.

As Android’s built-in defense against malware and unwanted software, Google Play Protect now scans over 350 billion Android apps daily.

This proactive protection constantly checks both Play apps and those from other sources to ensure they are not potentially harmful.

Looking aheadOur top priority remains making Google Play and Android the most trusted app ecosystems for everyone.

Thank you for being part of the Google Play and Android community as we work together to build a safer app ecosystem.

That’s why we're committed to providing multi-layered defenses that help protect you before, during, and after a theft attempt.

Today, we're announcing a powerful set of theft protection feature updates that build on our existing protections, designed to give you greater peace of mind by making your device a much harder target for criminals.

These updates are now available for Android devices running Android 16+.

More User Control for Failed Authentications: In Android 15, we launched Failed Authentication Lock, a feature that automatically locks the device's screen after excessive failed authentication attempts.

This feature is now getting a new dedicated enable/disable toggle in settings,…