97% точности на железе за несколько сотен юаней.

Всё благодаря ферменту, собранному из 500 миллионов кандидатов.

Обнаружена китайская хак-группа, совмещающая шпионаж за госорганами с кражей криптовалюты.

Илон хочет вынести серверы на орбиту, а заводы — на Луну. И это не шутка, а бизнес-план.

Специалисты связали атаки на кошельки Coinsbuy в TRON и Ethereum с одним злоумышленником.

Эксплойт это код, превращающий уязвимость в реальный взлом. Разбираем механику, нулевые дни, цепочки, цены до 20 млн долларов и защиту, которая работает.

Этот механизм идеально заменит подопытных людей.

Новый вредонос для Android использует специальные возможности системы для перехвата данных с экрана.

Солнечная буря 1972 года могла убить Apollo. Спустя 50 лет инженеры нашли защиту — и она сделана из полиэтилена.

Хакеры превратили ИИ-инструменты для атак в сервис по подписке.

Имя клиента в запросе к сайту можно подделать, и это уже происходит массово.

Технологию конца 1990-х давно вытеснили H.264, HEVC и AV1, но последняя юридическая защита продержалась до наших дней.

ВведениеПрофессиональные сертификации в информационной безопасности существуют уже более 30 лет.

Ситуация изменилась после создания организации ISC², которая разработала Common Body of Knowledge (CBK) — общую базу знаний по информационной безопасности.

Для работодателя — возможность быть уверенным, что сотрудник обладает определённым набором компетенций, а не только опытом работы с отдельными технологиями.

Она подтверждает комплексные знания в области информационной безопасности: от управления рисками и архитектуры безопасности до управления доступом, сетевой безопасности и безопасной разработки.

Специалистов по информационной безопасности в стране насчитываются десятки тысяч, тогда как обл…

1) выявления хакерской активности с помощью MaxPatrol BAD и с помощью экспертно написанных правил корреляции, становится очевидно, что MaxPatrol BAD «видит» больше.

Белая область — пересечение: события, которые были оценены MaxPatrol BAD и одновременно сработали по логике правил корреляции.

Для запуска HackTracker в инфраструктуре нужны лишь нормализованный поток событий, поступающий в MaxPatrol BAD, и корректно настроенный аудит Windows (включая Security Log, Sysmon и Audit Policy).

Иначе говоря, HackTracker не заменяет MaxPatrol BAD — он работает поверх него и использует фичи, которые формирует MaxPatrol BAD.

В таких условиях можно опираться на вердикты HackTracker как на источник высокоу…

Также эта платформа содержит большой набор инструментов для управления и оркестрации основных операций с контейнерами, включая развёртывание и масштабирование.

Результаты опроса зрителей AM LiveПочему возникают проблемы с K8sСложности с инфраструктурой K8s возникают, по мнению опрошенных нами экспертов, очень часто.

Это связано с высоким порогом входа в технологию: для эффективной работы необходима глубокая экспертиза как в контейнерной оркестрации, так и в управлении ИТ-инфраструктурой.

Руководитель отдела администрирования и DevOps ГК Softline Александр Дёмин обратил внимание на то, что в наибольшей степени рискуют столкнуться с различными проблемами с K8s компании без зрелых DevOps-практ…

Современная корпоративная платформа обмена файлами должна предоставлять набор критически важных функций для обеспечения безопасности и эффективности работы:Разграничение доступа.

Обзор отечественных платформ файлового обмена и контроля доступа к даннымФайловый обмен во многих российских организациях складывался хаотично, нередко — выходя за пределы поля зрения службы ИБ и стандартных механизмов защиты.

Разработка российских корпоративных платформ для обмена файлами была, прежде всего, обусловлена необходимостью заменить зарубежное ПО в рамках импортозамещения.

EFSS-платформыEFSS (Enterprise File Sync and Share) — это класс корпоративных решений для синхронизации, хранения файлов и безопасно…

Одно неверное действие может привести к остановке системы и повлиять на результат команды, на её средний балл.

На киберполигоне пять ИИ-агентов атаки и защиты — выполняли реальные сценарии атак и расследовали их последствия.

Итог атаки зависит от двух составляющих: средств защиты и того, насколько эффективно команда умеет ими пользоваться.

«На Standoff мы особенно хорошо увидели, что даже самый функциональный инструмент сам по себе не делает команду готовой к атаке.

Такой подход предполагает постоянную проверку состояния защиты и готовности команды к реальным сценариям.

Сейчас оптимизируют сами алгоритмы, архитектуру программного обеспечения и вычислительные нагрузки, чтобы снизить энергопотребление и углеродный след.

По оценке Gartner, сегодня ИИ-серверы потребляют около одной пятой всей электроэнергии дата-центров, а к концу десятилетия их доля достигнет почти половины.

Как измеряют «зелёность» ИТ-инфраструктурыЭнергоэффективность дата-центров и ПО оценивают с помощью системы метрик.

Поэтому при разработке таких решений сегодня учитывают не только скорость обработки и точность обнаружения угроз, но и энергопотребление.

Для бизнеса это означает более рациональное использование инфраструктуры, а для ИТ- и ИБ-специалистов — ещё один критерий качества проект…

Титульная страница Brave1 Market в марте 2025 года«Геймификация войны» с появлением маркетплейса Brave1 превращает военные закупки в часть своеобразного соревнования.

Как и на киберполигонах или в игровых программах, наиболее активные участники отображаются на главной странице в рейтинге лидеров.

Начиная с 1 октября 2025 года «е-баллы» стали начисляться не только за боевые операции и минирование, но и за выполнение разведывательных задач и различных логистических операций.

Сначала этот подход был опробован при изменении принципов управления войсками, а затем распространился и на другие направления.

Можно предположить, что в дальнейшем этот подход будет применяться и в ИБ-системах организаци…

WHOIS/RDAP-данные сетевого индикатора компрометации в PT FusionWHOIS/RDAP-информация предоставляется как в подготовленном, так и в сыром формате.

Результат множественного поиска в PT FusionСамый мощный инструмент поиска в PT Fusion — это поиск по параметрам.

Ландшафт киберугроз в PT FusionДля более удобного взаимодействия с матрицей и реализации отдельных сценариев работы с ландшафтом киберугроз в модуле предусмотрены фильтры.

Паттерны реализации вредоносных техник злоумышленникамиИх можно использовать как для ретроанализа, так и для написания детектирующих правил для SIEM-систем.

Для старта не нужны технические согласования: достаточно указать корпоративную почту, на которую будет отправле…

Затем энтузиазм немного остыл, но кибератаки не прекратились, а вектор сместился в сторону кибернападений с применением более оснащённых с технической точки зрения тактик.

Официально они были оформлены позднее и вводились волнами: в начале марта 2022 года, в начале апреля и спустя полгода.

Поэтому покажем, что «полигон» имел соответствующую поддержку и с точки зрения развития технических средств, напрямую связанных с ИБ.

А теперь проясним некоторые детали, связанные с организацией поддержки Starlink и Starshield на территории Украины.

Повышение эффективности применения украинских дронов связано не с достижениями украинских конструкторов или ростом масштабов налаженного «гаражного», кустарно…

Российский рынок low-code и no-code платформ активно развивается на фоне импортозамещения и растущего спроса на быструю разработку корпоративных решений.

Что такое low-code и no-code и зачем это нужно бизнесуВ основе low-code и no-code платформ лежит визуальная модель разработки.

Всё больше платформ поддерживают несколько режимов разработки: no-code для бизнес-пользователей, low-code для аналитиков и pro-code для профессиональных разработчиков.

Обзор российских low-code/ no-code платформРоссийский рынок low-code и no-code насчитывает десятки платформ разного назначения — от конструкторов сайтов и мобильных приложений до специализированных решений для отдельных отраслей.

Сильные стороны: под…

Опыт применения R-Vision SOAR на Standoff 17 показал, какие задачи помогает решать на практике автоматизация.

Именно в таких условиях на юбилейном Standoff 17 решение R-Vision SOAR использовалось командой защиты ретейла.

Standoff — это практическая кибербитва, в рамках которой команды атакующих и защитников проверяют сценарии нападения и реагирования в квазиреальных инфраструктурах.

Как SOAR применялся на StandoffВ 2025 году для работы R-Vision SOAR на Standoff было настроено более 40 коннекторов с различными средствами защиты и инфраструктурными системами.

Таким образом, участие R-Vision SOAR в Standoff стало практической проверкой работы интеграций, удобства выполнения типовых действий и …

Получить учётную запись пользователь может как в клиентском приложении, так и в личном кабинете системы.

Единая точка управления всеми компонентами упрощает администрирование и обеспечивает гибкость при работе как с собственной, так и с внешними инфраструктурами.

Управление сотрудниками и отделами сотрудниковНастройка прав и политик доступа к устройствамКак уже говорилось выше, в рамках организации можно управлять правами и политиками доступа для устройств и сотрудников.

Таким образом пользователь может обращаться к адресной книге — как к своей, так и к адресной книге организации.

Добавление нового устройстваВ разделе «Администрирование» пользователю доступны справочник устройств, личный сп…

Переход с Microsoft Office на альтернативные офисные пакеты — это не только установка нового ПО, но и риск столкнуться с несовместимостью документов, макросов и шаблонов.

Такие проблемы массово возникали при обновлении с Microsoft Office 7/95 на Microsoft Office 97.

А именно так обстоит дело в «МойОфис» и «Р7-Офис» (как и в его основе с открытым кодом OnlyOffice).

В Microsoft Office для создания формул применяется шрифт Cambria Math, и при подстановке его аналога для других платформ всё должно нормализоваться.

Наиболее часто проблема проявляется в Linux, но нередко имеет место и в Windows, и в Android.

Специфика защиты больших данных: проблемы и угрозыГоворя о защите Big Data, стоит начать с расшифровки понятия больших данных и их отличия от обычных массивов информации.

Прогноз увеличения рынка Big Data Security (источник: thebusinessresearchcompany.com)Лидеры рынка Big Data Security: IBM, Microsoft, Oracle, Broadcom (Symantec), AWS.

Машина больших данных «Скала^р МБД.Х»Программно-аппаратный комплекс «Скала^р МБД.Х» — отечественная платформа класса Data Lakehouse для хранения, обработки и анализа больших данных.

Защита систем хранения данных и дата-центров от KasperskyКомпания «Лаборатория Касперского» предлагает комплекс услуг и сервисов для защиты больших данных и дата-центров.

Как выбр…

Значит ли это, что обучение не работает, или проблема в самом подходе к нему?

Выделили шесть возможных причин, по которым обучение ИБ не работает так, как ожидается.

Как понять, что обучение не даёт результатыМожно выделить следующие критерии неэффективного обучения:Сотрудник регулярно совершает одни и те же ошибки.

Такие ситуации возникают потому, что знания не были связаны с реальными рабочими процессами и не стали частью повседневных действий.

ВыводыПричины, по которым обучение информационной безопасности не работает, имеют не методический, а организационный характер.

Для этого мне придётся погрузиться в изучение архитектуры и сетевого стека Electron, а эти навыки могут приходиться и в будущем.

TEST_ENV_VAR_SECRET=”реалистично выглядящий фальшивый токен”Редактирование этого файла на вызвало никаких HTTP‑запросов, и я посчитал, что это хороший знак.

hello testingЭто часть сообщений, которые я отправлял Copilot ранее для тестирования перехвата mitmproxy, так что в этом нет ничего удивительного.

Хранение в незашифрованном виде — это не баг и не упущенный пограничный случай; именно так и задумывалось в коде.

Это отвечает на мой первый вопрос: такое решение принято намеренно в том смысле, что в коде нет ничего, что бы этому препятствовало.

Гарантировать такое мы не можем и не пытаемся.

Зачем это нужно и почему это не наша прихоть.

Если это не устраивает - это не наш продукт для вас.

Это не Tor и не Bublik.

Мы строим инструмент обхода блокировок, а не инструмент анонимности и не мессенджер с гарантированной приватностью.

Эта статья – о том, почему это не баг и не провал маркетинга, а неизбежное следствие того, как устроена технология.

Компания взяла на себя четыре обязательства, и на официальной странице поддержки Claude они прописаны по пунктам.

Разница принципиальная, и в ней, собственно, вся суть современной дискуссии.

Проверять снятие метки попросту НЕ С ЧЕМ — эталона нет ни у кого, кроме самой компании.

А вот в коде, в таблицах, в списках дат, в имени, которое пишется ровно одним способом — выбирать особо не из чего.

Системное хранилище Android не меняется, другие приложения его не получают, браузер не содержит дополнительного кода, кроме Chromium.

Больше времени заняла сборка Chromium 151 для Android с is_official_build=true : без нескольких дополнительных изменений чистый checkout не собирался в APK.

Методы AutocompleteMatch::GetVectorIcon() и OmniboxAction::GetVectorIcon() объявлены на Android только при ENABLE_VR , но несколько мест вызова компилируются и без VR.

Название, иконки и About-экран меняются в ресурсах Android и Java, а не в C++.

Для старых ARM-устройств публикуется armeabi-v7a , для Android на Intel — x86_64 .

Формально исследование посвящено финансовой выгоде от вложений в open source, но нас в отчете больше всего заинтересовала практическая часть.

По таблицам из отчета можно понять, что именно компании дорабатывают, когда отправляют код авторам проекта и в каких случаях сохраняют собственный форк.

Еще 35% работали в компаниях, чей основной бизнес не связан с IT, а 14% – в государственных, некоммерческих и образовательных организациях.

Что компании возвращают в исходные проектыПо условиям отбора совсем не использующих open source организаций в выборке не оказалось.

Где компании зависят от open source, но редко участвуютАвторы также сравнили критичные для бизнеса технологии с теми, куда компании …

Пока мы делали свой Guardrails Filter, быстро выяснилось, что найти персональные данные — далеко не самая сложная часть задачи.

В Guardrails Filter приходит обычный JSON с запросом к модели.

Что видит модель Что хранится в Guardrails Filter +7 999... +7 888... Иван ИвановВо время маскировки Guardrails Filter проверяет, встречалось ли уже такое значение раньше.

Модель каждый раз получает полный массив сообщений, генерирует ответ и сразу забывает все, что только что увидела.

Поэтому нам пришлось восстанавливать данные не только в content, но и в reasoning и аргументах tool calls.

А в конце посмотрим, что изменится в Wazuh 5.0 и к чему стоит подготовить свои скрипты уже сейчас.

Для большинства повседневных задач достаточно встроенного дашборда Wazuh: с его помощью можно посмотреть алерты, состояние агентов, базовые отчеты.

Почему индексер, а не Server APIПеред тем как обращаться к данным, важно разделить две разные задачи: управление Wazuh и анализ собранной информации.

Поэтому «сколько у меня сейчас критичных CVE» надо спрашивать у states , а «когда мы их обнаружили и что с ними делали» — у alerts .

У terms есть ограничение: он хорошо подходит для поиска самых популярных значений, но не для полного перебора большого количества уникальных комбинаций.

Если после удаления формальных маркеров профессиональная история почти исчезает, проблема находится не в качестве резюме.

За должностями становится видна профессиональная нитьКогда таких проверяемых эпизодов становится не один и не два, профессиональная карта начинает решать ещё одну задачу, которую обычное резюме почти не решает.

Именно эти повторения показывают, что в накопленном опыте было случайным, а что действительно стало устойчивой профессиональной способностью.

Хорошая карта не обещает сделать человека идеальным кандидатом и не гарантирует следующий проект.

Она делает другое: позволяет увидеть его не как набор должностей и случайных цифровых фрагментов, а как профессионала с понятн…

Асимметрия, которая нас смущаетПо поводу «общеупотребимых» VPN, коих в последнее время развелось множество, у нас есть только один вопрос.

Эти деньги ещё нужно как-то вывести из России, а прибыль должна покрывать риск довольно продолжительно посидеть в не самых приятных российских исправительных заведениях.

Похоже, что добрая половина российских VPN - это «кого надо VPN».

И именно поэтому их не ловят и не глушат.

На подходе то, что на языке канцелярита называется «тарификацией международного трафика».

При чем же тут OpenAI и их агенты, которые совершили невиданный доселе киберинцидент самостоятельно?

Я постараюсь предположить, почему могли возникнуть определенные замеченные мной несостыковки, но я нахожу эти несостыковки достаточно значительными, чтобы закрыть подозрения просто предположениями.

И OpenAI совершенно не подсвечивают при этом, какие конкретно отличия их внутреннего ExploitGym от внешнего.

Я уверен, что по таким задачкам-неберучкам у агентов траты были сильно больше... Но это все равно осталось за скобками.

Или - AI-агенты в инциденте OpenAI и в реальной жизни - небо и земляТут мой аргумент довольно субъективный, конечно.

Это не баг и не просчёт конфигурации.

Что nginx отдаётКодировщик заголовков ответа в HTTP/3 живёт в ngx_http_v3_filter_module.c .

То есть nginx не просто не пользуется динамической таблицей.

У nginx это ngx_http_v3_encode_field_section_prefix(b->last, 0, 0, 0) , у quiche — encode_int(0, 0, ...) , у quic-go — appendVarInt(e.buf, 8, 0) .

Директив, включающих её на отдаче, в nginx не существует: это не настройка, а свойство кодировщика.

Идем в роутеры и на сервераУ ядра появилась третья жизнь: sing-box lxd — headless-демон, который хостит ядро внутри себя и выставляет долгоживущий канал управления.

Clash API — это REST-эмуляция интерфейса другого ядра, и всё, что в модель Clash не влезает, туда физически не пролезает.

И на этом же порту, за тем же клиентским сертификатом, демон умеет рассказывать о себе и о сервере: свой лог, память процесса, трафик ядра, полный набор pprof-профилей, и диагностика состоний и интерфейсов.

Теперь соединение подписано именем устройства, а в каждой записи есть поле source — когда устройство теряет имя, сразу ясно какой источник замолчал и что докрутить.

и это на каждый релиз.

И это не «подозрительный трафик», а буквально: из 1,28 миллиона отданных страниц живые люди посмотрели меньше шести тысяч.

Провенанс — раньше забота музейных кураторов, разбирающих подделки Ротко в масштабе скандала галереи Кнёдлер, а не то, о чём думает человек, листающий ленту в обед.

Змея, увлечённо кусающая собственный хвост настолько увлечённо, что даже интересно наблюдать (пока это не твой сервер падает в три часа ночи).

Но, положа руку на жизненно важные органы, он и не был обречён остаться прежним навсегда.

Вопрос не в том, вернётся ли всё как было — не вернётся.

Рассылка нового бумажного спецвыпуска «Хакера» уже идет полным ходом: многие читатели уже получили свои экземпляры, а остальные заказы постепенно отбывают с нашего склада.

Тираж журнала, как всегда, ограничен, поэтому советуем не откладывать покупку в бэклог, чтобы потом не читать чужие отзывы с легким ощущением FOMO.

Печатные спецвыпуски «Хакера» — это полноценные глянцевые журналы, содержащие 240 полос практических материалов, технических разборов, гайдов и исследований, к которым можно возвращаться даже годы спустя.

Номер уже покинул типографию, и рассылка заказов идет полным ходом, так что забирай свой экземпляр, пока журналы еще есть в наличии.

Запасы тиражей остальных почти закончилис…

40-летнего гражданина Беларуси Максима Сильникова, создателя и администратора вымогательской группировки Ransom Cartel, приговорили в США к 16 годам лишения свободы.

По информации правоохранителей, Сильников создал Ransom Cartel в мае 2021 года.

Следствие считает, что с 2021 по 2023 год участники Ransom Cartel атаковали как минимум 18 организаций в США и других странах.

Так, исследователи из Palo Alto Networks отмечали сходство шифровальщика с кодом REvil, однако у Ransom Cartel отсутствовали некоторые механизмы обфускации.

По данным следствия, Сильников играл центральную роль в Ransom Cartel: набирал партнеров, работал с брокерами доступов, лично вел переговоры с жертвами и занимался выпла…

Разработчики Mozilla были вынуждены сменить GPG-ключ, которым подписывают некоторые релизы Firefox и Thunderbird для Linux.

Дело в том, что незашифрованная копия этого ключа по ошибке попала в приватный репозиторий на GitHub.

Хотя не было обнаружено никаких признаков того, что ключ мог попасть в руки посторонних, разработчики приняли решение отозвать его на всякий случай.

В организации сообщают, что инцидент затронул подключ (subkey), который использовался для подписания Linux-архивов tar, RPM-пакетов и файлов контрольных сумм Firefox и Thunderbird.

Отмечается, что Thunderbird не распространяется в виде официальных RPM-пакетов, поэтому его пользователям не нужно выполнять действия, связанны…

Исследователи из Бирмингемского университета и компании Fuzzware выяснили, что вредоносная SIM-карта способна передавать модему команды, которые позволяют выполнять произвольный код, читать файлы, отключать связь и принудительно переводить смартфон в режим 2G.

Как оказалось, AT-интерфейс был доступен со стороны SIM-карты на девяти устройствах — шести из восьми модемов и на трех смартфонах (Oppo Find X5, Oppo Reno 14 F 5G и Asus Zenfone 9).

AT-команды представляют собой набор инструкций для управления модемом, который используется еще с 1980-х годов и со временем получил множество расширений от производителей.

Другой эксплоит позволял специалистам прочитать произвольные файлы с модуля Quecte…

log ( pepperoni .

log ( pepperoni .

Ког­да мы пыта­емся получить какое‑то свой­ство объ­екта, сна­чала оно ищет­ся в самом объ­екте, а потом с помощью __proto__ — в про­тоти­пе.

prototype ) // true console .

prototype ) // true console .

В России обсуждают процедуру проверки больших ИИ-моделей на соответствие законодательству и традиционным духовно-нравственным ценностям, сообщают «Ведомости» со ссылкой на участников обсуждений и источник в Минцифры.

Такой экспертизой могут заняться несколько независимых испытательных лабораторий, а модели будут тестировать через специальные бенчмарки и проверять на устойчивость к промпт-инжектам.

Новый закон вводит два специальных статуса для больших фундаментальных моделей — национальный и суверенный.

А вот технические критерии и бенчмарки еще предстоит разработать, и в этом процессе участвуют специалисты Минцифры, ФСБ и ФСТЭК.

Поэтому специалисты предлагают зафиксировать единые наборы те…

Производитель аппаратных криптокошельков Trezor заявил об утечке данных почти 14 000 пользователей.

Как именно хакеры взломали ShipMonk, представители Trezor не уточняют.

Однако издание BleepingComputer пишет, что пострадавшие клиенты ShipMonk получили уведомления, в которых говорилось, что причиной компрометации стала уязвимость в сторонней аналитической платформе Metabase.

Кроме того, по информации издания, представители ShipMonk получили вымогательские письма с требованиями выкупа от хак-группы ShinyHunters.

Позже представители Trezor подтвердили, что похищенная информация использовалась в фишинговых атаках, и мошенники пытались обманом узнать seed-фразы жертв.

Исследователь Nightmare Eclipse (он же Chaotic Eclipse) опубликовал PoC-эксплоит для новой 0-day-уязвимости в Microsoft Defender.

Напомним, что этот баг Nightmare Eclipse раскрыл в июне 2026 года, и разработчики Microsoft исправили его месяц спустя.

RoguePlanet была связана с возникновением состояния гонки в Microsoft Defender и позволяла повысить привилегии до уровня SYSTEM, а также выполнить произвольный код на полностью обновленных системах под управлением Windows 10 и Windows 11.

Среди патчей числилось и исправление для проблемы повышения привилегий CVE-2026-62832, информацию о которой Nightmare Eclipse раскрыл в июле, назвав уязвимость LegacyHive.

С весны 2026 года Nightmare Eclipse пу…

«Хакер» и лаборатория «Хаксет» подготовили курс « Пентест WEB » для тех, кто хочет самостоятельно освоить пентест веб-приложений.

«Пентест WEB» — это не классический курс с преподавателем, расписанием и дедлайнами, а программа для самостоятельной работы.

Ты можешь изучать темы в удобном темпе, возвращаться к ним в любое время и сразу закреплять теорию на практике.

Сначала ты разберешься с разведкой: научишься сканировать сеть, находить открытые сервисы, читать баннеры и проверять ПО по базам CVE.

Затем перейдешь к первичному доступу и разберешь reverse shell, bind shell и web shell, а также увидишь, как уязвимость превращается в управляемую командную оболочку.

По их словам, эта история началась еще 7 мая 2026 года, когда в OpenAI запустили обучение экспериментальной внутренней модели, но некоторые задачи, поставленные перед ИИ, случайно оказались практически невыполнимыми.

Модель решила попросить помощи у других агентов и оставила сообщение в Artifactory.

Лишь тогда инженеры OpenAI начали полноценное расследование, отозвали учетные данные, которыми пользовались модели, пересобрали Artifactory и уведомили специалистов JFrog об уязвимостях.

По данным OpenAI, к моменту обнаружения первого «форума» там накопились порядка 100 000 сообщений.

В OpenAI ожидают, что следующим шагом станет намеренное использование подобных коллективов ИИ-агентов злоумышлен…

Опе­ратор активной ransomware-груп­пиров­ки под псев­донимом Devman прек­расно понимал, что человек на том кон­це перепис­ки изу­чает его и пишет о нем отче­ты.

За десять месяцев, с апре­ля 2025-го по фев­раль 2026-го, Devman ата­ковал 187 орга­низа­ций в двад­цати с лиш­ним стра­нах.

Devman про­шел его мень­ше чем за пол­года и опи­сывал каж­дый шаг челове­ку, который вел о нем досье.

Все началось в фев­рале 2022 года, ког­да в откры­тый дос­туп утек исходный код Conti — одной из самых про­думан­ных ransomware-опе­раций сво­его вре­мени (если чита­ешь новос­ти на «Хакере», навер­няка о ней слы­шал).

Ког­да код разошел­ся по рукам, это перек­роило весь рынок: Black Basta взял его за осно­ву…

Разработчики WordPress исправили серьезную отраженную XSS-уязвимость на странице авторизации, которая затрагивает все версии CMS и не требует аутентификации.

Исследователи уже продемонстрировали, что в определенных условиях этот баг можно использовать для выполнения произвольного PHP-кода на сервере.

Так, жертва должна быть авторизована в WordPress с правами администратора и должна взаимодействовать со страницей, контролируемой атакующим.

По словам специалистов, уязвимость присутствует в любых стандартных установках WordPress и не требует каких-то особых настроек хостинга.

После этого исследователи задействовали штатный JavaScript в WordPress, подмену переменной ajaxurl, REST API и поддержк…

Проблема представляет собой use-after-free в драйвере afd.sys (Ancillary Function Driver for WinSock), который отвечает за сетевые операции в Windows.

Для эксплуатации этой уязвимости, приводящей к повышению привилегий, атакующему нужно было иметь доступ к системе, а также возможность выполнения кода.

Речь идет о CVE-2026-62878 в Windows DNS Server, CVE-2026-62893 в Windows Deployment Services, CVE-2026-62815 в имплементации QUIC и CVE-2026-59124 в HPC Pack.

Эксперты Zero Day Initiative, традиционно подготовившие большой обзор вышедших патчей, обращают отдельное внимание на уязвимость CVE-2026-62911, обнаруженную в Exchange.

Наконец, августовские патчи завершили исправление цепочки уязвимос…

Специалисты компании Socket обнаружили в Chrome Web Store 737 бесплатных VPN- и прокси-расширений, которые в основном были ориентированы на русскоязычных пользователей.

Эксперты пишут, что расширения распространялись от лица как минимум 40 аккаунтов разработчиков и суммарно насчитывали 75 486 установок.

По данным Socket, 520 из 522 обнаруженных расширений перенаправляли браузерный трафик жертв через одну и ту же SOCKS5-инфраструктуру.

Список исключений содержал только loopback-адреса, поэтому после подключения к такому «VPN» через прокси проходили практически все запросы браузера пользователя.

К своему отчету исследователи приложили ID всех найденных расширений и теперь рекомендуют пользова…

Команда AdminVPS подготовила инструкцию для читателей «Хакера», которые запускают VPS и хотят правильно подготовить сервер к работе после активации.

Для таких задач в AdminVPS есть отдельная линейка VPS в России.

Чем быстрее доступны IP, параметры сервера и действия с услугой, тем проще перейти от заказа VPS к реальной подготовке окружения.

Такой чек-лист хорошо показывает главное преимущество VPS: сервер можно подготовить под свой сценарий, не ограничиваясь типовым хостинг-окружением.

Российский VPS AdminVPS подходит для сайтов, API, CRM, личных кабинетов, ботов и внутренних сервисов, где важны задержка, стабильная маршрутизация и размещение ближе к пользователям.

Threat actors have begun to exploit a newly disclosed Microsoft SharePoint vulnerability following the release of a proof-of-concept (PoC) code.

The vulnerability in question is CVE-2026-55040 (CVSS score: 9.1), which refers to a critical security feature bypass that stems from weak authentication.

Successful exploitation of CVE-2026-55040 can allow an unauthenticated attacker to sidestep authentication on a vulnerable SharePoint server and perform arbitrary operations as a SharePoint site user or administrator.

Specifically, it chains four different weaknesses to allow an unauthenticated remote attacker to forge a valid JWT and impersonate any SharePoint site user.

In light of a spike in a…

The end goal of these intrusions is to seize complete control of infected computers and bypass security controls.

The malicious DLL ("libmupdf.dll") is used to display a bogus job description lure, while it stealthily downloads and executes in memory a lightweight downloader dubbed MISTPEN.

, in which victims are instructed to download an encrypted archive that's used to trigger a DLL side-loading chain.

Trojanized "SecurityPDF" PDF viewer, in which victims are instructed to download SecurityPDF from a website impersonating Enveil.

"They hid in plain sight, behind top-ranked search results, real vendor branding, and the reputation of organizations they had already compromised.

A massive set of 737 free VPN and proxy extensions have been found to mainly target Russian-speaking users seeking access to blocked services with an aim to intercept browser traffic and route them through a proxy infrastructure.

The extensions, published across at least 40 Chrome Web Store developer accounts, racked up 75,486 installs.

The censorship circumvention extensions "route the user's entire browser session through SOCKS5 proxies operated by a single provider," security researcher Kush Pandya said.

As many as 221 browser add-ons have been removed from the Chrome Web Store, while the remaining 516 extensions have been listed as active.

Removed Chrome Extension Resurfaces with Moneti…

A newly disclosed flaw in the way OpenAI, Anthropic, and Google carried hidden AI reasoning between API calls let researchers recover internal reasoning and secrets from session logs, including API keys and passwords.

Developers are advised to strip reasoning blocks and opaque reasoning fields from shared traces and avoid committing raw API transcripts even when the visible text has been sanitized.

OpenAI can return encrypted reasoning items that applications replay with manually managed history, Anthropic carries full reasoning in an encrypted signature, and Google uses encrypted thought signatures.

Current vendor documentation shows that encrypted reasoning remains part of these APIs, but…

The perimeter now blocks roughly two attacks out of three; inside, defenses stop barely one in three.

Here too, noisy actions get caught, while quiet ones don’t.

The defenses in this report already recovered the moment someone tested them.

The attacks still slipping through are the quiet ones, the reconnaissance and credential reads that never trip a signature and, this year, rarely trip an alert either.

Download the Blue Report 2026 to see where your defenses are likely to hold, and where the quiet gaps are most likely to be.

Adobe has shipped updates to address multiple critical security vulnerabilities impacting ColdFusion, Commerce, and Campaign Classic that, if successfully exploited, could result in arbitrary code execution and privilege escalation.

It's worth noting that the Campaign Classic updates only apply to fully on-premise deployments and to the on-premise components of hybrid deployments.

Adobe-hosted instances have already been remediated and require no customer action.

Although there is no evidence of these flaws being exploited in the wild, administrators are recommended to install the update as soon as possible, preferably within 72 hours.

The disclosure comes less than two weeks after Adobe re…

Threat actors have begun to actively exploit a recently patched critical security flaw in Broadcom VMware vCenter, according to new findings from QUIRSO.

The vulnerability in question is CVE-2026-59310 (CVSS score: 9.8), a directory-traversal vulnerability in the VMware vCenter server that a malicious actor with network access can exploit to execute arbitrary code.

It's worth pointing out that VMware appliances have been a lucrative target for Chinese threat actors like UNC5174, who have weaponized security flaws impacting VMware Tools and VMware vCenter in various espionage campaigns.

"The presence of reverse_ssh should not, by itself, be treated as proof of malicious activity," QUIRSO not…

Two malicious LiteLLM releases sat on PyPI for about 40 minutes in March carrying credential-stealing code capable of harvesting cloud keys, SSH keys, Kubernetes tokens, database passwords, and other secrets from systems that installed them.

Aqua said attackers retained access after an incomplete credential rotation and, on March 19, force-pushed malicious commits to 76 of 77 trivy-action version tags and all seven setup-trivy tags while publishing a malicious Trivy 0.69.4 release.

Exactly how the malicious LiteLLM releases reached PyPI was disputed across the published accounts.

Checkmarx said credentials obtained through the Trivy attack enabled unauthorized access to its GitHub repositor…

SAP has released patches to address a maximum-severity security flaw impacting Commerce Cloud (Data Hub Adapter) that could result in arbitrary code execution.

SAP security company Onapsis has urged customers to patch to a fixed Commerce Cloud release and then re-deploy the updated SAP Commerce Cloud version.

CVE-2026-44758 (CVSS score: 9.1) - A code injection vulnerability in Manufacturing Integration and Intelligence that could allow an attacker with high privileges to execute arbitrary commands on the underlying operating system.

The patch released by SAP removes the vulnerable servlet component.

"Only XSL files from these hosts can be consumed by the vulnerable servlet."

The security researcher going by the name Chaotic Eclipse (aka INFINITE NIGHTMARE, MSNightmare, and Nightmare-Eclipse) has released a proof-of-concept (PoC) for a new Microsoft zero-day called ShieldBreak.

The vulnerability, rooted in Microsoft Defender for Windows, demonstrates a patch bypass for CVE-2026-50656 (CVSS score: 7.8), otherwise known as RoguePlanet.

Although it was first disclosed by the researcher in June 2026, a patch for the vulnerability was not released by Microsoft until almost a month later.

ShieldBreak, on the other hand, is assessed to be a full patch bypass for CVE-2026-50656, with the researcher claiming that "Microsoft has failed to properly patch the RoguePlanet vu…

Cisco has warned that a new vulnerability impacting Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software has been exploited in the wild.

The high-severity flaw, tracked as CVE-2026-20349 (CVSS score: 8.6), is a case of insufficient error checking when processing HTTP requests that could allow an unauthenticated, remote attacker to trigger a denial-of-service (DoS) condition.

"An attacker could exploit this vulnerability by sending a crafted HTTP request to the Remote Access SSL VPN service on an affected device," Cisco said in a Tuesday advisory.

"A successful exploit could allow the attacker to cause the affected device to reload, res…

Microsoft released its monthly security updates on Tuesday, and one of the flaws it closed is already being used in attacks.

A remote flaw reachable through the service's TFTP handling without authentication or user interaction.

A remote, unauthenticated code execution flaw requiring no user interaction.

A remote, unauthenticated code execution flaw requiring no user interaction.

Chaining the RCE with CVE-2026-55040 is what produced Rapid7's unauthenticated RCE.

Cybersecurity researchers have discovered a new version of the Kimwolf/AISURU Android and Internet of Things (IoT) botnet that comes with significant improvements to improve its operational resilience and conduct distributed denial-of-service (DDoS) attacks.

"Kimwolf v7 adds an HTTP/2-based DDoS flood that constructs complete browser fingerprints," researchers Asher Davila, Chris Navarrete, and Doel Santos said.

"This makes attack traffic more difficult to distinguish from legitimate browsing."

Kimwolf is known to target Android TV boxes since August 2025, while its Linux counterpart, AISURU, primarily focuses on Linux IoT devices.

Once launched, the malware attempts to mask itself as seemi…

Client fixes shipped in June and July, roughly two months before the flaws were made public, and no exploitation has been reported as of publication.

Zoom tracks the flaws as CVE-2026-53413 (CVSS score: 8.3), a buffer over-write, and CVE-2026-53414 (CVSS score: 6.5), a buffer over-read, both covered by ZSB-26015 and ZSB-26016, plus CVE-2026-53415 (CVSS score: 8.3), a use-after-free, in ZSB-26017.

Zoom issues its own CVE records, and NIST no longer routinely re-scores them, so the lower figures will likely stand.

The advisory says the same bug may let a participant "conduct a denial of service," and scores its confidentiality impact at none.

It surfaced only when they traced the running clie…

This includes configuration files for connecting to the corporate VPN using WireGuard to supposedly complete an assessment, along with a link to a second Zoom meeting during which the test is monitored.

]net/projects/soprasteriavpn/," which claims to be an "open-source corporate VPN solution designed for businesses seeking secure remote access and site-to-site connectivity without expensive licensing fees," according to cached Google Search results.

Put differently, the poisoned version of WireGuard allows an attacker to run arbitrary commands on the victim host without their knowledge.

CERT-UA is urging IT professionals to be on the lookout for social engineering techniques to stay protect…

The accelerated discovery of previously unknown software vulnerabilities has been making headlines for months.

It’s an issue that has even led the US government to create a vulnerability clearing house named Gold Eagle to coordinate research efforts in vulnerability discovery, mitigation and fixes.

A keynote at Black Hat USA 2026 detailed research by associate professor Yan Shoshitaishvili and his undergraduate students at Arizona State University on the expanding use of AI models for vulnerability discovery.

The team then trained the GPTs using the properties of previously known vulnerabilities and discovered approximately 1,000 vulnerabilities.

If this logic prevails, we may reach the cal…

Hugging Face disclosed that it had been attacked by AI; OpenAI came clean and declared that it was two of their AI models that had caused the breach.

A very late addition to the Black Hat agenda was a presentation by OpenAI’s team providing the details of the Hugging Face incident as they saw it and, importantly, the timeline.

The agents concluded that their task set could be completed by breaking out their sandbox and accessing external (Hugging Face) systems.

The target was Hugging Face: this is where the agents wanted to get, and they did.

On July 16th, Hugging Face disclosed an incident in which swarms of autonomous AI agents had breached its infrastructure.

The conference opened with keynotes followed by a fireside chat and a panel featuring mainly senior US government officials.

The second part of the opening keynote included Nick Andersen, Acting Director, CISA; Katherine Sutton, Assistant Secretary of War for Cyber Policy; and Brett Leatherman Assistant Director, Cyber Division, FBI.

I do agree with the ruthless approach, but without some form of regulation the boundaries on the use of AI remain blurred.

The Assistant Secretary of War for Cyber Policy made a fabulous analogy when pressed on the struggles regarding resourcing in the cybersecurity industry: you don’t want a pediatrician performing heart surgery.

We talk about autonomous AI at…

The AI tutor market is growing fastThe market for AI tutoring tools is booming.

Today, you can find various types of AI tutor tools to buy and use.

This happens when AI tools are tricked into ignoring their safety guardrails and display untrusted content.

If you’re keen to get your kids in front of an AI tool to help with private tutoring, first understand the difference between a simple co-pilot and a dedicated ITS.

So if you’re keen to try AI tutors, be sure to stay updated on what’s available out there.

Researchers at Sysdig have documented what they assess to be the first case of an end-to-end ransomware operation executed by an agentic threat actor.

What can organizations do to stop phantom squatting from harming their brands, and what other lessons do these incidents hold for defenders?

Watch Tony's video to find out and be sure to check out the June 2026 edition of his monthly security news roundup for more insights.

Before you go, learn about the first AI-powered ransomware, named PromptLock and discovered by ESET researchers last year.

To learn more about cutting-edge AI defense layers, read the AI at ESET white paper.

The screenshot may look convincing, but it doesn’t necessarily prove that the payment, booking or conversation is genuineSomeone sends you a screenshot showing that a payment has gone through.

Why screenshot aren’t proof on their ownA screenshot is ultimately just an image of what appeared on a screen.

Reassured, you send the item off, only to find out the screenshot was a fake and you’re not getting your money.

You receive a password reset code, then get a text message (maybe impersonating a friend) asking you to screenshot and send it.

This screenshot is fake (source: Reddit)Challenges for businessesFrom a business perspective, internal and customer-facing teams are often provided with sc…

UEFI shim bootloader and UEFI Secure BootTo understand the impact that such vulnerable shims can have on UEFI Secure Boot-protected systems, we need to understand how UEFI Secure Boot works, and how signed UEFI shim bootloaders extend the Secure Boot trust chain.

In this section we’ll look at UEFI Secure Boot basics, how UEFI shims extend the UEFI Secure Boot trust chain, and two shim-related features: Machine Owner Key (MOK) and Secure Boot Advanced Targeting (SBAT).

For anyone already familiar with the theory, we recommend jumping directly to the section Bypassing UEFI Secure Boot using old shims.

UEFI shim bootloader and Secure BootWith Linux distributions supporting UEFI Secure Boot, th…

A view of the H1 2026 threat landscape as seen by ESET telemetry and from the perspective of ESET threat detection and research experts.

The first half of 2026 shows how attackers continue to improve the efficiency and scalability of their operations.

In H1 2026, ESET analyzed nearly 900,000 AI skills – small functional components used by AI agents – and identified tens of thousands of suspicious and thousands of outright malicious instances.

ESET detections of this vector more than doubled between H2 2025 and H1 2026, indicating sustained activity and adaptation.

ESET Research has documented over 100 EDR killers used in the wild, with new variants appearing regularly.

Organizations are right to pay attention, especially because malicious use of AI makes old gaps a more urgent test of an organization’s cyber readiness.

AI and the basics“AI-powered malware” is cited as the top concern of global SMBs for the year ahead, according to the ESET SMB Cyber Readiness Index 2026.

Lack of security monitoring (22%): You might have plenty of security tools, but do you have a single, centralized place to collect, correlate and flag alerts?

Malicious email detection trend in 2025 (source: ESET Threat Report H2 2025)Tried-and-tested solutions to age-old threatsThis isn’t to say that SMBs should ignore AI-enabled threats.

True cyber readiness means being able to prevent,…

It's that time of month when ESET Chief Security Evangelist Tony Anscombe looks back at some of the top cybersecurity stories that made the news over the past 30 or so days and considers what they may mean for your own cyber-defenses.

What lessons does the new CISA policy hold for organizations outside the agency's direct remit?

What else is there to know about threats facing ATGs or, indeed, many other critical infrastructure systems?

How can you stay safe from imposter fraud, and could the social media bans for children work?

Learn more from Tony's video and be sure to check out the May 2026 edition of Tony's monthly security news roundup for more insights.

With access to your email account, they can reset your passwords across multiple other accounts – perhaps intercepting one-time passcodes sent by your bank, social media, cloud storage or other online provider.

That could lay the groundwork for a convincing phishing email designed to impersonate a trusted organization you interact with.

A phishing attack on your corporate email account is often the first stage in a bigger data breach, extortion/ransomware or espionage attack.

They’re also using more sophisticated tools to improve the success rates of email phishing campaigns.

In this instance the scammers reportedly hijacked the email account of a high-level executive, before impersonating …

For these businesses, cyber resilience should be the direction of travel – that is, the ability to continue operating and recover even during a serious incident.

Cyber readiness is about putting in place the processes and controls to prevent, detect and respond to threats.

So, should confidence in cyber resilience posture be so high, especially if organizations are still getting hit multiple times?

The truth is that there’s no end state for cyber readiness or resilience.

If it’s serious about improving the cyber readiness of small businesses, the vendor community should step up.

Key points of this blogpost: Throughout 2025, Gamaredon exclusively targeted governmental and military institutions in Ukraine.

Continued data exfiltration and a new allianceThroughout 2025, Gamaredon stayed highly active and remained focused solely on Ukraine.

Notably, we uncovered that in early 2025, Gamaredon collaborated with Turla, another Russia-aligned threat actor also linked to the FSB; we documented our findings in our blogpost Gamaredon X Turla collab.

Figure 1 shows a chart of unique samples of HTA downloaders delivered per month in Gamaredon spearphishing campaigns.

Compared to 2024, we also saw a shift in how Gamaredon used these dead drops.

Key points of this blogpost: ESET took part in the coordinated, global Operation Endgame to disrupt Amadey and Stealc.

Our automated systems have been dissecting Amadey and Stealc samples and identifying the fields most relevant for large-scale tracking.

The largest Amadey botnet clusterOne cluster stands out as the largest, and it contributed nearly 34% of all processed Amadey samples.

Stealc affiliate clustering based on ESET telemetryConclusionFor global disruption operations such as Operation Endgame against Amadey and Stealc, long-term automated tracking of malware is necessary.

2026‑04‑09 Stealc C&C server.

The group distinguishes itself through a mature, operator-maintained set of endpoint detection and response (EDR) killers, i.e., tools for disrupting security software.

In this blogpost, we share our findings on Gentlemen’s suite of EDR killers gained through extensive research and corroborated by the recent leak.

Third‑party EDR killers (HexKiller, ThrottleBlood, and HavocKiller) are operationally integrated.

Rather than relying on affiliates to source their own EDR killers, Gentlemen operators actively develop and maintain a portfolio of EDR killers for affiliates.

It allows the Gentlemen operators to integrate abused drivers into their toolset very soon after an EDR killer PoC is disclos…

Group-IB researchers discovered WindRelay, a new Android malware built to capture live payment card data over NFC (Near Field Communication) and relay it to attackers in real time.

WindRelay is paired with the SpyNote remote access trojan, which gives attackers remote access to a victim’s device.

Once SpyNote has remote access, the fraudster installs a second app (WindRelay) on the device without further action from the victim.

WindRelay uses NFC to communicate with the payment card and an internet connection to relay that exchange as it happens.

Researchers also identified four command-and-control IP addresses associated with the NFC relay activity.

OpenAI’s GPT-5.6 Sol on Ultrafast mode is available in limited preview to a select group of customers, launching first through the OpenAI API.

The company says the service runs up to 14 times faster than Standard processing and generates up to 750 output tokens per second.

GPT-5.6 Sol Ultrafast and standard build a working 3D warehouse simulator from the same text prompt, side by side.

(Source: OpenAI)During the preview, customers are testing Ultrafast across coding, commerce, financial research, support, and other interactive applications in production environments.

Internally, OpenAI is using Ultrafast for incident response, including reading logs, analyzing traces, synthesizing conversat…

AWS email validation phaseoutAWS will begin phasing out email validation on January 1, 2027, when ACM will stop offering the method in new AWS Regions.

From March 31, 2027, email validation will no longer be available for new certificate requests in any AWS Region.

Certificates whose validation method is marked EMAIL use email validation and should be migrated.

This means the certificate Amazon Resource Name (ARN) will remain the same and no changes will be needed to your AWS resources that reference the certificate,” Adam Aboudi, Senior Technical Product Manager on the AWS Certificate Manager team, and Poojil Tripathi, Solutions Architect at AWS, explained.

For HTTP validation, ACM provide…

Ukrainian police have disrupted 94 fraudulent call centers during a nationwide operation that involved more than 400 searches and the seizure of thousands of computers, phones, and SIM cards.

Ukrainian police raid at a fraudulent call center (Source: Cyberpolice Ukraine)The call centers were linked to schemes involving callers impersonating bank employees, fraudulent investment services, cryptocurrency platforms, and attempts to gain remote access to victims’ devices.

About 2 million US dollars, 64,000 euros, cash in hryvnias, a kilogram of bank gold in bars, and jewelry were also seized,” they added.

How operators targeted their victimsOperators used several approaches to persuade people t…

Organizations expect AI agents to change how work gets done, driving productivity and growth while allowing employees to focus on higher-value tasks.

Preparing the operating model for AI agentsAbout half of surveyed leaders say they understand how AI agents will affect their future operating model.

Fewer than half of surveyed leaders say their organizations are prepared for agentic AI across most areas of the business.

Redesigning processes around AI agentsOnly 16% of leaders say their organizations’ processes are ready for agentic AI, with just 5% describing them as highly prepared.

Long-term value is expected to depend on redesigning business processes around AI agents, a transition likel…

The same security issue can manifest differently across AWS, Azure, and Google Cloud, often requiring a different approach to identify and remediate, according to Intruder’s 2026 Cloud Security Index report.

You can’t just configure once and assume you’re covered.”Cloud security risks by platformThe most common cloud security issues vary across AWS, Azure, and Google Cloud, driven by each platform’s architecture.

Google Cloud is primarily affected by identity and access management (IAM) weaknesses, including missing MFA, unused service accounts, and overly permissive service accounts.

Weak identity controls, excessive permissions, and insecure or incomplete configurations remain the most co…

A company selling a connected toy in Europe must show by the end of 2027 that the product meets the Cyber Resilience Act.

Seventeen draft standards, now open for comment, supply that detail.

“The Cyber Resilience Act lays down what manufacturers, and the market need to achieve, but it does not tell you how.

ANEC, ECOS, ETUC, and SBS, the four societal partners known collectively as the Annex III Organisations, can comment too.

Seventeen documents are open for comment.

Here’s a look at the most interesting products from the past week, featuring releases from A10 Networks, ScienceLogic, Searchlight Cyber, and SelectHub.

The release further improves AI accuracy, platform performance, and natural language user experience across the ScienceLogic AI Platform.

Searchlight Cyber combines exposure and threat intelligence in new PTEM platformSearchlight Cyber has launched its Preemptive Threat Exposure Management (PTEM) platform, combining exposure visibility with real-world attacker intelligence to help organizations prioritize and reduce the exposures most likely to be exploited.

Searchlight Exposure provides continuous exposure visibility, attack surface discov…

“The American private sector is the most innovative and technologically advanced in the world, and its scale, speed, and capacity secure a critical offensive cyber advantage for the United States,” the White House said.

“Yet, American businesses’ innovative capabilities have historically been underutilized in efforts to identify and disrupt criminal networks operating in cyberspace.

According to the White House American consumers reported losing more than $20.8 billion to cyber-enabled crime in 2025.

A Cyber Effects Operation results in the manipulation, disruption, denial, degradation, or destruction of information systems, networks, or infrastructure.

“This memorandum shall be implemented…

SelectHub has announced the launch of DataGrout, its specialized AI research lab introducing an LLM inference optimization platform and AI governance solution for enterprises.

DataGrout’s mission is to drive token reduction for agentic workflows, chatbots and AI tools, while equipping IT and FinOps leadership with a policy-driven, auditable LLM payload and cost monitoring system to track company-wide AI utilization.

As enterprise users increase LLM usage through context-intensive chat sessions and coding tools such as Claude Code, Cursor and Replit, uncontrolled token waste and hidden API expenses are putting significant strain on corporate budgets.

DataGrout’s premise in terms of reducing …

A10 Networks has announced the general availability of the A10 AI Gateway, a centralized, intelligent control plane that gives organizations unified routing, cost management, and governance across every AI agent, application and large language model (LLM) they use.

Key capabilities of the A10 AI Gateway include:Identity-based AI access: Organizations apply access and routing policies by individual user and group profile (e.g., engineering vs. finance), in sync with existing local directory systems.

Smart routing: The A10 AI Gateway moves past static routing policies and simple metering.

The A10 AI Gateway moves past static routing policies and simple metering.

The A10 AI Gateway complements…

Threat actors have begun exploiting a critical Microsoft SharePoint flaw following the release of proof-of-concept (PoC) exploit code by Rapid7.

About CVE-2026-55040Tracked as CVE-2026-55040, the vulnerability was patched by Microsoft as part of its July 2026 Patch Tuesday updates.

“A remote unauthenticated attacker can leverage CVE-2026-55040 to bypass authentication on a vulnerable SharePoint server, and perform operations as a SharePoint site user or administrator.

Threat intelligence firm Defused warned on X that attackers are now using the Rapid7 POC for CVE-2026-55040 against its SharePoint honeypots.

When paired with another vulnerability, CVE-2026-63520, CVE-2026-55040 “could lead t…

Searchlight Cyber has launched its Preemptive Threat Exposure Management (PTEM) platform, combining exposure visibility with real-world attacker intelligence to help organizations prioritize and reduce the exposures most likely to be exploited.

“That’s why we’re introducing our Preemptive Threat Exposure Management platform.

Searchlight Exposure provides continuous exposure visibility, attack surface discovery and exploitability validation, enabling organizations to understand what is exposed and what attackers could exploit.

Searchlight Threat delivers real-world attacker intelligence, revealing what threat actors are actively discussing, developing and targeting across the open, deep and …

A massive 153GB archive stolen during the LiteLLM supply chain attack exposes credentials and other sensitive data linked to thousands of corporate domains, including AWS, Samsung, Cisco, and Salesforce.

The LiteLLM breach had its roots in an earlier compromise of Trivy, a popular open-source vulnerability scanner.

On March 19, 2026, TeamPCP, a cybercriminal group that emerged in late 2025, used stolen credentials to publish a compromised version of Trivy.

Using those tokens, TeamPCP published two malicious LiteLLM releases, versions 1.82.7 and 1.82.8, to the Python Package Index on March 24.

“The key takeaway is how supply chains have evolved to make a single upstream breach affect thousan…

A high-severity vulnerability (CVE-2026-20349) is being leveraged by attackers to temporarily interrupt the operation of Cisco firewalls, the company has confirmed.

Cisco only shared that its Product Security Incident Response Team (PSIRT) became aware of active exploitation of this vulnerability in August 2026.

About CVE-2026-20349CVE-2026-20349 affects the Remote Access SSL VPN service for:Cisco Secure Firewall Adaptive Security Appliance (ASA) SoftwareCisco Secure Firewall Threat Defense (FTD) SoftwareAffected features are IKEv2 Remote Access VPN (with client services), SSL VPN, and Zero Trust Network Access (ZTNA).

CVE-2026-20349 can be triggered by attackers via a specially crafted HTT…

I’m speaking online (via Zoom) at a League of Women Voters event on Tuesday, September 22, 2026, at 5 PM ET.

The conference runs September 22–24, 2026; my talk is on Wednesday, September 23.

I’m speaking at CanSecWest 2026 in Vancouver, Canada.

The conference runs September 30–October 1, 2026; the time of my talk is TBD.

The event runs October 21–23, 2026, and my talk is on Wednesday, October 21.

There are even questions about whether the leading AI labs will ever be sustainably profitable.

The economics of the big AI labs hardly guarantee a booming return on investment.

Frontier AI models are both expensive to train and depreciate within months, when a newer model appears.

Other countries, including Switzerland, Spain and Singapore, are already operating public AI labs.

They also have national supercomputing centers already providing public access for running AI models for general use, as do Germany and Australia.

Separating AI’s Technological Problems from Its Capitalism ProblemsThis essay was written with Nathan E. Sanders, and originally appeared in Tech Policy Press.

That AIs can lack context, mix up facts, or fall for stupid tricks are all technological problems.

Major AI models still act far more sycophantic than humans, telling people what they want to hear even when untrue or not in their best interests.

Popular AI models tend to answer questions confidently even when they lack training, knowledge, or evidence to back their claims.

It’s easy to conflate technology problems with capitalism problems.

This seems to work:Researchers from Tracebit on Monday said they found that placing prompt injections alongside passwords, cryptographic keys, and other secrets stored on Amazon Web Services was often all that was needed to shut down attacks from AI hacking agents.

The prompts direct the attacking LLM to perform an action forbidden by its guardrails, the safety barriers AI developers erect to prevent it from taking harmful actions.

The LLM responds by shutting down.

Once the LLM encounters these forbidden commands, it no longer follows its existing commands.

The researchers have named the technique context bombing.

AI Genie in the WildWhen I give talks about AI genies, I use this sort of example as a hypothetical.

Someone named Andrew tasked OpenClaw to book gym classes for him.

Minutes later, his AI agent reported it had discovered a way to book Andrew into classes several weeks in advance, far beyond what was supposed to be possible.

Andrew, who was sitting fourth on a waitlist for a class later that week, asked if it was possible to move him to the top of the list.

The agent came back and told Andrew that it had kicked another gym-goer off the list as part of the testing of its capabilities.

Interesting empirical research: “Black Box Warfare: Human Judgment and Military Decision-Making in the Age of AI.”Abstract: How is AI transforming decision-making in modern conflict?

This study provides a unique empirical window into that question by deploying a high-fidelity replica of an AI decision-support system (DSS) used in military targeting.

Contrary to widespread fears of automation bias, we find strong evidence of algorithmic aversion, especially in scenarios involving high collateral damage.

Yet we also show that integrating “explainable AI” features reduces algorithmic aversion and promotes more thoughtful evaluations of algorithmic recommendations.

These findings challenge prev…

About Bruce SchneierI am a public-interest technologist, working at the intersection of security, technology, and people.

I've been writing about security issues on my blog since 2004, and in my monthly newsletter since 1998.

I'm a fellow and lecturer at Harvard's Kennedy School, a board member of EFF, and the Chief of Security Architecture at Inrupt, Inc.

This personal website expresses the opinions of none of those organizations.

Contact Info

About Bruce SchneierI am a public-interest technologist, working at the intersection of security, technology, and people.

I've been writing about security issues on my blog since 2004, and in my monthly newsletter since 1998.

I'm a fellow and lecturer at Harvard's Kennedy School, a board member of EFF, and the Chief of Security Architecture at Inrupt, Inc.

This personal website expresses the opinions of none of those organizations.

Contact Info

About Bruce SchneierI am a public-interest technologist, working at the intersection of security, technology, and people.

I've been writing about security issues on my blog since 2004, and in my monthly newsletter since 1998.

I'm a fellow and lecturer at Harvard's Kennedy School, a board member of EFF, and the Chief of Security Architecture at Inrupt, Inc.

This personal website expresses the opinions of none of those organizations.

Contact Info

There are many companies manufacturing adversarial clothing designed to confuse facial recognition systems.

It’s a cool idea, but I worry that it’s mostly security theater:“Our patterns play with that chaos, confuse algorithms and make it way harder to pin you down,” he said.

Bell, however, said “none of these products are tried and tested, and a lot of these surveillance technologies can deal with a little resistance … [but] even if the designs don’t necessarily work perfectly, fashion is also a visible sign of resistance.

“This is consumers collectively coming together to make a visible statement.”

This is disturbing:…a team of security researchers at UC San Diego, who found that a model of aftermarket car alarm known as the KARR Security System, installed in more than 2 million vehicles across the US by their estimate, can let any hacker within Bluetooth range send radio commands to silently unlock the car at will, turn off its alarm, honk the car’s horn or flash its lights, or even disable its ignition and leave a driver stranded.

Iran Cyberattacks Against Minnesota Water SystemsAttribution is preliminary, and so far it seems no real damage.

And, because this is where the US is right now, Trump doesn’t believe it’s Iran and that Minnesota…I guess…hacked itself.

“I would blame it on Minnesota and the governor, the corrupt governor of Minnesota.

They like to say, ‘Oh, it’s Iran.’ Iran should be so lucky.

Iran’s got bigger problems than worrying about Minnesota.”No word on whether he believes the other six states have hacked themselves as well.

Some Claude Chats Are Searchable on GoogleAnd it’s personal information (alternate link):The exposed data includes an AI-powered therapy app that someone appears to have vibe-coded, notes on meetings, and a dashboard someone made apparently to analyze medical billing data.

Exposed chats reportedly include private cryptocurrency wallet keys and personal information like peoples’ addresses.

What seems to be the issue is a user setting about data sharing.

“These shareable links are not guessable or discoverable unless people choose to share them themselves.

When someone shares a conversation, they are making that content publicly accessible, and like other public web content, it may be archive…

From the summary:The agent was running an internal OpenAI cyber-capability evaluation based on the ExploitGym benchmark, which tasks an AI agent with finding and exploiting software vulnerabilities.

OpenAI ran this on its own infrastructure, and the ExploitGym maintainers and their infrastructure had no involvement in the deployment or operation of that evaluation environment.

The campaign, as we were able to reconstruct it, had two stages:Stage 1: reaching a launchpad by chaining through other parties’ infrastructure.

From that external launchpad, the agent abused our dataset-processing pipeline via two injection vectors, both targeting the same config-driven data loader within our product…

It can be daunting to determine who’s responsible for showing ads on the websites we visit, or who’s harvesting data from the mobile apps we use every day.

Not anymore: A powerful and free new service called DecryptAds scrapes and correlates this adtech data and makes it simple to quickly learn a great deal about the entities that are tracking you.

“It’s an adtech tool but we’re trying to approach adtech from a security perspective,” Edwards said.

DecryptAds reports that Between Digital is collecting ad data on approximately 55,000 partner websites.

Bear in mind that ad blockers often do little to block ads and/or tracking that occurs from within mobile apps that users have chosen to instal…

Microsoft today released updates to remedy at least 398 security vulnerabilities in its Windows operating systems and supported software, including one weakness that is already being actively exploited and two others that were publicly detailed prior to today.

August’s overstuffed bundle of patch joy from Microsoft did not eclipse its recording breaking release of more than 570 security updates last month, but it is double June’s then-record batch of nearly 200 fixes.

The other publicly disclosed flaw is CVE-2026-72971, a low-impact local tampering vulnerability that Microsoft reckons is unlikely to be exploited.

By all accounts, AI is quite good at finding security holes in software.

“Don’…

Snowflake responded to the data thefts by increasing password complexity requirements and enforcing multi-factor authentication.

A little more than a month later, Canadian authorities arrested Moucka on a provisional warrant from the United States.

“Moucka used the stolen data of a government officer and members of a then-former government officer’s immediate family in this re-extortion attempt,” reads a statement from the Justice Department.

Moucka pleaded guilty to four criminal counts, including computer fraud, wire fraud, aggravated identity theft, and conspiracy.

Ultimately, it will be up the federal judge how much time Moucka actually serves for his extensive cybercriminal rap sheet.

Further investigation into the Fengwo Group revealed it has registered multiple patents that match the inner workings of these apps.

AD FRAUDBitsight found the H96 devices were either relaying residential proxy traffic or participating in ad fraud, but never both at the same time.

When the TV is off, it switches back to waiting for ad fraud jobs.

In addition to enlisting the user’s TV box in ad fraud networks, these off-brand streaming devices almost universally come with residential proxy software pre-installed.

In January, the proxy tracking service Synthient documented how multiple botnets had rapidly enslaved millions of TV boxes using a complex interplay of security vulnerabilities in …

The home appliance giant LG Electronics USA said this week it plans to suspend any apps built for its smart TVs that turn one’s television into an always-on residential proxy node.

On July 2, we featured research by the security firm Spur that examined the prevalence of residential proxy software development kits (SDKs) in smart TV apps.

“A residential proxy network is not an intended use for LG smart TVs, and LG Electronics is working with developers to remove the residential proxy option from their apps on the webOS platform,” Taylor said.

In the case of LG and Samsung smart TVs, Spur found residential proxy SDKs bundled with everything from simple games like Pac-Man to screensavers and f…

Microsoft attributed the burgeoning patch counts to vulnerability discoveries aided by artificial intelligence.

Microsoft also addressed three zero-day flaws that are already being exploited in the wild.

As AI advances the state of vulnerability discovery and remediation, it is also making it easier for attackers to quickly devise working exploits for known software flaws.

Backing up your Windows system and/or data is always a good idea before applying operating system updates.

It’s not uncommon for security patches to introduce system stability issues, and those chances probably increase quite a bit with the gigantic patch count released today.

Experts say the gaps identified in the agency’s initial response provide important lessons that all security teams should absorb.

CISA also admitted it can do better when it comes to responding to security incident notifications from external parties.

Valadon’s company constantly scans public code repositories at GitHub and elsewhere for exposed secrets, automatically alerting the offending accounts of any apparent sensitive data exposures.

Valadon said the report validates the need to scan continuously — not just quarterly — for exposed secrets.

“Continuous monitoring of public GitHub surfaced it.

IRIS C2 says it is a company in McLean, Va. that sells offensive cybersecurity capabilities.

“Our business model is this,” reads a pinned post on top of the IRIS C2 account on X.

The website claims IRIS C2 is in the business of acquiring “zero-day exploits, individual primitives, partial chains, and full capabilities across all major platforms.

When approached with questions about IRIS C2, Burkman referred further inquiries to his longtime associate, 28-year-old Jacob Wohl.

In May, the author of the IRIS C2 account on X said that his girlfriend had no idea what he did for a living.

Benjamin Brundage is founder of the proxy tracking service Synthient, one of the companies that published evidence last month linking the Popa botnet to NetNut and Alarum Technologies.

Brundage said the domain seizures appear to have disrupted both the Popa botnet and the NetNut proxy network that rides on top of it.

“Google has high confidence that many popular residential proxy brands are in fact whitelabeling the NetNut botnet,” the GTIG report concludes.

What we have observed is that when faced with the degradation of their own botnet, proxy operators begin buying capacity from their competitors, effectively becoming a reseller.

More than a quarter of the apps made for Samsung’s Tizen o…

The duo were key members of a prolific cybercrime group known as Scattered Spider, and their guilty pleas came on the first day of what was expected to be a six-week trial.

In April 2026, 24-year-old British national and Scattered Spider member Tyler “Tylerb” Buchanan pleaded guilty to wire fraud conspiracy and aggravated identity theft for participating in the group’s SMS phishing spree in the summer of 2022.

The government said Buchanan, Jubair and others used the credentials harvested in that phishing campaign to steal at least $8 million in cryptocurrency from victims throughout the United States.

The U.S. Department of Justice says three alleged Scattered Spider defendants indicted alo…

This week, researchers from multiple security firms concluded that the Popa botnet is linked to NetNut, a “residential proxy” provider operated by the publicly-traded Israeli firm Alarum Technologies Ltd [NASDAQ: ALAR].

Qurium said that immediately after that disruption, several dozen new domains were registered to serve as controllers for the Popa botnet, but that one of those control domains was not new: ninjatech[.]io.

Jérôme Meyer, a security researcher at Nokia Deepfield, said the total population of devices participating in the Popa botnet may be far higher than Lumen’s estimates.

“Over 90% of our pharmaceutical and food & beverage customers have queried residential proxy indicators.

…

This post examines clues pointing to a real life identity for the administrator of The Gentlemen ransomware group.

Experts at the security firm Check Point Software have been closely covering exploits of The Gentlemen, a so-called “ransomware-as-a-service” (RaaS) offering that pays affiliates handsomely to help spread the group’s malware.

According to Check Point, the group targets Internet-facing devices (VPNs, firewalls) as their entry point, and once inside moves quickly to encrypt entire networks within hours.

Check Point says the administrator and primary operator of the ransomware group uses the nickname Zeta88 on the Russian-language cybercrime forums, and that this individual was pr…

Microsoft today released software updates to plug nearly 200 security holes across its Windows operating systems and supported software, a record number of fixes for the company’s monthly Patch Tuesday cycle.

“Some surveys put AI usage among security professionals generally at 90%, so it’s unsurprising that this volume of patches may be the norm,” Narang said.

Microsoft received heavily blowback on social media last month after it said in a blog post that it was considering taking legal action against the security researcher.

While 200 vulnerabilities may be a record for Patch Tuesday, the actual number of security flaws Microsoft addressed this month is far higher, said Rapid7’s Adam Barne…

On May 31, word began to spread on several Telegram instant message channels that Meta’s AI bot would happily add an email address to an existing account as part of the bot’s standard password reset flow.

Meta has not responded to requests for comment on the video’s claims, but the company reportedly did acknowledge the dormant Instagram account for the Obama White House was briefly compromised.

Meta’s solution was to deploy a conversational AI layer to handle common recovery workflows: relinking a lost email address, triggering a password reset, verifying account ownership.

Just like human customer support employees can be social engineered into providing unauthorized access to someone’s a…

But as KrebsOnSecurity observed in September 2025, those sanctions failed to target Stark’s remaining connection to the Internet — an Internet service provider based in the Netherlands called MIRhosting.

MIRhosting is operated by Andrey Nesterenko, a 39-year-old Russian native who runs the business out of the Netherlands.

And as our September 2025 report showed, WorkTitans was controlled by Nesterenko and a 57-year-old from Amsterdam named Youssef Zinad.

On top of that, WorkTitans was getting connectivity to the larger Internet solely through MIRhosting, where Zinad had worked previously.

“The transition to the.hosting was not intended to evade sanctions,” Nesterenko wrote.

f someone offered you 90% off the official price to access Claude, the powerful AI model from Anthropic, would you be tempted? It turns out that around 900 people were, and they may be regretting their decision. Read more in my article on the Fortra blog.

According to a report in the Financial Times, Apple has found itself facing a massive influx of submissions from amateur bug hunters who have used AI to generate plausible-sounding but completely hallucinated bug reports.

Unlike traditional spam, AI-generated bug reports include code which may be syntactically correct, references to genuine API calls, and plausible-sounding technical explanations of what is occurring.

But the hallucinated bug report may only have taken a few seconds for an amateur to generate and submit.

Previously, without the assistance of AI, Bynario had filed only 13 bug reports across 2025 and early 2026.

Apple is not the only company trying to deal with a deluge of au…

How a fake police officer nearly stole Graham's cryptocurrency with Graham Cluley and special guest Danny Palmer.

I said, without being big-headed, it is possible he knows me, but I don't know him.

I don't think my hotels tend to ask me to install something on my computer when I get there.

We had internet, but it was really, really restricted.

And it's really, really good.

As Coinbase's security team explains, the letters urge recipients to scan a QR code and enrol in a "Digital Asset Compliance Portal" before time runs out.

Bear in mind that the criminals could easily vary these details from letter to letter.

The scam site then asks victims to estimate how much value they have in their cryptocurrency wallets, with ranges up to "$100,000+".

Perhaps a reason why a scam like this can work is that the IRS has been tightening cryptocurrency holders' requirement to report details of their digital assets on their tax returns.

As a result, written communications between the IRS and holders of cryptocurrency have become more frequent.

According to the newly-published study, phishing and social engineering are becoming more expensive to recover from, trickier to detect, and increasingly augmented by artificial intelligence. Read more in my article on the Fortra blog.

For years, North Korea's state-trained hackers have been one of the world's most prolific robbers of banks - stealing huge sums of money from foreign financial instituions, draining cryptocurrency exchanges of billions, and funnelling the proceeds into the country's weapons programme.

But now, in a remarkable twist, some of the same elite hackers appear to have decided to rob their own government instead.

The ringleaders of the group are said to be discharged veterans from a cyber operations unit under North Korea's Reconnaissance and Intelligence General Bureau.

In short, the hackers are accused of building a mini version of the same kind of money-laundering infrastructure North Korea depl…

Smashing Security, Episode 478: This Job Interview Could Destroy Your Company, with Graham Cluley and special guest Paul Ducklin.

And all the time you're going through this process, bad news, they really were recording video of you.

Obviously, you can understand that CAR want to know, does your car actually have one of these in all likelihood?

And give it to them and then they tell you whether they think you're at risk.

I don't know.

The AI models involved were OpenAI's GPT-5.6 Sol and a more capable, as-yet-unreleased model.

The intention of OpenAI's researchers was to get a clear picture of what the AI models were capable of achieving if not constrained.

American AI safety guardrails forced a US company to turn to a Chinese AI model for help.

Hugging Face's CEO Clément Delangue is quoted in OpenAI's blog post, calling on the AI industry to work more collaboratively.

It is clear that advanced AI models are remarkably capable of discovering and exploiting ways to attack real-world systems.

How 14 orders of Chicken McNuggets helped nail a suspected Russian hacker with Graham Cluley and special guest James Ball.

I had a vindaloo, Graham Cluley, and I don't think it ever touched capsicum.

Yeah, I think you're right.

If you use Suno music, people say, you know, you're killing music.

I don't know much about Shai Hulud.

Ukraine's computer emergency response team, CERT-UA, has warned that Russian hackers are using fake CAPTCHA checks to trick people into compromising their own PCs.

The Kremlin-backed Sandworm hacking group is reportedly leveraging fake CAPTCHA checks on compromised websites that persuade users to execute a PowerShell command on their computers - tricking them into running malicious code.

The latest attacks begin when a user visits a compromised webpage, where they're greeted by a fake CAPTCHA claiming they need to complete an extra step to prove that they are human.

Instead, the fake CAPTCHA instructs the user to copy and paste a PowerShell command into their Windows computer.

They are a pr…

Someone gets hold of your locked Android phone and, despite not knowing your security PIN, they can send messages via SMS or WhatsApp pretending to come from you.

It is clear that Google has patched Gemini lock screen issues before, but security researchers keep finding new ways through.

The latest vulnerability is different from the previous similar Gemini-based Android lock screen bypass bugs that have been plaguing the operating system since September 2025.

To do that:Open the Gemini app, tap your profile picture, go to Settings, and select "Gemini on lock screen."

Every new capability Gemini is given at the lock screen is also a new potential attack surface.

The Anubis ransomware-as-a-service (RaaS) operation has hit some healthcare organisations hard - but they are not the only ones at risk. Read more in my article on the Fortra blog.

That is a really, really busy street potentially.

I don't know what the difference is between a tuk-tuk and a rickshaw.

I don't know.

Yeah, it's got to be a Bluetooth transmitter from the battery, and within the battery there's an operating system or something that'll need updating.

It's really, really great.

When a company falls victim to a ransomware attack, it is not uncommon for it to turn to experts for help.

Specialist ransomware negotiation firms handle communications with criminal gangs on a victim's behalf.

41-year-old Martino worked as a ransomware negotiator for DigitalMint, an incident response company based in Chicago.

The ransomware victim, a hospitality company, ultimately paid out nearly US $16.5 million.

The company has since changed the way its negotiators communicate with ransomware gangs, and is working with the Department of Homeland Security to establish a registry for the currently highly-unregulated world of ransomware negotiation.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: f2ed509c8db78e5bf9f4b9959cd583f7Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-08-13T17:00:41+03:00Config id: 299Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: b151dd13b503d39649441ee258a9621fServer IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-08-11T15:00:20+03:00Config id: 298Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: 31e2a51c17a679bf608181d1cb4a73dfServer IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-08-10T19:00:19+03:00Config id: 298Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: ba837fe40a3ce1bc1da3dc3d5c38e164Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-08-07T14:00:17+03:00Config id: 296Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: f03ed927ed78af1549df453edbc54069Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-08-06T17:00:43+03:00Config id: 295Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: f997d2a4543951b403d61a86f614b589Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-08-04T20:00:20+03:00Config id: 293Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: 64d189df4b1deb932c3c39da09770373Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-08-03T14:00:09+03:00Config id: 292Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: 87a765bcfffecb3be7b631186de73cdfServer IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-07-30T14:00:37+03:00Config id: 292Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: 69f66dfe76ff3f53d09e7e879aff2eabServer IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-07-29T19:00:33+03:00Config id: 291Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: e1896b8624f52547d7aa4a3bebd90c3cServer IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-07-27T16:00:28+03:00Config id: 291Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: 30ce39da164ccbcb4068b4e06c4c1e60Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-07-24T19:00:11+03:00Config id: 291Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: abb2f672b0aebacf96a83f072ddf5be5Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-07-23T15:00:29+03:00Config id: 290Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: 29288682927681f45f4ebe45b92c4f9dServer IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-07-22T15:00:12+03:00Config id: 290Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: 92f538b35cc9db0cd8268f0e9c690524Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-07-21T12:00:10+03:00Config id: 290Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: 7c4859afeb6714d16332cd516cc382ddServer IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-07-20T13:00:34+03:00Config id: 290Faithfully yours, nginx.

The Power of FedRAMP HighWhile FedRAMP Certified Class C (Moderate) is the standard for many civilian agencies, FedRAMP Certified Class D (High) is designed for systems where a breach could have catastrophic effects.

Cisco Security Cloud for GovernmentCisco Security Cloud for Government is a unified authorization boundary that integrates various Cisco security services, ensuring that organizations can protect their users, devices, and applications regardless of where they reside.

The Cisco Security Cloud for Government ecosystem is designed to meet the rigorous security requirements of the public sector and highly regulated industries.

Cisco Security Cloud Control (SCC)Cisco Security Cloud …

That’s why we are incredibly proud to announce a landmark achievement: Secure Email Threat Defense has officially achieved FedRAMP Class D (High) certification!

Reduced Vendor Risk & Increased Trust: FedRAMP certification signals that Email Threat Defense has undergone extensive third-party assessment and meets stringent government security controls.

FedRAMP certification signals that Email Threat Defense has undergone extensive third-party assessment and meets stringent government security controls.

Beyond the governance and compliance benefits, Email Threat Defense continues to deliver advanced protection capabilities that align directly with real-world email threat risks.

Email Threat De…

AI Is Changing the Traffic ModelMuch of the enterprise AI conversation centers on models, GPUs, data platforms, and agents.

Time-sensitive performance: Voice AI, edge AI, and physical AI move latency into live operations.

SD-WAN can help maintain operations by prioritizing critical traffic, steering it across the best available path, and applying consistent policy across locations.

Why AI Traffic is an SD-WAN ProblemSD-WAN sits at the point where application intent meets real network conditions.

1 https://www.aboutamazon.com/news/operations/amazon-million-robots-ai-foundation-modelCommon questions about SD-WAN and AI trafficWhat is AI-generated network traffic?

Their recommendations for securing the AI era rely heavily on establishing strict asset inventory and preventing lateral movement—which are, at their core, fundamental Zero Trust principles.

The Three Core Principles of Zero Trust for AIFounded in three core principles, a robust Zero Trust architecture requires us to execute the following phases comprehensively.

Achieving the Architectural VisionThe above may all sound like pipedream, as most organisations struggle with Zero Trust programs and undelivered microsegmentation projects.

Ultimately AI driven platform approach is what makes Zero Trust achievable for the frontier AI era.

This is exactly why achieving a Zero Trust Architecture for …

This provides an opportunity for defenders: if we assume our controls will fail at some point, we can build a much more resilient architecture.

When you assume the current layer will eventually be bypassed, you start designing the next layer proactively instead of reactively.

Defenders need to advance their controls by mapping them to the adversaries’ capabilities then assume that control will fail.

Map your controls to the attack chain.

Call to Action:If you haven’t watched the full video yet, go check it out: Assuming Failure Provides Better Defensive Outcomes (bonus elements around SOC of the Future and business context).

Consequently, the approach shifts toward a logically air-gapped architecture based on a full-stack governance model, which replaces physical barriers with a robust, software-defined cryptographic perimeter.

This “Logically Air-Gapped” governance model reaches its full operational potential through the implementation of “Live Protect.” As a runtime security module, Live Protect elevates protection from the configuration plane to that of dynamic execution.

Reference ArchitectureDigital autonomy is thus exercised by shifting network and security control into the operating system kernel.

Cisco integrates the execution power of Isovalent with the governance of Cisco Secure Workload to offer a un…

That is why we are introducing Firewall Migration Manager by Cisco, an enterprise-ready product built for that reality.

What Is Firewall Migration Manager?

Firewall Migration Manager is a dedicated migration application that you run in your own environment.

How Firewall Migration Manager WorksThe migration process follows a clear, guided workflow.

Intelligent, integrated migration: Firewall Migration Manager will also come to Cisco Cloud Control, and AI will play an increasing role in guiding teams before and during migration.

In independent testing with NetSecOPEN, the Cisco Secure Firewall 6160 delivered AI-scale inspected throughput beyond what the tools built to measure it could register, all while blocking 100% of tested threats.

These results are specific to Cisco Secure Firewall 6160, but the software capabilities behind Cisco Firewall, including advanced threat protection and high-performance inspection, extend across Cisco Firewall form factors in the cloud, virtually, and on-premises, from campus to data center.

Performance passed the previous benchmark by 5XInspection was turned on, and the test tools built to measure throughput hit their limit before the 6160 firewall did.

In previous NetSecOPEN testi…

We innovated by giving the Agentic SOC access to Endace’s always-on, full packet capture, and asked the agent to assess a potential SharpHound Recon attack that we had seen while threat hunting.

This blog explores how we built the integrations and how AI helped us with our threat hunt and threat assessment.

Agentic AI Massively Speeds our AnalysisAt this point, we decided to use Agentic AI capabilities to investigate and assess this potential threat.

ConclusionThe Agentic SOC, blending Agentic AI built into Endace’s products with custom agentic tools, is a massive boost to productivity and security.

AcknowledgementsOur thanks go to the Cisco SOC team led by @Jessica Oppenheimer and @Ivan Be…

Having spent time in the Cisco Live Americas 2026 SOC, one thing became abundantly clear:The way SOCs operate today is fundamentally different from even a few years ago.

Instead of spending time gathering information, analysts could spend more time understanding what the information actually meant.

Just as spreadsheets empowered business users decades ago, AI-assisted coding is beginning to empower security analysts today.

At Cisco Live, AI was already present throughout the workflow:Incident summaries generated automatically within XDR.

And based on what I saw at Cisco Live 2026, that future has already arrived.

The new SOC analysts were great at finding evidence, helped with triage and correlation by the AI agents in the SOC architecture.

With the advancements in Cloud Control, our new SOC Analysts can validate their hypothesis.

They had the ability to investigate the incident and find the root cause found in Splunk Security and Endace.

Instant Attack VerificationIn each Incident, the SOC Analysts is given an AI generated Summary stitching all the relevant logs from all the sources that are related to the objects in question.

Check out the blogs by the engineers who worked inside the SOC at Las Vegas:

At Cisco Live AMER 2026 in Las Vegas, my work with the Cisco Event SOC centered on one outcome that makes these deployments valuable beyond the event itself: Education.

The SOC protects the conference, but it also turns live operations into a learning environment through SOC tours, Cisco Live sessions, training inside the SOC, and conversations in the World of Solutions.

Bringing live SOC lessons into the classroomEducation also happened in the sessions I delivered at Cisco Live.

Cisco Live AMER 2026 reinforced that the SOC is one of the best classrooms we have because it teaches through real operations.

For a deeper look at the model behind these deployments, read the Cisco Event SOCs: A R…

Inside the Cisco Live SOCAt Cisco Live AMER, the Security Operations Center (SOC) is more than a demo environment.

For a broader look at how the Cisco Live SOC operates, read this overview.

Another part was spent in the SOC, working real investigations with XDR, Splunk Enterprise Security, firewall events, DNS telemetry, packet data, and AI assistance.

AI can help a product manager become useful faster in a live SOC.

That is the bar I want us to continue building toward as we build Cisco XDR and Splunk Security.

As part of the Cisco XDR (Extended Detection and Response) product engineering group, a few of us got exactly that chance.

Every product had a part to play for a network as traffic-heavy as Cisco Live.

(PS : Flaunting the SOC T-shirts was fun)AcknowledgementsA heartfelt thank you to Cisco and the entire SOC team — you are all amazing.

To the Cisco XDR , Splunk , Secure Access , and Secure Firewall engineering teams.

Check out the other blogs from our team at the Cisco Live Americas 2026 SOC at Las Vegas:

We built an Experience Score model on Cisco and Splunk infrastructure and watched it run against real traffic, at real scale, in real time.

The result was a working model for how leaders measure what customers feel, act before friction surfaces, and tie operational decisions to revenue and trust.

At Cisco Live, the Experience Score model organized that architecture around four questions business and technology leaders can answer together.

The composite Experience Score tells a leader whether the experience is healthy enough to protect the moments the business depends on.

From Cisco Live to LA28Cisco Live was a rehearsal for larger exposure surfaces, where digital experience, revenue, brand …

That’s exactly what Microsoft Defender Experts MDR is built to do.

We are excited to announce that we have been named a Leader in the 2026 IDC MarketScape: Worldwide MDR/MXDR for the Enterprise Vendor Assessment (Doc #US54792426, July 2026).

Defender Experts MDR includes it as a core part of the service with Defender Experts Hunting, extending your team with Microsoft experts who continuously look for advanced threats across your environment.

Get startedRead the IDC MarketScape: Worldwide MDR/MXDR for the Enterprise 2026 Vendor Assessment excerpt, and visit the Microsoft Defender Experts MDR webpage to see how expert-led, round-the-clock managed detection and response can extend your team, …

Microsoft Threat Intelligence tracks DeadLock ransomware as an emerging financially motivated operation distinguished by its use of decentralized infrastructure to support victim communications and data leak operations.

Microsoft has observed DeadLock ransomware being deployed by multiple groups including an affiliate of the Lynx and INC ransomware ecosystems.

Recovery chat: Technical architectureThe most distinctive feature of the DeadLock ransomware is its recovery chat system.

‘DeadLock’ ransomware was detected‘DeadLock’ ransomware was preventedMicrosoft Defender for Cloud AppsThe following alert might indicate threat activity associated with this threat.

Indicators of compromiseIndicato…

KuppingerCole’s Leadership Compass: Cloud Native Application Protection Platforms (CNAPP) reflects this shift.

The report describes how CNAPP is evolving from a consolidation of cloud security tools into the security foundation for AI-native enterprises, combining cloud security, AI security posture management, runtime protection, attack path analysis, cloud detection and response, and agentic AI operations into unified platforms.

This complexity exposes the limits of traditional, siloed tools, where cloud posture, workload protection, AI security, and the security operations center (SOC) each live in their own console.

Does it see AI models, agents, and pipelines as part of cloud risk, or …

Mitigation and protection guidanceOrganizations can apply the following recommendations to reduce exposure to this and similar macOS ClickFix campaigns:Educate users.

]com Domain ClickFix Webpage filecedarwallet[.]online.

Domain ClickFix Webpage filecopperbasket[.

]sbs Domain ClickFix Webpage filecrimsonsignal[.

]online Domain ClickFix Webpage filemarblegarden[.

Mitigation and protection guidanceOrganizations can apply the following recommendations to reduce exposure to this and similar macOS ClickFix campaigns:Educate users.

]com Domain ClickFix Webpage filecedarwallet[.]online.

Domain ClickFix Webpage filecopperbasket[.

]sbs Domain ClickFix Webpage filecrimsonsignal[.

]online Domain ClickFix Webpage filemarblegarden[.

Uses GitHub credentials to inject files into Claude and Visual Studio Code configurations across repository branches for persistence.

Ensure that Microsoft Defender Antivirus cloud-delivered protection, Microsoft Defender for Endpoint telemetry, Microsoft Defender for Containers, and Microsoft Defender XDR investigation workflows are enabled across developer and CI assets.

Some promptbooks require access to Microsoft Defender XDR, Microsoft Sentinel, or related Microsoft security plugins.

Learn moreFor the latest security research from the Microsoft Threat Intelligence community, check out the Microsoft Threat Intelligence Blog.

To hear stories and insights from the Microsoft Threat Intelli…

Uses GitHub credentials to inject files into Claude and Visual Studio Code configurations across repository branches for persistence.

Ensure that Microsoft Defender Antivirus cloud-delivered protection, Microsoft Defender for Endpoint telemetry, Microsoft Defender for Containers, and Microsoft Defender XDR investigation workflows are enabled across developer and CI assets.

Some promptbooks require access to Microsoft Defender XDR, Microsoft Sentinel, or related Microsoft security plugins.

Learn moreFor the latest security research from the Microsoft Threat Intelligence community, check out the Microsoft Threat Intelligence Blog.

To hear stories and insights from the Microsoft Threat Intelli…

That’s why we are expanding the Zero Trust for AI strategy with two major additions: a new AI-focused Zero Trust Assessment experience and a new DevSecOps pillar in the Zero Trust Workshop.

Zero Trust Assessment tool updates: New set of assessment checks for AI, Security Operations (SecOps), and Infrastructure.

Zero Trust Workshop updates: New dedicated pillar focused on Developer Security (DevSecOps) and additional guidance for AI Memory.

How to run Zero Trust WorkshopThe Zero Trust Workshop follows a simple three-step motion: plan the right pillars and stakeholders, run the Zero Trust Assessment to establish a baseline, and use the facilitated workshop to turn findings into a 12- to 24-mo…

Microsoft Defender’s attack disruption now includes device isolation, a new response action that extends autonomous protection directly to compromised endpoints.

By automatically enforcing the new device isolation action on the compromised endpoint, Defender attack disruption stopped the attack dead in its tracks.

Attack disruption instead uses AI-driven correlation and real-time analysis to identify multi-stage attacks by connecting signals across the environment before taking action.

The resultsTo summarize the results of the new device isolation response action:From first detection, Defender isolated the device in just 128 seconds.

Impact Mitigation (Defender response) – Device Isolation…

Microsoft Defender’s attack disruption now includes device isolation, a new response action that extends autonomous protection directly to compromised endpoints.

By automatically enforcing the new device isolation action on the compromised endpoint, Defender attack disruption stopped the attack dead in its tracks.

Attack disruption instead uses AI-driven correlation and real-time analysis to identify multi-stage attacks by connecting signals across the environment before taking action.

The resultsTo summarize the results of the new device isolation response action:From first detection, Defender isolated the device in just 128 seconds.

Impact Mitigation (Defender response) – Device Isolation…

Microsoft Threat Intelligence has also identified active traffic manipulation attacks leading to the delivery of malware on impacted systems.

Microsoft Threat Intelligence would like to thank our partners at Anthropic and OpenAI for their collaboration and support during this investigation.

Storm-2945 and Midnight BlizzardMicrosoft Threat Intelligence assesses that Storm-2945 is an operational sub-cluster of Midnight Blizzard based on distinctive technical and operational overlaps.

For additional details on Midnight Blizzard-related device code phishing techniques, see: Storm-2372 conducts device code phishing campaign.

To hear stories and insights from the Microsoft Threat Intelligence com…

Microsoft Threat Intelligence has also identified active traffic manipulation attacks leading to the delivery of malware on impacted systems.

Microsoft Threat Intelligence would like to thank our partners at Anthropic and OpenAI for their collaboration and support during this investigation.

Storm-2945 and Midnight BlizzardMicrosoft Threat Intelligence assesses that Storm-2945 is an operational sub-cluster of Midnight Blizzard based on distinctive technical and operational overlaps.

For additional details on Midnight Blizzard-related device code phishing techniques, see: Storm-2372 conducts device code phishing campaign.

To hear stories and insights from the Microsoft Threat Intelligence com…

Microsoft Defender Experts services are also expanding: Microsoft Defender Experts Threat Intelligence delivers human-led, curated insight into the cyberthreats most relevant to each organization, and Microsoft Defender Experts MDR extends expert-run detection and response beyond the Microsoft estate into third-party and multicloud signals through Microsoft Sentinel.

Together, the Insider Risk Management alert experience and Data Security Triage Agent help security teams investigate faster and with greater confidence.

In the Loop posts are your reliable source of what’s new across Microsoft Security and what it means for your security strategy.

To learn more about Microsoft Security solutio…

Microsoft Defender Experts services are also expanding: Microsoft Defender Experts Threat Intelligence delivers human-led, curated insight into the cyberthreats most relevant to each organization, and Microsoft Defender Experts MDR extends expert-run detection and response beyond the Microsoft estate into third-party and multicloud signals through Microsoft Sentinel.

Together, the Insider Risk Management alert experience and Data Security Triage Agent help security teams investigate faster and with greater confidence.

In the Loop posts are your reliable source of what’s new across Microsoft Security and what it means for your security strategy.

To learn more about Microsoft Security solutio…

That starts with asking better questions—the kind that help organizations turn intelligence into action and trust into a foundation for progress.

But better security does not start with more information.

Understanding those connections is what allows security teams to use platforms, AI, and automation to make better decisions under real-world conditions.

Better analysis can surface more insights, but better decisions still depend on understanding what matters most and applying the right context.

Better security starts with better questions, and with the clarity to act on them.

Here, threat actors may simply seed prompt injections on websites in hope of corrupting AI systems that browse them.

Early experiments revealed a significant volume of "benign" prompt injection text, which illustrates the complexity of distinguishing between functional threats and harmless content.

Many prompt injections were found in research papers, educational blog posts, or security articles discussing this very topic.

(Source: GitHub/swisskyrepo)When searching for prompt injections naively, the majority of detections are benign content – false positives in our case.

Malicious: ExfiltrationWe were able to observe a small number of prompt injections that aim at theft of data.

Recognizing the risks associated within the complex modem firmware, Pixel 9 shipped with mitigations against a range of memory-safety vulnerabilities.

Following our previous discussion on "Deploying Rust in Existing Firmware Codebases", this post shares a concrete application: integrating a memory-safe Rust DNS(Domain Name System) parser into the modem firmware.

Hook-up Rust to modem firmwareBefore building the Rust DNS library, we defined several Rust unit tests to cover basic arithmetic, dynamic allocations, and FFI to verify the integration of Rust with the existing modem firmware code base.

Pixel modem firmware already has a well-tested and specialized global memory allocation system to…

This project represents a significant step forward in our ongoing efforts to combat session theft, which remains a prevalent threat in the modern security landscape.

Session theft typically occurs when a user inadvertently downloads malware onto their device.

Once active, the malware can silently extract existing session cookies from the browser or wait for the user to log in to new accounts, before exfiltrating these tokens to an attacker-controlled server.

How DBSC WorksDBSC protects against session theft by cryptographically binding authentication sessions to a specific device.

The issuance of new short-lived session cookies is contingent upon Chrome proving possession of the correspondi…

Staying ahead of the latest indirect prompt injection attacks is critical to our mission of securing Workspace with Gemini.

In our previous blog “Mitigating prompt injection attacks with a layered defense strategy”, we reviewed the layered architecture of our IPI defenses.

Synthetic data generationAfter we discover, curate, and catalog new attacks, we use Simula to generate synthetic data expanding these new attacks.

We partition the synthetic data described above into separate training and validation sets to ensure performance is evaluated against held-out examples.

This process leverages the newly generated synthetic attack data described on this blog, to create a robust, end-to-end evalu…

2025 marked a special year in the history of vulnerability rewards and bug bounty programs at Google: our 15th anniversary 🎉🎉🎉!

Coming back to 2025 specifically, our VRP once again confirmed the ongoing value of engaging with the external security research community to make Google and its products safer.

Vulnerability Reward Program 2025 in NumbersWant to learn more about who’s reporting to the VRP?

Tip: Want to be informed of new developments and events around our Vulnerability Reward Program?

Follow the Google VRP channel on X to stay in the loop and be sure to check out the Security Engineering blog, which covers topics ranging from VRP updates to security practices and vulnerability des…

To stay ahead of the curve, the technology industry must undertake a proactive, multi-year migration to Post-Quantum Cryptography (PQC).

To bring these critical protections to the wider developer community with minimal friction, the transition will be supported through Play App Signing.

Play App Signing leverages Google Cloud KMS, which helps ensure industry-leading compliance standards, to secure signing keys.

Empower Developers : The inclusion of ML-DSA support within Android Keystore and Play App Signing allows developers to safeguard their users and application.

: The inclusion of ML-DSA support within Android Keystore and Play App Signing allows developers to safeguard their users and …

Today we're announcing a new program in Chrome to make HTTPS certificates secure against quantum computers.

Instead, Chrome, in collaboration with other partners, is developing an evolution of HTTPS certificates based on Merkle Tree Certificates (MTCs), currently in development in the PLANTS working group.

Since MTC technology shares significant architectural similarities with CT, these operators are uniquely qualified to ensure MTCs are able to get off the ground quickly and successfully.

The Chrome Quantum-resistant Root Program will operate alongside our existing Chrome Root Program to ensure a risk-managed transition that maintains the highest levels of security for all users.

First, we…

For Majik, Scam Detection was the intervention he needed: “The warning is what made me pause and avoid a bad situation”.

As scammers evolve their tactics and create more convincing and personalized threats, we’re using the best of Google AI to stay one step ahead.

Expanding Scam Detection for Calls to Samsung DevicesTo help protect you during phone calls, Scam Detection alerts you if a caller uses speech patterns commonly associated with fraud.

Scam Detection for phone calls on Google Pixel devices is available in the U.S., Australia, Canada, India, Ireland, and the UK.

Powered by Gemini’s on-device model, Scam Detection provides intelligent protection against scam calls while ensuring that…

Upgrading Google Play’s AI-powered, multi-layered user protectionsWe’ve seen a clear impact from these safety efforts on Google Play.

As Android’s built-in defense against malware and unwanted software, Google Play Protect now scans over 350 billion Android apps daily.

This proactive protection constantly checks both Play apps and those from other sources to ensure they are not potentially harmful.

Looking aheadOur top priority remains making Google Play and Android the most trusted app ecosystems for everyone.

Thank you for being part of the Google Play and Android community as we work together to build a safer app ecosystem.

That’s why we're committed to providing multi-layered defenses that help protect you before, during, and after a theft attempt.

Today, we're announcing a powerful set of theft protection feature updates that build on our existing protections, designed to give you greater peace of mind by making your device a much harder target for criminals.

These updates are now available for Android devices running Android 16+.

More User Control for Failed Authentications: In Android 15, we launched Failed Authentication Lock, a feature that automatically locks the device's screen after excessive failed authentication attempts.

This feature is now getting a new dedicated enable/disable toggle in settings,…

These initiatives, driven by Ballots SC-080, SC-090, and SC-091, will sunset 11 legacy methods for Domain Control Validation.

What’s Domain Control Validation?

Domain Control Validation is a security-critical process designed to ensure certificates are only issued to the legitimate domain operator.

Sunsetted methods relying on email:Sunsetted methods relying on phone:Sunsetted method relying on a reverse lookup:For everyday users, these changes are invisible - and that’s the point.

These changes push the ecosystem toward standardized (e.g., ACME), modern, and auditable Domain Control Validation methods.

Partnership with ArmOur goal is to raise the bar on GPU security, ensuring the Mali GPU driver and firmware remain highly resilient against potential threats.

We partnered with Arm to conduct an analysis of the Mali driver, used on approximately 45% of Android devices.

This approach allowed us to roll out the new security policy broadly while minimizing the impact on developers.

This effort spans across Android and Android OEMs, and required close collaboration with Arm.

The Android security team is committed to collaborating with ecosystem partners to drive broader adoption of this approach to help harden the GPU.

We built on Gemini's existing protections and agent security principles and have implemented several new layers for Chrome.

To further bolster model alignment beyond spotlighting, we’re introducing the User Alignment Critic — a separate model built with Gemini that acts as a high-trust system component.

A flow chart that depicts the User Alignment Critic: a trusted component that vets each action before it reaches the browser.

The User Alignment Critic runs after the planning is complete to double-check each proposed action.

Looking forwardThe upcoming introduction of agentic capabilities in Chrome brings new demands for browser security, and we've approached this challenge with the same ri…

Android uses the best of Google AI and our advanced security expertise to tackle mobile scams from every angle.

Over the last few years, we’ve launched industry-leading features to detect scams and protect users across phone calls, text messages and messaging app chat notifications.

To help combat these types of financial scams, we launched a pilot earlier this year in the UK focused on in-call protections for financial apps.

The UK pilot of Android’s in-call scam protections has already helped thousands of users end calls that could have cost them a significant amount of money.

We’ve also started to pilot this protection with more app types, including peer-to-peer (P2P) payment apps.

Secure by DesignWe built Quick Share’s interoperability support for AirDrop with the same rigorous security standards that we apply to all Google products.

Secure Sharing Channel: The communication channel itself is hardened by our use of Rust to develop this feature.

On Android, security is built in at every layer.

On Android, security is built in at every layer.

Secure Sharing Using AirDrop's "Everyone" ModeTo ensure a seamless experience for both Android and iOS users, Quick Share currently works with AirDrop's "Everyone for 10 minutes" mode.