Stolen AI API keys are paying for hackers’ autonomous scans 2026-10-16 at 08:00 By Anamarija Pogorelec A seller on a restricted criminal forum is marketing an autonomous hacking tool that runs on stolen OpenAI, Anthropic and Google API keys, so the key’s owner pays for the scans. Bitsight’s threat intelligence team tracked the shift across […]
Stolen AI API keys are paying for hackers’ autonomous scans Read More »
The internet’s attack surface moves at very different speeds 2026-10-15 at 08:00 By Anamarija Pogorelec Censys found that AI-related software exposed to the public internet grew 63% in nine months, from 164,088 IP addresses in October 2025 to 267,915 in July 2026. Elsewhere in its scans, the internet-scanning company measured much slower movement. Exposed industrial […]
The internet’s attack surface moves at very different speeds Read More »
What the BPFDoor backdoor tells us about attacks on the network edge 2026-10-09 at 09:00 By Mirko Zorz A backdoor that makes no noise is hard to catch, and that’s the point of BPFDoor. The Linux malware waits for a special “magic packet” before it acts. In this interview with Help Net Security, Christiaan Beek, […]
What the BPFDoor backdoor tells us about attacks on the network edge Read More »
Inside PhantomPolia: Remus Stealer Delivery via Donut Shellcode in ClickFix Campaign 2026-10-07 at 18:47 By King Orande and Cris Tomboc Key Takeaways This article is an excerpt from LevelBlue SpiderLabs Blog View Original Source
Inside PhantomPolia: Remus Stealer Delivery via Donut Shellcode in ClickFix Campaign Read More »
Osavul Lands $10 Million to Spot Hostile Intent Across Cyber, Physical Domains 2026-10-01 at 20:16 By SecurityWeek News Hybrid risk intelligence company Osavul has raised $10 million in a Series A funding round led by 33N Ventures. The post Osavul Lands $10 Million to Spot Hostile Intent Across Cyber, Physical Domains appeared first on SecurityWeek. […]
Osavul Lands $10 Million to Spot Hostile Intent Across Cyber, Physical Domains Read More »
Day in the Life of a Cyber Research Communicator: From Threats to Takeaways 2026-10-01 at 17:00 By Karl Sigler Cybersecurity research, threat intel, and novel findings produce no shortage of information. Every day brings new vulnerabilities, malware campaigns, proof-of-concept exploits, threat reports, headlines, and predictions about what comes next. This article is an excerpt from […]
Day in the Life of a Cyber Research Communicator: From Threats to Takeaways Read More »
The TASK#STOMP Windows backdoor takes Wi-Fi passwords, screenshots, and business files 2026-09-21 at 17:00 By Mirko Zorz Researchers have taken apart TASK#STOMP, a Windows backdoor that searches a victim’s drives for business documents, uploads them to attacker servers, and then stays put to grab each new or edited document. The same malware steals saved Wi-Fi […]
The TASK#STOMP Windows backdoor takes Wi-Fi passwords, screenshots, and business files Read More »
From Infostealer Log to Marketplace Listing: A Technical Walkthrough of the Credential Theft Pipeline 2026-09-10 at 13:45 By Ashish Khaitan Infostealer malware is behind a large share of today’s credential compromise — and it usually doesn’t start with a breach at all. When a security team hears “data breach,” the instinct is to look for […]
AI-Driven Threat Intelligence for Gulf Enterprises: Why Detection Speed Is Now a Regulatory Requirement 2026-09-04 at 19:25 By Ashish Khaitan Six hours. That’s the incident notification window under the UAE’s Information Assurance Standard v2. Once a breach is detected, the framework requires incident notifications within 6 hours of detection, alongside quarterly compliance updates and annual […]
Supply Chain Attacks in 2026: Why Threat Intelligence Is the Only Early Warning System That Works 2026-09-03 at 11:21 By Ashish Khaitan Supply chain attacks in 2026 are no longer an edge-case risk buried in a vendor questionnaire — they are a primary breach vector that regulators, incident responders, and CISOs now treat as a […]
Your threat feed is someone else’s database: What ingesting malware intel at scale takes 2026-09-03 at 08:30 By Help Net Security The advice is to consume shared threat intelligence. Join the ISAC. Wire the community feeds into your pipeline. This looks like a fine advice and I agree to it. What nobody mentions you is […]
Your threat feed is someone else’s database: What ingesting malware intel at scale takes Read More »
Askeal, the AI cybersecurity assistant that gives verifiable, expert-backed answers 2026-09-01 at 08:30 By Mirko Zorz Askeal takes the opposite approach to omniscient Gen AI: rather than pretending to know everything, it combines AI with community expertise. Vetted vendors, researchers, and practitioners contribute their intelligence and tools to help users conduct manual investigations. The startup, […]
Askeal, the AI cybersecurity assistant that gives verifiable, expert-backed answers Read More »
Surveillance – Everything You Wanted to Know, But Were Afraid to Ask 2026-08-20 at 17:30 By Kevin Townsend We all know they’re watching us. But we don’t know who they are, nor why nor how they are doing it. The post Surveillance – Everything You Wanted to Know, But Were Afraid to Ask appeared first […]
Surveillance – Everything You Wanted to Know, But Were Afraid to Ask Read More »
Release the RAVEN: Destruction and Discipline 2026-08-18 at 19:53 By Karl Biron In Part 4, we stole every document from every index, planted a rogue superuser account, created credential-independent API keys, and planted three persistence mechanisms that survive password rotations. Everything was logged. Now we answer two final questions: how much worse could it get, […]
Release the RAVEN: Destruction and Discipline Read More »
Release the RAVEN: Data Heist and Persistence 2026-08-14 at 16:13 By Karl Biron We have access through port 9200. We have code execution through port 5601. Reconnaissance is complete, CVEs have been exploited, and Kibana has been compromised. Over the past three posts, we proved that we could get in. Now we prove what happens […]
Release the RAVEN: Data Heist and Persistence Read More »
Release the RAVEN: Kibana Under Siege 2026-08-13 at 16:36 By Karl Biron In Parts 1 and 2, every command targeted port 9200. Every exploit, every reconnaissance query, every credential test hit the Elasticsearch REST API directly. But Elasticsearch rarely operates alone. Sitting alongside it on most deployments is Kibana, the visualization and management interface, quietly […]
Release the RAVEN: Kibana Under Siege Read More »
A stranger has been reading Salesforce and ServiceNow portals worldwide for 17 months 2026-08-12 at 16:51 By Mirko Zorz Most security stories start with something broken. This one starts with everything working as designed. Researchers at Reco have been tracking a campaign they call City-Forum, named after a domain registered in 2002, abandoned, and now […]
A stranger has been reading Salesforce and ServiceNow portals worldwide for 17 months Read More »
CNCMachineRMS: The Undocumented RAT At the End of a BabaDeda Chain 2026-08-10 at 16:55 By Rodel Mendrez This post is the result of an investigation into a case we worked on, in which we traced a loader chain that ended where we didn’t expect. This article is an excerpt from LevelBlue SpiderLabs Blog View Original […]
CNCMachineRMS: The Undocumented RAT At the End of a BabaDeda Chain Read More »
Ransomware Threats in Europe H1 2026: A Deep Dive into Regional Attack Patterns and Dominant Threat Actors 2026-08-07 at 13:58 By Mihir Bagwe Europe faced a ransomware onslaught in the first half of 2026 that sets a troubling precedent for the remainder of the year. According to Cyble Research and Intelligence Labs (CRIL), the region […]
Release the RAVEN: Exploiting the Cracks 2026-08-06 at 17:00 By Karl Biron In Part 1, we went from a single open port to a complete map of the target. Version, topology, indices, secrets, credentials, privilege structure — all of it documented, all of it ready to be weaponized. Reconnaissance is finished. Now we find out […]
Release the RAVEN: Exploiting the Cracks Read More »