Cybersecurity News

Anthropic has warned that infostealers are stealing Claude session cookies to access users’ accounts and consume usage at their expense.

Experts from Recorded Future and Accenture offer perspectives on navigating the path to becoming an agentic SOC. Find out how to plan moving beyond “AI theater” by prioritizing measurable KPIs, proactively mitigating autonomous security risks, and evolving the analyst’s role from managing alerts to managing agents.

Analysis of 15 intrusions revealed tradecraft used by GOLD SHERWOOD affiliatesCategories: Threat ResearchTags: ransomware as a service, The Gentlemen, GOLD SHERWOOD, Ransomware

Healthcare company McKesson acknowledged a data breach. ShinyHunters claims to have stolen hundred of millions of records

Details about the Hugging Face hack, critical infrastructure under attack, a spoofed in-flight Wi-Fi network, and more of this month's cybersecurity news

A list of topics we covered in the week of August 24 to August 30 of 2026

WhatsApp has introduced three security upgrades. Here’s what to turn on to better protect your account.

An army of AI agents was responsible for the Hugging Face incident. What does it mean for the future of AI?

In his first Threat Source newsletter, David Bianco explores the critical need for operational sovereignty in customizing AI guardrails to maintain the defender’s advantage.

Flock’s CEO wants a compromise between privacy and public safety, but the public has already compromised enough.

A trusted name on a trusted platform does not guarantee a trustworthy listing. It could still lead to a tech support scammer.

Built for mobile users, this tech support scam uses a fake Apple Pay alert and browser tricks to pressure victims into calling a scam number.

Meta will pay up to $17 billion and introduce new protections for US teens to settle a landmark child safety case.

Learn the basics of what obfuscation is, why a researcher would try to reverse it, and several ways to approach the problem.

It’s getting cheaper and easier for cybercriminals to research potential victims. Here’s what’s still in your control.

Discover how the Russian state-sponsored threat group BlueDelta is using the HOOKEDGE backdoor to target defense and diplomatic organizations across Europe

Chrome’s latest update fixes 327 security vulnerabilities, including some that malicious websites could exploit as soon as you visit them.

A Utah investigation found educational apps collecting unauthorized student data and sharing information with third parties and advertisers.

Selecting a model for your security operations center (SOC) and digital forensics and incident response (DFIR) tasks is important, but selecting the best one is more involved than you might think. Here's how to choose.

Scammers are posing as employers on Indeed to trick job seekers into installing fake Android interview apps that deliver malware.

AI Alert Filtering is now available. Powered by Recorded Future AI, it automates the first pass of filtering Alerts by relevance so analysts prioritize faster while keeping control.

Researchers found that prompt injection attacks can hide malicious instructions in encrypted text to get them past AI guardrails.

Take-Two is demanding IP addresses, phone numbers, device IDs, and other data as it tries to identify whoever leaked GTA 6 footage.

As frontier AI models become increasingly restrictive, security teams are facing a "safety penalty" that hampers real-time incident response. Discover how organizations can move toward operational sovereignty to ensure their defensive AI keeps pace with unconstrained adversaries.

Scammers use fake TikTok login pages, warnings, and verification offers to trick you into handing over your account details.

Explore Mexico’s 2025–2030 Cybersecurity Plan. Learn about key threats, including ransomware, and the roadmap for building durable national cyber defenses.

Bogus “Play Now” sites are exploiting the GTA 6 leak hype to spread malware that steals passwords stored in browsers.

We found fake Microsoft-branded scanners that invent security problems, tell victims to uninstall AV, and then steer them into a refund scam.

This week on the Lock and Code podcast, we speak with Tamara Kneese about the many ways your data remains long after your die.

Key Takeaways The DFIR Report Offerings Check out our Products here and our Services here. Want a demo, more information on our services, pricing or just want to chat? Get in Touch Contact us today for pricing or a demo! Case Summary In March 2026, our team identified an SEO poisoning campaign leading to malware deployment […] The post BengalSEO Part 1: Anatomy of the Operation appeared first on The DFIR Report.