Cybersecurity News

ReliaQuest has detailed a social engineering attack linked to ShinyHunters, denying reports that the threat actor successfully compromised its systems

The US has sanctioned individuals connected to hacking-for-hire group the Mabna Institute

Elastic's InfoSec team runs three agents that read the detection rule's investigation guide and the closure reasons on 30 days of past cases. Analysts now clear most alerts with a single click in Slack.

Explore Mexico’s 2025–2030 Cybersecurity Plan. Learn about key threats, including ransomware, and the roadmap for building durable national cyber defenses.

CVE-2026-42167 - ProFTPD mod_sql post-authentication SQLi - RCE

TCG has released new guidance to help proving that trusted platform modules genuinely meet essential quantum-safe requirements

NIST has set out 23 novel challenges that arise in multi-cloud environments and has encouraged the cyber community to find solutions

Fake Codex pages used Google Sites, sponsored search and ClickFix to target Mac users

Key Takeaways The DFIR Report Offerings Check out our Products here and our Services here. Want a demo, more information on our services, pricing or just want to chat? Get in Touch Contact us today for pricing or a demo! Case Summary In March 2026, our team identified an SEO poisoning campaign leading to malware deployment […] The post BengalSEO Part 1: Anatomy of the Operation appeared first on The DFIR Report.

Doubloon Dredger abused Notion and malicious PDFs to harvest Microsoft authentication tokens

Experts argue Iranian cyber-attack on UK power plant lays bare frailty of critical national infrastructure

Inside Elastic Security, background jobs called maintainers each own one piece of every user, host and service record, from building entities out of raw logs to resolving identities and scoring risk.

Use safeguards, sandboxing and active oversight to realise the benefits of autonomous systems while limiting the unintended activity.

Recorded Future has launched native risk ratings capabilities inside its Third-Party Risk product, uniting threat intelligence and risk ratings in a single workflow.

The Russian influence network CopyCop is targeting Western-backed AI and infrastructure projects in Armenia, including the Firebird AI data center, to undermine the country’s westward geopolitical realignment.

Learn how North Korean IT worker threat cluster "PurpleDelta" uses AI-generated personas, sophisticated tradecraft, and custom ChatGPT assistants to infiltrate organizations. Discover key indicators of compromise and mitigation strategies to protect your company from these fraudulent employment operations.

Nodemailer 9.0.0 - File Read/ SSRF

flyto-core 2.26.7 - Arbitrary File Write

NanaZip 6.5 - DoS

PCMan 2.0.7 - Buffer Overflow

Quishing has become a popular alternative to traditional phishing. Here’s how businesses can close the gap.

A few days ago, a paper named “Stealing Reasoning Traces from Proprietary LLM APIs” was published. It describes a simple, yet super elegant way to recover encrypted LLM reasoning traces. Naturally, I had to try it. Background AI labs like OpenAI and Anthropic send reasoning traces back and forth as part of their messaging protocols. However, the actual reasoning text is hidden inside an encrypted, base64-encoded blob.

And will today’s surge in AI-driven vulnerability discovery eventually make tomorrow’s software safer?

Using a PIN mitigates many BitLocker vulnerabilities. Make sure you’re ready for the next one...

The incident involving OpenAI models shows that autonomous hacks make human oversight more important, not less

Insikt Group analyzes 24 threat actors selling malware crypting services. Learn about their evasion techniques, market dynamics, and how defenders can prioritize behavioral detection over static analysis.

AI took center stage, but the clearest lesson was less about what AI can do than about who is accountable when something goes wrong

Cursor hooks and Elastic Agent capture every tool call, shell command, file read and MCP request as structured events you can hunt with ES|QL.

Minerals become chips. Chips become data centers. Data centers become models, and models are acquiring arms and legs. From Earth to Embodied AI traces the supply chain of the fourth industrial revolution, and shows how geopolitical rivalry and cyber operations now run along every link, from mine to machine.

AI tutors can offer useful support, but their quality and safeguards vary widely. Here’s what parents should check before handing one to a child.