2025-10-28 17:01 UTC
Vendor Research
Google Online Security Blog · Google · indexed 2026-08-15 14:33 UTC
One year from now, with the release of Chrome 154 in October 2026, we will change the default settings of Chrome to enable “Always Use Secure Connections”. This means Chrome will ask for the user's permission before the first access to any public site without HTTPS. The “Always Use Secure Connections” setting warns users before accessing a site without HTTPS Chrome Security's mission is to make it safe to click on links. Part of being safe means ensuring that when a user types a URL or clicks o…
P0
2025-10-28 09:06 UTC
Other
Group-IB · indexed 2026-09-07 17:30 UTC
This blog details online investment scam campaigns, including fraudulent cryptocurrency, forex, and trading platforms, while offering a technical investigation guide for investigators, based on Group-IB’s technical investigation methodology. It outlines the social engineering tactics and victim manipulation models employed, describes the fraud actor structures behind these schemes, and highlights key infrastructure artifacts identified by Group-IB High-Tech Investigations analysts that can be l…
P0
2025-10-27 20:01 UTC
Other
Black Lantern Security · Philip Hartlieb · indexed 2026-09-07 17:30 UTC
“I shouldn’t be able to even reach that from here”
P0
2025-10-24 04:00 UTC
Security Journalism
Huntress · indexed 2026-09-07 17:30 UTC
Huntress has observed threat actors exploiting a Microsoft Windows Server Update Services (WSUS) vulnerability (CVE-2025-59287).
P5
2025-10-22 07:01 UTC
Other
Group-IB · indexed 2026-09-07 17:30 UTC
Group-IB Threat Intelligence has uncovered a sophisticated phishing campaign, attributed with high confidence to the Advanced Persistent Threat (APT) MuddyWater. The attack used a compromised mailbox to distribute Phoenix backdoor malware to international organizations and across the whole Middle East and North Africa region, targeting more than 100 government entities.
P0
2025-10-22 05:00 UTC
Security Journalism
Huntress · indexed 2026-09-07 17:30 UTC
Incident analysis is critical, but for newcomers, it can be daunting. Learn how to confirm commands, validate findings, and spot real impact during a Qilin ransomware event.
P15
2025-10-21 06:56 UTC
Other
Group-IB · indexed 2026-09-07 17:30 UTC
Group-IB’s Threat Intelligence Report on a Singapore-Targeted Scam Operation
P0
2025-10-21 05:00 UTC
Security Journalism
Huntress · indexed 2026-09-07 17:30 UTC
See how the Huntress Tactical Response team tackles security telemetry gaps. We share real-world techniques for working with missing logs, degraded telemetry, and cloud logging challenges to uncover critical insights and improve investigations.
P0
2025-10-17 07:46 UTC
Other
Group-IB · indexed 2026-09-07 17:30 UTC
Most NDR deployments focus on perimeter traffic. Meanwhile, attackers move laterally inside networks. Here’s why east-west visibility is the blind spot that defines today’s biggest breaches.
P0
2025-10-16 05:00 UTC
Security Journalism
Huntress · indexed 2026-09-07 17:30 UTC
Huntress analyzes ransomware activity, uncovering attack patterns and key detection opportunities while dispelling ransomware myths.
P15
2025-10-15 07:37 UTC
Other
Group-IB · indexed 2026-09-07 17:30 UTC
Group-IB’s Suspicious Payment Details module for Threat Intelligence delivers payment identifiers tied to ransomware, illegal casinos, and laundering schemes. Fraud, AML, and compliance teams can now stop money from reaching criminal infrastructure.
P15
2025-10-15 04:00 UTC
Security Journalism
Huntress · indexed 2026-09-07 17:30 UTC
Huntress has observed in-the-wild exploitation of a Local File Inclusion vulnerability in Gladinet CentreStack and Triofox products.
P0
2025-10-15 04:00 UTC
Security Journalism
Huntress · indexed 2026-09-07 17:30 UTC
Beginning in mid-2025, Huntress discovered a new tool being used to facilitate webserver intrusions known as Nezha, which up until now hasn’t been publicly reported on. This was used in tandem with other families of malware and web shell management tools such as Ghost RAT and AntSword.
P0
2025-10-14 05:00 UTC
Security Journalism
Huntress · indexed 2026-09-07 17:30 UTC
Ready to drive your IT team crazy? See our top security blunders and learn practical tips to improve your cybersecurity habits.
P0
2025-10-10 04:00 UTC
Security Journalism
Huntress · indexed 2026-09-07 17:30 UTC
Huntress has observed a spike in compromises of SonicWall SSLVPN devices across multiple customer environments.
P0
2025-10-09 15:54 UTC
Other
Black Lantern Security · TheTechromancer · indexed 2026-09-07 17:30 UTC
BBOT Gets Its First CVEs
P0
2025-10-08 04:01 UTC
Other
Group-IB · indexed 2026-09-07 17:30 UTC
Your inbox deserves better than spam. Here are 7 cybersecurity newsletters that actually inform and make you a little smarter each week.
P0
2025-10-07 05:00 UTC
Security Journalism
Huntress · indexed 2026-09-07 17:30 UTC
Tired of hearing the same old cybersecurity tips? Learn actionable, modern strategies to protect yourself and your organization from bad threat actors.
P0
2025-10-06 08:11 UTC
Other
Red Hunt Labs · Lohit · indexed 2026-09-07 17:30 UTC
In today’s sprawling digital landscape, the question for security leaders isn’t whether Attack Surface Management (ASM) matters; it’s whether your ASM platform is doing enough to earn its place in the budget. If your board or finance team is asking you to justify the spend, you’re not alone. Saying it “improves visibility” or “reduces risk” isn’t enough anymore. You need to show real outcomes, saved hours, reduced incidents, lower cloud costs, and stronger operational resilience. That’s where C…
P0
2025-10-02 05:00 UTC
Security Journalism
Huntress · indexed 2026-09-07 17:30 UTC
John Hammond and Greg Linares with Huntress discuss the top tradecraft we’ve seen this year so far, from ClickFix attacks to deepfake social engineering
P0
2025-10-01 13:00 UTC
Security Journalism
Huntress · indexed 2026-09-07 17:30 UTC
Over 20 years of Cybersecurity Awareness Month, and we’ve had enough. This October, Huntress is taking a new attitude with an offensive-minded approach to defense.
P0
2025-09-30 12:00 UTC
Government
NIST Cybersecurity Insights · Barbara Cuthill, Michael Fagan · indexed 2026-08-15 20:45 UTC
Update: The comment period for your feedback on the second public draft of NIST IR 8259 has been extended through December 10, 2025. Over the past few months, NIST has been revising and updating Foundational Activities for IoT Product Manufacturers (NIST IR 8259 Revision 1 Initial Public Draft), which describes recommended pre-market and post-market activities for manufacturers to develop products that meet their customers’ cybersecurity needs and expectations. Thank you so much for the thought…
P0
2025-09-29 05:58 UTC
Other
Red Hunt Labs · Hariharan M · indexed 2026-09-07 17:30 UTC
In the rapidly evolving digital marketplace, e-commerce brands have become prime targets for cybercriminals. Beyond traditional data breaches, these brands now face sophisticated scams that exploit their reputation, deceive consumers, and erode trust. Drawing from investigations conducted by RedHunt Labs’ threat intelligence team, this blog delves into some of the most prevalent scams targeting e-commerce platforms and highlights how a Digital Risk Protection (DRP) solution can help fortify you…
P0
2025-09-29 05:00 UTC
Security Journalism
Huntress · indexed 2026-09-07 17:30 UTC
Learn how ClickFix techniques like FileFix, TerminalFix, and DownloadFix trick users into compromising. Then, learn proven detection methods using chokepoint strategies and behavioral analytics.
P0
2025-09-25 14:00 UTC
Security Journalism
Huntress · indexed 2026-09-07 17:30 UTC
Trace a threat actor's journey from custom Python stealers to a sophisticated commodity RAT. Learn how their tactics evolved and why this shift to .NET matters.
P0
2025-09-25 00:00 UTC
Government
CERT-FR Alerts · indexed 2026-09-07 17:35 UTC
**[Mise à jour du 07 novembre 2025]** Le 5 novembre 2025, Cisco a mis a jour son billet de blogue initialement publié le 25 septembre 2025 (cf. section Documentation). L'éditeur déclare avoir connaissance d'une nouvelle attaque, affectant les équipements ASA et FTD vulnérables, qui cause un déni...
P0
2025-09-24 18:42 UTC
Vendor Research
Google Online Security Blog · Kimberly Samra · indexed 2026-08-15 14:33 UTC
Posted by Elie Bursztein and Marianna Tishchenko, Google Privacy, Safety and Security TeamEmpowering cyber defenders with AI is critical to tilting the cybersecurity balance back in their favor as they battle cybercriminals and keep users safe. To help accelerate adoption of AI for cybersecurity workflows, we partnered with Airbus at DEF CON 33 to host the GenSec Capture the Flag (CTF), dedicated to human-AI collaboration in cybersecurity. Our goal was to create a fun, interactive environment, …
P0
2025-09-23 09:20 UTC
Other
Red Hunt Labs · redhuntAdmin · indexed 2026-09-07 17:30 UTC
1. Introduction The vibe coding revolution has empowered millions to build and deploy websites using natural languages. Entrepreneurs, artists, and small businesses can now bring their ideas to life online without writing a single line of code. But has this convenience come at a hidden security cost? In this post, we present the 15th wave of Project Resonance: A RedHunt Labs Research Initiative, investigating the security posture of websites built on modern “vibe coding” platforms. Our research…
P0
2025-09-23 05:00 UTC
Security Journalism
Huntress · indexed 2026-09-07 17:30 UTC
Learn the truth about SAT effectiveness. Our latest report reveals why increased spending on training isn’t reducing human risk—and how to fix it.
P0
2025-09-22 11:45 UTC
Other
Buf0rd Blog · indexed 2026-08-16 11:15 UTC
All packages were updated successfully.
P0
