Security Bulletin

A Department of Homeland Security inspector general report revealed that Secret Service agents routinely used personal cell phones for mission-critical communications, both domestically and internationally, often because government-issued devices...

Founded in 2023, Nebulock's AI-driven platform performs autonomous, vendor-agnostic threat hunts across endpoint, identity, cloud, network, and SaaS telemetry.

The campaign, dubbed "Poisoned Tenant" and discovered by Push Security, involves attackers creating fake OpenAI organizations using Gmail addresses but sending invitations from OpenAI's legitimate notification system.

The campaign, which Microsoft has not attributed to a known threat actor, uses lures referencing common hotel operational issues like guest complaints, bedbug infestations, and health inspections.

The Athena coalition, led by Chainguard, will leverage artificial intelligence to proactively address vulnerabilities in open source code.

When Brentwood College needed to stream a regatta from three kilometers offshore, they faced a massive connectivity hurdle. Here’s how wireless backhaul saved the day.

I'm in the throes of target host recon for another pentest, and thought I'd share some workflow / automation stuff. In the past, I've discussed using historic DNS "mining" to collect target hosts in the domain.

Adversaries could plant a malicious repository that can execute arbitrary code and steal cloud credentials by exploiting the vulnerability, which showcases growing MCP risk.

By fighting AI with AI, teams can stay one step ahead in the great innovation race.

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

YARA-X's 1.18.0 release brings 3 improvements and 2 bugfixes.