Security Bulletin

Security researchers at Stripe OLT discovered that version 7.0.18 of ModHeader included a hidden spyware SDK.

Simple age-old bugs give bad actors access to developers' secrets and source code-rich environments.

The malware is written in C++ and uses a signed and notarized dropper to evade Gatekeeper.

The West African country advanced rules to force organizations to disclose cyberattacks, joining other nations in a shift to mandated transparency.

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

The last update to the DShield SIEM [ 4] was in Sep 2025 which contained some minor tweaks. This update currently is using ELK stack version 8.19.15, contains some additional dashboards and new logs.

CardinalOps will give Cribl customers the ability to map detection rules and security controls to the MITRE ATT&CK framework. SecOps teams can identify coverage gaps and operationalize threat intelligence.

These vulnerable UEFI applications, primarily older versions of the shim bootloader, can allow attackers to execute untrusted code during system startup, according to ESET researcher Martin Smolár.

The ransomware group D1R claimed to have accessed a database of 40,000 entries from Synopsys and subsequently used this information to target Bosch, alleging the theft of valuable intellectual property.

The hearing, the first of its kind in Brussels regarding advanced AI risks, focused on Anthropic's cyber-capable models, Mythos and Fable, which are capable of identifying and exploiting software vulnerabilities.

A Welshman has been sentenced to prison for his involvement in numerous swatting incidents across the UK, US, and Canada. Callum Dare, 26, was an administrator for Doxbin, a dark web platform used for doxxing and facilitating harassment, according to...