Latest news
-
Threat Intel via The Hacker News
UAC-0099 Targets Ukrainian Government Personnel With ASHVEIN RAT Hiding Commands in HTML
The Russia-aligned threat actor known as UAC-0099 has been attributed to a previously undocumented .NET infostealer and remote access trojan (RAT) codenamed ASHVEIN…
-
Vulnerabilities via BleepingComputer
Cisco warns of critical flaws allowing Nexus switch takeover
Cisco released security advisories for five critical vulnerabilities in its NX-OS data center network operating system that could be exploited to run arbitrary code with…
-
Vulnerabilities via Canadian Centre for Cyber Security
Elastic security advisory (AV26-1021)
Serial number: AV26-1021 Date: October 8, 2026 As of October 6, 2026, Elastic is affected by vulnerabilities in the following products: Elasticsearch Prior to or equal…
-
Breaches via TechCrunch
Asos confirms breach of customer data after hackers send rogue app notification
The hackers alerted the fashion giant's customers through a push notification that said they had "fully compromised" the company's cloud storage.
-
AI Security via Cisco Security
Chasing AMMYY at Splunk .conf
Discover how Cisco's Encrypted Visibility Engine (EVE) and Endace PCAP uncovered Flawed AMMYY RAT traffic at Splunk .conf without breaking TLS encryption.
-
AI Security via Cisco Security
Admin in the Loop: Firewalls and the Agentic SOC
Discover how Cisco Secure Firewall and Cloud Control stream structured Snort 3 and EVE telemetry into Splunk ES to power the .conf26 Agentic SOC pipeline.
-
AI Security via Cisco Security
The Zero-Day Blind Spot: Why Your Agentic SOC needs Retrospective Packet Replay
Learn how the .conf26 Agentic SOC paired Endace full PCAP with Cisco Secure Firewall and Talos rules to retrospectively replay wire data against zero-days.
-
AI Security via Cisco Security
One Cisco in Action: Inside the Agentic SOC at .conf26
Read how Cisco Cloud Control and Splunk Enterprise Security powered the live Agentic SOC at .conf26 to deliver unified TDIR across live event traffic.
- Advertisement
-
AI Security via Cisco Security
Splunk .conf26: Tracking the Triage Agent in the Agentic SOC
How Cisco used Splunk as the SOC data platform at .conf26 to unify security telemetry and track the Splunk AI Triage Agent with human-validated workflows.
-
Vulnerabilities via Canadian Centre for Cyber Security
Cisco security advisory (AV26-1020)
Serial number: AV26-1020 Date: October 8, 2026 As of October 7, 2026, Cisco is affected by vulnerabilities in the following products: Cisco Nexus 3000 Series Switches…
-
Breaches via Infosecurity Magazine
Attackers Hijack Three ccTLDs to Obtain Google Certificates
Attackers compromised .gh, .sl and .as registries to obtain unauthorized HTTPS certificates
-
Breaches via HIPAA Journal
Laboratory Services Cooperative Agrees to Pay $6.1 Million to Settle Data Breach Litigation
Laboratory Services Cooperative, a Seattle, Washington-based nonprofit clinical laboratory that provides diagnostic and analytical testing services for Planned…
-
AI Security via The Hacker News
ARTEX AI Pentesting Tool Used in Data Theft Attacks on South Korean Financial Firms
Cybersecurity researchers have disclosed details of a targeted campaign aimed at South Korean financial organizations that used an artificial intelligence (AI) pen…
-
AI Security via BlackFog
BlackFog Named “Endpoint Security Solution Provider of the Year” in 10th Annual CyberSecurity Breakthrough Awards Program
BlackFog wins the 2026 TMC AI in Cybersecurity Innovation Award for ADX Protect, recognizing innovation in preventing data exfiltration and AI threats.
-
Vulnerabilities via Canadian Centre for Cyber Security
HashiCorp security advisory (AV26-1019)
Serial number: AV26-1019 Date: October 8, 2026 As of October 7, 2026, HashiCorp is affected by vulnerabilities in the following products: Vault Community Edition Prior…
-
Breaches via BleepingComputer
OAuth grants pile up faster than you can review them. Here's how to keep up.
OAuth grants create data highways between SaaS apps, AI agents, and other tools. And, they are multiplying faster than any security team can review them. As the recent…
-
Threat Intel via Citizen Lab
The Secrets of a US Spyware King
Paragon Solutions vowed not to sell its mobile spyware to governments with poor human rights records and to cut off customers who misuse its products. However, in 2025…
-
Vulnerabilities via Canadian Centre for Cyber Security
Splunk security advisory (AV26-1018)
Serial number: AV26-1018 Date: October 8, 2026 As of October 7, 2026, Splunk is affected by vulnerabilities in the following products: Splunk Enterprise Prior to 10.0.10…
-
Vulnerabilities via Ubuntu Security
USN-8907-1: libgit2 vulnerability
It was discovered that libgit2 incorrectly handled IP address SubjectAltName verification in TLS certificate validation. A remote attacker with a CA-trusted certificate…
-
Ransomware via Security Affairs
MonsterCloud Owner Charged With Secretly Paying Ransomware Demands
MonsterCloud owner Zohar Pinhasi allegedly paid ransomware demands behind clients’ backs, then charged them millions for the supposed recovery. Zohar Pinhasi, the owner…