New Agent Tesla malware version uses emoji obfuscation to evade detection
The latest Agent Tesla campaign utilizes a JScript dropper that incorporates Unicode emoji characters to disrupt signature-based detection and obscure the ma...
general
20 articles
Army seeks AI agents for cyber defense amid evolving threats
Project Griffin, also known as the Intelligent Response and Orchestration Node (IRON), is a pilot program designed to create an ecosystem of AI agents capabl...
Researchers find way to weaponize Windows Defender's own driver
Check Point Research disclosed a technique that uses Microsoft Defender's boot-time remediation driver, BTR.sys, to perform arbitrary kernel-level file and r...
Senator Wyden seeks review of federal law enforcement hacking tools
Wyden has formally requested the U.S.
New malware targets Android car head units for ad fraud and botnet creation
Kaspersky discovered the threat in June 2026, noting that the malware spreads through the built-in updaters of the head unit firmware.
Attackers use FTP banners to hide new E4del and PINHOLE RATs
The attack chain begins with a ZIP archive, likely distributed via phishing, which initiates an LNK-based infection.
Hospital for Sick Children discloses employee data breach due to third-party software flaw
SickKids confirmed that clinical systems and patient records were not affected, though its public-facing Careers website was temporarily taken offline.
Thousands of active AWS access keys remain publicly exposed
Truffle Security has been tracking this exposure for four years, finding that 817 of the exposed keys were linked to companies, with 526 being AWS root keys.
Lawmakers call for investigation into impact of CISA staffing cuts
Lawmakers say little is known about how recent cuts have impacted CISA and how the knowledge that was lost has been replaced.
Apollo discloses data breach from ongoing wave of attacks hitting financial sector
The private equity firm said attackers broke into some of its cloud platforms during a five-day period in early July, compromising sensitive personal data. T...
Microsoft patches flaw in Entra ID identity software
Microsoft fixed an exploited Entra ID flaw, but experts urge customers to check for compromise.
14 Trojanized npm Packages Drop RedC2 4.0 Linux Backdoor With AI-Assisted C2
Cybersecurity researchers have discovered a set of trojanized npm packages that masquerade as working calendar and streak utilities but are engineered to ste...
Your Shredded Visa Card May Still Work at the Checkout
UMass Amherst researchers showed expired Visa contactless cards can make real purchases by exploiting an unsigned expiry field in Visa’s EMV kernel.
New SynkLoader malware pushed in Microsoft Teams phishing campaign
A previously unknown malware family dubbed SynkLoader is being distributed in Microsoft Teams phishing campaigns to steal credentials via a fake lock screen. [.
The agentic SOC: How to build machine-speed defense for the AI era
Here's how security-focused AI agents can help, not replace, human SOC analysts.
AI Is Learning to Write Genetic Code
This sort of research is both exciting and terrifying: The two models in question were told to generate complete genomes for a viable bacteriophage—a type of...
Former NSA Director Paul Nakasone Launches National Security Advisory Firm
The newly-formed Nakasone Group will counsel government leaders, corporations, prominent families, and other private clients confronting cybersecurity, geopo...
U.S. Bank says breach claims related to fourth-party incident
The bank said there is no evidence that its own systems, networks or data repositories were compromised.
Hundreds of leaked AWS keys give full control over corporate accounts
More than 9,300 Amazon Web Services (AWS) access keys publicly exposed between August 2022 and August 2026 are still active and valid. [.
Microsoft Defender's Own Driver Can Be Weaponized to Delete Security Software at Boot
Check Point Research has disclosed a technique that uses Microsoft Defender's own legitimately signed boot-time remediation driver to perform arbitrary kerne...