MalwareBlueNoroff Zoom Phishing Kit Profiles Crypto Wallets Before Malware Delivery

VulnerabilityCertighost Exploit Lets Low-Privileged Active Directory Users Impersonate a Domain Controller

VulnerabilityChatGPT AgentForger Flaw Could Deploy Rogue Workspace Agents via a Phishing Link

VulnerabilityBing Images Flaws Let Crafted SVGs Run Commands as SYSTEM on Microsoft's Servers

VulnerabilitySeeing AI Agents Is Not Enough. Security Teams Must Enforce What They Can Do

VulnerabilityHacker Runs Hermes AI Agent Unattended for Post-Exploitation at Thai Finance Ministry

MalwareGolden Chickens Resurfaces With Four New Malware Families and Modular Implants

VulnerabilityNodeBB Patches Eight AI-Found Flaws Exposing Admin Access and Private Chats

VulnerabilityKimi K3 Agents Found Redis Zero-Days and Built RCE Exploit, Researchers Say

SecurityFake Notepad++ Plugin Delivers MATCHBOIL.V2 in UAC-0099 Attacks

APTRussian Espionage Group Exploited Zimbra Zero-Day to Steal Mail and 2FA Codes

VulnerabilityThreatsDay: Android Spyware, PLC Attacks, AI Image Prompt Injection + 12 More Stories

SecurityISC Stormcast For Friday, July 24th, 2026 https://isc.sans.edu/podcastdetail/10022, (Fri, Jul 24th)

SecurityWhen the "Autonomous Attacker" Is Your Own AI Model, (Thu, Jul 23rd)

SecurityISC Stormcast For Thursday, July 23rd, 2026 https://isc.sans.edu/podcastdetail/10020, (Thu, Jul 23rd)

SecurityRondo Meets Geoserver, (Wed, Jul 22nd)

SecurityISC Stormcast For Wednesday, July 22nd, 2026 https://isc.sans.edu/podcastdetail/10018, (Wed, Jul 22nd)

APTCaptive Portal Detection, (Tue, Jul 21st)

SecurityISC Stormcast For Tuesday, July 21st, 2026 https://isc.sans.edu/podcastdetail/10016, (Tue, Jul 21st)

VulnerabilityWordPress Exploitation Underway (CVE-2026-63030), (Mon, Jul 20th)

SecurityISC Stormcast For Monday, July 20th, 2026 https://isc.sans.edu/podcastdetail/10014, (Mon, Jul 20th)

SecurityScans for Hikvision Intelligent Security API, (Sun, Jul 19th)

SecurityDon’t swing at everything

MalwareChaos ransomware's msaRAT: Living off the browser to build a covert C2 channel

SecurityPreview: Cisco Talos at Black Hat USA 2026

SecurityBegun, the Patch Wars have

SecurityThe Hunter's Paradox: Is it time to embrace automated threat hunting?

MalwareUAT-11795 deploys novel Starland RAT and bespoke WLDR C2 implant in financially motivated campaign

VulnerabilityMicrosoft Patch Tuesday for July 2026 — Snort rules and prominent vulnerabilities

Malware[Video] Where protection starts: Cisco Talos Intelligence Integrations

SecurityThe serpent’s tongue: Luring the Python out of its den

VulnerabilityWolfSSL, GeoVision, VTK vulnerabilities

SecurityWinning 54% of the time

MalwareUAT-7810 continues building ORB networks using new malware

APTRussian Global Webmail Espionage

VulnerabilityThree Steps to the Terminal: A Siemens ROX II Zero-Day Trilogy

SecurityAI, Automation and Attacks: Unpacking the Unit 42 2026 Global Incident Response Report

SecurityThe npm Threat Landscape: Attack Surface and Mitigations (Updated July 15)

MalwareTuxBot v3: Inside an IoT Botnet Framework With LLM-Assisted Development

MalwareNo Manners Here: The Ruthless Rise of The Gentlemen Ransomware

MalwareVidar Stealer Unmasked: Code Signing Abuse, Go Loaders and File Inflation

SecurityHow We Added WebAuthn to a Browser-Based RDP Client

SecurityPhantom Squatting: AI-Hallucinated Domains as a Software Supply Chain Vector

SecurityThreat Brief: Mitigating Large-Scale Credential Attacks

SecurityCL-STA-1062 Targets Southeast Asian Governments and Critical Infrastructure

SecurityOpenClaw’s Skill Marketplace and the Emerging AI Supply Chain Threat

Security20th July – Threat Intelligence Report

SecurityAI Security Report 2026

Security13th July – Threat Intelligence Report

SecurityCavern Manticore: Exposing Iran-Linked Modular C2 Framework

Security6th July – Threat Intelligence Report

Security22nd June – Threat Intelligence Report

MalwareBrowser-Only Ransomware: From LLM Hallucinations to a Practical Attack Technique

Security29th June – Threat Intelligence Report

SecurityFrom Stars to Upvotes: Fake Reputation Fueling a Crypto Clipboard Hijacker

Security15th June – Threat Intelligence Report

VulnerabilityFrom SQLi to RCE – Exploiting LangGraph’s Checkpointer

Security8th June – Threat Intelligence Report