ESET researchers uncover Gorbag, a Russia-aligned group using simple infostealers to harvest data from Ukrainian organizations near the front line
Tag: EN
Ghostunnel: Open-source TLS proxy with mutual authentication
Ghostunnel is an open-source proxy that handles TLS for programs that cannot handle it themselves. It works in two directions. In server mode it sits in…
Secure your containers without breaking what works
Container security has a familiar problem. Teams identify vulnerabilities, but turning those findings into lower risk is much harder. A standard container…
OpenAI Builds New Git Backend ‘Pando’ After Codex AI Agents Overwhelm Existing Infrastructure
OpenAI has built a new Git backend called Pando after Codex-driven development overwhelmed the systems behind its internal monorepo. OpenAI’s engineering…
FBI confirms North Korea behind Binance hack
The FBI links the Binance hack to North Korea, game developers are being extorted with game-cloning threats, the Belarusian CyberPartisans hack Russia’s…
Inside a successful AWS European Sovereign Cloud exercise to demonstrate independent operation
On Saturday, October 24, 2026 we conducted a successful exercise demonstrating that the AWS European Sovereign Cloud can operate without depending on any…
Android SMS of Death Exploit Goes Public, Leaving Android 12 and 13 Phones Without a Fix
A security researcher has published a working exploit for an Android flaw dubbed “SMS of Death” that can crash phones and cut cellular service with a…
Binance Reveals How Hackers Pulled Off $6.3 Billion Crypto Heist Using Fake Job Interviews
Binance has revealed that attackers carried out a sophisticated scheme involving fake recruitment interviews, compromised developer endpoints, and…
Companies going all in on AI could see their strategy backfire
Four of the five highest-ranked enterprise risks in Gartner’s Quarterly Emerging Risk Report were AI-related. AI strategy miscalculation and AI-driven…
Hackers Disguise Malware as Popular Games and Software to Hijack Windows PCs
An evolving fake-download campaign that disguises trojanized installers as popular games, cracked software, and utilities to monetize Windows computers.…
Hackers Use OpenAI Codex Jailbreak Toolkit That Secretly Injects Ads Into AI Responses
A jailbreak toolkit targeting OpenAI Codex is doing more than trying to bypass AI safety rules. The Chinese-language package, called Haiou, changes the…
ISC Stormcast For Monday, November 2nd, 2026 https://isc.sans.edu/podcastdetail/10160, (Mon, Nov 2nd)
This post has no text preview — click the link below to read the original article. This article has been indexed from SANS Internet Storm Center, InfoCON: green Read the original article: ISC Stormcast For Monday, November 2nd, 2026 https://isc.sans.edu/podcastdetail/10160,…
Hackers Use Stolen Microsoft Entra ID and Azure DevOps Credentials to Access 27 Organizations
Hackers are abusing stolen Microsoft Entra ID application credentials and Azure DevOps identities to access Microsoft 365 and Azure environments, reaching…
FBI ties North Korea to $6.3B Binance heist, Cybercriminals breach four top Canadian law firms, Chinese spies use AI agent to hit 140 targets
Vishing Breaches Top Canadian Law Firms, FBI Pins Record Binance Heist on North Korea, and GM Pays $220M Privacy Settlement David Shipley covers major…
Hackers Launch LLMHijacking Attacks, Leaving Companies With $1 Million in Cloud Bills
Hackers are stealing access to corporate large language models and reselling it, leaving victims with cloud bills reaching $1 million. Mandiant…
Critical SolarWinds Dameware Vulnerability Enables Attackers to Take Control of Remote Systems
SolarWinds has announced a critical command injection vulnerability in its Dameware software that could let authenticated attackers remotely compromise…
Barracuda Email Security Gateway Flaws Expose Devices to Potential Root-Level Compromise
Barracuda has released security patches for two vulnerabilities that could be exploited to bypass authorization controls and gain root access to affected…
NIST publishes cybersecurity guide for businesses too small to have IT staff
The National Institute of Standards and Technology (NIST) released cybersecurity guidance for small businesses with no paid employees other than their…
Hackers Turn to AI Jailbreak Bundles as Researchers Uncover New Prompt Adware Technique
An AI jailbreak package that repeatedly modifies OpenAI Codex instructions to promote its author’s commercial service, showing how guardrail-bypass tools…
Hackers Target French Blood Service, Reprogram Plasma Storage Freezers From -30°C to 110°C
Hackers reportedly targeted refrigeration equipment operated by Coolworld, a service provider for France’s Établissement Français du Sang (EFS),…