Warpfeed

“Feels Like Home”, ProcreateAvailable as fine arts prints: https://lindenshieldarts.com#MastoArt #FediArt #FantasyArt #Painting #Nature #ShopSmall #ArtPrints

It abuses CLFS and Windows Defender to trigger arbitrary file creation in the context of the antimalware process.

A new worm-like malware toolkit named SCKit was deployed in the recent ScreenConnect attacks targeting managed service providers (MSPs), designed to spread from infect…

An unknown threat actor has been observed targeting unpatched Check Point Security Gateways to obtain initial access via the PHP2Shell vulnerabilities and then a previ…

The cybercrime group Qilin has emerged as the world's most active ransomware affiliate program, claiming at least 365 victim organizations in the past three months alone.

2.5 million people were affected, in a breach that could spell more trouble down the line.

Microsoft Defender Research and the AI Red Team discuss how poisoned datasets and poisoned model checkpoints can trigger remote code execution and other malicious acti…

CISA has added six new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-20320 Cis

The True Blast Radius of an AI Attack

Built primarily on OpenAI models, Amplitude’s proactive product agent, Wave, identifies what to build, helps teams ship changes with coding agents, and measures the im…

Detect and mitigate CVE-2026-119618, a critical RCE vulnerability in Apache HTTP Server.

AI is accelerating vulnerability discovery, but it is not equally accelerating every part of vulnerability management.

TL;DR Attackers now turn a new vulnerability into a working exploit faster than most teams can rebuild and redeploy an image.

Upgrade, migrate, but don't prevaricate – time has run out

The kids-and-social-media discussion is just dumb. It's not the premise of delaying their access until 16, but the inability of those who should know better to grasp w…

Two critical flaws in PHP’s request lifecycle can enable unauthenticated remote code execution.

We already know AI can find vulnerabilities. James Kettle, PortSwigger's Director of Research, wanted to answer a harder question: can an autonomous system invent genu…

Clutch, backed by Lightspeed and SignalFire, was last valued at $85 million, according to a source.

Jokes aside. Microsoft’s security tooling is also down. There’s teams out there with limited to no capabilities right now.Friends, I hope you have a quiet one.

New breach: Europol and partners dismantled infrastructure supporting the CastleRAT remote access trojan this week, providing HIBP with 180k email addresses and 893k unique passwords seen 3M times. 41% of addresses were already in @haveibeenpwned. More: https://haveibeenpwned.com/Breach/CastleRAT

RE: https://infosec.exchange/@k3ym0/117607080678996785Be like Gary.

RE: https://infosec.exchange/@atax1a/117607954018672709At this point, we have observed marginal success. At this point, we have observed marginal success. At this point, we have observed marginal success. At this point, we have observed marginal success. At this point, we have observed marginal success.

https://infosec.exchange/@k3ym0/117607080678996785Be like Gary.