The only time adjustment cats recognize
The only time adjustment cats recognize
The incident comes after supermarkets in a number of European countries reported this week that their fridges and freezers warmed up after they were remotely hacked.
Blockchain analysis firm Chainalysis has revealed that its ongoing investigation into the agentic cyber attack targeting its systems also exposed names, usernames, pas…
No documented attacks against American supermarkets…yet
The FBI and CISA warn that hackers are actively targeting industrial refrigeration and cold-chain monitoring systems worldwide, potentially causing food spoilage, equi…
U.S. federal investigators pursuing the ShinyHunters hacking group that recently stole highly sensitive data from the FBI have identified executives at two different r…
Real-world exploitation concentrates in a small, high-impact subset of CVEs.
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.
The True Blast Radius of an AI Attack
Introducing GPT‑6 Cyber, OpenAI’s cybersecurity model for finding exploitable vulnerabilities and developing fixes, trained to stay within authorized scope.
AI agents are changing how attackers operate. Explore real-world cases of agentic attacks, learn how to identify their fingerprints, and discover what they mean for th…
AI is accelerating vulnerability discovery, but it is not equally accelerating every part of vulnerability management.
Updated: October 29th, 2026 TL;DR: The HTTP2Shell vulnerability (CVE-2026-111497) is a critical flaw in Google’s Brotli decompression decoder that could allow attacker…
Two critical flaws in PHP’s request lifecycle can enable unauthenticated remote code execution.
I think what really resonates with me this week is being able to completely turn the tables on perceptions around things like AI being the big bad hacking tool the new…
We already know AI can find vulnerabilities. James Kettle, PortSwigger's Director of Research, wanted to answer a harder question: can an autonomous system invent genu…
Clutch, backed by Lightspeed and SignalFire, was last valued at $85 million, according to a source.
CrowdStrike is extending its platform to watch, test and explain autonomous AI agents, as enterprises face behavior-based risks that conventional security tools cannot…
Open-source XDR/SIEM for threat detection and compliance.
Relevance: Detection & response / compliance
Comprehensive scanner for containers, IaC, and dependencies.
Relevance: Cloud & container defenders
Interactive TLS-capable intercepting proxy for traffic analysis.
Relevance: AppSec & traffic inspection
Passive subdomain enumeration from dozens of sources.
Relevance: Recon & attack-surface mapping
Template-based vulnerability scanner for massive-scale network scanning.
Relevance: Offensive security & recon
Swiss-army toolkit for network attacks, MITM and recon.
Relevance: Network penetration testing
Graph-based Active Directory relationship explorer for attack paths.
Relevance: Red teams & AD assessment
4shared is a fascinating place because someone's been running a mass-malware campaign for the last 4 years (and counting, uploads are being posted as I type this) that just sends you into wordpress hell to download random shit from proton drive, but if you sort by oldest first you find magical shit, like an XP SP3 key bruter that does work, i've verified at least one key worked and isn't online anywhere else, a copy of Crazy Taxi for PC with the Sega logo edited into Bart taking a shit and no other changes, a real copy of Photoshop CS6 Portable, precracked and everything, etc. People were honestly uploading real ass shit in 2006 with no care in the world, and it's all still up... for now.
CVE-2026-41709: Warp Panda used a zero-day in VMware ESX🔗 https://cybersecurefox.com/en/cve-2026-41709-vmware-esx-zero-day-warp-panda-cisa-kev#CVE-2026-41709 #VMware #ESX #Warp #Panda #CISA #KEV #zero-day
New on the Stackurity blog: How to patch Ubuntu servers without surprise rebootshttps://stackurity.ai/blog/how-to-patch-ubuntu-servers-without-surprise-reboots/#infosec #sysadmin #patchmanagement
Good morning to the first marketplace of the Open Security Conference 2026! ☀️ Everyone will soon get introduced to what makes an #OpenSpace such a great place to be. Then we'll co-create the agenda for today and we're already curious what we'll learn together. 😊 #osco #osco26 #CyberSecurity #Security #InfoSec #AppSec #OTsecurity [lisi]
"Passbolt is an Open Source Password Manager Built Specially For Teams""Passbolt offers both a free self-hosted edition and a managed cloud version of its team focused password management solution."https://feed.itsfoss.com/link/24361/17516378/passbolt-review#OpenSource