Archive
2,485–2,496 of 3,915 items
Russian state hackers use new RedFlick technique to push malware
The Russian state actor Star Blizzard has been using a new malware installation tactic dubbed "RedFlick" to deploy its signature CosmicPulse backdoor....
Sep 30, 2026 · StaffOriginally on Wedgetail
DIVD says Zammad zero-days enabled AI-driven network breach
The Dutch Institute for Vulnerability Disclosure (DIVD) says that the breach of its network was possible by exploiting a chain of two zero-day vulnera...
Sep 30, 2026 · StaffOriginally on Wedgetail
How the Intelligence Community Can Shape AI Trust With New Terminology
The Intelligence Community (IC) has an opportunity now to influence how we talk about, and thus how we approach, AI use in our work by formally adopti...
Sep 30, 2026 · StaffOriginally on Wedgetail
As AI Reshapes the SOC Career Ladder, Satisfaction Rises for 91%, but Entry Gets Harder for Nearly Half
New Swimlane research underscores a paradox: While AI detection and response is essential to giving defenders an edge, one in four security pros say A...
Sep 30, 2026 · StaffOriginally on Wedgetail
Over 543,000 valid credentials exposed in public GitHub repositories
More than 543,000 credentials exposed in public GitHub repositories were still valid in July despite the platform's security measures to prevent accid...
Sep 30, 2026 · StaffOriginally on Wedgetail
Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets
Threat actors have weaponized a now-patched security flaw in Zimbra Collaboration Suite (ZCS) to deploy web shells and access mailbox data, according ...
Sep 30, 2026 · StaffOriginally on Wedgetail
Attackers Abuse MSP360 to Deploy ScreenConnect in Dual-RMM Phishing Attacks
Microsoft has warned of phishing campaigns distributing an installer for the MSP360 Remote Monitoring and Management (RMM) software under the guise of...
Sep 30, 2026 · StaffOriginally on Wedgetail
The Coupang Breach and the Danger of Punishing the Headline Number
The headline number from the Coupang data breach — more than 33 million user accounts — sounds like a major incident that implies a catastrophic failu...
Sep 30, 2026 · StaffOriginally on Wedgetail
CISA warns of critical pre-auth RCE flaw in MikroTik RouterOS
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning of a new critical vulnerability in MikroTik RouterOS that could lead to re...
Sep 30, 2026 · StaffOriginally on Wedgetail
Cisco Warns of Attackers Exploiting Critical Authentication Bypass in SD-WAN Manager
Attackers are exploiting a new critical zero-day flaw in Cisco Catalyst SD-WAN Manager, the system companies use to manage their Cisco SD-WAN networks...
Sep 30, 2026 · StaffOriginally on Wedgetail
Russia's Star Blizzard Ditches ClickFix to Widen Phishing Net
The APT actor is using a new tactic, dubbed "RedFlick," against Ukrainian-linked targets such as NGOs, think tanks, and journalists to deploy its Cosm...
Sep 30, 2026 · StaffOriginally on Wedgetail
Attackers Abuse ChatGPT Custom GPTs to Deliver RAT via ClickFix Lures
Threat actors are abusing ChatGPT Custom GPTs to disguise them as legitimate product offerings and direct unsuspecting victims to malicious sites that...
Sep 30, 2026 · StaffOriginally on Wedgetail