Unmasking BitRAT’s C2 over HTTPS
BitRAT is a potent and versatile Remote Access Trojan (RAT) commonly sold on underground forums. Its popularity stems from a robust feature set and an emphasis on stealth, allowing it…
-
-
What Is Kali Purple and How Does It Improve Security Operations?
In order to understand what is Kali Purple, it’s important to recognize it as a defensive-oriented cyber security distribution designed to help organizations build, test, and improve their security operations. …
-
Weekly Threat Bulletin – May 20th, 2026
Malware: ACR Stealer, Amatera, AMOS, Atomic macOS Stealer, Atomic Stealer, bw1.js, CANFAIL, CanisterSprawl, CanisterWorm, CipherForce, DripDropper, gh-token-monitor, GlassWorm, GlassWorm v2, GoBear, Gomir, HEUR:Worm.Script.Shulud.gen, js.shai_hulud, LONGSTREAM, mcpAddon.js, mini Shai-Hulud, Mini Shai…
-
A Case Study in Red-Teaming a Government Education AI
The “black box” assessment represents the most authentic test of an AI system’s security. Unlike white-box testing, where the system prompt and architecture are known, black box red-teaming forces the…
-
Global Campaign Discovered with Modbus PLCs Targeted and China-Geolocated Infrastructure Observed
Executive Summary From September – November 2025, Cato Networks threat researchers observed a global campaign involving suspicious Modbus/TCP (transmission control protocol) activity against internet-exposed PLCs (programmable logic controllers). The targeted…
-
Falcon Secure Access Sets Standard for Zero Trust Browser Security
The browser has become the enterprise workspace. Employees, contractors, partners, and third parties use browsers to access SaaS applications, internal web apps, admin consoles, collaboration tools, and AI services from…
-
Educate at Event Speed: Cisco Live SOC
At Cisco Live AMER 2026 in Las Vegas, my work with the Cisco Event SOC centered on one outcome that makes these deployments valuable beyond the event itself: Education. The…
-
Varonis Atlas Secures Cursor and the Agentic Development Lifecycle
Varonis Atlas is the first dedicated AI security platform to provide complete visibility and continuous control over Cursor usage to enable safe adoption and secure the AI development lifecycle.
-
1st June – Threat Intelligence Report
For the latest discoveries in cyber research for the week of 1st June, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Carnival Corporation, a global cruise line operator,…
-
Controlling Cross-App Data Sprawl in Google Workspace
One of the most difficult challenges in third party risk management (TPRM) is how to effectively manage application sprawl. It’s possible, but painful to allowlist apps at the operating system…
