Weekly Threat Bulletin – July 29th, 2026
Chaos Ransomware’s msaRAT Hides Its C2 Inside Your Own Browser The Rust-based remote access trojan (RAT) known as msaRAT, utilized by the Chaos ransomware-as-a-service group, evades detection by hiding its…
-
-
CaptiveCrunch: Midnight Blizzard targets travelers worldwide for malware delivery and credential theft
In this article Since early May 2026, Microsoft Threat Intelligence has observed Storm-2945, a sub-cluster of Midnight Blizzard, conducting widespread but targeted traffic manipulation attacks involving hospitality sector networks served…
-
Know What Matters, Understand the Adversary, and Act Faster
Security teams do not need another threat feed. Instead, they need to know which threats matter to their organization, what’s coming, and what they should do next. That distinction has…
-
Welcome to Agents Week | The Cloudflare Blog
This week is Agents Week. As we started thinking about and planning the week, we wrestled with a broader question of what it means to support this new era of…
-
Cato CTRL™ Threat Research: Preventing Privilege Escalation via Active Directory Certificate Services (ADCS)
Executive Summary Maintaining an Active Directory (AD) enterprise environment is no easy task. Between all the permissions, security compliances, update cycles, emergency patches, appliance configurations and more, covering all the…
-
Anthropic Says Claude Found New Attacks on HAWK and Reduced-Round AES
AI is beginning to do more than find software vulnerabilities. Anthropic says its Claude Mythos Preview model has now contributed new techniques for analyzing the mathematics behind cryptographic systems. The…
-
Water utility cyber compliance: 2026 deadlines & regulations
As federal enforcement tightens and states begin stepping in with their own cybersecurity mandates, water and wastewater utilities face a looming wave of hard compliance deadlines, compounded by recent cyber…
-
Your Black Hat agenda: 5 key priorities and what to avoid
Like RSA, Black Hat also changed in 2005 but for a completely different reason. The conference was sold to CMP Media that year for $14m (CMP is now part of…
-
Zero Trust in the Frontier AI Era
As businesses lean on AI for productivity gains and better customer experiences, security teams are struggling to secure this adoption. This challenge is further compounded by frontier AI models like…
-
From capable AI models to trusted security testing | Blog
Kieron Hughes | Thursday, 30 July 2026 at 14:58 UTC This week, we launched Burp AT in public beta for Burp Suite Professional users. Next week at Black Hat, PortSwigger…
