Executive Summary During the March–April 2026 reporting period, AI use in offensive operations advanced from development and planning to real-time operational deployment. Multiple independent cases, involving individual criminal actors, mass…
For years, organizations treated operational technology (OT), Internet of Things (IoT), and embedded devices differently from traditional IT assets. Many of these systems were designed to operate for decades with…
Executive summary Rapid7 researchers have identified a sophisticated malware campaign attributed to the threat actor “Dropping Elephant,” characterized by the use of a China-themed decoy document to deliver a heavily…
A representative finding from current engagements: human identity governance at Stage 4 — central IAM, MFA, lifecycle managed — and agent governance at Stage 1, with agents recently inventoried but…
Fran Hutchings | Thursday, 9 July 2026 at 09:20 UTC PortSwigger is heading to Las Vegas for one of the biggest weeks in the cybersecurity calendar. Across Black Hat USA,…
BitRAT is a potent and versatile Remote Access Trojan (RAT) commonly sold on underground forums. Its popularity stems from a robust feature set and an emphasis on stealth, allowing it…
In order to understand what is Kali Purple, it’s important to recognize it as a defensive-oriented cyber security distribution designed to help organizations build, test, and improve their security operations. …
Malware: ACR Stealer, Amatera, AMOS, Atomic macOS Stealer, Atomic Stealer, bw1.js, CANFAIL, CanisterSprawl, CanisterWorm, CipherForce, DripDropper, gh-token-monitor, GlassWorm, GlassWorm v2, GoBear, Gomir, HEUR:Worm.Script.Shulud.gen, js.shai_hulud, LONGSTREAM, mcpAddon.js, mini Shai-Hulud, Mini Shai…
The “black box” assessment represents the most authentic test of an AI system’s security. Unlike white-box testing, where the system prompt and architecture are known, black box red-teaming forces the…
Executive Summary From September – November 2025, Cato Networks threat researchers observed a global campaign involving suspicious Modbus/TCP (transmission control protocol) activity against internet-exposed PLCs (programmable logic controllers). The targeted…
