Adversarial Tales | F5 Labs
Introduction Our July run covers 55 models, including first-time entrants that reshuffle the middle of the board, leaving the top mostly unchanged. Claude Sonnet 5 arrives at the top of…
-
-
Cato CTRL™ Threat Research: When OpenClaw, Your AI Personal Assistant, Becomes the Backdoor
TL;DR A threat actor is selling root shell access to a CEO’s computer at a UK-based automation company for $25K in crypto. The listing’s real value isn’t the shell. It’s…
-
FedRAMP High & IL5: Securing the federal zero-trust future
Beyond IT compliance, cloud security is now the backbone of civilian agency resilience, national defense, and warfighter safety, as cloud environments become increasingly complex. Key takeaways For the Department of…
-
13th July – Threat Intelligence Report
For the latest discoveries in cyber research for the week of 13th July, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES U.S. auto insurer AssuranceAmerica has disclosed a…
-
Turning Threat Intelligence into Executable Hunt Plans with Rapid7
Blake McDermott is Senior Threat Hunter at Rapid7. Every week, threat hunt teams are faced with a steady flow of blogs, advisories, and DFIR reports containing valuable intelligence about adversary…
-
Weekly Threat Bulletin – April 8th, 2026
Malware: Agenda, AgendaCrypt, Akira, Gold Feather, INC, INC Ransom, Makop, Phobos, Qilin, QilinCrypt, Qilin Locker, Shanya, VX Crypt, Warlock, Water Galura, Water Manaul CVEs: CVE-2019-19781, CVE-2020-1472, CVE-2021-40444, CVE-2022-30190, CVE-2023-27532, CVE-2023-27997,…
-
The Post-Quantum Journey Begins: Enforce, See, and Evolve with Quantum-Safe SASE
Encrypted data has a shelf life, and for many organizations it must remain secret for years. The post-quantum risk is not a dramatic collapse of encryption, but a quieter threat:…
-
How the Underground Market Is Operationalizing Cybercrime
Introduction The underground market for criminally oriented generative AI has moved beyond the early hype surrounding ‘malicious chatbots.’ The gradual integration of AI as a productivity layer within cybercrime operations…
-
CASI Leaderboard Shifts: Developer Role Attack, and Three Concerning Incidents
Introduction We evaluated 15 new models this month and noted some surprising changes in behavior and CASI scores. During the same period, three production incidents demonstrated specific failure modes in…
-
Cato CTRL™ Threat Research: New MongoDB Vulnerability Allows Instant Remote Server Takedown (CVE-2026-25611)
Executive Summary Cato CTRL’s Vitaly Simonovich (senior security researcher) has discovered a new vulnerability (CVE-2026-25611 with a “High” severity rating of 7.5 out of 10) in all MongoDB versions with…
