Weekly Threat Bulletin – July 29th, 2026
Chaos Ransomware’s msaRAT Hides Its C2 Inside Your Own Browser The Rust-based remote access trojan (RAT) known as msaRAT, utilized by the Chaos ransomware-as-a-service group, evades detection by hiding its…
-
-
Know What Matters, Understand the Adversary, and Act Faster
Security teams do not need another threat feed. Instead, they need to know which threats matter to their organization, what’s coming, and what they should do next. That distinction has…
-
Cato CTRL™ Threat Research: Preventing Privilege Escalation via Active Directory Certificate Services (ADCS)
Executive Summary Maintaining an Active Directory (AD) enterprise environment is no easy task. Between all the permissions, security compliances, update cycles, emergency patches, appliance configurations and more, covering all the…
-
Water utility cyber compliance: 2026 deadlines & regulations
As federal enforcement tightens and states begin stepping in with their own cybersecurity mandates, water and wastewater utilities face a looming wave of hard compliance deadlines, compounded by recent cyber…
-
Zero Trust in the Frontier AI Era
As businesses lean on AI for productivity gains and better customer experiences, security teams are struggling to secure this adoption. This challenge is further compounded by frontier AI models like…
-
See preemptive security in action
Black Hat USA returns to Mandalay Bay in Las Vegas this August, bringing together security practitioners, researchers, and leaders from around the world. Rapid7 will be there in the Business…
-
Chinese Open-weight AI Models: Cybersecurity Risks and Rewards
Introduction In the complex and continually evolving LLM market, organizations have many choices, including both frontier models hosted by providers such as OpenAI and Anthropic, and open-weight models that can…
-
Cato CTRL™ Threat Research: SilverFox Evolves: Abuse of New Drivers and Trusted Software Hijacking Enable Remote Access with ValleyRAT in Japan
Executive Summary SilverFox is expanding its toolkit. In this campaign, the group combines new vulnerable-driver abuse, newly observed abuse of legitimate applications for DLL sideloading, defense evasion, and layered recovery…
-
Canada’s Bill C-8 redefines critical infrastructure security
Canada’s new Critical Cyber Systems Protection Act (Bill C-8) introduces a strict 72-hour cyber incident reporting mandate. Find out how Tenable is helping critical national infrastructure operators bridge the IT/OT…
-
Assuming Failure: The Mindset Shift That Actually Improves Your Defensive Outcomes
We all know the uncomfortable truth — no matter how many tools you buy, how many people you hire, or how mature your processes are, you’ll never achieve 100% prevention…
