HTTP/1.1 Must Die: Conquering the 0.CL Challenge
Fran Hutchings | Friday, 13 March 2026 at 09:21 UTC Note: This is a guest post by pentester Julen Garrido Estévez (@b3xal). 1. Acknowledgements This article is based on the…
-
-
SharpHound Recon Attack – How AI enhanced the threat hunt
Cisco Live AMER 2026 was the perfect place to put the Agentic SOC to work, protecting the attendees and conference infrastructure. We innovated by giving the Agentic SOC access to…
-
What to Expect in AI Security Roles
CompTIA’s SecAI+ is the newest certification designed specifically for AI security professionals, and interest around topics like CompTIA SecAI+ salary is already emerging, even though the certification itself is brand…
-
8th June – Threat Intelligence Report
For the latest discoveries in cyber research for the week of 8th June, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES DentaQuest, a U.S. dental benefits administrator owned…
-
SHub Reaper | macOS Stealer Spoofs Apple, Google, and Microsoft in a Single Attack Chain
Infostealers targeting macOS have continued to proliferate over the last two years, with threat actors iterating on successful techniques across related malware families. Researchers at Moonlock, Jamf, and Malwarebytes have…
-
Modules for SMB-to-Meterpreter, Peyara Remote Mouse RCE exploit, and more
It’s Time to Upgrade Your SMB Session This week, Metasploit contributor Dean Welch has added an SMB to Meterpreter session upgrade module. It uses PsExec to facilitate the upgrade. Users…
-
CrowdStrike Uncovers New Prompt Injection Techniques
Prompt injection is among the defining security challenges of the AI era. As organizations move from chatbots to AI agents, adversaries are finding more ways to manipulate the language, context,…
-
Heavy Networking 685: Opengear With Zero Trust Approach in the Out of Band (sponsored)
The focus on operational management of infrastructure has been intense. Instead of arguing over speeds, feeds and port density, more and more customers are buying software that operates our networking…
-
How a Single Code Block Could Hijack Your AI Conversations in Google’s DialogFlow
Varonis Threat Labs discovered a critical vulnerability in Google Cloud Platform’s (GCP) Dialogflow CX service, Google’s flagship conversational AI platform for building interactive experiences across voice and text chatbots. We’ve…
-
Weekly Threat Bulletin – July 8th, 2026
Malware: Anubis, Arkei, AryStinger, Chisel, Coathanger, CryptoBandits, CyberStrike Harvester, DarkComet, DarkKomet, DragonForce, EKZ Infostealer, EKZ Stealer, FakeUpdates, fg_sniffer, FGSniffer, FortigateSniffer, FortiGate Sniffer, GentleKiller, Gentlemen, GOLD IONIC, harvest_orig, HavocKiller, HexKiller, HwAudKiller,…
