Okta Threat Intelligence has published a detailed analysis on a previously unreported Phishing-as-a-Service (PhaaS) operation, which its authors name VoidProxy. VoidProxy is a novel and highly evasive service used by…
As is tradition at every Black Hat conference, Day 1 winds down with a quick reality check – what’s done, what’s broken, and what absolutely needs to go live by tomorrow. Despite…
In this article Microsoft Threat Intelligence has identified a malicious Chromium-based extension that spoofs the AI-powered answer engine Perplexity AI to trick unsuspecting users into installing it. Based on our…
Key Points Check Point Research (CPR) tracks ‘Cavern Manticore’ as an Iran-nexus threat actor operating against Israeli targets, with a focus on the government and IT sectors. Cavern Manticore shares…
Today we are launching Workers Cache: a tiered cache that sits in front of your Worker, configured by a single line of Wrangler config and the same Cache-Control headers you…
Anyone trying to understand continuous red teaming usually gets the same high-level explanation: it is ongoing, attacker-informed, and designed to uncover risk between formal assessments. Useful as that description is,…
watchTowr researchers have discovered a vulnerability in Citrix NetScaler that can allow unauthenticated attackers to read portions of process memory from internet-facing appliances. The flaw affects NetScaler ADC and Gateway…
Take a Network Break! This week we discuss an FU about a 70kw rack to talk about a 400kw rack! On the news side, we dig into Microsoft’s post-mortem of…
The disruption proved something IT professionals have relearned in every decade of their careers. Mark Twain observed that history does not repeat itself, but it does rhyme. This is a…
Introduction Nine new models entered the CASI Leaderboard in June, among them claude-opus-4-8, OpenAI’s gpt-5.5, DeepSeek-V4-Pro, and Kimi-K2.6. The most instructive reading this month lies in the widening distance between two properties…
