Anthropic on Thursday said it identified and disrupted industrial-scale illicit distillation attacks against Claude from seven labs based in China, including Alibaba, Moonshot, DeepSeek, Z.ai (aka...
Smells awful: But an estimated 30 to 50 tons of dead squid remain inside the boat’s catch tank, where they have been decomposing for days. “That is nasty. I wouldn’t want to do that,” said...
GitLab security advisory (AV26-917)
Anthropic has warned that cybercriminals and state-sponsored hackers alike are using its Claude models for cyber attacks, weapons design, propaganda, and mass surveillance between December 2025...
n8n security advisory (AV26-916)
If you're waiting for a sign to upgrade to a fixed version: this is it
Anthropic on Thursday revealed it disrupted a campaign mounted by a Russian state-sponsored threat actor that abused Claude for developing an AI-assisted workflow to get ahead of the detection...
Progress security advisory (AV26-915)
The proposed class action alleges Meta illegally harvested people’s Facebook and Instagram photos to train its AI image-generation models and to build its unreleased “NameTag” face recognition feature.
One flaw allows an unauthenticated attacker to read files from the server. GitLab urged operators of self-managed installations to upgrade immediately. The post GitLab’s critical flaw is already...
Last month, I gave a talk at DEF CON on AI hacking: what happens when AIs become hackers. It’s a combination of the potentialities I raised in my 2022 book A Hacker’s Mind and the lessons we’re...
Dear readers, Today marks 25 years since the 9/11 terrorist attacks changed our homeland and fundamentally changed how we approach security. For those of us privileged to play even a small role in...
Security teams have become exceptionally talented at finding vulnerabilities. Now, it’s time to turn our attention to optimizing the process for determining which of those vulnerabilities actually...
[Control Systems] National Instruments security advisory (AV26-914)
[Control systems] GeoVision security advisory (AV26-913)
[Control systems] Schneider Electric security advisory (AV26-912)
Swapping legal work for malware development ended in extradition and a guilty plea
MongoDB security advisory (AV26-911)
Manufacturers must now disclose actively exploited flaws and severe security incidents through ENISA's new reporting platform
HashiCorp security advisory (AV26-910)
Attackers have chained two flaws in JFrog Artifactory, the repository that software build pipelines pull from, to take administrator control of self-hosted servers and plant backdoors, cloud...
A China-linked hacking group exploited a flaw in Sogou Input Method, one of the most widely used tools for typing Chinese characters on Windows, to install a backdoor on victims' computers,...
A Ukrainian national has been sentenced to four years in prison for his role in Conti ransomware attacks between 2021 and 2022. 44-year-old Oleksii Oleksiyovych Lytvynenko was arrested by the...
PaperCut on Thursday released a new security maintenance release that replaces all previously published emergency patches that were pushed to address two security flaws that have come under active...
For years I marked each anniversary of 9/11 with fresh analysis of how terrorism tactics and trends have been evolving, particularly recruitment, incitement and training in online spaces. Far from...
Cisco has revealed that three distinct threat clusters linked to ransomware and state-sponsored attacks have been exploiting two recently patched Secure Firewall Management Center (FMC)...
FalconDash is available on our GitHub: https://github.com/FalconForceTeam/FalconDashThe previous blogs made two things clear: 1) detection engineering has a maintenance problem, and 2) throwing...
In August, Cliff Stoll gave a talk at DEF CON, remembering the wily hacker he stalked forty years ago. Great fun.
Twenty-five years after the September 11 terrorist attacks reshaped American homeland security, former Homeland Security Secretary Michael Chertoff says complacency remains one of the country’s...
When hacking first entered the public consciousness in 1995, the maritime industry found itself at the center of the threat narrative. The film “Hackers” imagined a cybercriminal compromising the...