Recent posts
- SCKit abuses ScreenConnect to deploy remote access and target technician sessions
- Trained to betray: How post-training supply chain attacks hijack coding agents
- The global socket: how threat actors are weaponizing GSocket for stealthy C2
- Lessons from 59 Linux Kernel Bug Reports
- Detecting sleeper agents hiding in AI model neurons
- FORGE Lab uses agentic tools to identify memory safety issues in Rust
- ARTEX abuse expands as cybercriminals target financial sector
- Threat actors use agentic AI tooling to find and abuse exposed secrets
- New investments to reduce on-premises security risk
- What’s new in Microsoft Security: November 2026
- Email threat landscape: Q3 2026 trends and insights
- Fake-download campaign uses trojanized installers to deliver monetization payloads
- Microsoft named a Leader in the 2026 Gartner® Magic Quadrant™ for AI Agent Management Platforms
- What exploited vulnerabilities have in common: A data-driven analysis of real-world attacks
- Inside a malicious Claude Code-branded extension and its persistent SSH backdoor
- From help desk impersonation to AD CS abuse: Investigating ESC1 and ESC8 intrusion paths
- Tracking AI adoption in North Korean threat actor tradecraft
- IDC MarketScape names Microsoft a Leader in the 2026 Worldwide Modern Endpoint Security for Enterprises Vendor Assessment
- The CISO’s evolving role: Protecting and defending in the agentic era
- Inside the LiteLLM 1.107.0 supply chain compromise: Credential theft through Python startup hooks