network-security

Researchers at KTH Royal Institute of Technology built a container replica of a segmented industrial network, attacked it repeatedly across 14 days of running time, and used the captured traffic to train a defense agent that decides on its own when to intervene. The agent sees six numbers per interval: packet counts crossing the network’s segments and moving to and from individual machines. From …

Criminals are switching from using vast fraud compounds with hundreds of workers to one or two people working on sophisticated models

Mischievous Behavior Detected 🔎 It all started when I discovered an anonymous user was uploading a file with a strange extension and then trying to execute it. Disclaimer: It's called experimental microserver for a reason. I am learning. My firewall was clearly lacking. Honestly I'm glad this happened. Let me explain why. On my new mission to tighten up security, I wanted a dashboard to learn abo…

OEMpocalypse Now: A Generic Exploitation Strategy from Android untrusted app to root Part 1 of a series that takes an unprivileged Android app to root on Samsung, Xiaomi, and Oppo/OnePlus/Realme devices, with a single strategy. On Android, every third-party app runs in a sandboxed context called untrusted_app. If you ask five offensive security researchers how to go from this context to root, you…

Thorough reorganization at NSA will create five 'mission centers,' including cyber and AI The National Security Agency is undertaking a fast and far-reaching reorganization in a bid to get the unique intelligence it gathers to real-world battlefields faster, according to multiple sources familiar with the matter. In place of existing directorates, the largest electronic spy agency in the world wi…

While it’s not unusual for everything on the dark dungeons of the IPv4 Internet to be subject to a barrage of drive-by scanner traffic and the occasional bizarrely persistent attacker, I noticed something strange while looking through my nginx logs. Persistent attack traffic coming from three particular IPs, with the strange thing being that they were arriving with Host or Referer headers from po…

TASK 2 Nmap flags a Windows 7 host with SMB on port 445, hinting at MS17-010. Which Metasploit auxiliary module would you run before loading the exploit? Answer: auxiliary/scanner/smb/smb_ms17_010 While checking the HTTP response headers during a web application penetration test, you noticed that the application does not implement the HTTP Strict-Transport-Security (HSTS) header. Which of the fol…

Microsoft has disclosed details of two campaigns in which threat actors are abusing third-party email delivery infrastructure to blast financial fraud scam messages and using passkey-themed social engineering to breach cloud environments. The first campaign, per the tech giant, involved sending over a million scam emails between August 3 and 5, 2026, by masquerading as chief executive officers

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Zero trust AI agents demand a different kind of security In this interview, Chris Webber, VP, Product Marketing at Teleport, explains why zero trust principles need to change for AI agents. He covers how agents act fast, unpredictably, and continuously, and why old ideas like least privilege and poin…

WordPress powers millions of websites around the world. One reason it is so popular is its large collection of plugins. These small pieces of software can add calendars, contact forms, online shops, security features and many other functions to a website. However, plugins may also create security risks. They add new code to a website, […] The post New Tool Uncovers Hidden Security Flaws in WordPr…

SSH manager with terminal, SFTP, AI, and SSH key store, all built in. No plugins, no config files. One tool that handles terminals, keys, SFTP, and AI. The whole job. Your credentials never leave your device unencrypted. SSH tools handle real credentials for real infrastructure. Here is exactly how we protect yours. Simple pricing. Your cross-platform SSH manager. Start free, scale when ready.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added five security flaws impacting JFrog Artifactory, ConnectWise ScreenConnect, and MikroTik RouterOS to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation in the wild. Details of the vulnerabilities are as follows - CVE-2026-42016 (CVSS score: 8.1) - An incorrect authorization