Real world incident response: Microsoft and AXA XL strengthen cyber resilience
Cyber incidents don’t wait—and effective response can’t either. In the age of AI where cyber incidents unfold at machine speed, […]
New BitLocker extortion activity: RDP, MSSQL, RMM Abuse
Recently, our teams in Latin America investigated a series of incidents involving misconfiguration, the deployment of BitLocker, and the exploitation
Detecting SANDWORM_MODE and AI Toolchain Supply Chain Attacks
In February 2026, Socket.dev published research on a multi-stage npm supply chain worm operating under the internal flag SANDWORM_MODE. The
An Explosion of Surveillance Towers is Coming to U.S. Borders, Costing Over $1 Billion
A new report from the Government Accounting Office reveals that the Department of Homeland Security (DHS) plans to nearly triple
Russian Hacker Turns Jailbroken Claude Into Pentest Platform
A Russian-speaking cyber-criminal has been observed moving in three months from posting a jailbreak tutorial on a Russian-language forum to
A burrow full of malware
ESET Research has discovered a new China-aligned APT group that we’ve named GopherWhisper, which targets Mongolian governmental institutions 23 Apr
Risk Scenarios for the US’s Strategic Pivot
Summary The United States (US) is shifting toward a more force-driven security strategy primarily relying on military operations and economic
USPTO Denies MLB’s Insane Attempt To Trademark ‘Play Ball’
from the play-trademark-ball dept There is no shortage of examples of Major League Baseball attempting to wield overly broad trademarks
PR3TACK preemptive framework maps threats before attackers use them
Defensive frameworks in cybersecurity record what attackers have already done. Analysts study a breach, document the method, and build detections
Critical Pre-Auth Nginx RCE Flaw Found
A newly disclosed security flaw, CVE-2026-42533, has revealed a critical Pre-Auth nginx vulnerability that could allow attackers to achieve reliable RCE (remote