National Vulnerability Database: NIST Seeks AI Input
The National Institute of Standards and Technology (NIST) is seeking industry and government input on how to modernize the National […]
Data Security
NSA installs DHS lawyer as new general counsel
The National Security Agency recently appointed a new top lawyer, discreetly filling a role that has become a lightning rod
Analyzing Aeternum’s Blockchain-Based C2 Operations and Communications
Executive Summary Aeternum is a recently discovered C++ botnet loader that shifts its command-and-control (C2) infrastructure entirely to the public
The Good, the Bad and the Ugly in Cybersecurity – Week 32
The Good | Snowflake Hacker Pleads Guilty as Ransom Cartel Creator Draws 16 Years Connor Riley Moucka pleaded guilty in
CrowdStrike Threat Hunts for Shell Command Obfuscation on VMware ESX
VMware ESX systems are a recurring target in ransomware campaigns. Threat groups including SCATTERED SPIDER, BlackBasta, Royal (aka BlackSuit), Akira,
July 2026 CVE Landscape
In July 2026, Insikt Group® identified 85 high-impact vulnerabilities that should be prioritized for remediation, 36 of which had a
OpenAI Models Access Internet During Third-Party AI Tests
OpenAI models accessed the public internet during separate third-party cyber evaluations conducted by independent testing partners, prompting the company to
Chinese telcos maintain deep US presence despite Salt Typhoon links, House committee says
Three Chinese telecommunications giants continue to have footholds in the U.S. internet ecosystem despite their alleged role in previous Chinese
Industrializing Autonomous Zero-Day Discovery in Open-Source Software
Executive Summary Frontier AI is fundamentally shifting the dynamics of cybersecurity — accelerating both how vulnerabilities are discovered and how
Exploitation Window Closes as AI Use Accelerates
The CrowdStrike 2026 Threat Hunting Report illustrates the next evolution in trust abuse. Adversaries are targeting trusted users and tools