August 2026 Patch Tuesday: Updates and Analysis
Exploited Zero-Day Vulnerability in Windows Ancillary Function Driver for WinSock CVE-2026-68820 is an Important elevation of privilege vulnerability affecting […]
threat intelligence
Malware Crypting Services and the Threat Actors Who Sell Them
Executive Summary Crypting services and products modify malicious payloads to help threat actors bypass detection, complicate analysis, and preserve malware
National Vulnerability Database: NIST Seeks AI Input
The National Institute of Standards and Technology (NIST) is seeking industry and government input on how to modernize the National
NSA installs DHS lawyer as new general counsel
The National Security Agency recently appointed a new top lawyer, discreetly filling a role that has become a lightning rod
Analyzing Aeternum’s Blockchain-Based C2 Operations and Communications
Executive Summary Aeternum is a recently discovered C++ botnet loader that shifts its command-and-control (C2) infrastructure entirely to the public
The Good, the Bad and the Ugly in Cybersecurity – Week 32
The Good | Snowflake Hacker Pleads Guilty as Ransom Cartel Creator Draws 16 Years Connor Riley Moucka pleaded guilty in
CrowdStrike Threat Hunts for Shell Command Obfuscation on VMware ESX
VMware ESX systems are a recurring target in ransomware campaigns. Threat groups including SCATTERED SPIDER, BlackBasta, Royal (aka BlackSuit), Akira,
July 2026 CVE Landscape
In July 2026, Insikt Group® identified 85 high-impact vulnerabilities that should be prioritized for remediation, 36 of which had a
OpenAI Models Access Internet During Third-Party AI Tests
OpenAI models accessed the public internet during separate third-party cyber evaluations conducted by independent testing partners, prompting the company to
Chinese telcos maintain deep US presence despite Salt Typhoon links, House committee says
Three Chinese telecommunications giants continue to have footholds in the U.S. internet ecosystem despite their alleged role in previous Chinese