The approach is not entirely new. Huntress pointed to ransomware families, including Snatch and AvosLocker, that have used Safe Mode to disable defenses for years. MITRE ATT&CK tracks the behaviour as T1688, impair Defenses: Safe Mode Boot. Akira picking up… Read More "Akira ransomware reboots into Windows Safe Mode to knock EDR offline"
And will today’s surge in AI-driven vulnerability discovery eventually make tomorrow’s software safer? 13 Aug 2026 • , 3 min. read The accelerated discovery of previously unknown software vulnerabilities has been making headlines for months. It’s an issue that has… Read More "Black Hat USA 2026: Will vulnerability discovery decline in the AI era?"
The UK’s National Cyber Security Centre (NCSC) has published a detailed guidance document designed to help organizations hit with a cyber-attack that “disrupts, disables or damages” their critical systems. The document, What To Do When Cyber-Attacks Disrupt Your Organisation, is split… Read More "NCSC Publishes Guidance to Aid Incident Response and Recovery"
Vulnerability assessment is the process of identifying, classifying, and prioritizing security vulnerabilities in IT infrastructure. A comprehensive vulnerability assessment evaluates whether an IT system is exposed to known vulnerabilities, assigns severity levels to identified vulnerabilities, and recommends remediation or mitigation… Read More "Vulnerability Assessments Explained: Types, Process, and Tools"
Hardware crypto wallet provider Trezor says the personal information of nearly 14,000 people was compromised in a data breach. The incident, it says, did not involve Trezor’s systems but rather its third-party shipping provider, ShipMonk. Trezor was notified of the… Read More "14,000 Trezor Customers Impacted by Data Breach at ShipMonk"
Security researchers from Broadcom’s Threat Hunter Team have revealed that Jewelbug, a threat group associated with Chinese-sponsored cyber espionage operations, may be a hacker-for-hire group that also runs profitable crypto fraud campaigns. In a new report published on August 13,… Read More "Researchers Link Suspected Chinese APT to Hack-for-Hire Operations"
An incident response plan is a set of written instructions that outline your organization’s response to data breaches, data leaks, cyber attacks and security incidents. Incident response planning contains specific directions for specific attack scenarios, avoiding further damages, reducing recovery time and mitigating cybersecurity risk. … Read More "Incident Response Plans: Roles, Incident Types, and Standards"
Threat actors started exploiting an unpatched zero-day vulnerability in GeoServer hours after it was publicly disclosed, attack surface management firm WatchTowr says. The security defect, described as an SQL injection issue that could be exploited to achieve remote code execution… Read More "Hackers Exploiting Unpatched GeoServer Zero-Day"
Would-be threat actors can tap a cybercrime market worth tens of billions by spending just a few thousand dollars to acquire an off-the-shelf, AI-enhanced phone farm, researchers have warned. Human Security’s Satori Threat Intelligence and Research Team acquired a phone farm… Read More "Researchers Warn of AI-Enhanced Phone Fraud Ecosystem"
Penetration testing, pen testing or ethical hacking, is the practice of testing a computer system, network or web application’s cybersecurity by looking for exploitable security vulnerabilities. Penetration testing can be automated with penetration testing tools or manually by penetration testers. In essence, penetration testing… Read More "Penetration Testing Explained: 6 Stages, Types, and Frameworks"
