Yes. Fidelis Network® profiles encrypted east-west traffic using metadata attributes extracted during session reconstruction: JA3 and JA3S fingerprints, certificate chain details, cipher suite selections, handshake timing metrics, and packet-size distributions. Machine learning models profile normal encrypted behavior per internal host… Read More "Detect East-West Traffic Threats with Fidelis Network"
A cluster of 77 extensions on the Open VSX marketplace has been found to impersonate legitimate developer tools while transmitting information about the systems and development environments on which they were installed. The “evil twin” extensions were uploaded to the… Read More "Open VSX Removes 77 Malicious Evil Twin Extensions Exfiltrating Developer Data"
I was mapping the command-and-control infrastructure behind a state-linked intrusion set when the query came back and effectively ended the exercise I thought I was running. The malware resolved its C2 address by reading a smart contract on a public… Read More "One C2 kit. 30 customers. 2 governments"
Does your chatbot know too much? Here’s why you should think twice before you tell your AI companion everything. 17 Nov 2025 • , 4 min. read In the movie “Her” the film’s hero strikes up an ultimately doomed romantic… Read More "What if your romantic AI chatbot can’t keep a secret?"
Security researchers have warned of a major new Shai-Hulud-based campaign which has already compromised more than 430 packages with a combined two billion monthly installs. The ChainDrop campaign began on August 4 when attackers compromised the GitHub account of a… Read More "ChainDrop Worm Hits 400 npm Packages with Two Billion Monthly Installs"
This is a ranked guide to the 26 largest and most consequential data breaches affecting UK organizations or residents, current as of July 2026. Entries are ordered primarily by the number of records or individuals affected, with several high-notability incidents… Read More "Biggest Data Breaches in the UK (Updated July 2026)"
More than 2,200 malicious versions of 440 packages were published to the NPM registry as part of a fresh Mini Shai-Hulud supply chain attack. Dubbed ChainDrop, the campaign started with 11 malware carriers in the keyv and cacheable namespaces, after… Read More "Over 400 NPM Packages Infected in ChainDrop Supply Chain Attack"
An agent running Anthropic’s Claude Mythos 5 spent 34 hours trying to get a malware dropper merged into a real open-source project during a cyber evaluation by the UK’s AI Security Institute. When a bystander publicly warned that the code… Read More "Claude Mythos 5 Tried to Backdoor a Real Open-Source Project in Testing, Then Vouched for Itself"
Doing so requires comprehensive monitoring and alerting, along with token and API usage limiting controls, he explains. The company also requires human oversight for all new agent deployments, and every new agent undergoes quality assurance, testing, and review to ensure… Read More "Why you need a reliable AI agent kill switch"
ESET researchers provide insights into how PlushDaemon performs adversary-in-the-middle attacks using a previously undocumented network implant that we have named EdgeStepper, which redirects all DNS queries to an external, malicious hijacking node, effectively rerouting the traffic from legitimate infrastructure used… Read More "PlushDaemon compromises network devices for adversary-in-the-middle attacks"
