Open source intelligence (OSINT) is the process of identifying, harvesting, processing, analyzing, and reporting data obtained from publicly available sources for intelligence purposes. Open source intelligence analysts use specialized methods to explore the diverse landscape of open source intelligence and… Read More "Open Source Intelligence (OSINT): Top Tools and Techniques"
AI dominated the conversation at Fal.Con 2026, but one of the most important takeaways wasn’t simply how AI is changing cyber defense. It was how AI is changing the speed and scale of a problem defenders already face. Security teams… Read More "Why AI raises the stakes for exposure validation"
Most descriptions of the Internet contain three layers, or levels: the surface web, the deep web, and the dark web. These categorizations can be both useful and misleading. The words “deep” and “dark” carry connotations with them that often obscure… Read More "Deep Web vs Dark Web: What’s the Difference?"
Two recent PaperCut NG/MF vulnerabilities have been exploited in AI-powered attacks that hit hundreds of organizations worldwide, GreyNoise reports. Tracked as CVE-2026-82078 and CVE-2026-81578, the security defects were disclosed on August 27 as zero-days and patched the next day. They… Read More "PaperCut Flaws Exploited in AI-Powered Attacks"
The personal information of over 500 million Facebook users has been published on a hacker forum on the dark web. To put the impact into perspective, in 2019, the population of the entire United States was 328.2 million. This data was… Read More "Was My Facebook Data Leaked? Find Out in 2 Steps"
VPN and cybersecurity services provider Surfshark this week disclosed a cybersecurity incident impacting certain internal data. The incident, it says, was discovered on August 31, but initially treated as low risk. By September 2, however, the company confirmed the scope… Read More "Surfshark Systems Targeted by Hackers"
On April 4, 2025, The Australian Financial Review reported on a set of credential abuse attacks targeting multiple Australian superannuation funds. These attacks were not breaches of the infrastructure of those companies, but compromises of individual customer accounts via stolen… Read More "Threat Monitoring for Superannuation Security"
Cybersecurity firm Check Point this week announced patches for two critical-severity vulnerabilities in its gateway and firewall products using VPN functionality. Tracked as CVE-2026-85102 and CVE-2026-85103 (CVSS score of 9.8), both security defects could be exploited without authentication for remote… Read More "Check Point Patches Critical VPN Vulnerabilities"
Anthropic on Thursday revealed it disrupted a campaign mounted by a Russian state-sponsored threat actor that abused Claude for developing an AI-assisted workflow to get ahead of the detection curve. The operation has been attributed to a cyber espionage group… Read More "Russian State-Sponsored Hackers Use Claude to Rebuild Malware After Detection"
After this discovery, the company instigated a wider search of 481 million transcripts, covering all those from its Frontier Red Team, some non-cyber evaluations, reinforcement learning environments, and more, to see if any other incidents had occurred. So far, this… Read More "Anthropic finds evidence of a fourth AI escaping from containment"
