Issuer: Adverse Trace Date issued: 2026-06-08 Version: 1.0 1. Executive summary The RubyGems package manager has introduced support for "dependency cooldowns,"
Let me get the bias out of the way first, because it shapes everything that follows. I don't hold much weight in threat intel.
Issuer: Adverse Trace Date issued: 2026-06-08 Version: 1.0 1. Executive summary Threat actor UNC5325 (suspected China-nexus) is actively exploiting CVE-2024-21893
Issuer: Adverse Trace Date issued: 2026-06-06 Version: 1.0 1. Executive summary On 2026-05-27, an unidentified remote-access trojan (RAT) — active since
Issuer: Adverse Trace Date issued: 2026-06-06 Version: 1.0 1. Executive summary BerriAI LiteLLM versions 1.81.16 through 1.83.6 contain a
Issuer: Adverse Trace Date issued: 2026-06-06 Version: 1.0 1. Executive summary The ransomware group "Play" has claimed responsibility for an attack
Issuer: Adverse Trace Date issued: 2026-06-06 Version: 1.0 1. Executive summary On June 5, 2026, the "Miasma" worm campaign compromised 73
Issuer: Adverse Trace Date issued: 2026-06-03 Version: 1.0 1. Executive summary A sophisticated supply chain attack dubbed "Miasma" has compromised 32
Issuer: Adverse Trace Date issued: 2026-06-05 Version: 1.0 1. Executive summary A financially motivated threat cluster, tracked as UNC3753 (aka Luna Moth, Chatty
Issuer: Adverse Trace Date issued: 2026-06-05 Version: 1.0 1. Executive summary Active exploitation of CVE-2026-0257, an authentication bypass in Palo Alto
So I started down the path of building an automated DFIR pipeline. As mentioned previously, SANS announced an AI Hackathon, and my original idea was to
Or: how I spent twelve hours building a workaround for a flag that already existed I run a four-node DGX Spark cluster for local DFIR