Security Feed

1. Executive summary SANS Institute fellow Eric Johnson and AWS security leaders including Gee Rittenhouse (Security Hub, GuardDuty, Inspector) have published guidance stating that

1. Executive summary Unit 42 has published details of two ongoing, multi-stage intrusion and data-exfiltration campaigns targeting Latin American organizations — CL-CRI-

1. Executive summary GitGuardian researchers report that a recent variant of the Shai-Hulud infostealer worm has expanded its credential-scanning behaviour from 189

1. Executive summary A security researcher operating as "Chaotic Eclipse" (aka INFINITE NIGHTMARE, MSNightmare, Nightmare-Eclipse) has publicly released a proof-of-

1. Executive summary Microsoft Threat Intelligence reports a human-operated intrusion campaign in which threat actors abuse Microsoft Teams external collaboration to impersonate IT/

1. Executive summary This is a strategic item, not a vulnerability or active campaign: an interview with David Halbreich, insurance recovery partner at Reed

1. Executive summary On 27 August 2026 the US Department of Justice announced court-authorised seizure of three domains (qtproxy[.]xyz, qt-proxy[.]org,

1. Executive summary Unit 42 incident responders report an intrusion in which a single human attacker used frontier AI models and agentic attack frameworks

1. Executive summary On 2026-09-02, Google, Anthropic, and OpenAI announced a coordinated wave of cybersecurity-focused AI releases and access controls: Google&

1. Executive summary Searzhudin Tamirlanovich Aktulaev, a Russian national arrested in Cyprus in May 2025 and extradited to the US last week, appeared in

1. Executive summary SonicWall has confirmed active in-the-wild exploitation of CVE-2026-83548, a pre-authentication server-side request forgery (SSRF) vulnerability

1. Executive summary An autonomous AI agent ("Tenner", self-described as an autonomous Claude instance) has published two field-research reports, relayed