462 casos · pág. 13/24
A Mac user (Reddit u/UntilHEX) reported that Anthropic's Claude Code found an unauthorized XMRig cryptominer while helping build a temperature-monitoring app. Abnormally high sensor readings led the assistant to inspect running processes and identify XMRig as the cause of roughly 1,175% CPU use, or nearly 12 saturated cores. The finding i…
ICANN has begun testing authentication schemes that would let law enforcement agencies file urgent requests for non-public WHOIS data when facing imminent threats to life, serious bodily injury, critical infrastructure or child exploitation. The work is led by the Input Group on Law Enforcement Agency Authentication Mechanisms, which repo…
New York City Mayor Zohran Mamdani said at The People's AI Assembly, hosted by the AI Now Institute, that the federal government has abdicated its role in regulating AI. He urged New Yorkers to resist the idea that AI adoption is inevitable. He pointed to his September order banning AI use in elementary and middle schools. He also pointed…
Flipkart, the Walmart-owned Indian e-commerce company, is internally testing a food-delivery service called "Eat-in by Minutes" in Bengaluru. The trial has grown from a few hundred employees to more than 8,000, and Flipkart has deployed a dedicated rider fleet through its logistics arm Ekart. The service draws on restaurants listed via ON…
Bloomberg reports, as relayed by TechCrunch, that Anthropic and AI infrastructure provider Nscale are close to announcing a second $45 billion compute deal, a little over a month after their first deal of the same size. Sources cautioned that talks are ongoing and the details could change. If completed, it would be the latest of many larg…
At TechCrunch Disrupt, Hugging Face chief policy officer Irene Solaiman said AI model evaluations remain an immature science with limited reproducibility and no meaningful way to compare tests against each other. She argued that open weights are central to reproducing results and that qualifications for effective third-party evaluators ne…
Microsoft announced new enterprise security features on 19 October 2026 to monitor and control AI agents, treating them as potential insider threats. The centerpiece is Guardian Agents, part of Project Perception, which Microsoft introduced in June as its answer to AI-driven hacking and vulnerability-scanning systems such as Anthropic's M…
TrustedSec has released a major update to SpooNMAP, its open-source wrapper that combines masscan for fast port discovery with Nmap for banner grabbing. The tool now runs context-aware NSE scripts against discovered services and writes severity-sorted findings (CRITICAL/HIGH/MEDIUM/LOW) to findings.txt, findings.md and findings.json, each…
GreyNoise announced that its internet-scanning IP classification data is now available across the CrowdStrike Falcon platform through the GreyNoise Foundry App, listed on the CrowdStrike Marketplace. This is a product and integration announcement with no direct threat or incident. The integration is meant to help SOC teams separate benign…
GreyNoise reports that on 14 May 2026 its Global Observation Grid recorded 119,842 malicious, non-spoofable IPs targeting edge infrastructure. Compared against eleven widely used OSINT and commercial feeds, average coverage was 2.0%, and no single feed exceeded 5%. Even the largest list (Avastel, about 500,000 IPs) caught under 2%, and ve…
GreyNoise announced Project Swarm, a research initiative that opens its deception platform, the Global Observation Grid (5,000+ sensors in 80 countries, 500M+ sessions per day), to outside contributors. The stated aim is better visibility into attacks on network edge devices (firewalls, VPN gateways, routers, load balancers). These device…
GreyNoise announced C2 Detection, a new intelligence module that identifies compromised edge and perimeter devices (routers, firewalls, VPN concentrators) from their outbound connections to attacker-controlled infrastructure. The capability extends GreyNoise beyond inbound scanning intelligence into post-exploitation, outbound-facing dete…
This GreyNoise blog post is a product-oriented piece describing five workflows the vendor wires into customer SOAR platforms. It reports no incident, vulnerability or threat actor activity. The use cases are automated IP enrichment, early warning of exploitation spikes against vendor CVEs, detection of compromised edge devices, validated …
GreyNoise published a vendor blog post describing four ways SOC teams can use its internet-wide scan and attack classification to improve SIEM detection. The use cases separate opportunistic mass-scanning noise from activity that may be targeted at an organization. The post is product-oriented guidance and does not describe a specific inc…
GreyNoise announced an updated integration with Google Security Operations that brings its internet-scanner classification data into the SIEM/SOAR platform. The aim is to separate mass-scanning noise from activity targeting the customer's own environment. GreyNoise says it observes over 800,000 unique IPs daily across 5,000+ sensors in 80…
GreyNoise announced an expanded integration with the CrowdStrike Falcon platform, adding content for Falcon Next-Gen SIEM and Charlotte Agentic SOAR. It is delivered through the GreyNoise Foundry App in the CrowdStrike Marketplace. The package brings GreyNoise's internet-wide scanning and exploitation observations into SOC detection and a…
GreyNoise announced Tactics, a new feature in the GreyNoise Visualizer (Observe → Tactics) that maps attacker sessions captured by GreyNoise Deception Sensors to the MITRE ATT&CK framework. It extends the company's visibility beyond Reconnaissance and Initial Access, following the earlier C2 Detection Module, to show what adversaries do a…
GreyNoise announced the availability of the Intelligence Dashboard in its Visualizer platform. It lets users pin CVEs, tags, countries, IPs and GNQL queries into a persistent, always-current view of scan and attacker traffic observed by its global sensor network. This is a product announcement and does not describe a threat, vulnerability…
GreyNoise has described a revised detection engineering approach that uses agentic workflows built on frontier large language models to keep pace with rising CVE volumes. The post says CVE entries grew from 16,510 in 2018 to 48,162 in 2025, and that generative AI has contributed to 130% growth from 2022 through 2025. It also claims the me…
GreyNoise has released a redesigned GreyNoise Visualizer with a persistent sidebar organized into three areas: Intelligence (IPs and CVEs), Observation (Deception Sensors) and Automation (alerts, feeds, blocklists). The update is product news and describes no threat, vulnerability or incident. It adds global search (Command + K) across IP…
