1.150 casos · pág. 25/58
This Huntress vendor blog post is educational and promotional content, not a report of a specific threat or incident. It compares 13 cybersecurity and regulatory frameworks, including NIST CSF 2.0, NIST SP 800-53, ISO 27001, CIS Critical Security Controls, COBIT, HIPAA, PCI DSS 4.0, SOC 2, MITRE ATT&CK, CMMC 2.0, GLBA, FISMA and FFIEC CAT…
A Huntress educational blog post describes the dark web as a business ecosystem rather than a purely chaotic space. The authors browsed .onion sites through Tor Browser in a virtual machine with JavaScript disabled. They found threat actors operating storefronts with About Us pages, tiered service packages, customer reviews and FAQs. Paym…
This vendor blog post from Huntress describes a new integration between the Huntress platform and AlgaPSA, the professional services automation (PSA) product from Nine Minds. Nine Minds built it in a few days using only the public Huntress API documentation. When the Huntress SOC publishes an incident report, it is created as a ticket on …
Huntress argues that passkeys raise the bar for authentication but do not close the account lifecycle: attackers still target enrollment, recovery, compromised endpoints, alternative sign-in flows and social engineering. Huntress researchers tracked a device-code phishing campaign, EvilTokens, that hit 344 organizations across five countr…
Huntress announced the Identity Posture Assessment, an on-demand report in Huntress Managed ISPM that scores a Microsoft 365 tenant against the Huntress Identity Security Framework. This is a product announcement, not a security incident. Huntress cites its own data: 79% of critical and high-severity SOC incident reports last year were ti…
This is a Huntress employee spotlight on Sarah Reddish, a Security Operations Analyst in the company's global SOC (Triage & Analysis). It describes the analyst role: investigating suspicious activity and intrusions, building attack timelines and scope, and writing reports with practical remediation guidance for partners. The only incident…
Huntress announced general availability of the Managed ITDR Lookback feature. It reviews up to 180 days of Microsoft 365 login history for newly onboarded tenants, looking for compromises that predate monitoring. Active compromises trigger a critical Incident Report, SOC investigation and session revocation. Previously remediated ones are…
An actor using the handle ChimeraZ claims to be selling a dataset from LOOF (Livre Officiel des Origines Félines), the French organization that registers pedigree cats and maintains official feline genealogical records. The listing advertises about 654,000 lines, roughly 330,000 animal records, about 40,000 people and 90,555 files totalin…
On Tuesday Google released TorchTPU as an open-source project. It lets PyTorch AI applications run on Google's Tensor Processing Units (TPUs) and Google Cloud through a configuration change, with no application rewrite. A day earlier Amazon announced TorchNeuron, which ports PyTorch apps to its Trainium chip and AWS. Amazon is also submit…
Meta's AI companion app Muse has reached 10.9 million downloads since its September debut, 10.2 million of them in the United States, according to Sensor Tower. Only 11 other apps have reached 10 million U.S. downloads within 40 days of launch. The most recent was Threads in July 2023, and most of the others were mobile games. Muse is ava…
Palo Alto Networks Unit 42 reported on October 19, 2026 that ransomware operators are still actively exploiting CVE-2026-0257 (CVSS 7.8), an authentication bypass in the GlobalProtect portal and gateway of PAN-OS. The flaw lets attackers bypass MFA and open unauthorized VPN sessions. Unit 42 attributes exploitation attempts to Spikey Scor…
Nikkei Inc., the Japanese media group that owns The Nikkei and the Financial Times, disclosed a breach of a cloud service used for system development. On October 7, attackers used previously stolen credentials to gain unauthorized access. As of October 16, about 1.83 million items of personal information had leaked. The company reported t…
OpenAI says its newer models are much better at writing and migrating code in legacy languages such as COBOL, Fortran and Visual Basic. The company cites the importance of these languages to critical infrastructure: COBOL reportedly supports over 40% of online banking systems, 80% of in-person card transactions and 95% of ATM transactions…
This TechCrunch Equity interview features Amulya Vishwanath, founder and managing partner of Techable Ventures, a VC firm focused on physical AI. She is a former Nvidia product marketer. She argues that robotics has not yet had its "ChatGPT moment" and is in a "LEGO era", in which foundational software and hardware building blocks such as…
JustWatch Group, the company behind the streaming guide used by 50 million people, launched JustWatch TV on 2026-10-20. It is its own streaming service, available in the existing JustWatch apps and website in 12 markets, including the U.S., U.K., Germany and France. The service has an ad-supported free tier, an ad-free JustWatch TV Plus t…
A Dark Reading roundtable, reported by Arielle Waldman, discusses how AI is complicating security across the software development lifecycle (SDLC). Participants found that three measures give CISOs a path forward: closer collaboration between teams, better visibility into identities in development environments, and lower testing costs. Th…
The curl project will handle low- and medium-severity vulnerability reports publicly on its GitHub repository from October 26, reserving private handling for high and critical flaws. Maintainer Daniel Stenberg attributes the change to an "avalanche" of vulnerability reports, largely AI-assisted, that has left key maintainers overloaded. T…
A Chinese-speaking operator used the open-source AI agent framework Cairn to run autonomous attacks against more than 1,200 sites, reaching websites of over 100 companies, including Deere, SharkNinja and Cummins. Researcher Snorre Fagerland of NorForge found the operation around 2 October 2026 by scanning for about two dozen exposed Cairn…
Yokai Research (Hakai Security) published an analysis and a public proof-of-concept for GHSA-f9x3-7vq9-cph6, a critical authentication bypass (CVSS v4 9.2) in the Laravel framework's built-in TokenGuard, which backs auth:api. The flaw was discovered by KIKOmanasijev and reported via the GitHub Security Advisory program. When the user tabl…
IT Security Guru published an editorial buyer's guide to cybersecurity thought leadership agencies for 2026. It describes the services of ten firms and offers evaluation criteria for buyers. The article reports no incident, vulnerability, threat actor or indicator, so it has no direct defender impact. It is marketing and industry news onl…
