161 casos · pág. 6/9
Consumer-fraud reporting describes a growing ecosystem of timeshare exit scams that target owners wanting to leave their contracts. Scammers find owners through real estate records and approach them with unsolicited calls or high-pressure dinner seminars. They then collect large upfront fees, often thousands of dollars, for services they …
This ESET WeLiveSecurity blog post argues that small and midsize businesses (SMBs) want advanced protection that is simple, guided and manageable. It cites ESET data showing 75% of SMBs are concerned about global conflicts and cyber warfare, nearly half had at least one cyber incident in the past year, and 58% believe they are more vulner…
Publicly reported data breaches in the US reached an all-time high last year, with over 3,300 incidents and nearly 280 million victim notices. The Identity Theft Resource Center (ITRC) reports that over 471 million notices went out in the first half of 2026, but only 24% described the attack vector, the lowest rate it has recorded. The ar…
Scammers are exploiting the annual Medicare Open Enrollment period (October 15 to December 7) as a pretext to impersonate insurers, agencies or Medicare itself. Contact comes by phone, SMS, email, social media and malicious Google ads that lead to spoofed, official-looking websites. Lures include plan changes, card replacement, lower prem…
This ESET WeLiveSecurity article explains email bombing (also called form, list or subscription bombing) and cites a September report of a Virginia woman flooded with hundreds of emails in 24 hours. The flood hid a genuine bank alert about a fraudulent laptop purchase. Attackers use bots to sign a harvested email address up to many legiti…
TrustedSec consultant Geoff Walton published an update to LLMHaxor, his Burp Suite plugin for testing LLM-enabled applications. The post is a tooling and practitioner-methodology update, not a threat or incident report. The main change is a new proxy that collects WebSocket streaming responses and exposes them to Burp Intruder as an HTTP …
TrustedSec published Part 1 of a red-team tradecraft series on what to do after finding plaintext AWS access keys during an engagement. It is educational content, not a report of a specific incident. It explains the difference between long-term AKIA keys (IAM user) and temporary ASIA keys (STS-issued, which also need a session token and a…
TrustedSec published Part 1 of a three-part reference on changes to its open-source password-cracking orchestrator hatecrack since version 2.0 (February 2026). Since then there have been 101 releases and 781 commits, adding thirteen attacks, four submenus, a rewritten LLM integration and a scripted non-interactive mode. New attacks includ…
TrustedSec's Justin Bollinger describes HashcatRosetta, an open-source tool for password-cracking practitioners (part 2 of a 3-part series on hatecrack). It translates dense hashcat rule syntax into plain-English, step-by-step explanations. It also analyzes --debug-mode 4/5 output to show which rules, basewords and wordlists actually prod…
TrustedSec (author Brandon Colley) publishes practical guidance on building an effective logging, auditing, monitoring and alerting program for Active Directory (AD). It is based on recurring logging and auditing gaps found in the firm's AD assessments, where logging is treated as a switch to flip rather than a discipline owned by someone…
TrustedSec announced that it is joining the OpenAI Daybreak Defense Network. It plans to use OpenAI models in its consulting work through Daybreak Blue and, where approved, specialized cyber models through Daybreak Red. The planned uses cover red teaming, penetration testing, application and cloud security, purple teaming, research, threa…
TrustedSec's Justin Bollinger describes how a prek pre-push hook corrupted his git index on July 30. The resulting commit deleted 85,280 lines across about 165 files and staged gitignored, local-only paths (CLAUDE.md, .claude/, docs/plans/, docs/superpowers/). The commit reached the public trustedsec/hatecrack remote before it was force-p…
Check Point describes Dangerous Deviation Detection, a detector in Check Point AI Security (now in open beta) that inspects each AI agent tool call before it runs. It flags a call only when the call is dangerous (data leakage, access or privilege escalation, system destruction) and nothing the user or system prompt said warrants it. The a…
Check Point announced that its AI Agent Security capabilities integrate with Google Cloud's Gemini Enterprise, adding AI-specific risk assessment and inline runtime protection to the platform's centralized agent control plane. The integration targets the risk that an authenticated and authorized agent can still be manipulated into harmful…
This SentinelOne / SentinelLABS blog post (Part 2 of the "LLMs in the SOC" series) argues that security agents should be designed so their performance is measurable from the start, rather than treating evaluation as an afterthought following a proof-of-concept. It is a methodology piece, not a threat report: no incident, vulnerability, or…
This SentinelOne weekly roundup (Week 39, 2026) covers one law enforcement success and two active threat campaigns. A US court sentenced Armenian national Karen Serobovich Vardanyan ("Maneeken"/"Karl Lagerfeld"), an initial access specialist for Ryuk ransomware, to two years in prison and over $1.2 million in restitution. SentinelLABS ide…
This SentinelOne weekly roundup covers law enforcement wins and two major breaches. A federal court sentenced former U.S. Army soldier Cameron John Wagenius to 70 months for attacks on technology and telecom firms, and former U.S. Air Force members Chijioke Timothy Odimegwu and Harafat Mogaji received a combined 189 months for business em…
This SentinelOne weekly roundup covers three developments. The FBI arrested Edward Dubrovsky, a former CYPFER executive, on conspiracy and extortion charges. Kash Patel described him as a suspected co-conspirator of ShinyHunters, though he has not been officially named as one. The FBI says the group breached more than 140 organizations an…
SentinelOne published a retrospective on five years of its ThreatOps program, a gamified, CTF-style threat hunting training platform. It began in 2020 as a webinar and has since trained more than 19,000 defenders. The company says the program influenced about $661.8M in closed-won revenue between September 2023 and September 2026. The pos…
This SentinelOne weekly roundup (Week 41, 2026) covers law enforcement actions, a phishing campaign and an actively exploited vulnerability. The most urgent item is CVE-2026-21589, a critical (CVSS 9.3) unauthenticated arbitrary file access flaw in Atlassian Data Center products. Exploitation attempts began about two hours after a public …
