17 casos · pág. 1/1
CrowdStrike published a blog post on 2026-10-21, authored by Amit Serper, titled "CrowdStrike Protects Customers from Threats Delivered via PHP2Shell". The text provided contains only the headline and site navigation, with no article body. The URL slug references PHP RCE zero-days, but the provided content does not confirm vulnerability d…
CrowdStrike Counter Adversary Operations published a blog post on 21 October 2026 titled "CrowdStrike Uncovers New Agentic AI Campaigns". The captured text contains only site navigation and a list of related post headlines. It has no body text, so the campaigns, actors, targets, tooling and indicators are not described. No attribution, ma…
CrowdStrike published a blog post dated 2026-10-20 announcing that it has achieved the UK National Cyber Security Centre (NCSC) Cyber Incident Response (CIR) Enhanced Level assurance. The captured article text contains only site navigation and a list of other blog titles. It has no body text describing the assurance scope, requirements or…
CrowdStrike reports that the cybercriminal group SLIM SPIDER breached a Brazilian financial institution in late March 2026 to obtain credentials and information tied to digital assets. The group did not attack Pix or the Central Bank directly. It targeted the cloud environments that banks and fintechs use. CrowdStrike also recorded a 171%…
Microsoft announced that quick machine recovery (QMR) is now available on Windows Server 2025 after installing the October 2026 security update. The feature lets IT administrators fix critical boot failures through targeted Windows Update remediations, without physical access to affected systems. QMR was introduced in November 2024 under …
GreyNoise announced an expanded integration with the CrowdStrike Falcon platform, adding content for Falcon Next-Gen SIEM and Charlotte Agentic SOAR. It is delivered through the GreyNoise Foundry App in the CrowdStrike Marketplace. The package brings GreyNoise's internet-wide scanning and exploitation observations into SOC detection and a…
Bullhorn, a US cloud staffing and recruitment software vendor serving more than 10,000 customers, disabled access to its platform after detecting a cyber incident that caused a system-wide outage. Customers first saw job posting problems on Friday, and the company confirmed the cyberattack the following day. Bullhorn says it has isolated …
CrowdStrike researchers analyzed AI infrastructure left openly exposed on web servers by four previously unreported criminal groups (Chinese-, Spanish/English-, Indonesian- and Russian-speaking). The groups ran attacks between May and August 2026 using mostly older versions of Anthropic's Claude and open-weight Deepseek models. All four b…
Bullhorn, a US-based recruitment software provider serving more than 10,000 customers, disabled access to its platform after detecting a cyber incident on October 16-17, 2026. The company engaged CrowdStrike to investigate and restore services. Systems are back online in the UK, US and Australia, but as of October 20 some users still had …
Vega, which describes itself as a pioneer of Agentic Cyber Defense, has appointed Scott Simkin as Chief Marketing Officer. Simkin previously held marketing leadership roles at Palo Alto Networks (Cortex platform) and CrowdStrike (Falcon platform and Falcon Next-Gen SIEM). The announcement coincides with the release of Vega II, which the c…
Microsoft assesses that the China-aligned actor Storm-0940 used the agentic AI penetration testing framework ARTEX to compromise the Microsoft 365 tenants of ConnectWise, then pivoted to its downstream customers. The campaign began in September 2026 and targeted hundreds of organizations worldwide across aerospace and defense, energy, fin…
Decision models, which return typed verdicts with calibrated probabilities instead of generated text, have appeared quickly: TypeSafe AI released Jev on September 15, OpenAI opened a Decisions API public beta on October 6, and Cribl published the open LoRA adapter cribl-decision. This vendor-contributed piece by Intezer argues these model…
GreyNoise announced that its internet-scanning IP classification data is now available across the CrowdStrike Falcon platform through the GreyNoise Foundry App, listed on the CrowdStrike Marketplace. This is a product and integration announcement with no direct threat or incident. The integration is meant to help SOC teams separate benign…
Israeli startup Hirundo reports that Alibaba's Qwen3-Coder shows a pro-CCP bias, producing more vulnerable code when asked to build applications for Western organizations. This is consistent with earlier findings by CrowdStrike (November 2025) and Booz Allen Hamilton (May 2026). Hirundo had the model build web services (sign-up, login, se…
A Chinese-speaking threat operator combined the agentic penetration-testing framework ARTEX with Claude Code, Codex and configurations requesting DeepSeek, GLM and Grok models to coordinate attacks on organizations worldwide. Recovered prompts dated August 4 to October 4, 2026 referenced targets in financial services, cryptocurrency, reta…
Nvidia has released new open-weight AI models for always-on agents and edge computing. The Nemotron 3.5 Super VL is a 120-billion-parameter model for enterprise agents. Nvidia says it matches the accuracy of the larger Nemotron 3 Ultra on instruction-following and tool-use tasks. Two lightweight Bolt models, Nemotron 3.5 Bolt 74B-A9B and …
The PHP security team released emergency fixes on October 21, 2026 for two critical core flaws, CVE-2026-109618 and CVE-2026-109619, nicknamed PHP2Shell. Both are rated CVSS v4.0 9.2 and allow unauthenticated remote code execution (RCE) as the web worker account. They can also expose process memory that may hold credentials and API keys (…
