cyber.hendryadrian.com is a cybersecurity news and threat intelligence aggregation platform. It collects external cybersecurity reporting and turns it into structured information that is easier to search, correlate, and explore.
Huntress says attackers exploited two patched AhsayCBS flaws to install web shells, XMRig miners and a Python backdoor that checks the host before running. The activity also included Defender exclusions and a Veeam credential query.
Researchers report that Blind Eagle used judicial-themed phishing in Latin America to deliver an AsyncRAT fork with DCRat lineage, using HTML smuggling, script-based reconnaissance, AMSI/ETW bypass, persistence and in-memory execution. No successful attacks were
ESET reports that Turla used its Cereal toolset against government entities in Kazakhstan and Romania in late 2025. The modular malware runs on Exchange servers to collect selected emails and execute commands in memory; its initial access method is unknown.
SAP released security notes addressing nine critical vulnerabilities. Onapsis says ICM2SHELL enables unauthenticated command execution and that its research lab provided SAP a working exploit; ProxyGate may also enable unauthenticated RCE.
Google confirmed CVE-2026-125350, a high-severity Chrome XML use-after-free, is exploited in the wild and released fixed versions. The exploit’s delivery, targets, and achieved impact remain undisclosed.
A GitHub proof of concept called worse_query reportedly lets apps with an App Group access other apps’ data on iOS 26 and 27, potentially exposing wallet keys and credentials. No related attacks or thefts were reported, and no fix is confirmed.
The guide explains how to export Cortex XDR endpoint telemetry through XQL APIs, retrieve large result sets, and upload data to LogTotal for sanitization and review, with setup, quota, licensing and troubleshooting notes.
A guide to exporting Cortex XSIAM logs with XQL APIs, including how to retrieve raw third-party log lines, handle large result sets, and upload files to LogTotal for review.
A practical guide shows how to query LimaCharlie Insight with its CLI, export JSON events for a chosen host and time range, and route ongoing data to storage or SIEM destinations. It also covers query costs, permissions, and one-year retention.
Kaspersky's Q3 2026 telemetry report records 311 million web attacks, 81,556 users targeted by ransomware and 217,024 targeted by miners, alongside findings on macOS, IoT and regional threat trends.
Kaspersky's Q3 2026 mobile report recorded 1.66 million attacks blocked and 378,456 malicious Android packages. It highlights banking Trojans, apps that may have used AI for fraud, and iOS spyware using DarkSword.
ReversingLabs found more malicious files referencing LLM APIs, but says those references do not prove model use or autonomous attacks. Its research also examines AI-related malware, PHP2Shell samples and defensive priorities.
WhiteMatter raised $20 million in Series A funding to expand its platform for securing and governing AI agents across endpoints, cloud, SaaS, and code.
Anthropic says Mythos 5.2 improved vulnerability-finding results over Mythos 5.1 and relied less on resources outside a test sandbox. Mozilla reported roughly doubled vulnerability discovery results in Firefox.
Anthropic released Claude Fable 5.2 and Mythos 5.2. Fable 5.2 completed 76.3% of CyScenarioBench challenges, versus 61% for GPT-6 Cyber. Anthropic also updated Claude Security with continuous code scanning and fix tracking.
Fireworks AI says attackers accessed its development environment and affected a limited set of customer accounts, exposing account and billing information, secrets, datasets and incomplete models. The company revoked credentials and hardened systems.
Researchers say stolen Qubole AWS credentials let an actor assume dormant customer IAM roles and exfiltrate data from more than a dozen organizations between Oct. 14 and 26. A separate campaign tested customer-owned keys.
France says the IRGC’s Shahid Kaveh unit carried out an October attack on refrigeration controllers at about 700 retail sites. Attackers allegedly altered defrost settings and disabled safety alerts, causing food losses and fires; a French investigation is underway.
Eclipse's leak site claims to hold 832 GB of Taiwan Otsuka Pharmaceutical data and shows a publication countdown. The claim, data volume and contents have not been independently verified.
Ransomware group N0n claims it compromised managed IT provider Chibitek and exposed client financial records, network credentials, configuration secrets, and internal documents. The claim is unverified.
Ransomware.live reports that actor N0n listed a Michigan cannabis operator as a victim and claims company data will be published on October 13. The claims are unverified.
A tutorial explains how to use Athena UNLOAD to export Amazon Security Lake data as JSON lines to S3, download it, and review it. It covers access requirements, partition filters, and common errors.
Varonis argues that AI agent security needs shared context across models, agents, and environments. Its proposed framework covers AI discovery, prompt and tool governance, intent-based controls, and threat detection and response.
A guide to exporting Carbon Black Cloud process data through the Platform Search API or Data Forwarder, then filtering and reviewing the JSON logs. It covers API setup, retention limits, common errors, and how Carbon Black EDR differs.
