cyber.hendryadrian.com is a cybersecurity news and threat intelligence aggregation platform. It collects external cybersecurity reporting and turns it into structured information that is easier to search, correlate, and explore.
Microsoft researchers demonstrated Lazarus, a weight-level backdoor that makes AI agents emit attacker-chosen commands when a trigger appears, using fewer than 10 edited neurons in tested models. The technique requires access to model weights; Microsoft reports no known
Barracuda profiles Dire Wolf ransomware, detailing a case-specific credential-compromise and Group Policy deployment chain, documented Windows encryption and recovery-sabotage behavior, and defensive measures; many operational details remain unknown.
Check Point Research links SilentDelivery, OceanGate and DarkWire to the Sparrow malware ecosystem, detailing watering-hole and phishing delivery, Windows and Linux operations, and kernel-level techniques used to hide backdoor traffic.
Threat actors are exploiting flaws in Openwave Webtop Media Transcoder and Cisco BroadWorks. CISA added both to its KEV catalog and urged federal agencies to patch by November 24.
CISA added flaws affecting Cisco BroadWorks and Openwave Messaging Webtop Media Transcoder to its KEV catalog, citing active-exploitation evidence. Exploitation details and actor attribution are unavailable; FCEB agencies should patch by Nov. 24, 2026.
CISA added Cisco BroadWorks flaw CVE-2026-20320 to its KEV Catalog and urged prompt patching. Malbear Labs separately reported exploitation targeting a European telecom provider and 13 organizations using its infrastructure.
Wiz says its Cyber Model Arena v3.9 tested 59 agent configurations across 327 cybersecurity challenges, finding performance varied by task type and model-harness pairing. The post explains its grading approach, isolation measures and limitations.
Chainalysis says 40% of 100 surveyed AI proxy services accept crypto, mostly stablecoins, and suspected China-linked wallet activity rises after U.S. frontier-model launches. The data does not establish why activity increased.
Kaspersky's Q3 2026 telemetry report records 311 million web attacks, 81,556 users targeted by ransomware and 217,024 targeted by miners, alongside findings on macOS, IoT and regional threat trends.
Finite State raised $27 million in a Series C round to expand internationally and make its platform more autonomous. The company says it analyzes shipped software and firmware, identifies vulnerabilities, and generates compliance materials for device makers.
Fortinet issued 89 advisories covering nearly 100 vulnerabilities, including about 17 critical flaws. A researcher said a FortiClient flaw could enable code execution when FortiPAM is enabled; Fortinet did not mention in-the-wild exploitation.
Bay emerged from stealth with $50 million in funding. The company says its platform inventories enterprise AI agents and evaluates proposed actions against policy to help prevent harmful or unintended activity.
Railway says an October breach exposed customer secrets, including AI provider keys used for an estimated $740,000 in unauthorized spending. The company reports the attacker was removed and the exploited weaknesses closed.
ChimeraZ claims a 328 MB dataset linked to French telecom provider Geofixe contains 1,656 records, including customer, contact, billing and payment information. The listing and dataset details remain unverified.
An actor using the handle ChimeraZ claims to sell a Lithos-associated database listing 173,146 wallet addresses and 50,239 IP addresses. Screenshots document the listing, but the dataset and its source remain unverified.
