cyber.hendryadrian.com is a cybersecurity news and threat intelligence aggregation platform. It collects external cybersecurity reporting and turns it into structured information that is easier to search, correlate, and explore.
Check Point Research links SilentDelivery, OceanGate and DarkWire to the Sparrow malware ecosystem, detailing watering-hole and phishing delivery, Windows and Linux operations, and kernel-level techniques used to hide backdoor traffic.
Huntress says attackers exploited two patched AhsayCBS flaws to install web shells, XMRig miners and a Python backdoor that checks the host before running. The activity also included Defender exclusions and a Veeam credential query.
Researchers report that Blind Eagle used judicial-themed phishing in Latin America to deliver an AsyncRAT fork with DCRat lineage, using HTML smuggling, script-based reconnaissance, AMSI/ETW bypass, persistence and in-memory execution. No successful attacks were
Git fixed CVE-2026-111760, an integer-truncation flaw that can let a malicious repository run code during recursive clones. The article also describes a separate Git server flaw and available mitigations.
Vates says attackers are exploiting Xen Orchestra flaw VSA-2026-062. A crafted cookie may bypass authentication and enable admin actions, potentially leading to code execution and root takeover; fixes are available.
Researcher Paula (pamoutaf) found that tampering with a settings file could disable app-signature verification on Ray-Ban Meta glasses, allowing her code to run. Her research did not demonstrate access to camera footage or recordings.
The guide explains how to export Cortex XDR endpoint telemetry through XQL APIs, retrieve large result sets, and upload data to LogTotal for sanitization and review, with setup, quota, licensing and troubleshooting notes.
A guide to exporting Cortex XSIAM logs with XQL APIs, including how to retrieve raw third-party log lines, handle large result sets, and upload files to LogTotal for review.
A practical guide shows how to query LimaCharlie Insight with its CLI, export JSON events for a chosen host and time range, and route ongoing data to storage or SIEM destinations. It also covers query costs, permissions, and one-year retention.
Kaspersky's Q3 2026 telemetry report records 311 million web attacks, 81,556 users targeted by ransomware and 217,024 targeted by miners, alongside findings on macOS, IoT and regional threat trends.
Kaspersky's Q3 2026 mobile report recorded 1.66 million attacks blocked and 378,456 malicious Android packages. It highlights banking Trojans, apps that may have used AI for fraud, and iOS spyware using DarkSword.
CYFIRMA’s May–October 2026 review assesses identity theft, infostealers, cloud extortion and AI-enabled fraud as key ANZ finance risks. It records four ransomware listings; underground claims remain unverified, and confirmed Australian exploitation names no finance-vict
Microsoft patched 1,094 vulnerabilities in its November 2026 updates and says an Outlook spoofing flaw, CVE-2026-124194, was exploited. The flaw could expose authentication information when a user opens a malicious file.
Adobe’s November 2026 updates address about 110 vulnerabilities across nine products. Critical flaws in Connect and AEM include six Connect issues rated CVSS 10; Adobe says it is unaware of exploitation.
Google says AI agents generated Lean proofs verifying security guarantees in its build of libsignal's compiled code. The results exclude Signal's own applications and some side channels; Google is releasing the specifications and proofs.
ChimeraZ claims a 328 MB dataset linked to French telecom provider Geofixe contains 1,656 records, including customer, contact, billing and payment information. The listing and dataset details remain unverified.
An actor using the handle ChimeraZ claims to sell a Lithos-associated database listing 173,146 wallet addresses and 50,239 IP addresses. Screenshots document the listing, but the dataset and its source remain unverified.
NEAR AI says an attacker exploited an RCE flaw in SGLang, accessed an inference server and internal systems, and downloaded details for about 100 users plus data from 18 agents. The company revoked exposed API keys, deployed a fix, and restored service.
Eclipse's leak site claims to hold 832 GB of Taiwan Otsuka Pharmaceutical data and shows a publication countdown. The claim, data volume and contents have not been independently verified.
Ransomware group N0n claims it compromised managed IT provider Chibitek and exposed client financial records, network credentials, configuration secrets, and internal documents. The claim is unverified.
Ransomware.live reports that actor N0n listed a Michigan cannabis operator as a victim and claims company data will be published on October 13. The claims are unverified.
Allan Friedman explains how SBOMs and VEX can support vulnerability response, why AI systems may need broader inventories, and how organizations can integrate software transparency into ongoing security and risk processes.
A tutorial explains how to use Athena UNLOAD to export Amazon Security Lake data as JSON lines to S3, download it, and review it. It covers access requirements, partition filters, and common errors.
Varonis argues that AI agent security needs shared context across models, agents, and environments. Its proposed framework covers AI discovery, prompt and tool governance, intent-based controls, and threat detection and response.
