Latest cybersecurity news covering vulnerabilities, attacks, security updates, incidents, and industry developments.
3802 articles
Wiz Research announced zeroday.cloud, a cloud and AI hacking competition at Black Hat Europe in London on December 10–11, with up to $4.5 million in bounties and targets across six software categories.
Wiz and Check Point announced an integration that combines cloud risk and firewall context, validates internet reachability, and lets Check Point Infinity recommend or apply CloudGuard protections such as virtual patching.
Recent campaigns used AI prompts in malware to generate commands, search files, or attempt destructive actions. The article says these approaches often failed and discusses possible motives and defensive implications.
Wiz says its government cloud security platform has received FedRAMP High authorization, meeting requirements for handling high-impact sensitive government data. Existing customers receive the authorization without migrating environments.
Darktrace announced a cloud-forensics product that automates evidence capture and investigation across cloud, hybrid, container, and SaaS environments, aiming to help security teams reconstruct attacker activity faster.
Wiz says its HCP Terraform and Terraform Enterprise integration scans infrastructure plans for policy issues and maps deployed cloud resources to their Terraform definitions to help teams prevent and remediate misconfigurations.
Wiz introduced a public-preview incident response service offering cloud incident scoping, forensics, containment and remediation. The company says its team assisted organizations affected by the Nx package supply-chain attack.
A social-engineering attack on an npm maintainer’s account led to malicious package releases that could alter browser-based crypto transactions. Wiz reported the injected code in at least 10% of cloud environments; the package list was still evolving.
Wiz has opened a public preview of WizOS, a catalog of minimal container images built from source, with SBOMs and provenance, CVE remediation SLAs, and platform features to identify and prioritize image swaps.
Former WhatsApp security head Attaullah Baig alleges in a whistleblower lawsuit that Meta ignored data-access, account-takeover and profile-scraping risks. Meta denies the claims and says the Department of Labor dismissed a related complaint.
DarkOwl’s roundup highlights recent cybercrime extraditions and sanctions, a new EDR-killing tool reportedly used by eight ransomware groups, and campaigns involving spyware, espionage backdoors and phishing-delivered malware.
Team Cymru says it provided intelligence and technical support to INTERPOL’s Operation Serengeti 2.0, which reportedly led to 1,209 arrests, 11,432 malicious infrastructures dismantled and $97.4 million recovered.
Hunt 2.5 adds related-artifact pivots, more TLS certificate fields, a downloadable phishing feed, and SHA256 pivoting for phishing kits, alongside SAML updates and bug fixes.
Volexity released GoStringExtractor for IDA Pro and Ghidra and added runtime type information parsing to GoResolver, helping analysts inspect Go binaries, including obfuscated malware samples.
Team Cymru says its Pure Signal Scout integration adds enriched NetFlow intelligence to Google SecOps, with IP reputation context, prebuilt YARA-L detection rules, response playbooks, and asset-enrichment templates.
A July roundup covers arrests and seizures, Android banking malware on Google Play, campaigns targeting Tibet, Interlock ransomware warnings, and U.S. sanctions over North Korean IT worker schemes.
Deep Instinct promotes its DSX Brain and DIANNA products, saying they use deep learning to detect and prevent known and unknown malware and explain why files are flagged.
The U.S. AI Action Plan calls for measures including an AI-ISAC, AI vulnerability guidance, secure-by-design practices, incident-response frameworks, and research into frontier AI risks. Wiz urges security across AI development and deployment.
DarkOwl announced Vision UI and API updates, including site identification and filtering features, and highlighted data leaks it collected, with claims and details varying by case.
Hunt 2.4 adds searchable archive extraction, expanded HTTP and HTML fields, phishing kit details and filters, and improvements to malware search, IOC Hunter, and domain enrichment.
A June roundup covers international arrests and marketplace seizures, campaigns attributed to FIN6 and a suspected Russian actor, PathWiper’s attack on Ukrainian critical infrastructure, and a U.S. ransomware case.
A U.S. court ordered OpenAI to preserve output logs that otherwise would be deleted. OpenAI appealed, citing user privacy concerns; the article discusses the order’s cybersecurity and data-protection implications.
Wiz announced a cloud security CTF series with one advanced challenge each month. The first focuses on AWS security and includes hints and a scoring system. Find it at cloudsecuritychampionship[.]com.
Hunt 2.3 updates its threat-hunting platform with phishing investigation workflows, bulk domain enrichment for C2s and IOCs, analyst notes and observations, HuntSQL guidance and downloads, and SAML 2.0 SSO support.
