US President Trump has signed a landmark national security presidential memorandum that fundamentally alters the American approach to digital warfare. This directive authorizes federal law enforcement agencies to partner with vetted private technology firms to execute offensive cyber operations against foreign criminal organizations and international adversaries. Under this new framework, private sector specialists will work under direct government supervision to propose, coordinate, and carry
infosec (69)
US President Trump has signed a landmark national security presidential memorandum that fundamentally alters the American approach to digital warfare. This directive authorizes federal law enforcement agencies to partner with vetted private technology firms to execute offensive cyber operations against foreign criminal organizations and international adversaries. Under this new framework, private sector specialists will work under direct government supervision to propose, coordinate, and carry
FortiGuard Labs has been tracking a previously undocumented Linux botnet family, which we have named Evooo1Bot. The name derives from the hardcoded string “evooo1” found in every binary. While the malware reuses the DDoS engine from the publicly leaked Mirai source code, it extends the original framework with numerous capabilities, including encrypted C2 communications, an SSH brute-force scanner, a SOCKS relay module, a credential sniffer, and an integrated exploit arsenal targeting multiple
AI is absorbing the volume of work that makes up the fundamental architecture of the Security Operations Center (SOC) tier system. While the tiers and the work aren’t going away, a junior and senior analyst’s day-to-day is changing fast. At some point in the last week, every analyst on your team made the same call. Close an uninvestigated alert, because the queue was too long and triage ate the time real investigation and deep analysis were needed. Most of those calls were right, but odds ar
Researchers at Fortra Intelligence and Research Experts (FIRE) have identified a highly advanced fileless malware campaign specifically targeting large enterprises. The attack is distinguished by its deployment of five distinct layers of obfuscation, engineered to circumvent email, endpoint, and memory-based security systems. This exceptional level of sophistication enables attackers to remain undetected for extended periods, substantially increasing dwell time and complicating forensic inves
In an age when digital exchanges risk exposure to criminal and state actors, the challenge of sending information so that it stays hidden from everyone except the intended recipient, while also hiding who is speaking to whom, takes on increasing importance. A paper titled “Identity-Based Matchmaking Encryption with Enhanced Privacy Against Chosen-Ciphertext Attacks,” by Sohto Chiku, Keitaro Hashimoto, Keisuke Hara, and Junji Shikata, addresses this challenge directly by developing improved meth
Involvement in cybercrime is no longer a peripheral issue but has emerged as a significant social movement among young people. While the average age at arrest for general crimes in the United States is 37, the average age at arrest for cyber-related offenses drops significantly to 19. In the United Kingdom, the National Crime Agency (NCA) reports the average age is even lower, at just 17 years old. This shift is evidenced by high-profile incidents, such as the 2025 attack on Marks and Spencer
An email that appears to contain a shipping document, payment request, or business proposal can infect a Windows computer, even if one of its main components has a .ttf extension.
FortiGuard Labs has named the operation “TTF Trap” after finding widespread phishing activity that uses disguised font files and low-detection Lua loaders. The campaigns have been active since late March 2026, although researchers traced early versions of the loader to October 2025. Fortinet rates the threat as High
Artificial Intelligence is now fundamentally integrated into the planning and execution of cyber-attacks. Europol’s 2026 threat assessment report identifies the combination of automation and AI as a defining feature of modern criminal ecosystems. AI vulnerabilities and AI-enabled fraud are becoming primary concerns for global organizations. Phishing demonstrates this transition clearly. AI-generated messages are increasingly personalized and context-aware, accurately mirroring internal corpo
The National Cyber Security Center (NCSC), alongside the FBI, NSA, and sixteen other international partners, has issued a joint advisory for critical national infrastructure (CNI) sectors. The guidance urges organizations to improve defenses against Russian intelligence services, specifically FSB Center 16. This actor is actively scanning for vulnerable routers, exploiting well-known Cisco device flaws, weak SNMP passwords, and legacy protocols.[1]
In an expert comment, Ian Robinson, Chief Pro
In our connected world, people rely on cryptographic libraries to keep messages, transactions, and identities safe from prying eyes and to ensure that the messages can be trusted. When a library carries the label of formal verification, many assume that a computer has exhaustively confirmed every detail of its behavior. A close examination of several widely adopted libraries shows that this assumption often rests on a less complete foundation than the label suggests.[1]
Formal verification app
Organizations invest heavily in cybersecurity tools, firewalls, and endpoint detection systems. Yet many still encounter serious difficulties when an actual incident occurs. Incident response requires more than a plan on paper. It demands swift and effective execution under pressure. Most small and medium-sized enterprises hold only a basic notion of their actions in a crisis. Someone would contact the IT team and systems would be examined. In practice, a real incident arises amid uncertain
Using FreeWave Zentry Solution and REDXRAY together can help organizations significantly strengthen cyber resilience by improving visibility, reducing operational risk, and accelerating response to emerging threats.
FreeWave Zentry is an engineered, prevention-first Zero Trust network overlay purpose-built for critical infrastructure and OT/IIoT environments that makes assets functionally invisible to unauthorized users and automated threats through a resilient cryptographic fabric, while REDXRA
Hackers are increasingly exploiting trusted artificial intelligence (AI) platforms like ChatGPT and Claude to turn them against their own users. Recently, Hackread.com reported a flaw called ClaudeBleed, discovered by LayerX, which allowed unauthorized browser extensions to hijack Anthropic Claude’s interface. Now, hackers are reportedly abusing official features of these AI tools to spread malware while easily evading web filters and security checks.[1]
The Fake Outage Trick - These observati
Artificial intelligence has become integral to contemporary cyber-attack planning and execution. Recent research demonstrates how embedded AI systems now operate across organized cybercrime activities, fundamentally altering attack methodologies through increased speed and targeting precision. Europol's 2026 threat assessment identifies the integration of automation and AI as a defining characteristic of modern cybercrime. Industry reporting indicates that AI vulnerabilities and AI-enabled fra
Artificial intelligence platforms may be just as susceptible to social engineering as human beings, but they are proving remarkably good at finding security vulnerabilities in human-made computer code. That reality is on full display this month, with some of the more widely used software makers, including Apple, Google, Microsoft, Mozilla, and Oracle, fixing near-record volumes of security bugs and/or quickening the tempo of their patch releases.[1]
As it does on the second Tuesday of every mon
A Brazilian tech firm that specializes in protecting networks from distributed denial-of-service (DDoS) attacks has been enabling a botnet responsible for an extended campaign of massive DDoS attacks against other network operators in Brazil, KrebsOnSecurity has learned. The firm’s chief executive says the malicious activity resulted from a security breach and was likely carried out by a competitor seeking to tarnish his company’s public image.[1]
For the past several years, security experts ha
With attackers able to move at AI speed, defenders cannot rely on the techniques and instincts they have come to trust. "That means putting in place stronger identity controls," said Jack Butler, a senior enterprise solutions engineer at Sumo Logic, a SecOps vendor. "That means putting in place the more robust logging program and correlation engines to detect all of these in real time and reassess signals of trust. It needs to be reassessed dynamically."[1]
As for what to do about the substan
Users frequently entrust AI assistants with highly sensitive information, including medical records, financial documents, and proprietary business code. Check Point researchers have disclosed a critical vulnerability in ChatGPT's architecture that enables attackers to extract user data covertly. A flaw in ChatGPT's code execution environment demonstrated how a single malicious prompt could quietly exfiltrate sensitive user data without warning or user approval.[1]
The Vulnerability - OpenAI de
Dutch intelligence agencies have revealed an extensive cyber campaign by Russian state-backed hackers aimed at infiltrating Signal and WhatsApp accounts of high-profile individuals worldwide. The Military Intelligence and Security Service (MIVD) and General Intelligence and Security Service (AIVD) describe the effort as large-scale and ongoing, exploiting user vulnerabilities rather than app flaws. The operation focuses on government officials, military personnel, and civil servants, with Du
