Low-quality casino sites conceal highly dangerous threat actors
Security firm Infoblox shines light on malicious infrastructure lurking beneath illegal gambling sites
Security & Lifecycle News
Aggregated from vendor advisories, security research, and industry publications.
“We Think the Security Control Is Working” Is No Longer Good Enough
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today. The post “We Think the …
Black Hat USA 2026 | OpenAI's Deep Dive Into Hugging Face Incident
At Black Hat USA, OpenAI engineers reconstruct the Hugging Face incident and explore lessons learned about AI safeguards and cyber resilience.
KREMLIN Banking Malware Hijacks Chrome and Edge to Steal Credentials and Session Tokens
Cybersecurity researchers have shed light on a previously undocumented Brazilian banking malware operation that delivers a toolkit called KREMLIN. Elastic Security Labs is trackin…
Cisco brings Splunk AI on premises, expands agent observability, monitors token costs
Cisco is expanding Splunk’s AI capabilities to self-managed environments and adding observability tools designed to help enterprise IT teams monitor AI agents, control token costs,…
Iranian spies hit Windows machines with Chosen Brick data-stealing malware
'Enemies of the regime' on notice
Higher-enriched uranium for datacenters has DoE all aglow
HALEU is still being produced at a snail's pace; Nusano says its federal backing could speed things up – eventually
PP126: Trying (and Failing) the CCIE Security Exam
Today we talk about trying and failing. More specifically, guest Keith Tokash wrote a pair of blogs on Packet Pushers about taking, but not passing, the CCIE Security written exam.…
VectraRAT Can Hack Windows Enterprises for $250 per Month
The full-service malware-as-a-service (MaaS) platform offers a Windows implant, command-and-control (C2) infrastructure, and an operator panel for comprehensive remote access.
CenterPoint Energy confirms customer data stolen in cyberattack
CenterPoint Energy disclosed a breach compromising some customers' personal information after an attacker leaked data allegedly stolen from the utility company. [...]
HW088: Scaling Your Wireless Team with Ekahau SaaS (Sponsored)
In this sponsored episode, Keith is joined by Matt Starling and Troy Martin of Ekahau to announce their new Software as a Service (SaaS) licensing model. Together they explain the …
America is building datacenters faster than the grid can power them
Meeting expected energy consumption through 2030 will require $110 billion in new generation resources
Iranian Hackers Use Telegram-Controlled Malware to Spy on Dissidents and Journalists
Cybersecurity agencies in the United States, the United Kingdom, and the Netherlands have detailed a Windows malware that they say Iran's intelligence service uses to spy on dissid…
HS142: The Blueprint for Automated Network Operations (Sponsored)
In this sponsored episode, Ronny Wolf of BlueCat Networks joins Johna and John to explore the importance of API-first architecture. They also discuss how BlueCat expanded beyond co…
Cisco email security boxes can be rooted by... an email
Attackers already exploiting the critical flaw, and Cisco warns they may be able to cover their tracks once they're in
$1 Million Sandbox Challenge Uncovers Linux Kernel Flaws
AI-assisted researchers flooded Vercel with reports, forcing the company to automate vulnerability triage. The post $1 Million Sandbox Challenge Uncovers Linux Kernel Flaws appeare…
Exein Secures $270M at $1.7B Valuation for Physical AI Security
The cybersecurity startup is building a proprietary foundation model and plans to accelerate global expansion. The post Exein Secures $270M at $1.7B Valuation for Physical AI Secur…
Highlights from Splunk .conf26 and what the news means to network engineers
Cisco and Splunk are using .conf26 to highlight how AI can transform observability, or “AI for observability.” The thesis is that the network, security operations, and AI infrastru…
Texas Utility CenterPoint Energy Confirms Breach After Hacker Leaks Data
A hacker claims to have stolen 7.5 million customer records after breaching the company’s systems. The post Texas Utility CenterPoint Energy Confirms Breach After Hacker Leaks Data…
BambooToken Malware Uses MQTT to Control Windows and Linux Systems
Cybersecurity researchers have disclosed details of a multi-platform campaign that uses the Message Queueing Telemetry Transport (MQTT) protocol as a communication channel to contr…
Twitter workaround worked around again: X's lawyers cancel XCancel again
Nitter's repository archived as of September 11, 2026
BambooToken malware controls Windows and Linux systems via MQTT
A previously unknown malware framework called BambooToken, active since at least 2023, is now using the Message Queuing Telemetry Transport (MQTT) protocol to communicate with Wind…
Who's governing your AI? A trust framework for enterprise agents and models
SPONSORED FEATURE: DigiCert wants to hand every agent a passport, complete with an expiry date and a named human owner
Hackers target WordPress sites via third-party WooCommerce plugin
Hackers are actively exploiting a critical vulnerability in the WooCommerce Wholesale Lead Capture premium plugin for WordPress to upload a PHP backdoor. [...]
CenterPoint Energy confirms intruder helped themselves to customer information
Forum post claims 7.49 million files up for grabs as Texas utility investigates breach
What Zero-Day Response Should Be in the Post-Mythos Era
AI is shrinking the time between vulnerability disclosure and exploitation, leaving defenders less time to wait for patches or public exploits. Picus Security explains how exploita…
Thai Broadband Provider Hacked via Fortinet Vulnerability
The hackers staged numerous scripts for reconnaissance and CVE probing, along with brute-force utilities and privilege escalation tools. The post Thai Broadband Provider Hacked via…
September's Windows 11 patch needs an emergency patch of its own
Microsoft fixes RDP and Hyper-V fallout, but some USB audio stays silent
Swiss court sentences 52-year-old Ukrainian ransomware dev to nearly 13 years in the cooler
The man allegedly wrote the code that powered the Lockergoga, MegaCortex, and Nefilim operations
Anthropic and OpenAI look to Uncle Sam to make them too big to fail
American model devs are trying to convince Washington to cement their dominance