Inside Elastic's agentic SOC: How we took AI alert triage from 60% to 92% accuracy
Elastic’s InfoSec team has significantly enhanced their Security Operations Center (SOC) efficiency by implementing an agentic AI pipeline that impr…
Последние новости
⚑ Сообщить о проблемеTech news from the best sources
Все темы
- игры
AI
Gear
News
Tech
agents
ai
api
architecture
automation
beginners
career
database
devops
javascript
llm
machinelearning
mcp
opensource
performance
productivity
programming
python
react
security
showdev
testing
tutorial
typescript
webdev
Critical Gitea RCE Under Active Exploitation: CVE-2026-60004 Turns a Signup Form Into Shell Access
TL;DR what: CISA confirmed active exploitation of CVE-2026-60004, a CVSS 9.8 code injection flaw in Gitea's diffpatch API that plants an executable…
The safety penalty: Reclaiming operational sovereignty in the age of AI
The article explores the "safety penalty" encountered by cybersecurity teams using cloud-hosted frontier AI models. These models often possess restr…
I Set Up a Fake Internet to Catch a Trojan: Analyzing FlexenseActivator.exe
There's a malware trick I'd read about but never witnessed firsthand: a trojan that checks whether it's connected to the real internet before doing…
Oracle WebLogic Proxy Plug-in Flaw Hits CISA KEV: CVSS 10.0, Unauthenticated, Exploited Since February
TL;DR what: CISA added CVE-2026-21962, a CVSS 10.0 improper access control flaw in Oracle HTTP Server and the Oracle WebLogic Server Proxy Plug-in,…
Keycloak CVE-2026-18963: Unauthenticated Password Reset Hands Over Any Account, Including Admins
TL;DR what: Red Hat and the Keycloak project patched CVE-2026-18963, an improper state validation bug in the reset-credentials authentication flow t…
Burp Suite: Main Purposes in Web Security Testing
Burp Suite is a web application security testing platform developed by PortSwigger. It is widely used by penetration testers, security researchers,…
Three Russian Clusters Are Phishing Auth Flows, Not Passwords: OAuth, App Passwords, and WhatsApp Device Linking
TL;DR what: Google Threat Intelligence Group detailed three suspected Russian espionage clusters, UNC6293, UNC7005, and UNC5976, that phish authenti…
Rust Build Scripts Executed Malware From a Crate With 245 Million Downloads
TL;DR what: A compromised crates.io maintainer account published arrayref 0.3.10, internment 0.8.7, and append-only-vec 0.1.9, each adding a single…
Deep-Dive Write-up by Huynh Kien Minh: CVE-2026-13736 — NewPath WildApricotPress Member Directory PII Disclosure
🔐 Vulnerability ID: CVE-2026-13736 | 🎯 CVSS Score: 5.3 Medium | 🏆 Lead Researcher: Huynh Kien Minh (MinhHK) | 🔗 WPScan Advisory: Verified Report | 🌐…
Burp Suite: What It Is, Why We Use It, and How It Works
When learning web application security, one of the most important tools to understand is Burp Suite. Burp Suite is a web security testing platform d…
The GTA VI leak isn't really about GTA VI — it's an extortion playbook
Originally published in Spanish on El Rack . Browser translation handles the rest of the site fine if you're into homelab/security content. On Augus…
The ROI of Zero Trust: What the Breach-Cost Data Actually Shows
The ROI of Zero Trust: What the Breach-Cost Data Actually Shows If you've ever tried to get budget approved for a security initiative, you know the…
The Ultimate IDOR Testing Checklist (2026 Edition)
Ultimate IDOR Testing Checklist Phase 1: Setup & Target Identification [ ] Create Test Accounts: Create two accounts (Attacker and Victim) for s…
Cisco ASA/FTD Zero-Day DoS – Quick Patch & Hardening Playbook
The Threat 🚨 Cisco ASA/FTD appliances are being actively exploited via CVE‑2026‑20349, an unauthenticated DoS that crashes the Remote Access SSL VPN…
Your PBX Software Is Only as Safe as the Ports You Left Open
Originally published at ictpbx.com A PBX in default configuration listens on somewhere between eight and fifteen network ports. Three of them have t…
What is Cybersecurity?
In today's interconnected digital landscape, Cybersecurity is no longer just an IT concern—it is an essential pillar of modern software engineering…
Decoding a PowerShell -EncodedCommand During Incident Response (the UTF-16 gotcha)
You're triaging an alert. Scheduled task, weird parent process, and a command line that looks like this: powershell.exe -nop -w hidden -enc JABjACAA…
Metabase Zero-Day Hits CVSS 10.0: Unauthenticated SQL Injection Gives Full Admin
TL;DR what: Metabase disclosed that an unauthenticated SQL injection flaw in its BI platform was exploited in the wild as a zero-day, letting remote…
Chinese AI model Kimi escaped its cybersecurity testing environment, researchers say
In the Kimi test, the sandbox designed to contain the experiment was not properly configured.
4,407 Rockwell PLCs Sit on the Public Internet, 22 in Cities Hit by Water Utility Attacks
TL;DR what: Forescout's August 3 scan found 4,407 internet-facing Rockwell PLCs worldwide, including 22 in US cities where water utilities reported…
We Built a Story-Driven Cybersecurity CTF with 14 Free Missions
Most CTFs are excellent at teaching a technique. But once the flag is captured, the context often disappears. We wanted to build something different…
PREDICTION-20260801-0010
From the motivation-pattern-log — a public, dated, falsifiable prediction log for AI-era cybersecurity attack patterns grounded in motivation analys…
Social Engineering Attacks
What Is Social Engineering? A Beginner’s Guide Imagine this. One of my friends texted me the other day that her instagram was blocked and i should h…
Neutralizing the Shield: The Escalation of BYOVD Attacks in Kernel-Level Evasion
The contemporary threat landscape is characterized by a strategic shift toward the subversion of endpoint security primitives. As Endpoint Detection…
24,650 Exposed BMCs Hand Out IPMI Password Hashes to Anyone Who Asks
TL;DR what: Researchers at Lava scanned the internet on May 6, 2026 and found 36,872 hosts exposing IPMI on UDP port 623, of which 24,650 return pas…
Arista VeloCloud Orchestrator CVE-2026-16812: CVSS 10.0 Command Injection Under Active Attack
TL;DR what: Arista disclosed CVE-2026-16812, a CVSS 10.0 OS command injection in on-premises VeloCloud Orchestrator that is already being exploited…
Автоматизация реверс‑инжиниринга через локальную LLM
Облачные LLM сливают IOC в общие базы и цензурят описание опасных модулей. Реализуем анализатор вредоносного программного обеспечения с помощью лока…
Why AI Needs a “Genie Coefficient”
The article introduces the "Genie coefficient," a proposed metric designed to measure the discrepancy between a user's intent and an AI agent's actu…
How I Found a Critical Cloudflare Turnstile Bypass – And Got Denied a Bounty
Cloudflare Turnstile stores a token in your browser. I found you can copy it from one browser, paste it into another, and skip the CAPTCHA completel…