An AI-powered forensic investigations firm says its platform was used as part of the FBI's urgent investigation into the ...

Security tooling is not written in a single language. Python powers most automation. C sits at the exploit layer. PowerShell ...

Security researchers at Cyfirma have identified a sophisticated cyber intrusion campaign designated 'Operation SilentCanvas' that employs weaponised JPEG image files to deliver a multi-stage ...

Researchers at Huntress Security have published data on the exploitation of a critical SolarWinds Web Help Desk (WHD) vulnerability, revealing how in at least three known incidents, attackers ...

Microsoft observed active exploitation of internet-exposed SolarWinds Web Help Desk vulnerabilities enabling lateral movement. Attackers abused legitimate tools, PowerShell, and RMM software to ...

An operational security failure allowed researchers to recover data that the INC ransomware gang stole from a dozen U.S. organizations. A deep forensic examination of the artifacts left behind ...

I'd like to thank my coauthors Adrian Schipor and Martin Zugec for their invaluable contributions to this research. TL;DR This investigation, conducted with support from the Georgian CERT functioning ...

Threat actors have started to use the Velociraptor digital forensics and incident response (DFIR) tool in attacks that deploy LockBit and Babuk ransomware. Cisco Talos researchers assess with medium ...

Discord has become an attractive tool for attackers not because it’s malicious, but because it’s legitimate and trusted. It often flies under the radar of security controls and offers features that ...