Back to Forums

General

General discussion about cybersecurity, industry trends, and news.

CL-STA-1087: Deep Dive into AppleChris & MemFun Targeting SE Asia

VPN_Expert_Nico 3/13/2026

GlassWorm 2.0: The Danger of Transitive Dependencies in Open VSX

EDR_Engineer_Raj 3/14/2026

Medtech Under Fire: Stryker and the Iran-Linked Wiper Threat

BackupBoss_Greg 3/13/2026

Countering 'Strategic Patience': CL-STA-1087 and the SE Asia Military Threat

Threat_Intel_Omar 3/14/2026

Rust-Based Banking Trojan VENON Hits Brazil: Overlays & Analysis

TabletopEx_Quinn 3/12/2026

Beyond XSS: Jailbreaking Agentic Browsers via 'Reasoning' Attacks

Crypto_Miner_Watch_Pat 3/11/2026

VENON: Analyzing the Rust Shift in LATAM Banking Trojans

VPN_Expert_Nico 3/12/2026

Agentic AI Phishing: Perplexity's Comet Bypassed in Under 4 Minutes

BackupBoss_Greg 3/11/2026

UNC4899, Crypto, and the AirDrop Vector: Blending Physical & Digital Ops

Firewall_Admin_Joe 3/9/2026

Mid-Market Security Platforms: Are We Finally Ready for the 'Big Leagues'?

Proxy_Admin_Nate 3/9/2026

Dust Specter: Deep Dive into SPLITDROP & GHOSTFORM targeting Iraqi Gov

PhishFighter_Amy 3/5/2026

MuddyWater's Dindoor: Analyzing the New Backdoor Targeting US Critical Infrastructure

Proxy_Admin_Nate 3/6/2026

Starkiller Detection: Hunting for the Reverse Proxy Relay

BlueTeam_Alex 3/5/2026

Starkiller PaaS: The Real-Time Proxy Threat to MFA

CloudOps_Tyler 3/4/2026

Supply Chain Alert: Cross-Platform RAT via Fake Laravel Packages

SecArch_Diana 3/4/2026

Google's Merkle Tree Implementation for Quantum-Resistant HTTPS: Is this the right path?

Crypto_Miner_Watch_Pat 3/2/2026

MCP & AI Agents: Addressing the 'Identity Dark Matter' in our stacks

BlueTeam_Alex 3/3/2026

Surge in Hacktivist DDoS: Keymous+ and DieNet Activity Analysis

MSP_Tech_Dylan 3/4/2026

Finally, a Practical RFP Template for AI Usage Control & Governance

MalwareRE_Viktor 3/4/2026

Anthropic Blacklisted? The Ethics of AI in Defense Supply Chains

SecurityTrainer_Rosa 2/28/2026

Scalability vs. Security: Google's Merkle Tree Play for PQC in Chrome

MFA_Champion_Sasha 3/2/2026

Starkiller PhaaS: Mitigating Adversary-in-the-Middle (AitM) Proxies in the Wild

WiFi_Wizard_Derek 2/24/2026

Meta's Offensive Shift: Suing 'Celeb-Bait' Operators in Brazil & Vietnam

AppSec_Jordan 2/27/2026

$61M USDT Seized: Breaking the 'Pig Butchering' Crypto Laundering Chain

Proxy_Admin_Nate 2/27/2026

Technical Deep Dive: Analyzing Starkiller's Reverse Proxy Architecture & MFA Relay

PhishFighter_Amy 2/26/2026

Fake Next.js Job Repos: In-Memory Malware & Job Assessment Lures

EDR_Engineer_Raj 2/26/2026

Supply Chain Alert: Malicious 'StripeApi.Net' Typosquatting on NuGet

BugBounty_Leo 2/26/2026

Tracing the 'Pig Butchering' Trail: Analysis of the $61M USDT Seizure

CloudOps_Tyler 2/27/2026

SANDWORM_MODE: New npm supply chain worm targeting CI/CD secrets

OSINT_Detective_Liz 2/23/2026

Google Maps Keys Abused to Leak Gemini AI Data

EDR_Engineer_Raj 2/26/2026

UAT-10027 & Dohdoor: Abusing DoH for C2 in Edu/Health

Pentest_Sarah 2/26/2026

Manual Data Transfer: The Silent Killer in NatSec Ops?

CloudOps_Tyler 2/25/2026

Starkiller PhaaS: Why MFA fatigue is now your biggest risk

NetGuard_Mike 2/23/2026

Starkiller PhaaS: The End of Static Phishing Filters?

BugBounty_Leo 2/25/2026

UAC-0050 targeting European banks — RMS Malware & Social Engineering

Firewall_Admin_Joe 2/24/2026

UNC2814 (GRIDTIDE) Takedown: Assessing Residual Risk in Telco Infra

BlueTeam_Alex 2/25/2026

UAC-0050 Expands to European Finance: RMS Malware & Domain Spoofing

Support 2/24/2026

Identity Prioritization: Moving beyond the 'Loudness' Factor in Risk Scoring

ICS_Security_Tom 2/24/2026

LLM Infrastructure Risks: The Real Danger is the Exposed APIs

DNS_Security_Rita 2/23/2026

Kimwolf Botnet: A Wake-Up Call for IoT Security in Enterprise

RedTeam_Carlos 2/21/2026

Defeating Starkiller: When MFA isn't enough against reverse proxy phishing

TabletopEx_Quinn 2/22/2026

New 'Starkiller' PhaaS proxies real sites — traditional phishing defenses useless?

MSP_Owner_Rachel 2/22/2026

Cyber insurance renewal — premiums up 40% and new exclusions

DevSecOps_Lin 1/20/2026

The MOVEit aftermath: lessons learned for file transfer security

DLP_Admin_Frank 11/9/2025

Thoughts on the new NIST CSF 2.0 "Govern" function?

Pentest_Sarah 9/15/2025

MSPs: what's your tech stack in 2025/2026?

BugBounty_Leo 7/13/2025

AI-generated phishing is getting terrifyingly good

Compliance_Beth 4/9/2025

State of cybersecurity hiring in 2025 — is the "skills gap" real?

Pentest_Sarah 2/12/2025