Security Operations
Detection, incident response, forensics and the tooling behind them.
A Stealthy Backdoor Is Quietly Breaching Southeast Asia’s Critical Infrastructure
China-linked group CL-STA-1062 has compromised at least 10 regional organizations—including state utilities—with a novel C# backdoor called TinyRCT, designed to evade detection and persist undetected.
Beyond Bedside Checks: Portable Multi-Session Brain-Computer Interfaces Double Covert Consciousness Detection
A new clinical trial demonstrates that longitudinal BCI training with audio feedback can bypass motor paralysis to detect hidden awareness in up to 69% of minimally conscious patients.
The Autonomy Gap: Why AI Pen-Testing Tools Lose Trust Fast
Analysis of the declining confidence in autonomous AI penetration testing systems, examining why fewer companies are relying on fully automated security vulnerability discovery despite continued experimentation.
Beyond Offshore Cost Arbitrage: Opendoor's Retreat Signals a Shift to AI-Native Teams
Opendoor's decision to close its offices in Chennai and Bengaluru less than two years after opening them highlights a broader debate over AI-driven automation vs. traditional offshore manual workflows.
Bugcrowd Puts Pen-Test Data Where EU Regulations Demand It: Inside the New Frankfurt Residency Option
Bugcrowd has launched a dedicated EU data residency option for its penetration testing platform, hosted on AWS Frankfurt, allowing European organizations to conduct offensive security assessments while ensuring sensitive PII and vulnerability data never leaves the region — targeting government, critical infrastructure, and financial services sectors.
When Breach Data Converges: What the 2026 DBIR Reveals About Browser-Centric Attacks
The 2026 DBIR reveals how attacks converge in the browser layer, exposing blind spots in network and endpoint defenses.
One-Click Data Theft: How SearchLeak Turns Microsoft Copilot Into an Exfiltration Weapon
Varonis Threat Labs uncovered SearchLeak (CVE-2026-42824), a critical three-stage vulnerability chain in Microsoft 365 Copilot Enterprise that lets attackers steal mailbox, OneDrive, and SharePoint data with a single click on a trusted microsoft.com link.
Twenty-Four Hours to Pwn: How a Single Endpoint Destroyed Ivanti Sentry's Trust
Threat actors weaponized CVE-2026-10520 within hours of disclosure — here’s how the exploit works, why it’s so dangerous, and what you must do now.
How David Wessel Turned Wall Street’s Chaos Into Public Understanding
David Wessel brings three decades of economics journalism from The Wall Street Journal to his role as director of the Hutchins Center on Fiscal and Monetary Policy at Brookings, where he shapes public understanding of Federal Reserve policy and federal budget politics.
The Firewall That Let Them In: How 74,000 Devices Became a Backdoor to the Global Economy
A massive breach of Fortinet firewalls has exposed plaintext credentials for nearly 74,000 devices across 194 countries, giving Russian-speaking attackers access to organizations including Oracle, Chevron, FedEx, and a NATO defense contractor.
ShinyHunters' Salesforce Breach Unleashed 137,000 School Staff Records
The ShinyHunters extortion group stole personal information from 137,000 school staff accounts by breaching Infinite Campus's Salesforce instance, exposing directory data across 3,200 US school districts.
The 48-Hour Window After a Concussion That Changes Everything
UC Riverside research identifies how TLR4 activates MMP-9 after brain injury, triggering extracellular matrix breakdown and network hyperexcitability. Blocking this axis within 48 hours rescues spatial memory.