Unredacted AI Team·13h ago🕵️ Fake AI apps, real signed files. A Telegram photo held the map.Fake ChatGPT and Claude desktop apps on GitHub ranked high on Google. Inside sat a real, signed OpenAI or Anthropic program that quietly…
OSINT Pro·22h agoAn App You Trusted Got Tampered With. Here’s What to Do NextThe NIKKE PC launcher hack is a good reminder that “I only install legit stuff” isn’t enough. A clean-up order that actually works.
ANY.RUN·23h agoMajor Cyber Attacks in October 2026: Fake AI, Account Takeovers, and Remote Access Threaten US and…October 2026 brought another wave of cyber threats targeting US enterprises, exposing security gaps that could lead to financial losses…
Himanshu Jha·1d agoWhy Single-Connection Analysis Misses Formbook’s Check-In PatternIn this post I analyze 2021-08-16-formbook.pcap , focusing on HTTP traffic from a suspected infected host. I used Wireshark for…
Pietro Romano / SecBeret·1d agoARTEX and Friends: Machine-Speed Intrusions Are Real, but the Evidence Is Narrower Than the FramingGoogle’s Mandiant and GTIG report threat actors running open-source agentic pentesting frameworks in live incident-response cases. The…
S12 - 0x12Dark Development·1d agoExecuting Shellcode in an Isolated vCPUWelcome to this new Medium post, today we are going to explore executing shellcode inside an isolated virtual CPU using the Windows…A response icon1A response icon1
Joe Njenga·1d agoCursor Claude Code Extension Hits 5k Users With an SSH Backdoor (Don't Be Caught Unaware)If you have Cursor installed or use Claude Code, pay attention to this attack and my detailed guide on how to check and fix it if you are…
ANY.RUN·2d agoRelease Notes: Related Threat Context for Faster Than Ever SOC Triage and 590+ Coverage UpdatesSecurity investigations often begin with a single suspicious IOC, but deciding what it means requires context. The more relevant…A response icon1A response icon1
