ONCD starts six-month rural hospital cyber pilot in South Carolina
Project Lifeline 250 offers free industry help, post-incident backup devices and replacement of high-risk legacy equipment.
40
- Mentions · 7d3
- Mentions · 30d7
- All mentions18
- First seenSep 10, 2026
- Last mentioned3d ago
Timeline
18 articles · newest firstFake FedEx invoices install Sirius Backdoor through blank PDFs
A Korean-language lure claims 217,740 KRW is due; the PDF launches PowerShell that loads the backdoor only in memory.
62
Sirius backdoor variant delivered by Korean FedEx-themed PDF emails
Trellix says a weaponized PDF launches fileless loaders that inject Sirius into suspended Windows processes after the victim approves a prompt.
64
SideCopy Hackers Target Indian Organizations With ReverseRAT Malware to Steal Data
SideCopy is spear-phishing Indian organizations with malicious shortcuts to deploy in-memory ReverseRAT for data theft.
58
AI Agents Create an Unseen Credential Surface That Exposes API Keys and Cloud Secrets
Trellix says normal AI-agent workflows can leak API keys and cloud secrets into logs, transcripts, and model context.
58
AI Agent Workflows Could Expose Credentials Through Trusted Developer Tools
Trellix warns AI agent workflows can leak credentials from vaults into commands, logs, and model context.
52
Top 10 Best Malware Analysis Tools in 2026 [Ranked & Scored]
A 2026 roundup ranks malware sandboxes and file-intelligence tools, led by context, interactive, and evasion-resistant analysis.
18
Fake Google Security Team ad says 'no script reading' in voice phishing - then prints the script
Trellix mocks a Telegram ad recruiting voice-phishers impersonating Google while forbidding script reading.
41
Chrome Update Fixes 108 Vulnerabilities Including Critical GPU, WebGL and ANGLE Flaws
Chrome 154 patches 108 vulnerabilities, including critical memory-safety flaws in ANGLE, GPU, and WebGL that could enable code execution.
60
WordPress 7.1.2 fixes critical unauthenticated path traversal vulnerability (CVE-2026-87902)
WordPress 7.1.2 fixes a critical unauthenticated path traversal flaw (CVE-2026-87902) that could allow remote code execution.
80
AI-Driven Cyberattacks Enter New Phase With Autonomous Fraud and Digital Trust Abuse
AI-driven cyberattacks are automating fraud and intrusions, with the GTG-1002 campaign using AI agents for most operational tasks.
55
AI-Powered Threats Exploit Digital Trust Through Autonomous Breach Techniques
A PRC-linked group used Claude Code as an autonomous operator for espionage, while researchers identified the first Android malware leveraging generative AI.
70
CISOs can no longer ignore the nation-state threat
CSO analysis argues AI-accelerated nation-state intrusions, especially Chinese pre-positioning, force CISOs to fold geopolitical threats into enterprise risk management.
20
Hackers Steal NTDS.dit to Dump Active Directory Password Hashes and Forge Golden Tickets
Trellix details how attackers dump the NTDS.dit Active Directory database via shadow copies to harvest NTLM hashes and forge persistent Golden Tickets.
48
SideCopy Broadens India Targeting to Academia With ReverseRAT Spear-Phishing
SideCopy used spear-phishing and mshta.exe to deploy ReverseRAT against Indian academic institutions, Trellix reports.
68
One Stolen Active Directory File Can Expose Credentials for an Entire Windows Domain
Trellix warns that stealing a domain controller's NTDS.dit and SYSTEM hive can expose an entire Windows domain's credentials.
44
Hackers Steal Active Directory Password Hashes Without Attacking Domain Controllers Directly
Attackers use the DCSync technique to impersonate domain controllers and harvest AD password hashes and Kerberos keys without directly compromising domain controllers, Trellix warns.
35
Hackers Pose as Domain Controllers to Steal Active Directory Password Hashes
Attackers abuse Active Directory replication (DCSync) via the DRSUAPI protocol to steal password hashes and forge Golden Tickets for persistent domain compromise.
35
Related CVEs
by mentions- Use-after-free in Chrome ServiceWorker enables sandbox escape
- Use-after-free in Google Chrome Fullscreen enables sandbox escape
- Heap Buffer Overflow in Chrome for Android WebGL
- Heap buffer overflow in Chrome for Android ANGLE enables RCE
- Critical heap buffer overflow in Chrome ANGLE on Android
- CVE-2026-95350<1%9.6Heap buffer overflow in Google Chrome ANGLE on Android
- Out-of-bounds write in Chrome Android WebGL enables sandbox escape
- CVE-2026-95357<1%9.6GPU out-of-bounds write in Chrome for Android
- Use-After-Free Sandbox Escape in Google Chrome WindowDialog
- GPU out-of-bounds write sandbox escape in Chrome on Android
Appears with
- Microsoftvendor · 8
- Trellixvendor · 8
- Microsoftorganization · 6
- Windowsproduct · 5
- PromptSpymalware · 4
- Googlevendor · 4
- GTG-1002threat actor · 4
- artists’ marketplacevictim · 3
- Googleorganization · 3
- MacSyncmalware · 3
- LunaLockmalware · 3
- ChatGPTproduct · 2
- STAR Labsorganization · 2
- SharePointproduct · 2
- Active Directoryproduct · 2
- ReverseRATmalware · 2
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.