Search: “Unknown”

8 stories in the last 30d

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Exploit / PoC 28 Malware 17 Threat actor 16 Vulnerability 13 Industry 13 Research 12 AI safety & security 12 Data breach 10 AI research 10 Tools 8 Ransomware 5 Policy & legal 3 Model release 3 Phishing & fraud 3

SeverityAll critical 11 high 56 medium 32 low 1 info 59

Meta adds three new features to keep WhatsApp accounts secure

Meta strengthens WhatsApp account security with alphanumeric two-step verification passwords, unknown-caller context on Android, and multiple passkeys per account.

Meta upgraded WhatsApp's two-step verification from a six-digit PIN to a longer alphanumeric password that can include special characters. On Android, calls from unsaved numbers now show context such as whether the number is registered in another country or shares groups with the recipient, countering scam urgency. More than one billion users have set up passkeys, and users can now register multiple passkeys on one account across mixed platforms.

Help Net SecurityAug 26, 00:00 UTC · 22d agoTools

New Account Security Features for WhatsApp

Meta added stronger two-step verification and unknown-caller context features to WhatsApp to harden user account security against takeovers.

Meta announced new account security features for WhatsApp, including stronger two-step verification options. The rollout also adds additional context for calls from unknown callers. The features are designed to reduce account takeover risk and improve user confidence in call-based communication.

Meta NewsroomAug 25, 13:05 UTC · 22d agoTools

Nozomi Compass helps industrial teams manage OT assets and vulnerabilities

Nozomi Networks launched Compass, an OT asset and vulnerability management platform unifying asset records, remediation workflows, and compliance evidence for industrial teams.

Nozomi Networks announced Compass, an OT asset and service management platform built on real-time first-party asset data from its Vantage cyber-physical security platform. It provides OT-native workflows, governed change approvals, consequence-based risk scoring, and continuous audit-ready compliance evidence mapped to NERC CIP, IEC 62443, NIS2, and TSA. The platform integrates with EAM, CMDB, ITAM, ITSM, SIEM, and SOAR tools and is designed to safely support AI-driven and agentic OT workflows with human oversight.

Help Net SecuritySep 16, 10:27 UTC · 1d agoTools

OpenSSL 4.1.0 Alpha1 Released With DTLS 1.3 and Faster Post-Quantum Cryptography

OpenSSL 4.1.0 Alpha1 adds DTLS 1.3 support, ML-DSA and ML-KEM post-quantum optimizations, and GREASE TLS compatibility, intended for testing only.

The alpha preview of OpenSSL 4.1.0 implements RFC 9147 DTLS 1.3 for UDP-based applications and integrates DTLS into the SSL listener API. It accelerates ML-DSA signatures and ML-KEM encapsulation with AVX-512 and VAES optimizations on x86_64, and adds GREASE (RFC 8701), IKEv2 KDF support, and Elbrus2000 (e2k) targets. The release is intended for testing and development, not production, and removes Windows-on-Itanium and Windows CE build targets.

Cyber Security NewsSep 10, 11:22 UTC · 6d agoTools

Securin Platform helps security teams prove when attack paths are closed

Securin launches the AI-native Securin Platform unifying exposure management, attack surface discovery, offensive validation and remediation to prove attack paths are closed.

Securin announced general availability of the Securin Platform, an AI-native preemptive exposure management product combining attack surface discovery, vulnerability and threat intelligence, prioritization, offensive validation and remediation verification in one workflow. It includes modules Surface, Signals, Exposure, Validate and Assure, orchestrated by the VERA multi-agent AI framework, and aims to verify whether real attack paths are closed rather than ranking findings by severity alone.

Help Net SecuritySep 9, 09:52 UTC · 8d agoTools

Microsoft Teams is about to make QR code phishing much harder

Microsoft Teams will obscure QR codes from external senders starting October 2026, adding friction against QR-code phishing across Android, desktop, iOS, and Mac.

Microsoft 365 Roadmap entry 570439 describes a Teams feature that obscures images containing QR codes sent by external users, requiring users to reveal them before viewing or scanning. Rollout is expected to begin in October 2026 for Android, desktop, iOS, and Mac. The feature aims to reduce QR code phishing risk, which NordVPN says has redirected more than 26 million users to malicious websites, with 73% of Americans scanning codes without verifying destinations.

Help Net SecuritySep 4, 00:00 UTC · 13d agoTools1

Release Notes: Faster TI Investigations, Fresh Threat Research, and 650+ Threat Coverage Updates

ANY.RUN August release adds TI Lookup connections view, 81 behavior signatures, 16 YARA rules, 559 Suricata rules, and three new threat intelligence reports.

ANY.RUN released August product updates expanding its Threat Intelligence Lookup with a Connections block for pivoting between related observables (domains, IPs, URLs), JSON export for retrohunting and SIEM/NDR integration, and hidden whitelisted data by default. Detection coverage grew with 81 new behavior signatures, 16 YARA rules, and 559 Suricata rules covering malware execution, phishing, and C2 traffic. Three new Threat Intelligence Reports cover a US-focused RMM phishing campaign across 46 countries, the Mirage2FA phishing-as-a-service targeting Microsoft 365 (1,249 sandbox sessions, 9,332 potential compromise events), and a threat brief on OVERLORD RAT, CRPX0, and TRIBACK loader.

ANY.RUNSep 3, 09:11 UTC · 14d agoTools1

Microsoft Defender's Own Driver Can Be Weaponized to Delete Security Software at Boot

Check Point revealed BTR Reforged, a technique weaponizing Microsoft Defender's built-in BTR.sys driver to delete security software at boot without exploiting any vulnerability.

Check Point Research disclosed BTR Reforged, a technique that abuses BTR.sys, a legitimately signed Windows Defender boot-time remediation driver, to perform arbitrary kernel-level file and registry operations on Windows 7 through Windows 11 25H2 without exploiting a software flaw. The BTR_CLI proof-of-concept tool, presented at Black Hat USA 2026 and DEF CON 34, installs the driver via direct registry writes and executes deletions during the boot-time 'golden window' before Defender's user-mode services start, demonstrated by deleting the full Defender stack on a patched Windows 11 machine. Exploitation requires SeLoadDriverPrivilege; Microsoft confirmed it does not meet criteria for immediate servicing and no patch is planned. No evidence of real-world abuse was found, and related indicators of compromise via Sysmon events were published.

The Hacker NewsAug 21, 15:52 UTC · 26d agoTools CVE-2021-240921