Dashlane issues opaque advisory warning 20 encrypted vaults were stolen
It’s possible that Dashlane’s reference to 2FA meant something else. Sometimes, 2FA can come in the form of push notifications. Once someone enters the correct…
Month: June 2026
Threat Hunting Case Study: FileFix
In a recent episode of Intel 471’s Happy Hunting series, threat hunt analyst Lee Archinal broke down FileFix, an evolution of the ClickFix copy-and-paste social…
From PowerShell to Payload: An Analysis of Weaponized Malware
Click, boom, and your network is compromised. All a hacker needs is one successful exploit and you could have a very bad day. Recently, we…
New ‘HTTP/2 Bomb’ DoS attack crashes web servers in under a minute
A new denial-of-service (DoS) attack dubbed HTTP/2 Bomb can be launched from a single machine to take down web servers within seconds. The technique works…
New Google Gemini Vulnerability Exploited via Prompt Injections from WhatsApp, Slack, and SMS
A new class of indirect prompt injection (IPI) attacks targets Google Gemini’s voice assistant, allowing attackers to silently hijack the AI through malicious payloads delivered…
xAI Asks Court to Strip Alleged Grok Deepfake Nudes Victims of Anonymity
“Factoring out the deepfake image itself—as it will remain under seal—there is nothing inherently stigmatizing about revealing the fact that a deepfake image was created…
Gentlemen Ransomware Exploits Fortinet Flaws, AI, and Custom C2 Tools
A newly analyzed leak tied to The Gentlemen ransomware group reveals how modern ransomware operations are evolving in structure and tooling while relying on the…
Alcasec, “Robin Hood of Spanish Hackers,” Jailed for 31 Months Over Data Theft
Spanish hacker José Luis Huertas will serve two years and seven months in prison after taking a plea deal at the National Court on Wednesday.…
Microsoft responds to security challenges facing code, AI agents, and models
Microsoft has introduced a series of security tools and capabilities focused on AI-driven vulnerability discovery, AI agents, and AI models. The updates include a multi-agent…
Infostealers are becoming the go-to phishing payload
Phishing has changed. Slowly but surely, cybercriminals are turning to infostealers instead. Traditional phishing hasn’t gone away. Far from it. But many attackers are no…
SIT Committee urges Palantir exit in push to end US cloud grip
MPs on the Science, Industry and Technology Committee have called for a “period of over-correction” to break the cycle of supplier lock-in and foster a…
Defence says Palantir is “sandboxed” in its environment
Australia’s Department of Defence is using Palantir’s Maven smart system in a sandboxed environment and without its AI functionality, according to officials. Appearing before senators…