38TB of data accidentally exposed by Microsoft AI researchers
Executive summary Microsoft’s AI research team, while publishing a bucket of open-source training data on GitHub, accidentally exposed 38 terabytes of additional private data —…
Month: October 2026
Threat Actors Exploit Critical AhsayCBS Flaws to Drop Webshells and XMRig Cryptominer
Acknowledgements: Special thanks to Dipo Rodipe, John Hammond, Susannah Matt, Ben Nahorney, and Lindsey Welch for their contributions to this investigation and writeup. Update 10/8/26…
Microsoft: Outdated Windows devices will stop receiving security updates
Microsoft says devices running unsupported versions of Windows will stop receiving security updates after next year’s Windows Update certificate rotation. To ensure devices keep receiving…
MATCHBOIL Malware Uses Cloudflare-Hidden C2 Servers to Deliver Backdoor Payloads
MATCHBOIL, a C# malware downloader linked to UAC-0099, uses command-and-control (C2) servers hidden behind Cloudflare to deliver backdoor payloads. Its changing code shows how the…
No EDR, no problem: how Huntress rebuilt an Akira ransomware attack from forensic leftovers
Incident responders rarely get to watch an attack from the beginning. More often, security tooling arrives after the damage is done, either as part of…
Suspected TraderTraitor Hackers Trojanize Terraform Provider to Deploy Cross-Platform Malware
A campaign in July 2026 using a trojanized Terraform provider to deploy cross-platform malware against developer environments. The operation delivers FLATROOF for credential theft and…
FBI disrupts Flax Typhoon hacking tools used in global cyberattacks
The FBI seized seven domains used to operate Microscan and FishHub, two hacking tools linked to Chinese state-sponsored hackers known as Flax Typhoon that were…
FBI Seizes 7 Domains, Disrupts Flax Typhoon Tools Used in Critical Infrastructure Intrusions
The U.S. Federal Bureau of Investigation (FBI) and Department of Justice (DoJ) have announced the disruption of malicious tools used by a China-linked advanced persistent…
Interview: Chris Kairinos, senior director of global modern workplace technology, A+E Global Media
Chris Kairinos, senior director of global modern workplace technology, client services and technology operations at broadcasting and entertainment specialist A+E Global Media, says adaptability and…
EasyPark builds an AI agent to help it qualify B2B sales leads
Key points EasyPark has built an AI agent called Parker, based on Salesforce’s Agentforce, to identify and qualify B2B leads from existing users. Parker is…
US Disrupts Chinese State-Sponsored Hacking Tools
The United States on Thursday announced the disruption of two hacking tools used by Chinese state-sponsored threat actors in attacks against US and foreign critical…
AI-Driven tool ARTEX used in attacks against South Korean Banks
AI-Driven tool ARTEX used in attacks against South Korean Banks Pierluigi Paganini October 09, 2026 CrowdStrike analyzes open directories left by an attacker who used…