Fake Tech Support Spam Deploys Customized Havoc C2 Across Organizations
08
Mar
2026

Fake Tech Support Spam Deploys Customized Havoc C2 Across Organizations

Threat hunters have called attention to a new campaign as part of which bad actors masqueraded as fake IT support…

fake command line of process 2
08
Mar
2026

Windows Process Command Line Spoofing Through Symbolic Link

I. INTRODUCTION Endpoint Detection & Response (EDR) systems often use the ProcessParameters field of the Process Environment Block (PEB) to…

insider threat shadow worker steal stealing theft data
08
Mar
2026

Europa im Visier von Cyber-Identitätsdieben

Deutsche Unternehmen müssen sich warm anziehen: Sowohl staatliche als auch „private“ Akteure haben es auf sie abgesehen. Shutterstock Wie die…

Notepad++ users take note: It's time to check if you're hacked
08
Mar
2026

Notepad++ users take note: It’s time to check if you’re hacked

According to independent researcher Kevin Beaumont, three organizations told him that devices inside their networks that had Notepad++ installed experienced…

Tushar Jain
08
Mar
2026

Updated PCI PIN compliance package for AWS Payment Cryptography now available

Amazon Web Services (AWS) is pleased to announce the successful completion of Payment Card Industry Personal Identification Number (PCI PIN)…

Threat modeling AI applications | Microsoft Security Blog
08
Mar
2026

Threat modeling AI applications | Microsoft Security Blog

Proactively identifying, assessing, and addressing risk in AI systems We cannot anticipate every misuse or emergent behavior in AI systems….

08
Mar
2026

Microsoft and Adobe Patch Tuesday, February 2026 Security Update Review

Microsoft’s February 2026 Patch Tuesday focuses on closing security gaps that attackers could exploit, reinforcing the importance of timely patching in enterprise environments. Here’s a quick breakdown of what you need to know. Microsoft…

EU court adviser says banks must immediately refund phishing victims
08
Mar
2026

EU court adviser says banks must immediately refund phishing victims

Athanasios Rantos, the Advocate General of the Court of Justice of the EU (CJEU), has issued a formal opinion suggesting…

Document My Pentest: you hack, the AI writes it up!
08
Mar
2026

Document My Pentest: you hack, the AI writes it up!

Tired of repeating yourself? Automate your web security audit trail. In this post I’ll introduce a new Burp AI extension…

CISA Adds Actively Exploited VMware Aria Operations Flaw CVE-2026-22719 to KEV Catalog
08
Mar
2026

CISA Adds Actively Exploited VMware Aria Operations Flaw CVE-2026-22719 to KEV Catalog

Ravie LakshmananMar 04, 2026Vulnerability / Enterprise Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a recently…

PPL process overwrite EDR post
08
Mar
2026

Countering EDRs With The Backing Of Protected Process Light (PPL)

  I. INTRO Important or sensitive processes of modern Windows operating systems are now protected by the Protected Process Light…

7 Anzeichen für akuten MSSP-Bedarf
08
Mar
2026

7 Anzeichen für akuten MSSP-Bedarf

Das sieht auch Toby Basalla, Gründer und Principal Data Consultant bei Synthelize, so. “Wenn Chaos herrscht, wer weiß dann noch,…