There is a new idea in the cybercrime world — cast a wide net, steal everything, and let AI sort out the specifics. A new malware self-named “VOLTA-AUTODOXER,” surfaced through the CAIRN research effort, is a self-deleting Windows infostealer that augments…
Written by Sophos Counter Threat Unit Research Team, Colin Cowie Artifacts discovered in the data suggest the operators are Russian speakers. Russian commands “зы” and “ды”, which were observed in the operator logs, correspond to ps (process enumeration) and ls…
Notably, the NIK C2 implant embeds a fully integrated OpenAI API client via its ai_generate command, allowing operators to route arbitrary prompts to the OpenAI Chat Completions API directly through the infected host. The NIK C2 implant manages API key resolution, request assembly,…
Sale | Nov. 23 - Dec. 4 Black Friday / Cyber Monday Save big on Falcon Go, Pro, or Enterprise. There's nothing in your cart per endpoint / per year per endpoint / per month
After Alibaba’s Qwen model tried a test upload to a server in Beijing during a Cohere experiment, we replayed that moment 64 times, and the model picked 52 different addresses. That points to an unpredictable model rather than a hidden backdoor, but…
AI is pushing data center traffic to levels most security architectures were never built for, and much of it is encrypted. Today we’re introducing the Check Point Maestro Hyperscale Orchestrator (MHO) 200, our most powerful Maestro orchestrator yet. With new 400GbE ports…
Respond faster and outpace attackers. Taking command of your attack surface starts here. Find the best MDR partner for your business Find out what is driving the shift in 2026. Security where your customers need it The vulnerability affects self-managed GitLab…
Respond faster and outpace attackers. Taking command of your attack surface starts here. Find the best MDR partner for your business Find out what is driving the shift in 2026. Security where your customers need it On October 12, 2026, GitLab released 19.4.2, 19.3.5, and…
The front door to AI in the workplace As organizations adopt autonomous agents to build applications, securing identities and access has become more challenging. Developers relying on agents to provision cloud resources, write Terraform, and deploy microservices at machine-speed only…
Get free access to more tools from SOCRadar Latest Research on INC and The Gentlemen Ransomware: Exposed AI Infrastructure Victim's position within group Same group · everest Energy Storage Terminal in Singapore Monthly attacks · everest total · avg 13.6/mo
Vendor threat reports and trend studies from Mandiant, CrowdStrike, Microsoft, Talos and Check Point, attack statistics and annual breach reports.
An article joins this feed when it matches these terms. Each one is also a search of its own.