SectionResearch
New techniques, papers and threat intelligence.
New Mexico Judge Orders Meta to Pay $567 Million Over Youth Safety Failures
A Santa Fe judge ruled Meta must fund harm-mitigation efforts and overhaul how minors use Facebook and Instagram, calling the platforms a…
NRWA Teams With DEF CON Franklin to Shield Small Water Utilities
The National Rural Water Association has launched the Water Watch Center with DEF CON Franklin and five managed security providers to bring…
NatJack Attack Class Hijacks TCP Sessions by Abusing NAT Tables
Researcher Malcolm Stagg unveiled NatJack at Black Hat USA 2026, a technique that manipulates NAT connection state to hijack TCP sessions, spoof…
Ransom Cartel Ransomware Creator Sentenced to 16 Years in US Prison
Maksim Silnikau, the Belarusian who built and administered the Ransom Cartel ransomware-as-a-service operation, was sentenced in Virginia after pleading guilty to wire…
DOUBLECUP LaaS Hides Malware in Cached PNGs via ClickFix Prompts
A new Russian loader-as-a-service called DOUBLECUP uses fake CAPTCHA lures to stash steganographic payloads in browser cache, delivering an updated CountLoader and…
Liechtenstein Breach Exposes 31,000 Beneficial Ownership Records
Attackers accessed Liechtenstein's Register of Beneficial Owners for two days in late July, exfiltrating data tied to companies, foundations, and trusts before…
New York Puts $9 Million Toward Securing 153 Water and Wastewater Systems
Governor Kathy Hochul announced the SECURE grant funding days after a coordinated attack campaign hit operational technology at water utilities across at…
Microsoft Ties Midnight Blizzard to Captive Portal Wi-Fi Credential Theft Campaign
Microsoft attributes the CaptiveCrunch campaign, which hijacked hotel and conference Wi-Fi captive portals to steal Microsoft 365 credentials, to Storm-2945, a subgroup…
Balance Theory Lands $19M to Streamline Cybersecurity Spending Decisions
The Maryland startup's platform, which already oversees more than $1 billion in security investments, will use the Series A round to expand…
US and 13 Allied Nations Refresh Minimum SBOM Guidance
Government agencies update the 2021 NTIA baseline for software bills of materials, adding new data fields for hashing, licensing, and tooling while…
Claroty: 1 in 5 Data Center OT Assets One Hop From Internet Exposure
New research from Claroty finds that while direct internet exposure of data center infrastructure is rare, thousands of power, cooling, and building…
Spur Lands $200 Million from Insight Partners to Scale IP Intelligence Platform
Bootstrapped bot-detection and IP intelligence firm Spur Intelligence takes its first outside investment, aiming to help security and fraud teams unmask traffic…