The Contents of the Room: 1. Room outline 2. Threat Intelligence 3. UrlScan.io 4. Abuse.ch 5. PhishTool 6. Cisco Talos Intelligence 7…

Task 1:

Overview

LinPEAS

A ransomware crew just accused a US dental group of HIPAA non-compliance on its leak site, and HHS has now brought 14 enforcement actions…

Understanding PowerShell execution, Windows forensic artifacts, event logs, process trees, Script Block Logging, and how SOC analysts…

The FBI and DOJ seized domains and disrupted scanning and spear-phishing tools used by Flax Typhoon, a China-linked threat group tied to Integrity Technology Group.

The Growth of AI Crime Markets and the Challenge for Banking Security Signs that artificial intelligence tools may have been used in the recent attacks on Korean banks have attracted considerable …

Cyber threats never sleep—which is why your protection shouldn't either.

The story of a tiny “+” that broke the gate — and what it taught me about identity, rate limits, and responsible disclosure.

TL;DR On October 7, security researchers detected active cyberattacks targeting the AhsayCBS backup platform. Threat actors chain two critical AhsayCBS vulnerabilities to achieve remote code execu…

TL;DR Security researchers publicly disclosed a high-severity vulnerability in the Telegram Desktop application. This Telegram Desktop account takeover flaw enables remote attackers to steal sessi…

TL;DR HPE has patched two critical flaws in its server and network management tools. The first is an HPE iLO 7 vulnerability, CVE-2026-79820 (CVSS 9.0), which could give a remote attacker administ…

TL;DR Citrix has published a critical bulletin for CVE-2026-107406, a memory overflow flaw in NetScaler ADC and NetScaler Gateway rated 9.5 on CVSS v4.0. This Citrix NetScaler vulnerability &#8220…

A single character in an HTTP header was enough to bypass authentication on vLLM, LiteLLM, FastAPI, and more than 400,000 other projects…

The security defect, tracked as CVE-2026-107406, could lead to remote code execution or denial-of-service.

$1.2 million was paid out at Pwn2Own Ireland 2026 for exploits targeting phones, printers, smart speakers, smart home hubs, and AI infrastructure and coding tools.

Researchers from George Washington University have published a paper examining whether the time and cause of AI going rogue can be predicted.

The security defects could lead to unauthorized access, information leaks, privilege escalation, DoS attacks, and remote code execution.

All enterprises conduct security awareness training for their employees. But whether this has tangible benefits is debatable.

Threat actors have started targeting CVE-2026-21589, a critical vulnerability in Atlassian’s self-hosted Data Center products.