Cybersecurity News, Analysis & Insights — Threat Digest

Cloud Security ⚠️ Warning

LiteLLM's Poisoned Update: Hackers Hijack AI Gateway to Raid Cloud Secrets

A routine pip install turned nightmare for LiteLLM users last March. Attackers slipped malware into this AI gateway, exfiltrating cloud creds and server configs in a classic supply chain hit.

5 min read 1 month, 1 week ago

Security Tools 📊 Objective

Rapid7 CEO: AI MDR Will Force CISOs to Ditch Reactive Alerts by 2026

Security teams choke on millions of telemetry pings daily, but AI-powered MDR promises to cut through the noise. Rapid7 CEO Corey Thomas says forget watching subsets—full-environment monitoring is coming, like it or not.

5 min read 1 month, 1 week ago

📋

Compliance & Policy ⚠️ Warning

Critical Infrastructure's Hidden Weakness: Legacy Systems vs. 2026 Threats

Your daily tap water? It could vanish if cyber attackers exploit unpatched legacy systems in utilities. New regs demand action, but readiness lags far behind threats.

4 min read 1 month, 1 week ago

Security Tools ⚠️ Warning

Blind Spots Are Breaching Your Defenses—Not Zero-Days

Imagine your hospital's patient records vanishing—not from a genius hacker, but because no one knew that forgotten server was online. That's the visibility problem hitting real people every day.

4 min read 1 month, 1 week ago

Threat Intelligence ⚠️ Warning

Kaspersky's 2026 Report: Big Attacks Down, But Hackers Love Your Trusted Partners Now

Your IT team's breathing easier with fewer massive breaches. But hackers are slipping in through 'trusted' partners more than ever, per Kaspersky's latest data.

5 min read 1 month, 1 week ago

Security Tools 📈 Bullish

Red Teaming's Quiet Revolution: 2026's Shift to Continuous Security Feedback

Forget one-off red team exercises that gather dust in reports. At Rapid7's 2026 Summit, they're wiring red teaming straight into your security engine — for real-time fixes before attackers strike.

4 min read 1 month, 1 week ago

Threat Intelligence ⚠️ Warning

AI-Driven Device Code Phishing Scales Up Attacks on Corporate Logins

Hackers aren't just phishing anymore—they're automating AI-fueled device code grabs at enterprise scale. Microsoft's latest alert shows why this matters for every Microsoft 365 user.

5 min read 1 month, 1 week ago

Security Tools ⚠️ Warning

Mandiant's AuraInspector Reveals Salesforce's Sneaky Data Leaks — And How to Plug Them

Salesforce admins thought sharing rules covered them. Mandiant's new AuraInspector proves otherwise — scanning for data exposures that hackers exploit daily.

4 min read 1 month, 1 week ago

Threat Intelligence ⚠️ Warning

Cookies Unlocked: How Hackers Weaponize HTTP Cookies for Stealthy PHP Webshells

Server logs clean. Traffic normal. But your Linux host's quietly executing attacker commands — all triggered by innocent-looking cookies. Here's the data-driven takedown of this slick PHP webshell evasion.

5 min read 1 month, 1 week ago

Security Tools ⚠️ Warning

Agentic SOC: Security's Shiny New Buzzword?

SOCs are broken. Enter the agentic SOC—or so the pitch goes. But is this AI savior real, or recycled hype?

4 min read 1 month, 1 week ago

Vulnerabilities & CVEs ⚠️ Warning

WinRAR's CVE-2025-8088 Draws Russian, Chinese Hackers Long After Patch

Hackers from Russia and China are still milking a patched WinRAR vulnerability, CVE-2025-8088, to sneak malware past defenses. It's a stark reminder: patches mean nothing if you don't apply them.

4 min read 1 month, 1 week ago

Nation-State Threats ⚠️ Warning

North Korea's UNC1069 Pulls Off Crypto Heist with Deepfake Zoom and Seven Malware Strains

Picture this: a trusted crypto exec's Telegram pings you for a quick Zoom. It's a deepfake CEO glitching audio to push malware commands. UNC1069 just made crypto's worst nightmare real.

4 min read 1 month, 1 week ago