Pickle in the Middle – Hijacking Vertex AI Model Uploads for Cross-Tenant RCE
Executive Summary We discovered a vulnerability in the Google Cloud Vertex AI software development kit (SDK) for Python, and responsibly […]
Security
Local agentic reverse engineering through vbdec’s live COM object model
Analysis tools do not need AI built in to support agentic workflows; they simply need to expose their data through
RCS and DNS: The NAPTR Record
Over the last year, with recent updates to iOS and Android, RCS (Rich Communication Services) has become an increasingly used
When checking the URL isn’t enough: phishing via the Microsoft identity platform
One of the most common pieces of anti-phishing advice is to double-check the website’s domain name before providing your credentials.
Choose your WhatsApp username carefully
Dutch consumer organization Consumentenbond has warned users to be careful when choosing their optional WhatsApp username. Meta announced the introduction
Inside Gentlemen’s EDR killer framework
ESET researchers analyzed the robust EDR-killing toolset of the ransomware-as-a-service gang Gentlemen. Since the beginning of 2026, Gentlemen has emerged
Ukraine Transfers Seized Crypto Assets Worth $8.3M To ARMA
Ukraine has transferred Seized Crypto Assets worth more than 8.3 million USDT to the country’s Asset Recovery and Management Agency
KnowBe4 awarded in the email security industry
KnowBe4, the global leader in digital workforce security, securing both AI agents and humans, today announced it has been awarded
Medtronic Notifies 3.8 Million After ShinyHunters Data Breach
Medtronic Notifies 3.8 Million After ShinyHunters Data Breach Pierluigi Paganini July 05, 2026 Medtronic says a ShinyHunters attack exposed the
Universal Bucket Hijacking Technique for Cloud Data Exfiltration
Executive Summary We recently identified a bucket hijacking technique impacting multiple services across major cloud service providers (CSPs). The attack