The AirSnitch Attack Bypasses Wi-Fi Encryption
Security researchers have presented a series of attacks called AirSnitch, which exploit issues in the network stack and allow attackers to bypass client isolation in Wi-Fi networks. The problem affects routers from Netgear, D-Link, Ubiquiti, and Cisco, as well as devices running DD-WRT and OpenWrt
We made an article to show you how to defend against it
https://t.co/u4thhRm2gc
@three_cube@_aircorridor #cybersecurity
Microsoft just confirmed CVE-2026-42897 is being actively exploited in the wild.
The target? Outlook Web Access.
No malicious link. No attachment. Just open the email.
I broke down exactly how the attack works 👇
https://t.co/DNCKVa3bQQ
#ESETresearch uncovered a new compromise that we attribute to #FrostyNeighbor, using links in malicious PDFs sent via spearphishing attachments to target governmental organizations in Ukraine. @dmnsch https://t.co/2x75QnEMIe 1/5
#reversing
The Cost of Understanding:
LLM-Driven Reverse Engineering vs Iterative LLM Obfuscation
https://t.co/sGJRCcANUW
// Elastic Security Labs explores the ongoing arms race between LLM-driven reverse engineering and obfuscation..
Mapping Ottercookie Infrastructure
services.http.response.body_hashes="sha256:843ac01149cced785dfebd0028d3b03ba78e286e1c6f9517ebfcdb609d97af4c" and services.banner_hashes="sha256:31d55cb5dd194cd99387d386e84d8b24d340c0b52983ce630f0aafd70fee008c" and services.port="17500"
ref:
https://t.co/S3fGuDphDf
Falco Operator v0.2.0 is here.
The Falco Operator just added a new Components CRD.
Earlier, you had to manage Falco using the Operator and deploy Falcosidekick separately with Helm.
Two different approaches. More moving parts.
Now, one operator manages everything.
No need for separate Helm charts for Falcosidekick or the UI.
You define everything using Falco’s custom resources, and the operator handles the rest.
𝗥𝗲𝗹𝗲𝗮𝘀𝗲 𝗻𝗼𝘁𝗲𝘀: https://t.co/kx9GfvgC2M
If you are working on runtime security in Kubernetes, this is worth trying.
#Kubernetes #Falco #DevOps #Security
Abusing Cortex XDR Live Terminal as C2
We reverse-engineered the IR payload and found ways to route EDR traffic to attacker-controlled tenants or custom servers.
Living off the Land #LOTL with EDRs. Full write-up by @p0w1_ 👇https://t.co/GezxRCBcDn