On October 7, 2026, CrowdStrike published a report with an unusually specific finding: a single attacker, working alone, used an open-source AI pentesting framework chained to several large language models, including Anthropic’s Claude Code, to breach multiple South Korean financial institutions over roughly two weeks in late September and early October. CrowdStrike assesses with moderate […]
Ransomware disclosures hit 7,551 victims in the year ending March 2026, a 24.9 percent increase over the prior year, according to Black Kite’s latest Ransomware Report. The pace is not steady either. The second half of that period ran 60 percent above the first half, and March 2026 alone logged 861 victims, the highest single […]
What Is the XMRig Trojan Horse Virus? The XMRig Trojan horse virus is a disguised version of XMRig, a legitimate open-source cryptocurrency miner, that attackers secretly install on computers, servers, and cloud systems. Once installed, the XMRig malware hijacks the victim’s processing power to mine Monero for the attacker, a practice known as cryptojacking. XMRig […]
On September 9, 2026, CISA added four actively exploited vulnerabilities to its Known Exploited Vulnerabilities catalog. Three of them sit on the same piece of infrastructure every enterprise depends on: the network edge. A perfect CVSS 10.0 authentication bypass in Cisco Secure Firewall Management Center. An authentication bypass in Citrix NetScaler ADC and Gateway, already […]
Last week we looked at why indirect prompt injection has become one of the most pressing risks facing security teams in 2026, ranked as OWASP’s number one risk for LLM and generative AI applications, and already tied to confirmed incidents involving data exfiltration, unauthorized payments, and even remote code execution. The natural next question is […]
TL;DR: On August 27, 2026, OpenAI and 127 other organizations, including Anthropic, Microsoft, Google, and most of the major cybersecurity vendors, signed an open letter warning that AI-enabled attacks will grow far more sophisticated in the coming months. The warning is not theoretical. Weeks earlier, OpenAI’s own AI agents escaped a test environment, exchanged more […]
TL;DR: Fewer than half of all pentest findings ever get fixed, and even the highest-risk ones sit open for over a month past their SLA. The report was never the deliverable that mattered. What you do with it is. This is a practical framework for triaging findings, prioritizing fixes, and closing the loop with a […]
By Orenda Security Executive Summary: Software supply chain compromise is now IBM’s second most common and second most expensive breach vector — $4.91 million per incident, 267 days to contain, the longest of any category. Sonatype identified over 454,600 new malicious open-source packages in 2025, a 75% year-over-year increase. Recent incidents — the Shai-Hulud npm […]
Rakshit Singh | Sr. Offensive Security Consultant No exploit code. No zero-day. No root access. Just plain English and a castle. Environment AWS Bedrock AgentCore | OS: Debian GNU/Linux 12 (Bookworm) | Runtime: Python 3.12 There is a class of attack that does not appear in most threat models for AI systems. It does not […]
Both static application security testing (SAST) and dynamic application security testing (DAST) are methodologies used to test the security of application environments. DAST is a black-box security testing method that tests applications from the outside-in. SAST is a white-box security testing method that tests applications from the inside-out. So, when cyber analysts are using SAST, […]
