Login Subscribe

7secure Coverage

Articles

Search and filter the broader reporting stream across incidents, AI security, policy, and operational coverage.

Malware & Ransomware

Advanced Flow Reinforces Android Sideloader Defense with Real‑Time Signature Checks

Advanced Flow Reinforces Android Sideloader Defense with Real‑Time Signature Checks

Malwarebytes introduced Advanced Flow, a runtime security module that continuously validates the cryptographic signatures of Android packages both at install time and each launch. When a signature mismatch or an unsigned payload is detected, the engine blocks the code from executing, operating in concert with Google Play Protect, Android’s

Threat Intelligence

OWASP Sunsets Meetup, Shifts to Unified Vulnerability Intelligence Platform

OWASP announced it will retire its long‑running Meetup platform, reallocating the team’s effort toward building a comprehensive vulnerability intelligence ecosystem. The move includes the upcoming launch of the OWASP AI Exchange, a hub for sharing AI‑generated security insights, and a unified framework designed to standardize global vulnerability

Vulnerabilities & Exploits

Backdoored Trivy Scanner Fuels Supply‑Chain Worm in CI/CD Pipelines

Backdoored Trivy Scanner Fuels Supply‑Chain Worm in CI/CD Pipelines

The open‑source Trivy vulnerability scanner was compromised and a covert backdoor was added to its official binary releases and the accompanying GitHub Actions workflow files. Attackers leveraged the trusted distribution channel to inject malicious payloads that automatically executed when developers pulled the scanner or used the pre‑built CI

SOC & Automation

GreyNoise & Google SecOps Deliver Real‑Time Auto‑Blocking for Threat Traffic

GreyNoise & Google SecOps Deliver Real‑Time Auto‑Blocking for Threat Traffic

GreyNoise has launched a deep integration with Google SecOps, providing defenders with continuously refreshed, fully configurable blocklists that can be pushed automatically to firewalls, proxies, and cloud‑native security controls. The feed surfaces malicious IPs identified by GreyNoise’s global sensor network and translates them into actionable deny rules the

Identity & Access Management

AI Voice Deep‑Fake and SIM‑Swap Breach Tricks CEO into Giving Up Apple ID

A threat group created a convincing AI‑generated audio clip that mimicked the voice of a senior executive. Using the deep‑fake call, they instructed the company’s CEO to log into his Apple ID on a malicious link while simultaneously executing a SIM‑swap on the CEO’s mobile

Threat Intelligence

SSH/Telnet Scan Surge Signals Early Ransomware Reconnaissance

The Internet Storm Center’s Stormcast episode for March 23 reported a sharp uptick in unsolicited SSH and Telnet scans. Automated bots are probing the Internet for devices with weak or default credentials, a tactic that often precedes the initial foothold in ransomware infection chains. The scans are distributed globally,

AI Security & Threats

AI-Generated Malware Automates Infections: Reverse Shells, Semantic Worms, Adaptive Rootkits

AI-Generated Malware Automates Infections: Reverse Shells, Semantic Worms, Adaptive Rootkits

VirusTotal’s research blog released Part II of its series on automated attack pipelines, revealing that threat actors are now leveraging generative AI to craft sophisticated payloads. The report demonstrates AI‑produced reverse shells that can be customized on‑the‑fly, “semantic worms” that understand and manipulate application logic, and