Login Subscribe

7secure Coverage

Articles

Search and filter the broader reporting stream across incidents, AI security, policy, and operational coverage.

Threat Intelligence

Iranian Groups Weaponize IP Cameras for Real‑Time Battlefield Intel

Iranian Groups Weaponize IP Cameras for Real‑Time Battlefield Intel

Check Point researchers have uncovered a coordinated campaign by Iranian‑affiliated threat actors that targets internet‑connected IP cameras across the region. The groups systematically scan for devices with default usernames and passwords, then exploit unpatched firmware to gain persistent access. Once compromised, the cameras are used to stream live

SOC & Automation

Falcon SIEM Adds Built‑In Log Collection, Cutting Shippers and Boosting Hunt Speed

Falcon SIEM Adds Built‑In Log Collection, Cutting Shippers and Boosting Hunt Speed

CrowdStrike has integrated sensor‑native log collection into its Falcon Next‑Gen SIEM, allowing endpoint telemetry to flow directly from the Falcon sensor into the SIEM platform. This eliminates the need for separate log shippers, agents, or forwarders that traditionally bridge endpoints to a logging backend. Early adopters report deployment

AI Security & Threats

AI‑Powered Attack Playbook: How Threat Actors Weaponize Polymorphic Code

AI‑Powered Attack Playbook: How Threat Actors Weaponize Polymorphic Code

Microsoft’s security blog details a new tradecraft where adversaries harness generative AI to create constantly changing (polymorphic) payloads, automate vulnerability discovery, and dynamically reshape command‑and‑control (C2) channels. By feeding AI models with existing malware samples and exploit code, attackers can produce fresh variants at scale, reduce manual

AI Security & Threats

AI‑Powered Agents Automate Attack Ops for State‑Sponsored Hackers

AI‑Powered Agents Automate Attack Ops for State‑Sponsored Hackers

A recent investigation by The Register shows that sophisticated AI agents are now being deployed by state‑sponsored threat groups, including North Korean units, to handle routine but labor‑intensive tasks such as network scanning, credential‑spraying campaigns, and the generation of convincing phishing materials. By offloading these repetitive functions

Malware & Ransomware

LummaStealer Teams Up with CastleLoader, Expanding Credential Theft Ops

LummaStealer Teams Up with CastleLoader, Expanding Credential Theft Ops

Bitdefender’s latest research shows the dormant LummaStealer infostealer has resurfaced, now bundled with the CastleLoader droploader. The combined malware chain uses sophisticated social‑engineering lures—phishing emails, malicious documents, and compromised websites—to trick users into executing a seemingly benign installer. Once run, CastleLoader drops LummaStealer via a legitimate‑

Vulnerabilities & Exploits

GoAnywhere MFT Zero‑Day Bypasses Firewalls, Triggers Massive Data Breach

GoAnywhere MFT Zero‑Day Bypasses Firewalls, Triggers Massive Data Breach

VMware researchers uncovered a critical zero‑day in the GoAnywhere Managed File Transfer (MFT) platform that was actively weaponized by the Storm‑1175 threat group. The flaw, assigned a CVE with a 10.0 CVSS rating, allowed remote code execution without authentication and evaded detection by traditional perimeter firewalls. Because

AI Security & Threats

OpenAI Codex Scans 1.2M Commits, Flags Over 10K Critical Vulnerabilities

OpenAI Codex Scans 1.2M Commits, Flags Over 10K Critical Vulnerabilities

OpenAI’s new Codex Security assistant processed more than 1.2 million code commits across diverse projects, automatically surfacing 10,561 high‑severity flaws. By ingesting full project context, the AI model identifies complex bugs that static analysis often misses, and it generates concrete remediation patches while aiming to keep

Threat Intelligence

GreyNoise Feeds Real‑Time Threat Context Directly into CrowdStrike Falcon

GreyNoise Feeds Real‑Time Threat Context Directly into CrowdStrike Falcon

GreyNoise has integrated its threat‑intelligence feed into the CrowdStrike Falcon platform, delivering configurable, real‑time blocklists that automatically suppress alerts generated by low‑severity mass scanners. The integration also enriches Falcon incidents with up‑to‑date malicious‑IP reputation data and provides early warnings on emerging CVE exploitation, giving