Login Subscribe

7secure Coverage

Articles

Search and filter the broader reporting stream across incidents, AI security, policy, and operational coverage.

Threat Intelligence

Kimwolf Botmaster “Dort” Exposed: New Intel on DDoS & Mining Infrastructure

Krebs on Security has identified the individual behind the alias “Dort,” the chief architect of the Kimwolf botnet. Dort coordinated the deployment of malicious loaders that hijack IoT devices, Windows workstations, and cloud instances, turning them into a hybrid network capable of launching massive DDoS floods and running illicit cryptocurrency

Data Protection & Privacy

Windows Delete Leaves Traces: Secure Shredding Essential for GDPR Compliance

Windows Delete Leaves Traces: Secure Shredding Essential for GDPR Compliance

Malwarebytes recently demonstrated that the default “delete” action in Windows does not actually erase data; it merely removes the directory entry while leaving the underlying sectors intact. Forensic utilities can scan the free space and reconstruct the files, even after they appear to be gone. The study highlighted a dedicated

Threat Intelligence

Iranian Actors Hijack IP Cameras for Surveillance and Disinformation in Middle East Conflict

Iranian Actors Hijack IP Cameras for Surveillance and Disinformation in Middle East Conflict

Checkpoint researchers have identified a rapid increase in activity by Iranian-sponsored threat groups targeting internet‑connected security cameras across the Middle East. The actors are exploiting default credentials, outdated firmware, and unsecured cloud services to gain persistent access to the devices. Once compromised, the cameras are used to capture live

Malware & Ransomware

LummaStealer Returns with CastleLoader, Using New Evasion and Social‑Engineering Tricks

LummaStealer Returns with CastleLoader, Using New Evasion and Social‑Engineering Tricks

Bitdefender has observed a resurgence of the LummaStealer information‑stealer, now bundled with the CastleLoader droploader. The combined payload employs advanced evasion methods such as process hollowing, encrypted payloads, and runtime checks for sandbox environments. Attackers are also using social‑engineering lures that mimic routine user actions—like software updates

Compliance & Regulation

CrowdStrike Secures NCSC CIR Badge, Boosting IR Credibility

CrowdStrike Secures NCSC CIR Badge, Boosting IR Credibility

CrowdStrike has earned the United Kingdom’s National Cyber Security Centre (NCSC) Cyber Incident Response (CIR) certification, confirming that its incident response services meet the government’s stringent standards for detection, containment, and recovery. The certification process involved rigorous third‑party testing of the Falcon platform’s ability to identify

Vulnerabilities & Exploits

Zero-Day in GoAnywhere MFT Bypasses Firewalls, Gives Remote Code Execution

Zero-Day in GoAnywhere MFT Bypasses Firewalls, Gives Remote Code Execution

Researchers uncovered a critical zero‑day vulnerability in the GoAnywhere Managed File Transfer (MFT) license servlet. The flaw allowed unauthenticated attackers to inject and execute arbitrary code on the server, earning a perfect CVSS 10.0 rating. Exploits were observed in the wild, with threat actors leveraging the bug to

AI Security & Threats

Indirect Prompt Injection Hijacks LLM Agents via Malicious Web Content

Indirect Prompt Injection Hijacks LLM Agents via Malicious Web Content

Unit42 discovered that threat actors are embedding crafted prompts directly into publicly accessible web pages. When LLM‑driven automation tools—such as content scrapers, security bots, or ticketing assistants—fetch and process that content, the hidden prompts are interpreted as instructions, causing the AI agents to execute actions the defenders