Skip to content
Cybersecurity, without the noise
Today’s Articles
9 stories
Top Attack

Inside a malicious Claude Code-branded extension and its persistent SSH backdoor

TL;DR

In this article Attack chain overview Attack chain Host reconnaissance collection SSH authorization and tunnel identities Protocol Tunneling (T1572): reverse SSH forwarding Platform-specific startup persistence Mitigation and protection guidance Immediate actions Remediation actions Follow-up Investigation and recovery Microsoft Defender XDR detections Threat…

Top Attack

From help desk impersonation to AD CS abuse: Investigating ESC1 and ESC8 intrusion paths

TL;DR

In this article Activity overview Attack chain overview Portable runtime staging and execution variants Host discovery and AD CS assessment Case 1: ESC1 abuse and the cost of an identity exclusion Case 2: PetitPotam and ESC8 turn a workstation into a domain-controller…

Top Attack

Stable Channel Update for Desktop

TL;DR

The Stable and Extended Stable channel has been updated to 156.0.8078.79/.80 for Windows and Mac and 156.0.8078.79 to Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log. Security Fixes…

Top Cybersecurity News

Chrome for Android Update

TL;DR

Hi, everyone! We've just released Chrome 156 (156.0.8078.79) for Android. It'll become available on Google Play over the next few days. This release includes stability and performance improvements. You can see a full list of the changes in the Git log. If…

Top Attack

Tracking AI adoption in North Korean threat actor tradecraft

TL;DR

In this article Stages of AI adoption by North Korean threat actors AI use across North Korean threat operations AI-assisted targeting and reconnaissance AI-assisted social engineering and identity deception AI-assisted software and tooling development AI-assisted operational scaling and analysis Mitigation and protection…

Top Attack

IDC MarketScape names Microsoft a Leader in the 2026 Worldwide Modern Endpoint Security for Enterprises Vendor Assessment

TL;DR

Today, we’re proud to share thatMicrosoft has been named a Leader in the 2026 IDC MarketScape for Worldwide Modern Endpoint Security for Enterprises (Doc #US54123526, September 2026). The IDC Marketscape calls out three strengths that we believe matter most in endpoint security…

Top Cybersecurity News

Chrome Beta for Desktop Update

TL;DR

The Chrome team is excited to announce the promotion of Chrome 158 to the Beta channel for Windows, Mac and Linux. Chrome 158.0.8127.2 contains our usual under-the-hood performance and stability tweaks, but there are also some cool new features to explore -…

Top Cybersecurity News

Stable Channel Update for ChromeOS / ChromeOS Flex

TL;DR

M-156, ChromeOS version 16836.30.0 (Browser version 156.0.8078.77 has rolled out to ChromeOS devices on the Stable channel. If you find new issues, please let us know one of the following ways: File a bug Visit our ChromeOS communities General: Chromebook Help Community…

Top Attack

Early Stable Update for Desktop

TL;DR

The Stable channel has been updated to 157.0.8103.26/.27 for Windows , Mac will be coming shortly as part of our early stable release to a small percentage of users. A full list of changes in this build is available in the log.…

The top stories
that matter.
Every day.

Consumer-focused cybersecurity reporting that explains what happened, why it matters, and what to do next — without sensationalism or filler.

Today’s Briefing

October 31, 2026 · The cybersecurity stories that matter today.

No Daily Briefing has been published yet.

Check back soon for today’s cybersecurity coverage.

Sunday Edition · Weekly Recap

Weekly Recap — October 19–25, 2026

The Cybersecurity PSA Weekly Recap for October 19–25, 2026 highlights 12 of the week’s most consequential stories, with a concise TL;DR and direct link to each original story.

Top Attack · Inside a malicious Claude Code-branded extension and its persistent SSH backdoorRead original →
Top Attack · From help desk impersonation to AD CS abuse: Investigating ESC1 and ESC8 intrusion pathsRead original →
Top Attack · Stable Channel Update for DesktopRead original →