Cyber security News
Stay up to date with all of the latest cyber security news and threats from around the world. CybrFunk is happy to have a place to harbor all of the latest in cyber security news and threats from reliable sources. Be sure to stop by our home for more resources to help you stay one step ahead of the game.
Kiteworks recommends server shutdown pending possible attack
Categories: Threat ResearchTags: advisory, Kiteworks
Trust and the enticing consultancy offer
In this week’s newsletter Martin muses over a very suspicious elicitation over social media and the true value of trust within the cyber ecosystem. Hubris…
Malicious npm Packages That Evade Defenses
This is an impressive piece of malware. Its sophistication says nation-state to me, but there is no direct evidence and certainly no attribution.
Srsly Risky Biz: Bring On the AI Lawsuits
Your weekly dose of Seriously Risky Business news is written by Tom Uren and edited by Amberleigh Jack. This week's edition is sponsored by SpecterOps.You…
Risky Bulletin: Network of 10,000 AI servers masks Chinese malicious activity
In other news: Ukrainian hackers leak Russia's naval secrets; ShinyHunters hack the FBI; tech firms disrupt EvilTokens PhaaS.
UN Reports Citing Citizen Lab Submissions Published
Two UN reports that the Citizen Lab submitted recommendations to have been published this month.
Submission to the Immigration and Refugee Board of Canada
The Citizen Lab submitted a response to the Research Directorate at the Immigration and Refugee Board of Canada.
The Closed Quorum: Inside the first reported autonomous AI C2 implant
CLOSEDQUORUM, a malware binary discovered through Cisco Talos’ CAIRN project, exhibits fully autonomous command and control (C2). It represents a shift in effort displacement for…
Introducing CAIRN: Frontier tracking for AI-integrated malware
Talos is releasing CAIRN, a research toolkit for hunting, classifying, and tracking emerging AI-integrated malware.
From Exposure to Lockdown: How AWS Neutralizes Compromised IAM Credentials through Managed Policies
We explore how AWS neutralizes exposed IAM credentials using managed policies, detailing GitHub secret scanning and CloudTrail monitoring strategies.
Risky Bulletin: Gemini hacked three companies too
In other news: Hackers claim breach of Russia's election commission; OpenAI was behind the RubyGems May incident; Gyazo and Revolut got hacked.
BengalSEO Part 1: Anatomy of the Operation
Key Takeaways The DFIR Report Offerings Check out our Products here and our Services here. Want a demo, more information on our services, pricing or…
From Bing Search to Ransomware: Bumblebee and AdaptixC2 Deliver Akira
Key Takeaways This case was first reported to customers in a threat brief released in July 2025 and in a public flash alert in August…
Flash Alert: EtherRat and TukTuk C2 End in The Gentleman Ransomware
The EtherRAT malware family was first reported by Sysdig back in December 2025. At that time, the initial access vector was exploitation of CVE-2025-55182 (React2Shell)…
Bissa Scanner Exposed: AI-Assisted Mass Exploitation and Credential Harvesting
Key Takeaways We identified an exposed server that provided unusual visibility into a large-scale, multi-victim exploitation and collection operation. Artifacts on the host showed that…