3+ day, 14+ hour ago   (1226+ words) The vulnerability was fixed in Chrome 153.0.8010.36/.37 for Windows and macOS and 153.0.8010.36 for Linux as part of the September 8, 2026 Stable Channel release. Google confirmed that an exploit already exists in the wild but has not disclosed who is using it, which…...

3+ day, 19+ hour ago   (115+ words) SOC Prime Bias: Critical Rationale: This section details the precise execution of the adversary technique (TTP) designed to trigger the detection rule. The commands and narrative MUST directly reflect the TTPs identified and aim to generate the exact telemetry expected…...

3+ day, 19+ hour ago   (429+ words) Security teams seeking CVE-2026-44756 detection content can use the SOC Prime Platform to explore behavior-based detection rules and hunting queries mapped to MITRE ATT&CK®. Teams can also use Uncoder AI to convert threat intelligence into detection logic and hunting…...

1+ week, 4+ day ago   (343+ words) SOC Prime Bias: High A Windows host was infected with Guildma (Astaroth) malware through a malicious Brazilian Portuguese email containing a geofenced link. The attack delivers a ZIP archive with a Windows shortcut that downloads content into an alternate data…...

1+ week, 6+ day ago   (166+ words) SOC Prime Bias: High Organizations should disable macros in documents originating from the internet and enforce policies that block unsigned VBA macros. Security teams should monitor for scheduled task abuse and unusual Microsoft Edge execution, including headless mode. Inspecting outbound…...

2+ week, 4+ day ago   (323+ words) SOC Prime Bias: High A Business Email Compromise (BEC) campaign is using a sophisticated JScript dropper to distribute Agent Tesla v4 malware. The attack relies on Unicode emoji obfuscation to evade signature-based detection and uses DonutLoader to execute a reflective payload…...

3+ week, 2+ day ago   (169+ words) SOC Prime Bias: High Users should treat unexpected requests to execute terminal commands, bypass Gatekeeper, or install manual updates from document sidebars as suspicious. Organizations should monitor for unusual Google Apps Script activity and unauthorized use of code-signing certificates. Strong…...

3+ week, 3+ day ago   (166+ words) SOC Prime Bias: High Users should avoid copying and executing unverified commands in Terminal, even when instructions appear on legitimate or trusted domains. Security teams should monitor for suspicious curl activity and Base64-encoded content within shell processes. Tools such as…...

3+ week, 4+ day ago   (218+ words) SOC Prime Bias: High AhnLab Security Intelligence Center (ASEC) identified the campaign by examining the phishing email content and behavior of the attached PDF. The investigation traced the execution chain from the malicious VBScript to background payload retrieval and silent…...