Aggregator

Cavern Manticore: Exposing Iran-Linked Modular C2 Framework

Check Point Research
2 weeks 6 days ago

Key Points Introduction Since early 2026, Check Point Research (CPR) has tracked a new modular command-and-control framework used by Cavern Manticore, an Iran-nexus APT group primarily targeting Israeli organizations, with a focus on IT providers, and government sectors. Cavern Manticore is an Iran MOIS (Ministry of Intelligence and Security)-linked actor, with links to the OilRig […]

The post Cavern Manticore: Exposing Iran-Linked Modular C2 Framework appeared first on Check Point Research.

stcpresearch

6th July – Threat Intelligence Report

Check Point Research
2 weeks 6 days ago

For the latest discoveries in cyber research for the week of 6th July, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES River Bank & Trust, a US financial institution, has experienced a ransomware incident after an unauthorized actor accessed the network of parent company River Financial Corporation on June 16. The bank found […]

The post 6th July – Threat Intelligence Report appeared first on Check Point Research.

urias

How to Evaluate an AI SOC Platform in 2026: 6 Capabilities That Separate Leaders from Bolt-On AI solutions

The Hackers News
2 weeks 6 days ago
Building a shortlist for an AI SOC evaluation can be tough. SIEM, SOAR, and pureplay AI SOC vendors are all saying the same thing. But behind the identical label sit very different products, from chat assistants bolted onto a legacy SIEM to agent platforms that run detection, triage, investigation, and response on their own data foundation. Whether a platform will materially change outcomes for
The Hacker News

用 Go 语言编写的 TypeScript 7.0 发布 RC 版

Solidot
2 weeks 6 days ago
C# 和 TypeScript 等语言的创始人 Anders Hejlsberg 在 2025 年 3 月宣布他的团队正在开发用 Go 语言编写的 TypeScript 编译器。现在首个基于 Go 语言的 TypeScript 7.0 发布了 RC 版本。正式版本预计会在下个月发布。微软表示，得益于原生代码速度和共享内存并行处理能力，TypeScript 7.0 的速度通常比 TypeScript 6.0 快约 10 倍。不同于 TypeScript 6.0，TypeScript 7.0 的许多步骤（如解析、类型检查和发射）都可以并行执行。其中一些步骤（如解析和发射）在不同文件之间可以基本独立完成。并行处理在较大的代码库中能自动实现良好扩展，且开销相对较小。但微软也表示 TypeScript 构建中并非每个步骤都能轻松实现并行处理。

Suspected China-Nexus Hackers Use Fake Indian Tax Filing Utility to Deploy DcRAT

The Hackers News
2 weeks 6 days ago
A suspected China-nexus threat activity cluster has been observed targeting Indian taxpayers, tax professionals, and corporate finance teams to deliver a remote access trojan designed to steal sensitive data from compromised hosts. The multi-stage campaign, codenamed Operation DragonReturn by Seqrite Labs, involves sending spear-phishing emails impersonating the Income Tax Department of India.
The Hacker News

Managed ad