Cybersecurity firm FireEye has revealed that it was recently attacked by “a highly sophisticated threat actor”. CEO Kevin Mandia said in a blog post that the attacker’s discipline, operational ...

The developers behind a popular AV/EDR evasion tool have confirmed it is being used by malicious actors in the wild, while slamming a security vendor for failing to responsibly disclose the threat.

The MacroPack framework, initially designed for Red Team exercises, is being abused by threat actors to deploy malicious payloads, including Havoc, Brute Ratel, and PhatomCore. Security researchers at ...

EDRSilencer, a tool frequently used in red-team operations, is being co-opted by the dark side in malicious attempts to identify security tools and mute security alerts. As an open source endpoint ...

Attackers are abusing a commercial evasion framework for red teamers as a delivery system for post-exploit payloads in a number of financially motivated infostealer campaigns. Researchers from Elastic ...

Microsoft released RAMPART and Clarity as open-source projects intended to help developers test AI agents earlier in the software lifecycle and turn red-team findings into repeatable engineering ...

The Chinese state-sponsored hacking group APT41 was found abusing the GC2 (Google Command and Control) red teaming tool in data theft attacks against a Taiwanese media and an Italian job search ...

Rampart turns red-team findings into repeatable tests; Clarity documents and validates agent design assumptions before code ...