Topics
Browse everything Tech Sentinel publishes by category and tag: every topic covered here, with the most recent guides listed under each one.
Tags
- #threat-intel 10
- #ai-security 3
- #cisa-kev 3
- #malware 3
- #patch-management 3
- #prompt-injection 3
- #supply-chain 3
- #vulnerability-management 3
- #agentic-ai 2
- #bulletproof-hosting 2
- #edge-devices 2
- #law-enforcement 2
- #netherlands 2
- #russia 2
- #vulnerability 2
- #ad-fraud 1
- #ai 1
- #ai-hacking 1
- #android-tv 1
- #anomaly-detection 1
- #apt 1
- #artificial-intelligence 1
- #banking 1
- #behavioral-analytics 1
- #botnet 1
- #burnout 1
- #chatgpt 1
- #cisco 1
- #ciso 1
- #clickfix 1
- #credential-theft 1
- #cve 1
- #cybersecurity-workforce 1
- #data-breach 1
- #ddos 1
- #deep-dive 1
- #drivers-licenses 1
- #emergency-directive 1
- #enterprise-security 1
- #epss 1
- #eu-sanctions 1
- #exposure-management 1
- #fbi 1
- #financial-sector 1
- #financial-security 1
- #fraud-detection 1
- #graph-neural-networks 1
- #hub 1
- #identity-theft 1
- #idscan-net 1
- #machine-learning 1
- #model-supply-chain 1
- #nvd 1
- #open-source 1
- #package-registry 1
- #patch-tuesday 1
- #powershell 1
- #ransomware 1
- #remediation 1
- #residential-proxy 1
- #roundup 1
- #rubygems 1
- #sanctions 1
- #sandworm 1
- #sd-wan 1
- #ukraine 1
- #veriscan 1
Categories
threat-intel 9 posts
- AI Hacking: Attack Paths, Real CVEs and Defensive ControlsAI hacking covers AI-assisted intrusions and attacks on models, agents and ML supply chains, mapping attack paths, a PyTorch RCE and defensive controls.
- Bulletproof Hosting: Why Takedowns Keep FailingSanctions and server seizures hit bulletproof hosting through 2025 and 2026, yet the infrastructure keeps returning. What actually degrades it.
- Hotel Wi-Fi Hijack Uses Fake Updates to Deliver SpywareMicrosoft attributes CaptiveCrunch to Storm-2945, a Midnight Blizzard sub-cluster using hotel captive portals to deploy malware and steal cloud tokens.
- H96 Android TV Boxes Ship With Ad-Fraud and Proxy MalwareBitsight traced 38,000 H96 Android TV boxes shipping with pre-installed malware that rents the owner's IP as a proxy and runs ad fraud when idle.
- UAC-0145 Uses ClickFix CAPTCHAs to Deploy Malware in UkraineUAC-0145 ran ClickFix CAPTCHA lures on 10 or more compromised sites in mid-2026, tricking Ukrainian targets into running PowerShell that stages malware.
- Netherlands Seizes 800 Servers Over Russian-Linked HostingDutch FIOD agents seized more than 800 servers and arrested two hosting co-owners over EU sanctions tied to the Stark Industries Solutions network.
vulnerability 3 posts
- CVE Tracking in 2026: Prioritize When NVD Stops ScoringNIST moved the NVD to a triage model in April 2026. Here is what CVE tracking and patch prioritization look like when most records never get scored.
- Cisco SD-WAN Flaw: CISA Emergency Directive 26-03CVE-2026-20182 is a maximum-severity authentication bypass in Cisco Catalyst SD-WAN, added to CISA's KEV catalog on May 14 amid active exploitation.
- Remediation Programs: Why Fix Validation MattersMandiant M-Trends 2026 puts mean time to exploit at negative seven days while Verizon's 2025 DBIR finds edge devices take 32 days to remediate.
industry 2 posts
- Standard Chartered's CISO on AI's Dual Role in Bank SecurityStandard Chartered group CISO Cezary Piekarski says AI now accelerates bank defenses and adversary tradecraft alike, and CISOs must speak business terms.
- Cybersecurity Burnout Is a Structural ProblemA Sophos survey found widespread cyber fatigue and burnout; rising CVE volumes, shorter exploitation windows, and understaffing strain security teams.