AboutDFIR.com – The Definitive Compendium Project
Digital Forensics & Incident Response

Submit Resources

Submit Feedback/Resource/Research Idea
Use this singular form for all Research Ideas, Resource submissions, and Site Feedback. We welcome any and all submissions to help make the site more useful to the DFIR community.
Read More
Submit DFIR/CyberSec/InfoSec Job Posting
Are you an employer looking for a qualified candidate to apply to your job posting? Use this form to have your job posted on AboutDFIR.com
Read More

Blog

InfoSec News Nuggets 03/12/2026
UNC6426 Exploits nx npm Supply-Chain Attack to Gain AWS Admin Access in 72 Hours Google's Cloud Threat Horizons Report for H1 2026 details how a threat actor tracked as UNC6426 weaponized credentials...
InfoSec News Nuggets 03/11/2026
Five Malicious Rust Crates and AI Bot Exploit CI/CD Pipelines to Steal Developer Secrets Researchers at Socket have uncovered five malicious Rust packages published to crates.io — chrono_anchor, dnp3...
InfoSec News Nuggets 03/10/2026
APT28 Uses BEARDSHELL and COVENANT Malware to Spy on Ukrainian Military ESET researchers have published a deep-dive on Russia's APT28 (Fancy Bear/Sednit), revealing that the GRU-linked group has been...
InfoSec News Nuggets 03/09/2026
Web Server Exploits and Mimikatz Used in Attacks Targeting Asian Critical Infrastructure Palo Alto Networks Unit 42 has published a detailed investigation into a previously undocumented Chinese threa...
InfoSec News Nuggets 03/06/2026
Phobos Ransomware Leader Facing 20 Years in Prison After Pleading Guilty to Hacking Charges Evgenii Ptitsyn, the 43-year-old Russian national identified as the key developer and administrator behind ...
InfoSec News Nuggets 03/05/2026
Iranian Drone Strikes Hit Amazon Data Centers in Gulf, Disrupting Cloud Services Iranian drone strikes directly hit two Amazon Web Services data centers in the UAE this week and caused damage to a th...
InfoSec News Nuggets 03/04/2026
Iranian Drone Strikes Hit Amazon Data Centers in Gulf, Disrupting Cloud Services Iranian drone strikes directly hit two Amazon Web Services data centers in the UAE this week and caused damage to a ...
InfoSec News Nuggets 03/03/2026
CISA Replaces Acting Director After a Bumbling Year on the Job The Trump administration has ousted Madhu Gottumukkala as acting director of the Cybersecurity and Infrastructure Security Agency, repla...
InfoSec News Nuggets 03/02/2026
South Korea's National Tax Service Accidentally Exposes Crypto Wallet Seed Phrase, $4.8M Stolen Twice South Korea's National Tax Service inadvertently published an unredacted photo of a seized Ledger...
InfoSec News Nuggets 02/27/2026
Cisco SD-WAN Zero-Day CVE-2026-20127 Has Been Actively Exploited Since 2023 — CISA Patch Deadline Is Today Cisco disclosed a maximum-severity (CVSS 10.0) authentication bypass flaw in its Catalyst SD...
InfoSec News Nuggets 02/26/2026
L3Harris Exec Sentenced to 7 Years for Selling Eight Zero-Days to Russian Broker Operation Zero  Peter Williams, 39, the former general manager of Trenchant — a specialized L3Harris division that dev...
InfoSec News Nuggets 02/24/2026
AI-Augmented Threat Actor Compromises 600+ FortiGate Devices Across 55 Countries  Amazon Threat Intelligence published findings detailing a Russian-speaking, financially motivated threat actor that u...