AboutDFIR.com – The Definitive Compendium Project
Digital Forensics & Incident Response

Submit Resources

Submit Feedback/Resource/Research Idea
Use this singular form for all Research Ideas, Resource submissions, and Site Feedback. We welcome any and all submissions to help make the site more useful to the DFIR community.
Read More
Submit DFIR/CyberSec/InfoSec Job Posting
Are you an employer looking for a qualified candidate to apply to your job posting? Use this form to have your job posted on AboutDFIR.com
Read More

Blog

InfoSec News Nuggets 04/17/2026
OpenAI Launches GPT-5.4-Cyber with Expanded Access for Security Teams OpenAI unveiled GPT-5.4-Cyber this week, a variant of its flagship GPT-5.4 model specifically optimized for defensive cybersecuri...
InfoSec News Nuggets 04/16/2026
Claude Code, Gemini CLI, GitHub Copilot agents vulnerable to prompt injection via comments Researchers disclosed a new “Comment and Control” attack technique that abuses comments in code repositories...
InfoSec News Nuggets 04/15/2026
Microsoft April 2026 Patch Tuesday Fixes 167 Flaws, 2 Zero-Days Today is Patch Tuesday and it's a big one — Microsoft shipped security updates addressing 167 vulnerabilities, including two zero-days ...
InfoSec News Nuggets 04/14/2026
1. North Korea's APT37 Uses Facebook Social Engineering to Deliver RokRAT Malware https://thehackernews.com/2026/04/north-koreas-apt37-uses-facebook-social.html The North Korean hacking group tracked...
InfoSec News Nuggets 04/13/2026
  Backdoored Smart Slider 3 Pro Update Distributed via Compromised Nextend Servers   Unknown threat actors gained unauthorized access to Nextend's update infrastructure for the Smart Slider 3 P...
InfoSec News Nuggets 04/10/2026
US launches cyber threat sharing channel for digital asset firms  The US Treasury has introduced a new threat intelligence sharing program aimed at digital asset companies, giving them access to the ...
InfoSec News Nuggets 04/09/2026
Hackers exploiting Acrobat Reader zero-day flaw since December  Attackers have been using a previously unpatched Adobe Reader flaw in malicious PDFs since at least December, according to researcher H...
InfoSec News Nuggets 04/08/2026
Authorities disrupt router DNS hijacks used to steal Microsoft 365 logins An international operation disrupted FrostArmada, a campaign linked to Russia’s APT28 that compromised SOHO routers, changed ...
InfoSec News Nuggets 04/07/2026
Microsoft links Medusa ransomware affiliate to zero-day attacks Microsoft says the China-based group it tracks as Storm-1175 is moving unusually fast in Medusa ransomware intrusions, sometimes weapon...
InfoSec News Nuggets 04/06/2026
CISA gives agencies two weeks to patch video conferencing bug exploited by Chinese hackers CISA has ordered federal agencies to patch CVE-2026-3502 in TrueConf by April 16 after confirming active exp...
InfoSec News Nuggets 04/03/2026
ShinyHunters claim theft of over 3 million Cisco records, threaten public leak The ShinyHunters group is claiming it exfiltrated more than 3 million records tied to Cisco, allegedly obtained through ...
InfoSec News Nuggets 04/02/2026
Hasbro takes some systems offline after cybersecurity incident Hasbro disclosed that it detected unauthorized access on March 28 and responded by taking some systems offline, with the disruption affe...