AboutDFIR.com – The Definitive Compendium Project
Digital Forensics & Incident Response

Submit Resources

Submit Feedback/Resource/Research Idea
Use this singular form for all Research Ideas, Resource submissions, and Site Feedback. We welcome any and all submissions to help make the site more useful to the DFIR community.
Read More
Submit DFIR/CyberSec/InfoSec Job Posting
Are you an employer looking for a qualified candidate to apply to your job posting? Use this form to have your job posted on AboutDFIR.com
Read More

Blog

Infosec News Nuggets — June 8, 2026
New HTTP/2 Bomb Vulnerability Allows Remote DoS on NGINX, Apache, IIS, Envoy & Cloudflare — Security researchers at Calif have disclosed a novel denial-of-service technique, dubbed the HTTP/2 Bomb...
Infosec News Nuggets — June 5, 2026
Hackers Spied on a Stock Exchange Executive's Outlook Mailbox for Five Months Unknown attackers spent at least five months quietly inside the Outlook mailbox of a senior executive at a major global s...
Infosec News Nuggets — June 4, 2026
The Worst Hacks and Breaches of 2026 (So Far) Halfway through what's shaping up to be a brutal year for cybersecurity, a comprehensive roundup catalogs the most damaging digital incidents of 2026, in...
Infosec News Nuggets — June 2, 2026
OpenAI Codex Authentication Tokens Stolen in codexui-android npm Supply Chain Attack A malicious supply chain campaign has been stealing OpenAI Codex authentication tokens through a popular npm packa...
InfoSec News Nuggets — June 1, 2026
Signal Phishing Campaign Targets Journalists and Activists to Steal Backup Recovery Keys A targeted phishing campaign is sending text messages that impersonate Signal Support, urgently requesting use...
InfoSec News Nuggets – 05/29/2026
Carnival Cruise Confirms Data Breach Affecting Nearly 6 Million People Carnival Corporation, the world's largest cruise line operator, began notifying nearly 6 million customers this week that their ...
InfoSec News Nuggets – 05/28/2026
FBI Warns Silent Ransom Group Is Walking Into Law Firm Offices to Steal Data The FBI issued a fresh flash alert warning that Silent Ransom Group — also known as Luna Moth, Chatty Spider, and UNC3753 ...
InfoSec News Nuggets 05/27/2026
AI Chatbot Recommendations Redirect Users to Cryptojacking Malware Sites Microsoft warned that attackers are adapting SEO poisoning techniques for AI-generated software recommendations, pushing users...
InfoSec News Nuggets 05/26/2026
Iranian Hackers Deploy MiniFast and MiniJunk V2 via Phishing and SEO Poisoning Researchers tied a fresh Nimbus Manticore campaign to phishing and SEO poisoning targeting aviation, software, telecom, ...
InfoSec News Nuggets 05/22/2026
TrendAI Patches Apex One Zero-Day Exploited in the Wild TrendAI patched CVE-2026-34926, a directory traversal flaw in the on-premises version of Apex One that has been exploited in the wild, with suc...
InfoSec News Nuggets 05/21/2026
Highly Critical Drupal Core Flaw Exposes PostgreSQL Sites to RCE Attacks Drupal released security updates for CVE-2026-9082, a highly critical flaw affecting sites that use PostgreSQL databases, whic...
InfoSec News Nuggets 05/20/2026
GitHub Investigates Internal Repositories Breach Claimed by TeamPCP GitHub confirmed that roughly 3,800 internal repositories were accessed after an employee installed a malicious VS Code extension, ...