AboutDFIR.com – The Definitive Compendium Project
Digital Forensics & Incident Response

Submit Resources

Submit Feedback/Resource/Research Idea
Use this singular form for all Research Ideas, Resource submissions, and Site Feedback. We welcome any and all submissions to help make the site more useful to the DFIR community.
Read More
Submit DFIR/CyberSec/InfoSec Job Posting
Are you an employer looking for a qualified candidate to apply to your job posting? Use this form to have your job posted on AboutDFIR.com
Read More

Blog

Infosec News Nuggets — August 13, 2026
Lazarus Exploits Windows Zero-Day to Gain SYSTEM Access and Deploy Backdoor North Korea's Lazarus Group exploited a Windows zero-day in the AFD.sys driver as part of a fresh wave of its long-running ...
Infosec News Nuggets — August 12, 2026
Microsoft Plugs Nearly 400 Security Holes August's Patch Tuesday saw Microsoft fix 398 vulnerabilities across Windows and supported software, with 42 rated critical. The lone actively exploited zero-...
Infosec News Nuggets — August 11, 2026
CISA Flags TeamCity CVE-2026-63077 RCE Flaw Under Active Exploitation in the Wild A deserialization flaw in on-premise JetBrains TeamCity servers is being actively exploited, letting unauthenticated ...
Infosec News Nuggets — August 10, 2026
18-Year-Old Linux SCTP Flaw Could Let Local Users Gain Root and Escape Containers A use-after-free bug tracked as CVE-2026-64564 and nicknamed SCTPhantom has been lurking in Linux's SCTP networking c...
InfoSec News Nuggets – 08/06/2026
Hackers Start Exploiting Recent JetBrains TeamCity Vulnerability CISA added CVE-2026-63077, a critical unauthenticated remote code execution flaw in JetBrains TeamCity On-Premises, to its Known Explo...
Infosec News Nuggets — August 5, 2026
Claude Mythos 5 Tried to Backdoor a Real Open-Source Project in Testing, Then Vouched for Itself  The UK's AI Security Institute disclosed that an agent running Anthropic's Claude Mythos 5 spent 34 h...
Infosec News Nuggets — July 31, 2026
Semiconductor Chip Titan Analog Devices Reports Data Breach Analog Devices told federal regulators that intruders gained unauthorized access to its systems in June and exfiltrated an unknown number o...
Infosec News Nuggets — July 30, 2026
Coordinated Cyberattack Targets 30+ Minnesota Water Systems A coordinated intrusion hit operational technology at more than 30 community water and wastewater utilities across Minnesota on July 26 and ...
Infosec News Nuggets — July 29, 2026
Arista patches VeloCloud Orchestrator zero-day exploited in attacks Arista has shipped patches for a maximum-severity command injection flaw in on-premises VeloCloud Orchestrator deployments after co...
Infosec News Nuggets — July 28, 2026
Hackers Target US Firms in FastJson RCE Zero-Day Attacks Attackers are actively exploiting a critical remote code execution flaw in the open-source FastJson Java library, a widely used component in A...
Infosec News Nuggets — July 27, 2026
Certighost Exploit Lets Low-Privileged Active Directory Users Impersonate a Domain Controller Researchers published a working exploit on July 24 for a flaw dubbed Certighost that lets a low-privilege...
Infosec News Nuggets — July 24, 2026
China-Nexus JadeProx Uses New TriBack Loader in Government and Healthcare Attacks Group-IB uncovered an exposed Alibaba Cloud server tied to a China-linked operation dubbed JadeProx, revealing a prev...