Security Archives - MASSIVE News

Teen arrested on suspicion of bomb hoax after Peter Kay show evacuated over ‘suspicious bag’

wiredgorilla — Sat, 02 May 2026 09:30:10 +0000

PETER Kay’s gig was evacuated mid-performance after the comedian was bundled off stage by security.

The show at the Utilita Arena Birmingham was abruptly cancelled after just 45 minutes on Friday night.

A 19-year-old man was arrested on suspicion of a bomb hoax and remains in custody.

Read more: https://www.thesun.co.uk/news/38993259/peter-kay-gig-evacuated-comedian-bundled-off-stage/

The Sun brings you breaking news and in-depth analysis on the stories that matter most. From the ongoing war in Ukraine to conflicts in the Middle East and US and UK politics, we post updates as they happen. Expect the latest on major global events, pressing political debates, celebrity updates and exclusive royal family content, along with in-depth investigations and expert commentary. Get comprehensive coverage of Donald Trump’s Presidency, Vladimir Putin’s actions, and the unfolding drama of the British Royal Family.

Subscribe now for daily updates and exclusive content from The Sun.
https://www.youtube.com/c/thesun?sub_confirmation=1

👑 For the latest Royal news, subscribe to The Sun’s Royal Exclusive YouTube Channel: https://www.youtube.com/@RoyalExclusiveTheSun

Read The Sun: https://bit.ly/3Tay1OY
Like The Sun on Facebook: https://www.facebook.com/thesun/
Follow The Sun on TikTok: https://www.tiktok.com/@thesun
Subscribe to The Sun on Snapchat: https://www.snapchat.com/discover/The_Sun/1633225139
#uk #bomb #peterkay

The post Teen arrested on suspicion of bomb hoax after Peter Kay show evacuated over ‘suspicious bag’ appeared first on MASSIVE News.

Defending Against CORDIAL SPIDER and SNARKY SPIDER with Falcon Shield

wiredgorilla — Sat, 02 May 2026 09:18:47 +0000

Since October 2025, CrowdStrike Counter Adversary Operations has observed a shift in intrusion tradecraft: Threat actors are executing high-speed, SaaS-centric attacks that bypass traditional endpoint visibility. CORDIAL SPIDER and SNARKY SPIDER exemplify this evolution as distinct adversaries conducting rapid data theft and extortion campaigns with striking operational similarities.

In most cases, these adversaries use voice phishing (vishing) to direct targeted users to malicious, SSO-themed adversary-in-the-middle (AiTM) pages, where they capture authentication data and pivot directly into SSO-integrated SaaS applications. By operating almost exclusively within trusted SaaS environments, they minimize their footprint while accelerating time to impact. The combination of speed, precision, and SaaS-only activity creates significant detection and visibility challenges for defenders.

This blog details how these adversaries operate and how CrowdStrike Falcon® Shield identifies and disrupts their attacks.

How AiTM Pages Enable Initial Access

During vishing calls, CORDIAL SPIDER and SNARKY SPIDER impersonate IT support and create urgency around account issues or security updates to direct employees to fraudulent AiTM pages. These domains closely mimic legitimate corporate login portals (e.g., sso[.]com, my[.]com, id[.]com, internal[.]com). When users enter their credentials, the adversaries capture authentication data and active session tokens in real time. Because the AiTM proxy relays authentication to the legitimate service, users often see a normal login experience and remain unaware of the compromise.

In most observed cases, these credentials grant access to the organization’s identity provider (IdP), providing a single point of entry into multiple SaaS applications. By abusing the trust relationship between the IdP and connected services, the adversaries bypass the need to compromise individual SaaS apps and instead move laterally across the victim’s entire SaaS ecosystem with a single authenticated session.

Falcon Shield is built to detect these anomalous sign-in attempts. While adversaries attempt to blend in with legitimate activity by aligning source location, device fingerprint, and working hours, Falcon Shield applies advanced anomaly detection to surface subtle deviations. By combining a deep understanding of authentication flows with visibility into network characteristics, anonymization services, and session-clustering methods, Falcon Shield reliably identifies malicious access attempts.

The post Defending Against CORDIAL SPIDER and SNARKY SPIDER with Falcon Shield appeared first on MASSIVE News.

The Future of AI-Powered Vulnerability Discovery

wiredgorilla — Sat, 02 May 2026 09:00:16 +0000

AI is reshaping the future of vulnerability research. Advanced AI models are capable of discovering vulnerabilities at machine speed, far faster than organizations can patch them. The consequences for defenders are enormous — and the opportunities for adversaries are vast.

In the latest episode of the Adversary Universe podcast, CrowdStrike’s Adam Meyers, SVP of Counter Adversary Operations, and Cristian Rodriguez, Field CTO of the Americas, unpack some of the most pressing questions facing security teams today: What does AI-powered vulnerability research mean for the future of security operations? How will adversaries use it to their advantage?

Threat actors are already using AI in their operations: The CrowdStrike 2026 Global Threat Report revealed an 89% year-over-year increase in attacks by adversaries using AI. FANCY BEAR, FAMOUS CHOLLIMA, and PUNK SPIDER are among the prolific threat actors weaponizing AI in their operations, using it to craft more convincing phishing lures, automate social engineering, and improve the speed of malicious content. While core tradecraft remains human-driven, AI acts as a force multiplier, helping adversaries increase efficiency. A tool in the eCrime space uses AI to conduct voice phishing attacks, which can now be executed agentically.

As AI continues to rapidly mature and adversaries explore its use, the hosts explain, the pressure is on organizations to defend against their evolving tradecraft. Vulnerability discovery, exploitation, and patching are at the front and center of their concerns. And CrowdStrike is at the forefront of defense, as a founding member of Project Glasswing and participant in OpenAI’s Trusted Access for Cyber program.

The Looming Vuln-pocalypse

The most urgent topic discussed is the “vuln-pocalypse,” a term used to describe the projected massive influx of newly discovered vulnerabilities driven by AI-accelerated research.

“I’ve been saying since November, we’re looking at three to nine months until a massive influx of zero-day vulnerabilities,” Adam says in this episode.

To explain why, he describes how vulnerabilities are traditionally found. One uses deep reverse engineering of the target to create an exploit. The other, more frequently used method of fuzzing involves putting random data into a program’s inputs until it crashes, then analyzing the results to see what is broken and potentially exploitable. AI can dramatically accelerate fuzzing by quickly triaging those results in far less time than a human could to find something useful.

More than 48,000 new CVEs were published in 2025.¹ If AI accelerates discovery by even 10x, Adam points out, defenders could be looking at nearly half a million vulnerabilities requiring attention in the coming years. “That’s going to mean significant trouble,” he notes.

Why? Adversaries are eyeing zero-days and weaponizing vulnerabilities at greater speed. In 2025, CrowdStrike Counter Adversary Operations observed a 42% year-over-year increase in the number of zero-days exploited prior to public disclosure, the 2026 Global Threat Report found. Chinese adversaries demonstrated they can consistently operationalize publicly disclosed exploits within days of the vulnerability’s release — in some cases, within two days.

Not an “End of the World” Situation

While organizations are rightfully concerned about the rise in vulnerabilities, Adam and Cristian shared some key defensive takeaways to help them approach it.

Patching Prioritization

There are two ways organizations typically prioritize patching. The first is prevalence, or how much of that vulnerability is in their environment. The second is severity, typically determined by CVSS score. This system breaks down when adversaries chain multiple vulnerabilities together. While they may appear low-priority in isolation, together they can open a door.

Organizations must be more thoughtful in what they’re patching, how they’re patching, and when. Adam’s guidance is to patch based on what is actively being exploited in the wild; he references CISA’s Known Exploited Vulnerabilities catalog, which shares the vulnerabilities CISA is aware of being exploited on a weekly basis. Security teams don’t have to patch every vulnerability — they have to patch the vulnerabilities that present the greatest threat.

Zero Days Are Just the Beginning

Zero-days are alarming, but they’re not the catastrophe many assume they are. Even if an adversary uses a zero-day to gain access, Adam explains, they still need to do something with their access — move laterally, escalate privileges, identify targets, exfiltrate data. All of this post-exploitation activity is observable. If the adversary can be caught, they can be stopped.

These observations contribute to CrowdStrike’s “community immunity,” Cristian says. “Every time an adversary burns through some new type of tradecraft, we’re crowdsourcing that telemetry.” All of this high-fidelity telemetry can then be used to identify that behavior in the future.

AI in the Defender’s Toolbox

Below are some of the ways defenders can incorporate AI into their security posture:

Agentic red teaming: Continuous red-team exercises can surface vulnerabilities in the environment before adversaries find them.
AI vulnerability scanning: Use AI to proactively identify vulnerabilities in the development pipeline.

Organizations are also advised to stay current on agentic AI news to understand this constantly evolving space and prepare their environments.

Check out the full Adversary Universe podcast episode below or tune in on Spotify and Apple Podcasts.

[embedded content]

Additional Resources

¹ 2026 VulnCheck Exploit Intelligence Report

The post The Future of AI-Powered Vulnerability Discovery appeared first on MASSIVE News.