AboutDFIR.com – The Definitive Compendium Project
Digital Forensics & Incident Response

Submit Resources

Submit Feedback/Resource/Research Idea
Use this singular form for all Research Ideas, Resource submissions, and Site Feedback. We welcome any and all submissions to help make the site more useful to the DFIR community.
Read More
Submit DFIR/CyberSec/InfoSec Job Posting
Are you an employer looking for a qualified candidate to apply to your job posting? Use this form to have your job posted on AboutDFIR.com
Read More

Blog

InfoSec News Nuggets – 10/30/2026
Binance links $6.3 billion security incident to compromised laptop Binance says a compromised DevOps engineer's laptop may have let an attacker reach a service container and submit unauthorized withd...
InfoSec News Nuggets – 10/29/2026
FBI Seizes Virtualine Domain Over Alleged Criminal Hosting and Bitcoin Money Laundering The U.S. Department of Justice announced the seizure of virtualine[.]net, the domain of a bulletproof hosting p...
InfoSec News Nuggets – 10/28/2026
CISA warns of hackers now exploiting critical Node2Shell flaw CISA has confirmed that attackers are now actively exploiting CVE-2026-111497, a critical out-of-bounds write flaw in Google's Brotli dec...
InfoSec News Nuggets – 10/27/2026
Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software A memory-corruption bug in Google's Brotli decoder, tracked as CVE-2026-111497 and rated 9.2 on CVSS 4.0...
InfoSec News Nuggets – 10/26/2026
Gheist Uses Stolen GitHub Tokens to Steal Private Repository Secrets via Actions Logs An automated campaign that Wiz has tracked since September 15 and named Gheist is using stolen GitHub tokens to p...
InfoSec News Nuggets – 10/23/2026
The internet is having a very bad cybersecurity day Security teams faced a pile-up of serious problems this week as AI-discovered critical vulnerabilities in PHP knocked government websites offline a...
InfoSec News Nuggets – 10/22/2026
PHP2Shell: Two Unpatched Critical PHP RCE Flaws (CVSS 9.2) Trigger Emergency Security Alert PHP pushed out an out-of-cycle security release on October 21 for two critical remote code execution vulner...
InfoSec News Nuggets – 10/21/2026
PHP2Shell: Mass Exploitation Looms for Leaked Critical PHP Flaws Details of two critical PHP vulnerabilities, dubbed PHP2Shell and tracked as CVE-2026-109618 and CVE-2026-109619, leaked online ahead ...
InfoSec News Nuggets – 10/20/2026
ConnectWise suspends Cloud Backup service as hacker targets Microsoft 365 users ConnectWise has suspended its Cloud Backup service, formerly SkyKick, along with connected SaaS Security and Cloud Mana...
InfoSec News Nuggets – 10/19/2026
Stolen ConnectWise 'SkyKick' credential exposed Microsoft 365 tenants ConnectWise has switched off its Cloud Backup service (formerly SkyKick) worldwide after attackers stole an application credentia...
InfoSec News Nuggets – 10/16/2026
Citizen Lab Traces Zero-Click Candiru Spyware Infections at Al Jazeera to Targeted Online Ads Researchers at the University of Toronto's Citizen Lab say Israeli mercenary spyware vendor Candiru infec...
InfoSec News Nuggets – 10/15/2026
Cisco Warns of Active Attacks Exploiting New Critical Secure Email Gateway Vulnerability Attackers are actively exploiting CVE-2026-76519 (CVSS 9.8), a critical flaw in Cisco Secure Email Gateway tha...