AboutDFIR.com – The Definitive Compendium Project
Digital Forensics & Incident Response

Submit Resources

Submit Feedback/Resource/Research Idea
Use this singular form for all Research Ideas, Resource submissions, and Site Feedback. We welcome any and all submissions to help make the site more useful to the DFIR community.
Read More
Submit DFIR/CyberSec/InfoSec Job Posting
Are you an employer looking for a qualified candidate to apply to your job posting? Use this form to have your job posted on AboutDFIR.com
Read More

Blog

InfoSec News Nuggets 02/23/2026
Ransomware Attack Forces Mississippi's Largest Health System to Shut Down Statewide Clinics The University of Mississippi Medical Center (UMMC), the state's only academic medical center, was hit by a...
InfoSec News Nuggets 02/20/2026
Critical Flaws Found in Four VS Code Extensions with Over 125 Million Installs Researchers disclosed multiple serious vulnerabilities in four widely used Microsoft Visual Studio Code extensions that ...
InfoSec News Nuggets 02/19/2026
From BRICKSTORM to GRIMBOLT: UNC6201 Exploiting a Dell RecoverPoint for Virtual Machines Zero-Day Google’s threat intel team says a suspected PRC-nexus cluster (UNC6201) has been exploiting a Dell Re...
InfoSec News Nuggets 02/18/2026
Stable Channel Update for Desktop Google shipped an emergency Chrome stable update to 145.0.7632.75/76 (Windows and Mac) and 144.0.7559.75 (Linux). The release fixes CVE-2026-2441, a high-severity us...
Reducing the number of super admins in Google Workspaces
Apple fixes dangerous zero-day flaw affecting macOS, iOS and more, update now to avoid 'extremely sophisticated attack' Apple pushed updates across iOS, iPadOS, macOS, tvOS, watchOS, and visionOS to ...
InfoSec News Nuggets 02/16/2026
Google patches first Chrome zero-day exploited in attacks this year Google released emergency updates for Chrome to fix CVE-2026-2441, which it says is being exploited in the wild. The issue is a use...
InfoSec News Nuggets 02/13/2026
CISA Warns of Exploited SolarWinds, Notepad++, Microsoft Vulnerabilities CISA flagged multiple vulnerabilities as actively exploited, spanning SolarWinds Web Help Desk, Notepad++ update integrity iss...
InfoSec News Nuggets 02/12/2026
Google says hackers are abusing Gemini AI for all attacks stages Google reports multiple state backed groups are using Gemini to support end to end operations, including recon, payload development, a...
InfoSec News Nuggets 02/11/2026
SSHStalker Botnet Uses IRC C2 to Control Linux Systems via Legacy Kernel Exploits Researchers have disclosed a new Linux botnet dubbed SSHStalker that leverages the old Internet Relay Chat (IRC) prot...
InfoSec News Nuggets 02/10/2026
Winter Olympics hit by suspected 'Russian origin' cyberattack - as one of Europe's largest universities also reports major cybersecurity incident Italy said it blocked a wave of cyberattacks describe...
InfoSec News Nuggets 02/09/2026
Please Don’t Feed the Scattered Lapsus ShinyHunters This piece profiles an extortion crew (“SLSH”) that pairs data theft with direct, personal harassment of executives and their families, including t...
InfoSec News Nuggets 02/06/2026
Data breach at govtech giant Conduent balloons, affecting millions more Americans A previously disclosed ransomware incident involving Conduent is now believed to impact far more people than initiall...