Bring Your Own Vulnerable Driver (BYOVD) has gone from a niche tactic to a standard part of the ransomware playbook and Windows' own kernel hardening does little to stop it.
From outsourced labor to tiered pricing models, an inside look at how today's top ransomware threats operate less like rogue hackers and more like Fortune 500 companies. The post How ransomware...
CISA’s BOD 26-04 changes how federal agencies patch and how security leaders must measure, justify, and communicate cyber risk to executives and boards.Key takeawaysBOD 26-04 requires agencies to...
Allows ISVs to put their names on the door so desirable bots always get in
Open API leaked everything an attacker needs to impersonate bank officials
If you want a picture of the future of LLM security, imagine Whac-a-Mole meets Groundhog Day
A data breach involving LastPass was reported in June 2026. See incident details, impact on customers, and recommended security measures.
A security incident involving Bajaj Auto was reported in June 2026. See incident details, impact on customers, and recommended security measures.
A data breach involving Hunter Associates was reported in June 2026. See incident details, impact on customers, and recommended security measures.
A data breach involving KENTUCKY MOUNTAIN HEALTH ALLIANCE was reported in June 2026. See incident details, impact on customers, and recommended security measures.
A data breach involving Wright-Ryan Construction was reported in June 2026. See incident details, impact on customers, and recommended security measures.
Microsoft has found a malicious Chrome extension that posed as the AI search engine Perplexity and quietly logged what people searched for. It routed every query and every character typed into the...
At least two vulnerabilities are already under attack
Hundreds of contractors working on a project for Meta pretended to be kids—and then prompted rival chatbots like Gemini and ChatGPT to discuss high-risk subjects.
WhatsApp on Monday officially announced the start of global reservations of usernames with an aim to protect the privacy of more than three billion users on the messaging platform. The optional...
The China-aligned espionage group Mustang Panda is running two campaigns against the Indian government and hydropower targets, deploying new malware and turning a legitimate cloud service into its...
This week was a reminder that attackers do not always need big tricks. One small mistake, one old access path, one missed patch, and suddenly the door is open. The noise is not all noise, either....
Apple security advisory (AV26-641)
Police must get a warrant to request geofence data involving individual cellphones, the U.S. Supreme Court ruled in what represents a victory for privacy advocates.
IBM security advisory (AV26-639)
Microsoft Edge security advisory (AV26-640)
New findings unearthed by Infoblox show that more than 236,000 websites are using investment scam templates built using a legitimate Chinese open-source, cross-platform application development...
Dell security advisory (AV26-638)
Today’s encrypted data, such as credentials, may no longer remain confidential in the future because the public-key cryptography protecting it will soon be broken by quantum computers. Although no...
A Russian advanced persistent threat (APT) group has continued to evolve and expand its malware arsenal as part of its ongoing cyber onslaught against Ukraine throughout 2025. Slovakian...
The GitHub Advisory Database is processing more vulnerability reports than ever before. Here's what's driving the surge, how we're responding, and how the community can help. The post Inside the...
Interesting research on a new class of weak RSA keys: keys with lots of zeros. It turns out that these keys are out in the wild. The badkeys project is an open-source service that checks public...
You don't need Mythos or GPT-5.5-Cyber to find a vuln to exploit when the world's password habits are so sloppy
Russia-linked hacking groups tracked as UNC5792 and UNC4221 have socially engineered their way into the messaging accounts of government officials.