On 18 June 2026, the latest phase of Operation Endgame targeted the SocGholish malware operation, a prolific malware distribution network used to compromise systems and facilitate further...
Microsoft has disclosed details of a Windows-based cryptocurrency clipper campaign that has targeted users since February 2026 with clipboard-intercepting malware with self-spreading capabilities...
Cybersecurity researchers have charted the evolution of INC from an nascent ransomware-as-a-service (RaaS) operation to one of the most prolific cybercrime groups in 2026, claiming no less than...
An independent PCI assessor tested Reflectiz against the new PCI DSS rules. Here is the verdict: See the full QSA assessment here → When a customer types their card number into your checkout,...
Threat actors associated with the DragonForce ransomware have been observed using a custom Go-based remote access trojan (RAT) called Backdoor.Turn to conceal command-and-control (C2) traffic...
In the latest Threat Source, Hazel channels her inner Spielberg to explore why humans are delightfully irrational, reminding us that while security best practices are simple in theory, they’re a...
We break down the technical architecture behind our multi-stage vulnerability discovery harness and automated triage loop. Learn how we manage state controls, squash false positives through...
EXCLUSIVE 'Working as intended' for the win … again
The first Magic Quadrant™ for Software Supply Chain Security comes as, we feel, the demand for greater supply chain visibility explodes.
The threat group’s remarkable success targeting open-source software was inevitable and fueled by the industry’s decision to prioritize code shipping over security. The post How software...
Agentic AI is moving the perimeter from components to data — and most strategies aren't built for that.
The transportation industry once again demonstrated its vulnerability to attacks on third-party services that support numerous essential modern logistics tasks.
Identified through macOS endpoint monitoring, the CL-CRI-1089 cluster, delivered under the publicly reported Operation FlutterBridge campaign, demonstrates a deliberate misuse of the Flutter...
CERT Polska has received a report about 6 vulnerabilities (from CVE-2026-54219 to CVE-2026-54224) found in UBB.threads software.
The FBI expects to conduct more court-authorized cyber operations to remove foreign hackers’ access to privately owned routers and edge devices, a senior bureau official said, underscoring how...
CERT Polska has received a report about 3 vulnerabilities (from CVE-2026-40455 to CVE-2026-40457) found in LMS (LAN Management System) software.
The spotlight has been on frontier models, but the goals are more far reaching -- including supercharging cyber defense and remediating risk at machine speed
Building on its $10 billion cybersecurity business, Accenture is expanding its position with the acquisition of a majority... The post Accenture expands OT cybersecurity capabilities with Dragos...
Out-of-bounds Read vulnerability (CVE-2026-50643) has been found in 8cc compiler.
At least one malware developer is adding text about nuclear and biological weapons to their spyware, in an effort to stop automatic AI analysis. Details: The _index.js payload begins with a large...
Artist Morry Kolman will be livestreaming feeds of the NBA champions’ ticker-tape parade from NYC’s traffic cameras—and this time, the city’s Department of Transportation isn’t demanding he stop.
Cisco Talos detailed a new approach to reverse engineering that pairs local AI agents with traditional analysis tools like the VB6 disassembler vbdec. Instead of awkwardly bolting AI onto the...
ESET Research shares the results of a months-long investigation into the suite of EDR killers maintained by the RaaS gang Gentlemen
It happened at a major US telco in the early 2000s
This article was co-published with Signal Ohio and STAT. In high school, Ashley Delgado dreamed of becoming a doctor and one day buying her father a Rolls-Royce. “She wanted to heal people,” said...
Huntress was one of many vendors impacted by a recent incident at Klue. We dug into the incident to figure out what happened.
Internal Home Office tests of age-verification technology show the risks of life-altering errors. It’s moving forward anyway.
Australia’s Cyber and Infrastructure Security Centre (CISC) announced enhanced security requirements to strengthen protections for the nation’s critical... The post CISC unveils Enhanced CIRMP...
CYFIRMA reported that healthcare organizations are facing an increasingly hostile cyber threat environment, with ransomware emerging as the... The post Healthcare sector faces escalating...
Dispel announced general availability of Site Console, the Dispel Zero Trust Engine On-Prem dashboard — a fully local... The post Dispel debuts Site Console to deliver on-prem zero trust remote...