A post-midnight revolt in the House sank the White House's efforts to extend Section 702—a spy program the FBI has used to look into members of Congress, protesters, and political donors.
A Linux user recently tried to respond to potentially malicious behavior on their machine using OpenAI’s Codex coding agent, before installing the Huntress agent. What ensued shows the unexpected...
Standard EDR creates a gap between detection and action. Huntress closes it. Learn how our Attack Disruption Engine automatically disrupts threat actors and reduces the impact of endpoint attacks.
A company wakes up to a news story claiming it has suffered a major data breach. The details are specific, technical and convincing. But the breach didn’t happen. No systems were compromised. No...
Drupal security advisory (AV26-359)
Nginx UI security advisory (AV26-360)
HPE security advisory (AV26-361)
Microsoft Edge security advisory (AV26-362)
HashiCorp security advisory (AV26-363)
JetBrains security advisory (AV26-364)
Security researchers recently spent a month getting a first-hand look at the activity of cybercriminals targeting the trucking and logistics industry. The researchers, from cybersecurity firm...
A security researcher named Morpheuskafka has found that thousands of private files from the Tel Aviv-based gig-work website Fiverr were left open for anyone to view online. The leaked data...
This article is the result of a collaboration with Indian media outlet Newslaundry. You can find Newslaundry’s editorially independent coverage here. Indian companies have shipped more than 320...
On 13 April 2026, 21 countries joined forces in a coordinated action week that focused on enforcement and prevention measures against over 75,000 criminal users engaging in distributed...
The suspect accused of attempting to murder OpenAI CEO Sam Altman expressed interest in “Luigi’ing” technology leaders in an online chat late last year, referring to Luigi Mangione, the man...
Authorities take down W3LL phishing ring, AgingFly malware steals Ukrainian government data, and actors exploit Nginx flaw to hijack servers.
TBK DVRs targeted by Nexcorium: exploiting, persisting, brute-force attacks, and multi-architecture Mirai-style DDoS in a single campaign. From CVE-2024-3721 exploitation to CVE-2017-17215 reuse,...
Strategic debate in Washington often focuses on the possibility of a future kinetic war over Taiwan, yet Midshipman Second Class Alejandro D. Tilley argues in a paper at the U.S. Naval Institute...
The House unanimously passed a short-term extension of the nation’s spy powers early Friday morning after GOP rebels dramatically rejected a late-night, last-minute deal to extend the measure for...
The U.S. Secret Service is moving to embrace kinetic mitigation technologies to counter the threats posed by unmanned aerial systems — or drones — ahead of multiple upcoming large-scale events,...
The National Institute of Standards and Technology (NIST) has announced changes to the way it handles cybersecurity vulnerabilities and exposures (CVEs) listed in its National Vulnerability...
America and China are racing for technological supremacy, and the margin is razor thin. Today, tech supremacy is increasingly synonymous with artificial intelligence (AI) leadership. And China has...
A Chinese ship has tested a new device capable of slicing through submarine data cables thousands of meters beneath the ocean surface. That demonstration may exacerbate security concerns over a...
Server-Side Request Forgery (SSRF) vulnerability (CVE-2026-5131) has been found in GREENmod software.
An international law enforcement operation has taken down 53 domains and arrested four people in connection with commercial distributed denial-of-service (DDoS) operations that were used by more...
Kyrgyzstan-based cryptocurrency exchange Grinex has suspended its operations after suffering a $13.7 million hack attributed to Western intelligence agencies. [...]
Last week, Anthropic pulled back the curtain on Claude Mythos Preview, an AI model so capable at finding and exploiting software vulnerabilities that the company decided it was too dangerous to...
The U.S. Department of Homeland Security, through its Transportation Security Administration (TSA), published a 60-day notice inviting public... The post TSA seeks stakeholder input on...
In cybercrime markets, trust isn't assumed, it's verified. Flare reveals how underground guides teach actors to evaluate carding shops based on data quality, reputation, and survivability. [...]
University student says he plans to move to Android, but concedes iOS engineers acting fast Apple is finally working on a fix for a bug that has locked some users out of their iPhones for months,...