We detail our discovery of CVE-2025-0921. This privileged file system flaw in SCADA system Iconics Suite could lead to a denial-of-service (DoS) attack. The post Privileged File System...
A new species of squid. pretends to be a plant: Scientists have filmed a never-before-seen species of deep-sea squid burying itself upside down in the seafloor—a behavior never documented in...
Consider yourselves compromised, experts warn Ivanti has patched two critical zero-day vulnerabilities in its Endpoint Manager Mobile (EPMM) product that are already being exploited, continuing a...
The prolific LockBit ransomware-as-a-service (RaaS) group shows its dedication to evolutionary tactics and cross-platform attack capabilities in the latest iteration of its namesake malware, LockBit 5.0.
This three-part blog series presents an analysis of 19 samples of a cross-platform LockBit 5.0 ransomware payload affecting Windows, Linux (LINUX Locker v1.06/v1.08), and ESXi (LINUX ESXi Locker...
FBI dismantle RAMP crime forum, 175K AI systems exposed without security controls, and actively exploited zero-day allows security bypass in MS Office.
Cybersecurity researchers have discovered malicious Google Chrome extensions that come with capabilities to hijack affiliate links, steal data, and collect OpenAI ChatGPT authentication tokens....
Parent company Cognizant hit with multiple lawsuits Thousands more Oregonians will soon receive data breach letters in the continued fallout from the TriZetto data breach, in which someone hacked...
Officials took down three U.S.-registered domains that distributed copyrighted content and received tens of millions of visits a year. The post DOJ seizes piracy sites, Italian police dismantle...
Cybersecurity researchers have discovered a new campaign attributed to a China-linked threat actor known as UAT-8099 that took place between late 2025 and early 2026. The activity, discovered by...
Behind the scenes of law enforcement in cyber: what do we know about caught cybercriminals? What brought them in, where do they come from and what was their function in the crimescape?...
The actions impaired some of IPIDEA’s proxy infrastructure, but not all of it. The effort underscores the back-and-forth struggle of taking out pieces of cybercriminals’ vast and growing...
From an Anthropic blog post: In a recent evaluation of AI models’ cyber capabilities, current Claude models can now succeed at multistage attacks on networks with dozens of hosts using only...
The trends that emerged in January offer useful clues about the risks and priorities that security teams are likely to contend with throughout the year
Federal agencies have expanded their use of domestic surveillance to carry out mass deportations and crack down on protesters. Now, online activists and hacker groups are deploying their own...
The 2026 Winter Games in Milano Cortina extend beyond sport. Tensions between the Russian Federation and the International Olympic Committee (IOC), stemming from disputes over compliance and...
China-linked advanced persistent threat (APT) groups are wreaking havoc in Asia with new cyber weaponry, targeting Chinese gambling sites and government entities in the region. The Asia-Pacific...
The FBI has launched Operation Winter SHIELD outlining ten actions which organizations should implement to help protect themselves, society and the state against cyber-attacks and malicious...
A new joint investigation by SentinelOne SentinelLABS, and Censys has revealed that the open-source artificial intelligence (AI) deployment has created a vast “unmanaged, publicly accessible layer...
The number of US data “compromises” in 2025 reached a record high of 3332, a 5% increase on the previous year, according to new figures from the Identity Theft Resource Center (ITRC). The...
Alphabet-owned Waymo has informed the National Highway Traffic Safety Administration that one of its driverless vehicles “struck a child near an elementary school” in Santa Monica, California. The...
Ransomware gangs claimed a deluge of victims during the final quarter of 2025, despite a decline in the number of active ransomware groups, analysis by cybersecurity researchers at ReliaQuest has...
The U.S. government wants the rest of the world to adopt its artificial intelligence cybersecurity standards, a top official with the Office of the National Cyber Director said Thursday. As part...
Introduction Mandiant has identified an expansion in threat activity that uses tactics, techniques, and procedures (TTPs) consistent with prior ShinyHunters-branded extortion operations. These...
Introduction Mandiant is tracking a significant expansion and escalation in the operations of threat clusters associated with ShinyHunters-branded extortion. As detailed in our companion report,...
Bumble and Match said they each recently responded to network intrusions. The group ShinyHunters claimed to have stolen data from both.
AI assistants are now embedded in our daily lives—used most often for instrumental tasks like writing code, but increasingly in personal domains: navigating relationships, processing emotions, or...
The Department of Energy’s Office of Cybersecurity, Energy Security, and Emergency Response brought utilities, industry experts, and government defenders together on Plum Island, New York, for the...
In October 2025, at a large ceremony organized in Hanoi, 72 states signed the U.N. Cybercrime Convention (UNCC, or Hanoi Convention), the first U.N.-wide convention to combat cybercrime and...
Two Critical vulnerabilities in Ivanti’s popular mobile device management solution have been exploited in the wild in limited attacksBackgroundOn January 29, Ivanti released a security advisory to...