Artificial intelligence (AI) is enabling threat actors to send unholy volumes of fraudulent emails, personalized to a degree that mass emailers of old couldn’t have touched. Last month, Microsoft...
Telus, one of Canada’s largest telecom providers, is notifying some customers that their accounts have been breached and their personal information has been accessed. In data breach notifications...
The National Security Agency is set to undergo its most extensive internal restructuring in at least a decade, according to current and former officials briefed on the emerging plan. The new...
The modern battlefield is becoming more lethal and fast-moving, while the proliferation of sensors makes concealment increasingly difficult. Persistent sensing, precision-strike weapons,...
State governments are taking on a growing role in protecting critical infrastructure from cyber threats as risks increase across water and wastewater systems, healthcare, transportation, energy...
China criticized dire warnings about AI’s risks after leading U.S. technology executives backed calls to slow the development of advanced models and warned that a Chinese advantage could threaten...
It took just a few hours over the weekend for well-known Silicon Valley figures to push back on calls by leading artificial intelligence companies to slow down the development of AI and to more...
Guess what? Bellingcat is finally launching an official merch line! That’s right: after years of fantasizing and wishing, we’re finally ready to get our name and logo on cool merch that you’ll be...
Attackers exploit Volume Shadow Copy for credential theft and ransomware defense evasion. See how Huntress spots the difference from routine IT activity.
When threat actors target people’s devices, they usually infect it with one of many malware strains: an infostealer, a remote access trojan, a backdoor, or a ransomware encryptor. Rarely do we see...
A malicious cross-store Twitch browser extension has leaked OAuth tokens associated with nearly 31,000 users to proxy servers operated by a Russian commercial bot service. The extension, named...
The Government Accountability Office (GAO) found that the Federal Emergency Management Agency (FEMA) —a component within the Department of Homeland Security (DHS)— partially followed leading...
As Air Force One returned to Washington, D.C. on the night of Sept. 11, 2001, Michael Morell looked out a window and saw an F-16 off the aircraft’s wingtip. Beyond it, the Pentagon was still...
The European Union is calling for global artificial intelligence rules, its top tech official said Friday, after a viral warning from a former Anthropic engineer said AI could end humanity. “It’s...
The Space Force has selected Lake Kickapoo, Texas, as the “preferred” location for the third and final site of the Deep Space Advanced Radar Capability (DARC) space tracking network. “Pending...
For the latest discoveries in cyber research for the week of 14th Setpember, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES IDScan.net, a US identity verification...
A vulnerability has been discovered in GitLab, which could allow disclosure of sensitive data. GitLab GitLab is a DevOps platform that provides source code management, CI/CD pipelines, issue...
Passkeys promise fewer phishing headaches – and £600 a day off Whitehall's SMS bill
Once a month, Microsoft pushes a security update to all Windows users. Tomorrow’s is a new record: Microsoft’s patch for September is a doozy, with a record number of roughly 972 vulnerabilities...
An analysis of 160 deepfake websites reveals politicians in 22 countries appear on them. Nearly all of them are women.
We designed a behavioral clustering model to map cloud identity roles from audit logs, enabling continuous threat detection using standard SQL queries. The post Unmasking Cloud Identities: From...
Recent data tells us quite a bit about our current threat landscape
Iranian hackers who claimed to have struck telecommunications and water systems in Texas last week said they targeted AT&T because of consumer dissatisfaction with the company and backed off from...
The Fenway Health website on Friday said, "Fenway Health continues to respond to an IT incident" and to expect delayed MyChart messaging and callbacks. The latest: Fenway Health declined to...
Move from reactive defense to a proactive security mindset. Learn how proactive threat intelligence identifies and neutralizes threats.
Microsoft has disclosed details of two campaigns in which threat actors are abusing third-party email delivery infrastructure to blast financial fraud scam messages and using passkey-themed social...
The Court of Appeal for Ontario has ruled a $3 million USD retention, not $1.5 million, applies to Panasonic's ransomware claim against XL Specialty. Panasonic Canada Inc. held a cyber risk policy...
RIP, you won't be mourned
In August 2026, millions of records allegedly sourced from Chess.com were posted online. The data contained 7.3M rows with 4.6M unique email addresses, along with usernames, names, countries and...
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added five security flaws impacting JFrog Artifactory, ConnectWise ScreenConnect, and MikroTik RouterOS to its Known Exploited...