Manufacturers must now disclose actively exploited flaws and severe security incidents through ENISA's new reporting platform
HashiCorp security advisory (AV26-910)
Attackers have chained two flaws in JFrog Artifactory, the repository that software build pipelines pull from, to take administrator control of self-hosted servers and plant backdoors, cloud...
A China-linked hacking group exploited a flaw in Sogou Input Method, one of the most widely used tools for typing Chinese characters on Windows, to install a backdoor on victims' computers,...
A Ukrainian national has been sentenced to four years in prison for his role in Conti ransomware attacks between 2021 and 2022. 44-year-old Oleksii Oleksiyovych Lytvynenko was arrested by the...
PaperCut on Thursday released a new security maintenance release that replaces all previously published emergency patches that were pushed to address two security flaws that have come under active...
For years I marked each anniversary of 9/11 with fresh analysis of how terrorism tactics and trends have been evolving, particularly recruitment, incitement and training in online spaces. Far from...
Cisco has revealed that three distinct threat clusters linked to ransomware and state-sponsored attacks have been exploiting two recently patched Secure Firewall Management Center (FMC)...
FalconDash is available on our GitHub: https://github.com/FalconForceTeam/FalconDashThe previous blogs made two things clear: 1) detection engineering has a maintenance problem, and 2) throwing...
In August, Cliff Stoll gave a talk at DEF CON, remembering the wily hacker he stalked forty years ago. Great fun.
Twenty-five years after the September 11 terrorist attacks reshaped American homeland security, former Homeland Security Secretary Michael Chertoff says complacency remains one of the country’s...
When hacking first entered the public consciousness in 1995, the maritime industry found itself at the center of the threat narrative. The film “Hackers” imagined a cybercriminal compromising the...
Food and agriculture is critical infrastructure by definition – and so vital to our nation that its incapacitation or destruction could have debilitating impacts on national security, economic...
September 11, 2001, is one of those rare days by which we measure the arc of history: life as it was before, and life as it became after. Few places reveal that divide more clearly than the...
The September 11 attacks changed the approach to security for any place where large numbers of people gather, whether a transportation hub, office building, sporting venue or university campus....
The provision of safe and reliable drinking water and wastewater is critical for society to function. The water sector is one of the critical infrastructure sectors as safe and reliable drinking...
Twenty-five years ago, the health sector’s cyber threat landscape was relatively rudimentary. In 2001, hospital IT departments were primarily concerned with keeping electronic medical records...
September 11, 2001, reshaped the foundational architecture of American national security. While immediate policy shifts focused on aviation, intelligence and border control, an equally profound...
Financial crime investigations have been an important element of criminal investigations throughout U.S. history. The Secret Service was founded in 1865 to combat the threat of counterfeit U.S....
The new joint operation uses laser-based technology capable of detecting, tracking, and disabling commercial drones linked to human and drug trafficking.
In other news: South Korea raises the breach fine level; three Turkish ministers targeted with spyware; CISA is ready to hire 250 staff.
Everyone from ShinyHunters to Russian freelancers is in on the illicit model fun
Agentic investigation is the shift your SOC could never staff. Here is how the always-on AI, the evolved analyst, and the expert on call now fit together.
A lot of this week’s security news has the same awkward answer to one question: “Why was that allowed to work?” An extension asks for access and takes too much. A trusted service becomes part of a...
War is peace. Freedom is slavery. Privacy is surveillance
Human operator: don't touch CIS orgs. AI agents: look a squirrel!
AL26-020 - Vulnerabilities Impacting MikroTik RouterOS - CVE-2026-67276, CVE-2026-67277 and CVE-2026-86060
Oleksii Lytvynenko joined the notorious group in 2021 and was directly involved in attacks on at least 12 companies. The post Conti ransomware crew member sentenced to four years in prison...
Bad actors are misusing Google Play's Early Access program to push deceptive apps that claim to offer money, rewards, casino winnings, and premium content. Early Access apps are apps that haven't...
The Republican lawmaker called OpenAI’s leadership decisions “reckless,” and used recent warnings about the existential risk of AI to bolster his inquiry. The post Hawley probes OpenAI over...