This week was a reminder that attackers do not always need big tricks. One small mistake, one old access path, one missed patch, and suddenly the door is open. The noise is not all noise, either....
New findings unearthed by Infoblox show that more than 236,000 websites are using investment scam templates built using a legitimate Chinese open-source, cross-platform application development...
Today’s encrypted data, such as credentials, may no longer remain confidential in the future because the public-key cryptography protecting it will soon be broken by quantum computers. Although no...
A Russian advanced persistent threat (APT) group has continued to evolve and expand its malware arsenal as part of its ongoing cyber onslaught against Ukraine throughout 2025. Slovakian...
Interesting research on a new class of weak RSA keys: keys with lots of zeros. It turns out that these keys are out in the wild. The badkeys project is an open-source service that checks public...
You don't need Mythos or GPT-5.5-Cyber to find a vuln to exploit when the world's password habits are so sloppy
Russia-linked hacking groups tracked as UNC5792 and UNC4221 have socially engineered their way into the messaging accounts of government officials.
In the Azure Edition, of course
Stack-based Buffer Overflow vulnerability (CVE-2026-11979) has been found in libxml2 software.
The U.S. Department of Health and Human Services is preparing new guidance to help accelerate the adoption of artificial intelligence across healthcare, with federal officials signaling that...
As cyber threats against critical infrastructure continue to rise globally, the Dubai Electricity and Water Authority (DEWA) says it is successfully blocking around 3,000 cyberattacks every day...
he Department of Homeland Security is continuing to explore ways to bolster its defenses against drones, according to DHS Secretary Markwayne Mullin, who testified on Thursday before the House...
Microsoft has shut down a long-running malicious extension operation on the Edge Add-ons store that hid its payloads inside ordinary image and font files, then woke up days after install to steal...
Written by: James Sadowski, Alden Wahlstrom Introduction Four years into Russia’s full-scale invasion of Ukraine, the pro-Russia influence ecosystem has evolved from a tool of war back into a...
The Federal Risk and Authorization Management Program (FedRAMP) on June 25 finalized its Consolidated Rules for 2026, giving agencies, cloud service providers, independent assessors, and advisors...
Unrestricted Upload of File with Dangerous Type vulnerability (CVE-2026-13165) has been found in SzafirHost software.
The Security Service of Ukraine (SSU), working jointly with the FBI, has formally exposed a sustained Russian intelligence campaign targeting the messaging accounts of government officials,...
The number of Iranian cyberattacks against Israel has shot up since the launch of the US-Israeli war with Iran this year, Yossi Karadi, director general of the National Cyber Directorate, was...
[Control systems] CISA ICS security advisories (AV26-637)
A new white paper on global governance presents Chinese leader Xi Jinping’s flagship foreign policy initiative as a bid to reform international governance in its favor. Both the white paper itself...
Ubuntu security advisory (AV26-635)
Red Hat security advisory (AV26-636)
On April 17, two radiological incidents unfolded within hours of each other at opposite ends of the European continent. At the Medyka border crossing in southeastern Poland, border guard officers...
Japanese telecommunications operator KDDI Corporation disclosed a data breach where threat actors gained access to one of its email systems used by five other internet service providers (ISPs) in...
Federal and state agricultural officials have confirmed that the number of New World screwworm cases in the United States has reached 26, as Texas authorities issue a wave of emergency quarantine...
Carmaker points finger at an 'unknown' flaw as customer fallout continues
The North American bulk power system (BPS) continued to perform reliably in 2025 even as the grid experienced increasing operational complexity. NERC’s 2026 State of Reliability (SOR) finds both...
A new agentic-AI tool will continuously scan intelligence feeds and operational networks to provide U.S. military commanders with targeting options “within seconds,” the Pentagon announced...
Key Takeaways This case was first reported to customers in a threat brief released in July 2025 and in a public flash alert in August 2025 in partnership with Swisscom B2B CSIRT, which observed...
The U.S. government Friday lifted its block on Anthropic’s powerful Claude Mythos 5 AI model, allowing the company to release it to more than 100 U.S. institutions, including major companies and...
A public proof-of-concept is now out for CVE-2026-55200, a critical flaw in libssh2 that lets a malicious or compromised SSH server trigger memory corruption on a connecting client, with possible...
CERT Polska has received a report about 2 vulnerabilities (CVE-2026-41991 and CVE-2026-41992) found in gzip software.
Cybersecurity researchers have uncovered two hijacked npm packages and a cluster of Go packages that are designed to deploy a Python-based information stealer on compromised Windows, Linux, and...
Aligning Modern CNAPP Telemetry with realistic risk assessments to drive agency efficiency through cross-team collaboration
We’ve taken one small step towards robot police officers: a drone capable of disarming a suspect: In a June 22 video posted on the Sacramento County Sheriff’s Office’s Instagram page, an officer...
Kaspersky researchers analyze incidents related to The Gentlemen RaaS group, disclose their tools and TTPs, and find a new ransomware variant.
Europe’s pro-competition proposals could see Google Search and Android systems opened up. The company claims there are serious privacy flaws.
Part 2: How the Red Agent bypassed backend resolvers to expose an entire airline booking database in fifteen minutes