The campaign abusing Faronics Deploy to install ConnectWise ScreenConnect is an important example of how attackers increasingly avoid malware when legitimate administrative software already provides everything they need. Rather than exploiting a vulnerability in Faronics Deplo…
The FBI investigation into a dark-web service claiming to sell more than 153 million driver’s license scans should raise broader questions about how organizations collec…
The active exploitation of CVE-2026-82329 in JFrog Artifactory should receive particularly high attention because Artifactory is not simply another web application. It f…
The active exploitation of CVE-2026-0768 in Langflow is significant because it shows how compromise of an AI development platform can quickly become compromise of the cr…
The Novocure breach ultimately provides a more nuanced lesson than many healthcare cyberattacks. Unauthorized access occurred and patient-r…
The BGP hijacking attack used to distribute a malicious Virtualizor update is an unusually important supply-chain incident because it demon…
The discovery that nearly 22,000 internet-exposed Microsoft Exchange servers remain vulnerable to CVE-2026-62911 is particularly concerning…
The argument that threat actors do not necessarily want “better” attacks but instead want attacks that can be repeated reliably is one of t…
The disclosure by METR of two security incidents during 2026 is particularly important because it demonstrates how quickly experimental AI …
A fake Income Tax notice was received by a honeypot mailbox operated by GajShield Labs on 1 September 2026. Four hops later, the delivery c…
The active exploitation of critical vulnerabilities in Langflow and Ruby on Rails deserves particular attention because the two incidents d…
CISA’s addition of CVE-2026-81578 and CVE-2026-82078 to the Known Exploited Vulnerabilities catalog should be treated as a significant esca…
The ransomware attack affecting Berlin’s state administrative network is particularly significant because it demonstrates how modern ransom…
The TerminalFix campaign documented by Microsoft is particularly important because it shows how ClickFix-style social engineering is evolvi…
The approximately $74 million Tectonic exploit on the Cronos blockchain is particularly important because it demonstrates that decentralize…