Stay informed about the latest cybersecurity threats, vulnerabilities, malware campaigns, phishing trends, supply-chain attacks, and security advisories. This section provides timely updates and practical insights to help organizations understand emerging risks and strengthen their security posture.
Security researchers at Sucuri have documented a particularly resilient WordPress malware family they call SC, named after markers found in the injected code. What makes the infection unusual is …
A major breach of the U.S. Defense Manpower Data Center has exposed sensitive personnel information belonging to more than 3 million people, including millions of current and former individuals a…
The public proof-of-concept for CVE-2026-86950 provides the first meaningful technical explanation of how Apple’s recently patched CoreGraphics zero-day works and why it may have been usefu…
Microsoft has uncovered a phishing campaign in which threat actors abused legitimate remote monitoring and management software to establish persistent access to victim systems. The campaign, observed …
The active exploitation of CVE-2026-73570 in Zimbra Collaboration Suite is more serious than a conventional web-server compromise because attackers are using the vulnerability not only to execute…
The investigation into the September breach of the Dutch Institute for Vulnerability Disclosure, or DIVD, has now identified the initial access path: attackers chained two previously unknown vuln…
The discovery of 543,699 still-valid credentials across public GitHub repositories is a sobering demonstration that exposed secrets remain one of the most persistent and avoidable weaknesses in…
Cisco’s disclosure of CVE-2026-76504 is particularly serious because the vulnerability affects the management plane of Cisco Catalyst SD-WAN and is already being exploited in real-world att…
TeamViewer has released security updates addressing five vulnerabilities across its Full Client and Host products on Windows, Linux and macOS, with severity ratings reaching CVSS 8.8 High. The fl…
Cisco Talos has uncovered a sustained espionage campaign attributed with high confidence to a China-nexus threat actor tracked as UAT-11587, targeting government, defense, diplomatic, policy, res…
OpenSSL has released security updates for CVE-2026-84782, a high-severity vulnerability in its Datagram Transport Layer Security implementation that can cause applications to disclose heap memory…
Phishers no longer need their own shady servers. They rent Google's reputation instead, and many email and web filters let them straight through. For years, spotting phishing was fairly simple: look f…
The latest ClickFix campaign analyzed by Huntress demonstrates an important evolution in social engineering: attackers are no longer merely impersonating trusted brands such as ChatGPT. They are placi…
Microsoft’s latest analysis of Star Blizzard shows a Russian state-linked espionage operation becoming both broader and more efficient. Since January 2026, Microsoft has observed at least 1…
The theft of French tax information affecting hundreds of thousands of individuals and businesses is a particularly useful case study because investigators found no need for a zero-day, custom malware…
On 29 September 2026, a domain called epfo[.]online started serving a page titled "Sign in — EPFO Regional Office Portal," complete with a password field. It had nothing to do with EPFO. The rea…
The newly disclosed TONTOU attack demonstrates that some of the mitigations developed to contain Spectre v2 can still be undermined by carefully manipulating what happens after the processor beli…
The data breach disclosed by Eskenazi Health in Indianapolis demonstrates why trusted-contact phishing remains so effective even in organizations with mature security programs. According to Esken…
The cyberattack against the Dutch Institute for Vulnerability Disclosure, or DIVD, may represent one of the clearer real-world examples yet of an AI agent being used autonomously during an intrus…
The rapid adoption of Model Context Protocol is creating an important new security boundary that organisations need to understand: an MCP server should not automatically be treated as a trusted extens…