News
Plain-English guides on web security, compliance, and keeping your clients protected.
Security researchers at Sysdig say they have identified what appears to be the first ransomware operation executed from start to finish by an AI agent. The activity, which the company tracks under the...
Read article →India’s Ministry of Electronics and Information Technology has asked WhatsApp to justify its planned username feature, warning that the change could create new opportunities for fraud. The government...
Read article →A newly identified credential-theft operation known as FortiBleed has now been linked to the INC and Lynx ransomware ecosystems, suggesting the stolen access was being used to support later-stage intr...
Read article →Security researchers are being targeted with malicious Python proof-of-concept repositories that disguise a data-stealing remote access trojan called ChocoPoC, according to findings published by YesWe...
Read article →Researchers say attackers began targeting a critical Oracle E-Business Suite vulnerability weeks after it was patched, and before any public exploit code had been released. The activity suggests the t...
Read article →IBM and Red Hat are expanding a new initiative called Project Lightwell, bringing in 20,000 engineers as the companies move to strengthen software security across the open source ecosystem. The effort...
Read article →The U.S. Cybersecurity and Infrastructure Security Agency has added a Microsoft SharePoint Server remote code execution flaw, tracked as CVE-2026-45659, to its Known Exploited Vulnerabilities catalog...
Read article →A security assessment at a client site took an unusual turn when two professional red teamers used a winter storm and a bit of improvisation to slip deeper into a company’s defenses. The testers, work...
Read article →Security researchers say an unpatched flaw in Argo CD’s repo-server component could allow an attacker to execute code and potentially gain control of a Kubernetes cluster, as long as they can reach th...
Read article →A 19-year-old man accused of taking part in the Scattered Spider hacking collective has been extradited from Finland to the United States to face federal charges, according to the U.S. Department of J...
Read article →Cisco Talos says the device-code phishing ecosystem known as EvilTokens is more capable and more carefully operated than earlier reporting suggested. The campaign is designed to steal Microsoft authen...
Read article →Security researchers have identified a broad malware campaign in which threat actors are using search engine optimization (SEO) techniques and counterfeit software websites to distribute ScreenConnect...
Read article →