Iranian APT Intrusion Masquerades as Chaos Ransomware Attack
The Iran-linked APT actor MuddyWater has been observed performing an intrusion masquerading as a ransomware attack, Rapid7 reports. As part of the intrusion observed in…
Month: May 2026
After 17 years, Gavril Sandu extradited to U.S. for hacking scheme
After 17 years, Gavril Sandu extradited to U.S. for hacking scheme Pierluigi Paganini May 06, 2026 Romanian citizen Gavril Sandu was extradited to the U.S.…
Iran-sponsored threat group behind false flag social engineering campaign
The state-linked actor has been masquerading as a criminal ransomware group in attacks targeting U.S. organizations. Source link
A DOD contractor’s API flaw exposed military course data and service member records
A defense technology company with Department of Defense contracts exposed user records and military training materials through API endpoints that lacked meaningful authorization checks, according…
Poisoned truth: The quiet security threat inside enterprise AI
The problem is that most organizations might detect poisoning-related problems, but not the source of those problems. “If you had a leak in your house,…
CyberSheath helps Tunnell meet CMMC Level 2 with precision security aligned to actual CUI exposure
CyberSheath, a Cybersecurity Maturity Model Compliance (CMMC) managed service vendor, helped Tunnell Consulting, a consulting firm that provides specialized scientific and technical expertise to government…
New compliance guide available: ISO/IEC 42001:2023 on AWS
We have released our latest compliance guide, ISO/IEC 42001:2023 on AWS, which provides practical guidance for organizations designing and operating an Artificial Intelligence Management System…
2026 Gartner® Magic Quadrant for Cyber Threat Intelligence: Key Takeaways for Security Leaders
We are proud to share that Flashpoint has been named a Challenger in the inaugural 2026 Gartner® Magic Quadrant for Cyber Threat Intelligence Technologies. “We…
Thwarting Financial Fraud | Huntress
Huntress has been hunting malicious actors across 60,000+ user accounts for almost 2,000 small businesses enrolled in our Managed Detection and Response (MDR) for Microsoft…
Critical vm2 sandbox bug lets attackers execute code on hosts
A critical vulnerability in the popular Node.js sandboxing library vm2 allows escaping the sandbox and executing arbitrary code on the host system. The security issue…
CloudZ RAT Abuses Microsoft Phone Link to Steal SMS OTPs and Mobile Notifications
A newly discovered threat is turning a built-in Microsoft feature into a powerful spying tool. Security researchers have found a remote access tool called CloudZ…
Inside RSAC 2026 – Cyber Defense Magazine
Hello San Francisco San Francisco was electric once again as the cybersecurity world converged for RSAC 2026. Between the non-stop energy and innovations, one thing…