GhostCode attackers hijack Microsoft 365 accounts with device codes
Microsoft 365 users are being tricked into handing over access to their accounts by a new phishing kit, GhostCode, that exploits a weakness in a…
Month: September 2026
Chia and the Dangers of Proof-of-Storage Cryptojacking
A 2021 report from Google’s Cybersecurity Action Team mentioned that in 50 compromised Google Cloud instances they had investigated, 86% were used for cryptocurrency mining.…
Into The Weeds: How We Run Detonate
Preamble In our first post in our Detonate series, we introduced the Detonate system and what we use it for at Elastic. We also discussed…
Secure enterprise sharing with access reviews for Microsoft 365
Collaboration suites like M365 offer unparalleled convenience. Millions of teams rely on them to quickly share documents with coworkers, clients and business partners. Yet when…
World Quantum Readiness Day: Industry Voices on Moving From Blueprint to Build
Today is World Quantum Readiness Day, and this year’s theme, “From Blueprint to Build,” says a lot about where the industry has landed. Three years…
New SETTRA Ransomware Uses MeshAgent RMM and BYOVD to Encrypt Windows Systems
A newly observed ransomware operation dubbed SETTRA is abusing the legitimate MeshAgent remote monitoring and management platform for persistence while using recovery-inhibition and defense-evasion techniques…
Abandoned IoT apps keep sending sensitive data to broken servers
Millions of people still run smart home and IoT companion apps, the apps used to control devices like smart plugs, cameras, and thermostats, that stopped…
Did an AI really try to break free from human control?
Amid discussions about slowing down AI development, the Telegraph ran the headline: “OpenAI sounds alarm after bot tries to break free from human control.” That…
Public Exploits Released for Four Linux Kernel Flaws That Enable Local Root
A security researcher has released working exploit code for four Linux kernel flaws that each let a local user gain root, the highest level of…
What a new ‘Nature’s Rights’ bill could mean for UK datacentres
The UK is in a hurry to build new datacentres. Not wanting to be left behind, the Starmer government green-lit plans for new sites up…
Cisco Patches Critical ISE Flaw CVE-2026-76460 Under Attack
Cisco has released a fix for a maximum-severity flaw in its Identity Services Engine (ISE) platform after confirming the bug was already being exploited by…
North Korea’s WaterPlum Hit 30,000 PCs Via Fake Job Offers
Japan, the United States, Australia and Germany, today issued a joint cybersecurity advisory formally attributing the long-running “Contagious Interview” campaign to a North Korean state-sponsored…