FortiBleed: The Most Detailed Breakdown Yet of an Active Russian Credential-Harvesting Operation Pierluigi Paganini June 22, 2026 FortiBleed targeted 430,000+ FortiGate devices, harvesting 110M credentials…
Spend enough time walking the floor at RSA or any major cybersecurity conference, and you’ll eventually be convinced that the fully autonomous security operations center…
Like many tabletop exercises, this particular simulation was designed to get participants to think outside the box, improve cross-team communications, and develop improved incident response…
Threat intelligence reports have revealed widespread credential exposure affecting Fortinet firewalls and VPN gateways, potentially placing thousands of organizations at risk of unauthorized access. In…
In our latest Cloud Threats Retrospective, we analyzed publicly documented cloud incidents alongside cloud telemetry and hands-on investigations. The findings show that many of the…
GitHub has rolled out a significant security enhancement to GitHub Actions by updating actions/checkout to block unsafe workflows that abuse the pull_request_target event. The pull_request_target trigger is widely known as one…
You got a World Cup ticket. It arrived in your inbox with a QR code, professional branding, and a confirmation email that looked like the…
Attackers can now manipulate AI “deep-research” agents by discreetly editing Reddit threads and Wikipedia pages. They can insert as little as a 13-word snippet, which…
Plugin registries for AI agents use npm-style scopes like @openclaw/ and @clawhub/ to signal who published a package. But on ClawHub, a registry whose plugins…
Last week on Malwarebytes Labs: Nearly 15,000 infected websites cleaned in SocGholish crackdown Apple patches Beats Studio Buds flaw that could turn earbuds into a…
Canada’s spy service got a judge’s permission to reach into infected servers, home routers, and IoT gear sitting on Canadian soil and neutralize two foreign-run…
Until recently, IT departments primarily focused on providing employees with the IT systems they needed to do their jobs, which meant identity and access management…
