Elastic Security natively ingests Google Threat Intelligence: known-malicious IPs, domains, URLs, and file hashes matched against your telemetry the moment they appear, each carrying a…
A threat actor tracked as DriveSurge has been operating large-scale malware distribution campaigns using ClickFix and FakeUpdates techniques on compromised sites. Thousands of websites have…
A critical security vulnerability has been discovered in a widely used Magento caching plugin that allows attackers to remotely execute malicious code with no login,…
A critical security vulnerability in a widely used Magento extension is exposing thousands of online stores to remote code execution (RCE) attacks. The vulnerability, tracked…
Consider the history of any recent corporate scandal, and it is quite possible to guess what the story began with: a poorly secured file. No…
CVE-2026-41089, a critical Windows Netlogon RCE flaw that allows remote code execution, is now actively exploited in the wild, the Centre for Cybersecurity Belgium (CCB)…
A new cyber espionage campaign codenamed Operation Dragon Weave has been observed targeting officials and citizens in the Czech Republic and Taiwan to deliver an…
SAP changed direction on its “journey” to becoming a wholescale business artificial intelligence (AI) provider “around eight or nine months ago”, according to its CEO…
Industry fund Cbus Super’s group head of technology Patrick Vartuli has left after a little longer two years in the role. Image credit: Patrick Vartuli/LinkedIn.…
Threat actors are exploiting a critical-severity vulnerability in the WP Maps Pro WordPress plugin to take over websites, Defiant warns. WP Maps Pro allows site…
CIFSwitch, a Linux Root Bug Hidden in Plain Sight for 19 Years Pierluigi Paganini June 01, 2026 CIFSwitch is a 19-year-old Linux logic bug turning…
Some quick thoughts on the Anthropic and OpenAI IPOs, and how I see this whole space right now. And please know I’m not some super-genius…
