A SHub macOS infostealer variant called Reaper impersonates Apple, Microsoft, and Google to trick users into executing malicious code, then targets browser data, password managers,…
In February 2026, a phishing-as-a-service (PhaaS) platform called EvilTokens went live. Within five weeks, it had compromised more than 340 Microsoft 365 organizations across five…
Datacentres in Nordic countries are connected to multiple district heating networks. The UK’s neighbouring countries, Ireland and France, also have projects. But the UK hasn’t…
Entertainment and travel group EVT has started moving to software-defined networking in a bid to boost its data capacity and reduce its reliance on physical…
Vulnerability exploitation was the most common access vector for data breaches in 2025, the latest installment of Verizon’s annual Data Breach Investigations Report (DBIR) shows.…
Microsoft dismantled malware-signing network Fox Tempest Pierluigi Paganini May 19, 2026 Microsoft disrupted Fox Tempest, a malware-signing-as-a-service (MSaaS) that allowed attackers to sign malware with…
Congressional Democrats want answers from the Cybersecurity and Infrastructure Security Agency about the reported public exposure of sensitive agency credential data on GitHub in an…
Veteran consultant Robert Enderle of the Enderle Group noted that this kind of exposure happens with alarming frequency. “Developers are often under immense pressure to…
The AWS Customer Incident Response Team works with customers to help them recover from active security incidents. As part of this work, the team often…
Key Takeaways Discovery has been commoditized. Frontier AI models like Mythos and GPT 5.5 are making vulnerability discovery cheap, fast, and broadly accessible. The defender’s…
Our CEO, Kyle, recently received the ad below, found on an online forum frequented by cybercriminals. The body of the ad, translated into English, reads:…
A max-severity vulnerability in the latest Python FastAPI version of the ChromaDB project allows unauthenticated attackers to run arbitrary code on exposed servers. The flaw…
