How to Fight Back in the Age of Synthetic Media
The Rise of CopyCop: When Influence Operations Go Fully Digital The latest Insikt Group report exposes one of the most expansive Russian influence operations to…
Latest Cybersecurity News — Page 287
View all →
The Dangers of Storing Unencrypted Passwords
This is an offshoot of our other blog, “Huntress Threat Advisory: Active Exploitation of SonicWall VPNs,” which allowed initial access and was followed by the…
Microsoft .NET 0-Day Vulnerability Enables Denial-of-Service Attacks
Microsoft .NET 0-Day Vulnerability An emergency security update has been released to address a newly disclosed .NET Framework vulnerability, tracked as CVE-2026-26127. This security flaw…
Microsoft Active Directory Flaw Allows Attackers to Escalate Privileges
Microsoft has released a critical security update addressing a high-severity elevation of privilege vulnerability in Active Directory Domain Services (AD DS). This flaw, patched during…
How Malicious Hackers Try to Infiltrate Your IT Team
In the ever-evolving landscape of cyber threats, a new and insidious danger is emerging, shifting focus from external attacks to internal infiltration. While our last…
Gogs Vulnerability Enables Attackers to Silently Overwrite Large File Storage Objects
Gogs Vulnerability Overwrite Large File Storage Objects A critical security flaw has been discovered in a popular open-source, self-hosted Git service, allowing attackers to overwrite…
HR Departments Targeted by Multi-Layered BlackSanta EDR Killer Malware
Threat actors are increasingly targeting human resources (HR) departments by disguising malware as job application documents. The attack begins with what appears to be a…
Cloud-audit: Fast, open-source AWS security scanner
Running AWS security audits without a dedicated security team typically means choosing between enterprise platforms with per-check billing and generic open-source scanners that produce findings…
Five Malicious Rust Crates and AI Bot Exploit CI/CD Pipelines to Steal Developer Secrets
Cybersecurity researchers have discovered five malicious Rust crates that masquerade as time-related utilities to transmit .env file data to the threat actors. The Rust packages,…
FBI Flags Phishing Campaign Collecting Planning and Zoning Permit Payments – The Cyber Express
A new planning and zoning permit phishing scam is raising concerns across the United States as cybercriminals impersonate city and county officials to trick individuals…
Microsoft adds passkey support for Entra ID
Microsoft will make passkey authentication availlable to organisations using Entra ID, and who have users that sign in from Windows devices, starting with a public…
Zero Trust World – Threatlocker
Zero Trust World is held annually in Orlando, Florida with IT professionals from 28 countries in attendance. Zero Trust World aims to empower IT professionals…