nLighten has completed a £15m refurbishment of its Bristol datacentre, doubling its artificial intelligence (AI)-ready power capacity to 1.2MW to support regional enterprise workloads. The…
Cisco on Thursday announced an agreement to acquire identity lifecycle security company WideField Security to strengthen the capabilities of Splunk’s Agentic SOC. No financial details…
Unit 42 is aware of a large-scale password spraying and credential theft campaign (“FortiBleed”) against Fortinet devices. We observed attempts targeting MSSQL devices as well,…
You are a security leader at a small or medium-sized business (SMB), and your organization has decided to adopt Claude. If you are like me,…
Security teams have spent decades fighting the same ghosts: misconfigurations, over-privileged identities, and unpatched CVEs. But today, AI has given those ghosts a megaphone. By…
Market intelligence platform Klue has publicly confirmed a recent security incident that allowed threat actors to steal OAuth tokens used to connect to customers’ Salesforce…
A critical security flaws in widely used Chrome extensions, exposing millions of users to the risk of full browser compromise. The vulnerabilities, named “MaXSS” and…
A third-party human resources platform called TinyPulse has become the victim of a supply-chain attack that resulted in the exfiltration of records belonging to Nintendo…
CISA has added CVE-2026-20253, a critical, remotely exploitable vulnerability in Splunk Enterprise, to its Known Exploited Vulnerabilities catalog, and ordered US federal civilian agencies to…
The Gentlemen ransomware-as-a-service (RaaS) operation is actively developing and maintaining a suite of endpoint detection and response (EDR) killers that it hands out to affiliates…
The UK government’s plan to “end an era of outsourcing” is starting with cleaners, security staff and government training, but how far could IT and…
CISA is urging organizations to harden their internet-accessible Fortinet devices in response to a large-scale credential theft campaign that likely impacts over 86,000 firewalls and…
![Unit 42 observed an initial access broker (IAB) on the Russian-language cybercrime forum Exploit[.]in claiming responsibility for this campaign of large-scale credential attacks, referencing a CVE (no further information), and offering the harvested credentials for sale on June 16, 2026. Unit 42 has not validated their claims at this time.](https://image.cybernoz.com/wp-content/uploads/2026/06/Threat-Brief-Mitigating-Large-Scale-Credential-Attacks-600x340.png)
