Attackers are bypassing MFA on SonicWall VPNs because something was wrong with previous fix Pierluigi Paganini May 21, 2026 Attackers bypassed MFA on patched SonicWall…
AI is changing the volume and accelerating the pace of vulnerability submissions. If you’ve been following our recent AI series, you already know that submission…
“We built these tools because we believe that AI safety has to become a continuous engineering discipline rather than a periodic checkpoint, and we think…
For months, scammers have been taking advantage of a loophole that allows them to send spammy emails from an internal Microsoft email address typically used…
Nothing says happy Friday afternoon quite like finding a Cobalt Strike implant in your network. Such was the case for our partners at Blue Tree…
A virtual private network service called ‘First VPN,’ used in ransomware and data theft attacks, has been taken offline in a joint international law enforcement…
Flipper Devices has unveiled Flipper One, a modular Linux cyberdeck aimed at becoming a fully open, mainline-first ARM platform for hackers, researchers, and makers The…
A growing tension sits at the heart of enterprise AI deployments: organisations want agents to act autonomously, yet handing over passwords and API keys to…
A so-called software supply chain attack, in which hackers corrupt a legitimate piece of software to hide their own malicious code, was once a relatively…
A critical authentication bypass vulnerability in Apache OFBiz allows attackers to hijack forced password-change flows and achieve remote code execution (RCE) via a single HTTP…
A global mobile billing fraud campaign has been targeting Android users by silently subscribing them to expensive premium text services. Zimperium zLabs, which reported this…
Attackers are exploiting two Microsoft Defender vulnerabilities (CVE-2026-41091 and CVE-2026-45498), Microsoft acknowledged and CISA confirmed by adding them to its Known Exploited Vulnerabilities catalog. The…
