Cisco Talos has uncovered a BadIIS variant — identifiable by its embedded "demo.pdb" strings — that functions as commodity malware, likely sold or shared among multiple Chinese-speaking cyber...
Microsoft's total vulnerability count stayed steady in 2025, but critical flaws surged year over year. BeyondTrust breaks down why attackers are increasingly focused on privilege escalation and...
We completed an investigation of unauthorized activity on our computer network. Upon learning of the activity on January 14, 2026, we took action to contain it, began an investigation, and...
On March 4, 2026, Perrigo detected a cyber security incident targeting two employee email accounts. Upon learning of the incident, we immediately contained and remediated the unauthorized access...
On February 12, 2026, Boston Capital began reviewing a claim involving potential unauthorized access to certain files on its computer network. After receiving this information, Boston Capital had...
Starting May 19, tech platforms in the US will have to start complying with the Take It Down Act. Here's how more than a dozen of the largest platforms are handling takedown demands for your nudes.
On January 11, 2026, we were alerted to suspicious activity potentially impacting our network. In response, we launched an investigation and engaged third-party experts to assist. We also took...
On March 21, 2026, we learned that a threat actor group had accessed and encrypted the network at one of our office locations. We immediately informed our IT Security Consultants and shut down our...
The 2026 Verizon Data Breach Investigations Report (DBIR) reveals a troubling trend: vulnerability exploitation has surged to become the number one initial access vector while remediation rates...
How Symantec’s new DSPM solution makes understanding data—and protecting it—easier than ever
How Symantec’s new DSPM solution makes understanding data—and protecting it—easier than ever
A complete decoupling from US technology is neither realistic nor necessary, but the changing environment does require nations and companies to reassess their relationships and dependencies
Multi-ecosystem supply chain compromise by TeamPCP targets GitHub, NPM, and VSCode to steal credentials and establish persistence.
IT teams are increasingly overwhelmed by alerts from disconnected systems, forcing responders to manually coordinate investigations during network incidents. This webinar explores how automation...
Microsoft says customers in restricted network environments may encounter Windows Update failures after installing the January 2026 optional non-security preview updates. [...]
HDFC Asset Management Company Ltd (HDFC AMC) on Monday disclosed a cyber-security incident at its IT infrastructure after receiving a communication from an anonymous source claiming access to...
The venue detected an attack on its network on Saturday and responded by taking its systems offline. The theater indicated that some performances would be rescheduled, though specific details had...
This is to inform you of a potential cyber security incident caused by suspected ransomware attack on the Company’s IT infrastructure & network, identified on May 16, 2026. Independent firm...
European law enforcement authorities have dismantled a large-scale online propaganda network linked to Iran’s Islamic Revolutionary Guard Corps... The post Europol dismantles IRGC-linked online...
While also spoofing all the trusted domains - Apple, Microsoft, and Google - in the same attack
In April 2026, data allegedly obtained from CTT, Portugal's national postal service, was posted to a public hacking forum. The data included 468k unique email addresses along with names, phone...
Plus three other stealers in three other packages, all from the same scumbag
Frontier AI models like Mythos are making vulnerability discovery fast and cheap. Here's how defenders use threat intelligence and agentic processing to prioritize and act at the same speed.
INTERPOL has coordinated a first-of-its-kind cybercrime crackdown across the Middle East and North Africa (MENA) that led to 201 arrests and the identification of an additional 382 suspects. The...
In March 2026, the Colombian fintech company Addi identified unauthorised activity on its platform and advised customers that "it is possible that your personal information may have been...
Monday opens with a trust problem. A mail server flaw is under active use. A network control system was targeted. Trusted packages were poisoned. A fake model page pushed a stealer. Then came the...
Operation Ramz resulted in 201 arrests and disrupted phishing services, malware and financial scams. The post Interpol leads cybercrime crackdown across 13 countries in Middle East, North Africa...
What happens when a phishing email looks clean enough to pass through security, but dangerous enough to expose the business after one click? That is the gap many SOCs still struggle with: the...
Plus ModuleJail, a radical proposal for minimizing the impact of similar bugs
More than 200 individuals were arrested for cybercrime activities during INTERPOL's Operation Ramz, which focused on the Middle East and North Africa. [...]