Security intelligence
All coverage
Security signals, without the noise.
Current reporting from security alerts, threat intelligence, incident response, fraud, practitioner blogs, community feeds, and watch-and-listen sources.
The Cop Who Took On Flock
Security Latest · 1h ago ↗sources
OpenAI tightens defenses after AI agents breach research environment
Microsoft confirms outage affecting search in Microsoft 365 appsBleepingComputer · All coverage / Incidents
↗
Heights Finance Data Breach Impacts at Least 1.2 Million IndividualsSecurityWeek · All coverage / Incidents
↗
SafePal Hardware Wallet Maker Says Flaw Exposed Data of Nearly 40,000 CustomersThe Hacker News · All coverage / Incidents
↗
Complete index
Source grid
Every loaded article, grouped by its original feed. Search scans source names and headlines.
Density
Sort
The Cop Who Took On Flock
New York City Lawmakers Push to ‘Ban the Scan’ at MSG
CBP Workers Allegedly Used Government Databases to Spy on Exes, Crushes, and Colleagues
This Coin-Sized Device Can Hack a Boeing 737
‘The Worst I’ve Ever Seen’: Cargo Thefts Have Turned Violent in Pursuit of AI Hardware
A Zoom Screen-Sharing Bug Let Anyone Take Over Other Devices on a Call
Flock’s Plans for Rideshare Dashcams and Coaching Police, Revealed
Sensitive Info Goes Into ‘No Reply’ Emails Constantly. This Guy Sees It All
Hackers Stalked Me by Hijacking a Smartwatch for Kids
OpenAI Didn’t Notice Its AI Agents Using a Message Board to Plan Their Hacking Spree
OpenAI tightens defenses after AI agents breach research environment
OpenAI strengthens security measures with AI-powered defenses designed to find vulnerabilities, automate responses and counter cyber threats.
Hacker claims millions of records stolen from corporate Azure tenants
A data leak allegedly contains millions of employee records from Azure tenants at McDonald's, Vodafone, TCS, Kyndryl, and other major firms.
Synthesized builds Test Data Agent to validate AI agents with production-like data
Synthesized introduces Test Data Agent, designed to validate AI agents safely before production deployment.
Google’s open-source HEIR lets AI work with data it can’t see
Google’s open-source HEIR compiler aims to make private AI practical by enabling computation on encrypted data with homomorphic encryption.
A hollowed out data layer is making CISOs fly blind into AI attacks
AI-powered security exposes SIEM blind spots as years of log cost-cutting weaken visibility, detection coverage, and SOC defenses.
Attackers turn to AI for help identifying files worth stealing
AI cyberattack tools are helping hackers write code, steal credentials, target key systems and manage attacks across victim networks.
Cybersecurity jobs available right now: August 18, 2026
Here are the worldwide cybersecurity job openings available as of August 18, 2026, including on-site, hybrid, and remote roles.
France’s tax authority admits hackers made off with data on 678,000 individuals
France’s tax authority says a data breach exposed tax and business information belonging to 678,000 people and professionals.
Fortinet expands AI security portfolio with Virtue AI acquisition
Fortinet acquires Virtue AI to expand AI security with agentic red-teaming, real-time guardrails, governance, and continuous validation.
Attackers exploit patched macOS Screen Sharing flaw to deploy cryptominer
Hackers are exploiting a patched macOS Screen Sharing bug to gain root access and install Monero cryptominers.
Microsoft confirms outage affecting search in Microsoft 365 apps
Microsoft says some users are experiencing issues searching in Microsoft 365 apps, including Outlook on the web, Outlook desktop, SharePoint Online, and OneDrive.
Microsoft starts removing WMIC tool used by cybercriminals
Microsoft announced that it removed the Windows Management Instrumentation Command-line (WMIC) tool from Windows 11 24H2 and 25H2, as well as from Windows 11 beta builds released…
Hacker claims 3.6 million Azure account records stolen from major companies
A threat actor is selling employee databases allegedly stolen from the Microsoft Azure infrastructure of multiple Fortune 500 companies after gaining access using compromised cred…
Pokémon Center data breach exposes customer info, cancels some orders
Pokémon Center is notifying customers in the United Kingdom and Germany that it suffered a third-party data breach after hackers stole customer personal and order information from…
Microsoft confirms GitHub is down worldwide
GitHub is down for some users as a widespread outage is causing errors across the website, API, Actions, Pull Requests, and several other services.
Certighost and the Privilege Hiding in Your Certificate Authority
CVE-2026-54121 lets a standard domain user turn your Enterprise CA into a Domain Controller. The patch is the easy part. The lesson is standing privilege, implicit trust, and trea…
Windows Server 2022 reaches end of mainstream support in 60 days
Microsoft has reminded IT administrators that Windows Server 2022 is rapidly approaching its mainstream end date of October 2026, when it will switch to extended support.
Philips and GE investigating Clop ransomware data theft claims
Tech giants General Electric (GE) and Philips have also confirmed they're investigating claims that the Clop ransomware gang breached their systems and stole data.
French tax authority data breach affects 678,000 individuals
The French Ministry of the Economy and Finance has disclosed a data breach after an attacker accessed the General Directorate of Public Finances (DGFiP) systems and stole data bel…
Microsoft working on Defender patch for ShieldBreak zero-day
Microsoft is working on a security patch for the
Heights Finance Data Breach Impacts at Least 1.2 Million Individuals
GitLab Patches Critical Code Injection Vulnerability
Dozens of WebKit Vulnerabilities Patched With Fresh macOS, iOS Security Updates
680,000 Impacted by French Tax Authority Data Breach
Irregular Details How a Naming Error Let AI Models Attack a Real Company
Conflicting Test Goals Pushed Claude Agents to Deploy Self-Replicating Malware
40,000 Impacted by SafePal Data Breach
Recent macOS Screen Sharing Vulnerability Exploited in Attacks
Critical SAP Commerce Cloud Vulnerability Exploited 3 Days After Disclosure
Fortune 500 Companies Hit in Azure Data Theft Campaign
SafePal Hardware Wallet Maker Says Flaw Exposed Data of Nearly 40,000 Customers
CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE
Critical GitLab GraphQL Flaw Could Let Unauthenticated Attackers Delete Public Projects
Snowflake GitHub Actions Flaw Lets Crafted Issues Trigger Command Injection
Forminator WordPress Flaw Can Enable Unauthenticated RCE via Malicious PHP Uploads
Cavern C2 Uses DNS and Google Apps Script to Blend Into Legitimate Traffic
⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Browser Hijacks and More
How MCP Servers Can Expose Enterprise Secrets
Unisoc VoLTE Video Call Exploit Chain Can Give Attackers Full Android Kernel Access
Evooo1Bot Linux Botnet Exploits Known Flaws to Turn Edge Devices Into SOCKS5 Proxies
Black Hat Asia 2026 | IntentGuard: Securing LLM-Generated Cloud Configurations
Black Hat Asia 2026 | Faster Detection and Counteraction of N-Day Exploits in Chromium-based Apps
Black Hat Asia 2026 | Tropic Trooper Reloaded: Unraveling the Invisible Supply Chain Mystery
Black Hat Asia 2026 | Advanced Glitching Leveraging Hidden CPU–eMMC Behavior
Black Hat Asia 2026 | Lost in Normalization: From URL Quirks to Poisoning the Azure Supply Chain
Black Hat Asia 2026 | the Source, Of the Source
Black Hat Asia 2026 | Cyber-Paleontology in the Age of AI
Black Hat Asia 2026 | Discovering React2Shell: JavaScript’s Long-Awaited Deserialization Flight-mare
Black Hat Asia 2026 | Post-Quantum Cryptography: A Realistic Guide to Manage the Transition
Black Hat Asia 2026 | Network Operations Center (NOC) Report
Nearly 750k had financial info, SSNs leaked in South Carolina loan company breach
SafePal latest crypto hardware wallet maker affected by breach, with nearly 40,000 impacted
Irregular faces criticism over ‘spin’ in AI hacking postmortem
Poland probes MyDr healthcare software breach potentially affecting 19 million people
Ukraine says cyberattack hit Russian e-commerce giant Wildberries amid drone strikes
CCNA from Start to Finish: One MASSIVE Packet Tracer Lab
your home router STILL SUCKS!! (use OPNsense instead)
OSPF From Zero: Let's Build the Internet (Well...Almost) | Summer of CCNA
AI's Impact on Network Engineers | LIVE AMA | Summer of CCNA
this Raspberry Pi belongs on your wall
I got inside FIFA’s Secret World Cup Broadcast Network
LIVE AMA | Summer of CCNA | 07/09/2026
Fable 5 is back.....run these prompts before July 12th
shadow AI is terrifying
Certification Questions | LIVE AMA | Summer of CCNA | 06/18/2026
Microsoft Gave BitLocker Keys to FBI
This is the Real Cybersecurity Problem
How to Detect Fake Cell Towers Near You
Nobody Uses This Old Stuff!
Do You Need a VPN in 2026? Here’s the Truth
1.5 Gbps Internet using your old telephone cables?
Rediscover Maltego in 2026
Qubes OS explained: assume you will get hacked
You need to learn Maltego in 2026
Want To Learn (For FREE) About A Self-Driving Network?
CVE-2026-40400 Windows PowerShell Remote Code Execution Vulnerability
CVE-2026-56188 Windows Server Network driver Remote Code Execution Vulnerability
CVE-2026-62722 Microsoft Brokering File System Elevation of Privilege Vulnerability
CVE-2026-66807 Microsoft Office Graphics Component Remote Code Execution Vulnerability
CVE-2026-63519 Microsoft Office Graphics Component Remote Code Execution Vulnerability
CVE-2026-63513 Microsoft Office Graphics Component Remote Code Execution Vulnerability
CVE-2026-70337 Microsoft PowerShell Remote Code Execution Vulnerability
CVE-2026-58612 PowerShell Information Disclosure Vulnerability
CVE-2026-62886 .NET Elevation of Privilege Vulnerability
CVE-2026-63518 Microsoft Office Word Remote Code Execution Vulnerability
Blueprint to Making $100K with Caido (Free Bug Bounty Course)
I Went to the World's Biggest Hacker Conference (DEFCON VLOG)
I’m headed to DEFCON!
Free AI Hacking Course: Indirect Prompt Injection (+FREE LABS)
Are you ready for this year's @BugBountyVillage at @DEFCONConference
Do you guys agree? #hacking #bugbounty
How One File Upload Got Me the Entire Customer Database
Why Being a Great Hacker Doesn't Pay Anymore
This Hacker Made $8,000 Hacking a Major Retailer's AI Chatbot Over DNS (Live Demo!)
I Made an AI Agent That Reverses CVEs While I Sleep
AI Malware Gets Weird
Phishing Gets Personal
I Made AI Build a Cybersecurity Mod in Minecraft
I Found an MFA-Bypassing Phishing Kit on the Dark Web
This Hacker Trap Was Built by AI
Cyber Deception Everywhere
JHT Course Launch! Home Labs with Proxmox
GTA Malware Trap
Minecraft Security Mods
Payload Podcast 010 - Olaf Hartong
How QR-code phishing can slip past corporate security measures
Black Hat USA 2026: Will vulnerability discovery eventually decline in the AI era?
Black Hat USA 2026: What the Hugging Face hack tells us about human responsibility
Black Hat USA 2026: AI is racing ahead of cybersecurity controls
Are AI tutors safe for your kids?
This month in security with Tony Anscombe – July 2026 edition
Beyond the screenshot: Why you should verify what you see
Forgotten UEFI shims undermining Secure Boot
ESET Threat Report H1 2026
Cyber readiness for SMBs: Getting the basics right
The OpenAI Story Actually Scares Me
Learn Fault Injection at DEF CON 2026
Did an AI Really Hack Hugging Face?
Security-driven Rapid Release - Pwn2Own Documentary (Part 4)
Firefox JIT Bug - Pwn2Own Documentary (Part 3)
The First Exploit - Pwn2Own Documentary (Part 2)
The World's Hardest Hacking Competition - Pwn2Own Documentary (Part 1)
From Zero to Zero Day (and beyond) - Life of a Hacker: Jonathan Jacobi
The German Hacking Championship
Do you know this common Go vulnerability?
HackTheBox - Cobblestone
HackTheBox - Helix
HackTheBox - Kobold
HackTheBox - Fries
HackTheBox Logging
HackTheBox - CCTV
HackTheBox - DevArea
HackTheBox - WingData
HackTheBox - Nanocorp
HackTheBox - VariaType
Cisco Advance Notification for Publication of August 19, 2026, Security Advisories
On August 19, 2026, the Cisco Product Security Incident Response Team (PSIRT) will publish advisories to disclose security vulnerability information along with fixed software rele…
ClamAV Vulnerabilities Affecting Cisco Products: August 2026
Multiple vulnerabilities in ClamAV could allow a remote attacker to cause a denial of service (DoS) condition, interrupting scanning operations. For more information about these v…
Cisco Secure Firewall Management Center Software Static Credential Vulnerability
A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to log in to an affected device usin…
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability
A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software c…
Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability
A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to view sensitive information in clear text on…
Cisco Advance Notification for Publication of August 5, 2026, Security Advisories
On August 5, 2026, the Cisco Product Security Incident Response Team (PSIRT) will publish advisories to disclose security vulnerability information along with fixed software relea…
Cisco IOS XE Software Web-Based Management Interface Denial of Service Vulnerability
A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, remote attacker with low privileges to cause a denial of service (DoS)…
Cisco Integrated Management Controller Cross-Site Scripting Vulnerability
A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to conduct a cross-site scripti…
Cisco RoomOS Logging Subsystem Information Disclosure Vulnerability
A vulnerability in the logging subsystem of Cisco RoomOS could allow an authenticated, local attacker with low privileges to access sensitive information. This vulnerability is du…
Cisco IOS XE Software Blocks Extensible Exchange Protocol Denial of Service Vulnerability
A vulnerability in the Blocks Extensible Exchange Protocol (BEEP) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (Do…
Vulnerability giving attackers full control of Macs is under active exploitation
Private security firms will soon be allowed to hack overseas cybercriminals
Terabytes of credentials leaked in massive supply-chain attack
Researchers found a way to hijack devices through Zoom screen sharing
DEF CON crowd suspected in fake-hotspot attack on Delta flight
Chrome adopts what may be the best protection yet against account takeovers
New surveillance tech links your phone to your license plate
New Pass-ta-key attack reveals all the things we didn't know about passkeys
A researcher bought noreply.net. Companies started sending him secrets.
Thousands of servers can be backdoored by exploiting buggy motherboard controllers
Soft Skills for the Job Market: Standing Out!
Meet TCM Security at DEF CON 34!
Real Folks of Cyber | Andrew Crotty | DITL
TCM Course Release | New Creator | Cybersecurity | AMA
Soft Skills for the Job Market: Applying for Jobs
LIVE: 1 Million Subscribers | DEF CON/Summer Camp Giveaway
Celebrating 1 Million Subscribers on July 8th!
Real Folks of Cyber | Pearce Barry | Day in the Life
Getting Started with the TCM Security Academy
Soft Skills for the Job Market: Resume Writing
Who’s Tracking You? Use This New Service to Find Out
It can be daunting to determine who's responsible for showing ads on the websites we visit, or who's harvesting data from the mobile apps we use every day. That information is alr…
Microsoft Plugs Nearly 400 Security Holes
Microsoft today released updates to remedy at least 398 security vulnerabilities in its Windows operating systems and supported software, including one weakness that is already be…
Canadian Man Pleads Guilty in Snowflake Extortions
A 26-year-old Canadian man once described as one of the most consequential cybercrime threat actors of 2024 has pleaded guilty to computer fraud and conspiracy to hack and extort…
Read This Before You Buy That TV Streaming Stick
Security experts have been sounding the alarm for years about the risks of using generic TV boxes that promise unlimited content streaming for a one-time fee, warning that they se…
LG to Ban Residential Proxies from Smart TV Apps
The home appliance giant LG Electronics USA said this week it plans to suspend any apps built for its smart TVs that turn one's television into an always-on residential proxy node…
Microsoft Patches a Record 570 Security Flaws
Microsoft Corp. today released software updates to plug at least 570 security holes in its Windows operating systems and other software, almost triple the number of vulnerabilitie…
Lessons Learned from CISA’s Recent GitHub Leak
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a postmortem on a data leak in which a contractor published dozens of internal CISA credentials -- including…
Felons, Fraudsters Flog Offensive Cybersecurity Startup
A cybersecurity startup dangling millions of dollars to acquire zero-day security vulnerabilities in popular software is run by a pair of far-right conspiracy theorists and convic…
FBI Seizes NetNut Proxy Platform, Popa Botnet
The Federal Bureau of Investigation (FBI) said today it worked with industry partners to seize hundreds of domains associated with NetNut, a sprawling residential proxy service op…
Scattered Spider Hackers Plead Guilty on Day 1 of Trial
Two men pleaded guilty in the United Kingdom this week to criminal charges stemming from an August 2024 cyberattack that crippled Transport for London, the entity responsible for…
APT group HoneyMyte upgrades CoolClient: the backdoor gets a kernel-level Windows rootkit
Our experts discovered a new CoolClient backdoor variant with a kernel-mode rootkit driver that hides malicious processes, files, and network connections from security tools and t…
Armored Likho expands its cyber-espionage toolkit
Kaspersky experts break down a new Armored Likho campaign that poses as a fundraising efforts and delivers a new Still Toolkit aimed at stealing Telegram data and eavesdropping on…
Head Mare APT is exploiting vulnerabilities in an unpatched TrueConf server to deliver PhantomCore and PhantomGraph to video conference participants
Kaspersky experts have discovered malicious TrueConf software installers. The Head Mare APT group uses them to deliver the PhantomCore and PhantomGraph backdoors to target systems…
Project CAV3RN continues: Google Apps Script as C2 relay and DNS-based C2 channel selection
Project CAV3RN targets Israel with Google Apps Script C2 relays and DNS-based routing. Modular .NET NativeAOT framework blends C2 traffic with legitimate Google services to evade…
IT threat evolution in Q2 2026. Non-mobile statistics
The report presents key trends and statistics on malware that targeted personal computers running Windows and macOS, as well as internet of things (IoT) devices, during Q2 2026.
IT threat evolution in Q2 2026. Mobile statistics
This report contains mobile threat statistics for Q2 2026, along with noteworthy discoveries and quarterly trends: the Anatsa banker and a transition to droppers.
How legitimate cloud platforms enable phishers to bypass MFA
We cover a cloud-based AitM attack scenario leveraging service workers and Ultraviolet, and provide detailed phishing hosting statistics across platforms like Cloudflare Workers,…
An analysis of incidents at Brazilian educational institutions
Kaspersky expert provides statistics and details on several incident response cases at educational institutions in Brazil, as well as tips for schools and universities on how to s…
Network Anomaly Detection in KATA
An analysis of how Network Anomaly Detection (NAD) rules work within Kaspersky Anti Targeted Attack, using Kerberoasting and DNS tunneling attacks as examples.
OctLurk and SilkLurk: newly identified tailored backdoors in cyber-espionage campaign in Central Asia
Our experts discovered OctLurk and SilkLurk, backdoors operating primarily in memory, targeting Central Asia. They inject plugins to launch shells, scan networks, dump credentials…
From Unauthenticated API to Grid Risk: A Hybrid Inverter Vulnerability Explained
Can AI do novel security research? Meet the HTTP Terminator
A stranger has been reading Salesforce and ServiceNow portals worldwide for 17 months
CVE-2026-53360: KVM SEV-SNP guest-to-host heap OOB and analysis of the upstream fix
ERPNext's Document Follow feature exposed unauthorized data
GhostSplice: Malicious MCP Servers Split Instructions to Make AI Coding Agents Exfiltrate Secrets (ASSET Research Group)
Expired DMARC reporting endpoint exposed a NYSE Fortune 1000's infrastructure for $10
CopyEscape: Container-to-host arbitrary file write via docker cp (CVE-2026-17106)
ETW for Security Research: Providers, Sessions, and Detection Engineering
SMAP is Pre-Disarmed: How a Stack Pivot That Shouldn't Work Revealed a Kernel-Wide Design Compromise
Malware Crypting Services and the Threat Actors Who Sell Them
Mines, Minds, and Machines: The Journey of AI
The Hugging Face Hack Was Cheap Persistence at Work
July 2026 CVE Landscape
Emerging Threats to Neurotechnology
Hype vs. Reality: What the Hugging Face Incident Means for AI Safety
8 Ways AI is Changing Threat Intelligence
Dealing with AI-Generated Extortion
Iran War’s Secondary Effects Shape 2026 US Violent Extremism
Ransomware is the Scoreboard
MY TAKE: Black Hat 2026 Part 3 — Agentic AI can do the work, but somebody has to prove it
Security work used to leave a trail without anyone trying. A developer who wanted an open source library went and got it, and the license came along. An analyst who closed a case…
MY TAKE: Black Hat 2026 Part 2 — Security shifts to deciding in advance what an AI agent may reach
Humans get identity. That is what MFA and single sign-on are for, and we all understand the bargain: prove you are who you say, then go do your work. Machines get predictability.…
MY TAKE: Black Hat 2026 Wrap-up Part 1 — AI is forcing security and operations to merge in the SOC
Companies have kept security in one silo and operations in another for as long as both have existed. Related:Part 2 — deciding what AI can reach Agentic AI is collapsing the div…
News Alert: Pulse Security AI’s research reveals C-suite, board confidence gap on cyber exposures
LAS VEGAS, Aug. 5, 2026, CyberNewswire ﻗ Boards of directors believe they understand their company's security posture and what it means for the business. The security leaders pr…
BLACK HAT ROUNDTABLE: Security pros dissect fallout from Hugging Face’s double guardrail failure
LAS VEGAS – It's come to this. A cyberattack carried out by a machine. Worse, a machine that picked its own victim. Whether that counts as agency is where the experts below part…
News alert: Airlock extends endpoint control to govern AI agents and define operating boundaries
Atlanta, GAŌĆöAugust 4, 2026ŌĆöAirlock Digital, a leader in preventative endpoint security, today announced Agentic AI Control & Governance at Black Hat USA 2026. The new capabili…
News alert: Mallory links threat intelligence to governed response as exploit timelines shrink
Las Vegas, United States, August 4th, 2026, CyberNewswire – Mallory, the AI-native Threat and Exposure Management platform, today introduced a unified context and intelligence l…
News alert: Community voting shapes 2026 Cybersecurity Excellence Awards
LAS VEGAS, Aug. 4, 2026, CyberNewswire – The Cybersecurity Excellence Awards today announced the winners of the 2026 Community Choice Award, selected through 79,455 votes cast d…
BLACK HAT Q&A: The AI agent that clears the human door and slips past the machine gate
LAS VEGAS – Companies are deploying AI agents into everyday work at a pace no security program was built for. Related: AI layoffs pays for AI infrastructure As Black Hat USA 202…
BLACK HAT Q&A: SBOM claims what went in, binary shows what shipped, the risk lies between
LAS VEGAS – Almost every company can now produce a list of what’s inside its software. Almost none can prove the list is right. Related: SBOM’s role in cybersecurity Constru…
DEF CON 34 - Video Team - Hackers dot Town - The Gibson
DEF CON 34 - Video Team - Car Hacking Villlage
DEF CON 34 - Video Team - Ham Radio Village - Marvin Goes HAM
DEF CON 34 - Video Team - Physical Security Village
DEF CON 34 - Video Team - LEECH
DEF CON 34 - Video Team - EmbeddedSystems Village
DEF CON 34 - Video Team - PhreakMe
DEF CON 34 - Video Team - Voting Machine Hacking Village
DEF CON 34 - VideoTeam - Cliff Stoll AfterHours
DEF CON 34 - Video Team - Car Hacking Village - Charger Hacking
Microsoft named a Leader in the 2026 IDC MarketScape for MDR/MXDR for the Enterprise
Microsoft is named a Leader in the 2026 IDC MarketScape for MDR services. Discover how Microsoft Defender Experts MDR combines AI, threat intelligence, and human expertise.
DeadLock ransomware: Breaking down a Rust-based encryptor with decentralized recovery infrastructure
Microsoft Threat Intelligence examines DeadLock ransomware, an emerging financially motivated operation distinguished by its use of decentralized infrastructure to support victim…
Microsoft named a Leader in the KuppingerCole Leadership Compass for Cloud Native Application Protection Platforms (CNAPP)
Learn why KuppingerCole named Microsoft a Leader in its Leadership Compass: Cloud Native Application Protection Platforms report.
From open lures to cloaked gates: How a macOS ClickFix campaign learned to hide
A macOS ClickFix campaign shifted tactics from openly serving infostealer lures to hiding them behind a browser-fingerprinting gate. The change makes malicious infrastructure hard…
ChainDrop supply chain compromise: Anatomy of a self-propagating worm
A credential-stealing worm hidden in more than 400 compromised npm packages automatically spread across software ecosystems by republishing malicious updates. This analysis detail…
Advance Zero Trust for AI: New tools and guidance to secure AI agents and DevSecOps
Read how to apply Zero Trust for AI with new assessments, DevSecOps guidance, and practical tools to secure AI agents, code, memory, and cloud environments.
128 Seconds to disruption: Microsoft Defender stops ransomware at QNET
Microsoft Defender automatically isolated a compromised QNET endpoint in 129 seconds, stopping a multi-stage attack before the payload could persist or spread.
CaptiveCrunch: Midnight Blizzard targets travelers worldwide for malware delivery and credential theft
Storm-2945, a sub-cluster of the Russian threat actor Midnight Blizzard, has been observed compromising the sign-in portals of hospitality-related organizations such as hotels sin…
What’s new in Microsoft Security: July 2026
Explore July 2026 Microsoft Security updates, including agentic defense, AI threat protection, identity, data security, and advanced endpoint management.
Better security starts with better questions
Learn how better questions, trusted AI, and human judgment help security leaders make confident decisions and build resilient systems.
More than half of AI-generated patches are broken
Coast Guard says it is monitoring cyberattack that disrupted North Carolina’s ports
Capitol Hill wants to know if executive branch, foreign allies coordinated enough to combat scams
Despite federal warnings, thousands of U.S. industrial controllers used in water systems remain exposed online
Ransom Cartel creator sentenced to 16 years in prison
The water sector just got it’s wake-up call. Again.
Snowflake hacker pleads guilty, faces up to 32 years in prison
Tom Cotton prods Treasury for tax code tweaks to modernize OT
Open-source software’s archenemy TeamPCP goes back further than anyone thought
AI is getting better at election facts, but voters shouldn’t rely on it
Russian hackers can steal emails without a click
Proofpoint Joins Google Unified Security Recommended Program to Help Organizations Defend Against Today’s Most Sophisticated Threats
Recognition highlights Proofpoint's deep technical integration with Google Cloud Security solutions and commitment to helping organizations protect people, data and AI Helps
Proofpoint Launches OEM Program to Help Security Providers Embed Trusted Threat Intelligence and Detection Capabilities
Accelerates OEM innovation by embedding trusted threat intelligence into security products and customer-facing workflows. Helps partners deliver more prioritized,
Max-severity Exchange server flaw under active exploitation by Kremlin hackers
New warnings that Russian operatives are targeting the emails of US nuclear scientists and defense contractors
Russian Espionage Group Exploited Zimbra Zero-Day to Steal Mail and 2FA Codes
US and allies say Russian hackers stole emails without social engineering
The United States and more than a dozen allied nations said on Thursday that Russian hackers stole emails from users of the Zimbra email program without having to fool them into…
If you pay a hacker’s ransom, chances are that they’ll come back for more
Proofpoint Research Finds 65% of Organizations Affected by Ransomware Say AI Made Attacks More Effective
Global study reveals that AI is amplifying phishing, impersonation and credential theft, transforming ransomware into a human-centric extortion problem 40%
OAuth Client ID Spoofing Lets Attackers Validate Stolen Microsoft Entra Credentials
The risk awareness radar. A superpower every MSP needs to train
Most of the cyber incidents landing on our desks these days start with someone believing a lie. It’s not a brilliant piece of code that causes most breaches. A convincing email, a…
Heimdal data reveals MediaArena adware completes persistence before antivirus quarantine finishes
New data from Heimdal's telemetry measures the gap between execution of the MediaArena adware and the completion of quarantine. The same pattern has been confirmed across more tha…
How Heimdal grew from a bold idea into a global cybersecurity platform
Heimdal did not start as a traditional cybersecurity company. It started with two Danish cybersecurity researchers, a piece of innovative technology and a challenge. Could they cr…
MediaArena malvertising: why a quarantine isn’t the end of the incident
If Microsoft Defender quarantines BrowserModifier:Win32/MediaArena on one of your endpoints, the alert reads like a win. Our SOC data says treat it as a live persistence incident…
Tools Change. Teach People How to Keep Up
“Make everyone one percent better and it compounds across the team.” That’s the line Joe Head wrote about his own job and when I read it back to him, he didn’t hesitate. “That is…
The 4 best managed EDR service suppliers (and how to choose)
There are several cybersecurity companies that offer managed EDR services in 2026. Here’s what actually separates them, and who each one suits. Most successful cyber attacks begin…
Top 4 Best SOC Platforms 2026 – Provider Comparison
Without the right tools, no security operations centre (SOC) can do its job properly. A SOC platform brings together a range of security technologies that let your analysts rapidl…
Top 6 Managed Detection and Response Providers
There are several major managed detection and response (MDR) companies to choose from. We’ve compared the main offerings of the best MDR providers to help you decide which is righ…
Cyber-Aware Customers Are Raising the Bar for MSPs and Other Vendors
Your client is no longer just buying your security advice. They’re auditing whether you live by it. That was a clear message from my exclusive interview with Heather MacDonald Alf…
How to scale your patches without scaling your team (the patch wave)
Most breaches don’t start with a vulnerability nobody knew about. They start with one nobody patched in time. Vulnerability exploitation is now the single biggest way attackers ge…
Does AI Content Have to be Authentic — or Can It Just Be Effective?
What Is Visa’s DCAP? A Merchant’s Guide to Requirements, Benefits, and Rollout
The Gray Area in Your Checkout Is Costing You More Than You Think
Your Payment Routing Rules Are Making Decisions Without You
New at Forter: AI Agents Built to Amplify Your Team
Can AI Agents Find, Trust, and Choose Your Brand?
IMPACT Roadshow Recap: Getting Ready for Agentic Commerce
Agent-Ready: How to Prepare Your Site for AI-Driven Commerce
Japan’s 3DS Mandate: One Year In
One-Click Refunds Are Not as Hard as You Think
The DEF CON Advice Nobody Gives You | Threat Wire
OpenAI Turned Off the Guardrails | Threat Wire
Meta Logging Every Employee Keystroke | Threat Wire
Your Home Internet Has a New Owner | Threat Wire
Five Eyes Alert: The AI Deception Has Already Begun | Threat Wire
Miasma Worm Source Code Leaked (Plus: Anthropic's Fable RealityCheck) | Threat Wire
🔴 [PAYLOAD] Shark Jack Display 🦈
🔴 [PAYLOAD] 🍍📟 WiFi Pineapple Pager
🔴 [PAYLOAD] Shark Jack Display 🦈
Shark Jacked my LAN 🦈
The next measure of AI momentum is work transformed
New data from Microsoft 365 Copilot telemetry signals, along with examples from our customers around the world, demonstrate AI transformation in action.
Copilot in Excel: Built for the era of Frontier Finance
- Discover how Copilot in Excel transforms finance workflows with skills, data connectors, and capabilities for traceability.
Copilot Cowork is now generally available
Copilot Cowork is now generally available worldwide, bringing secure, AI-powered automation for complex enterprise tasks in Microsoft 365.
Introducing Microsoft Scout: Your always-on personal agent
Microsoft introduces a new, always-on personal agent, Microsoft Scout, integrated across the Microsoft 365 apps you use every day.
Announcing the new Work IQ APIs
Build enterprise agents with Work IQ APIs for Microsoft 365—bringing business context, tools, and secure, scalable intelligence into every workflow.
Introducing Microsoft 365 Business with Copilot: The new standard for small business
Meet Microsoft 365 Business with Copilot—the AI-powered solution transforming how small businesses work, collaborate, and compete.
Introducing a new design for Microsoft 365 Copilot
Copilot’s redesigned experience delivers faster performance, adaptive tools, and clearer AI-powered workflows to help you easily move from intention to outcome.
New and improved: Computer-using agents, a new workflows experience, and real-time voice experiences
Explore what's new in Copilot Studio, May 2026: computer-using agents are now available, plus redesigned workflows and Work IQ extensibility.
New and improved: Agent governance, intelligent workflows, and connected app experiences
See what's new in Copilot Studio, April 2026: updates to workflows, more control over agent operations, and an expanded agent usage estimator.
Copilot Cowork: From conversation to action across skills, integrations, and devices
Today, we’re announcing additional capabilities in Cowork to expand on what it can make possible for you.
Why the Open Secure AI Alliance Matters: Open Frontier Models, Open Deployment Flexibility
Tracking Over 35,000 Fake Sites in the 2026 World Cup Scam Wave
The Signs Were There: What the First Autonomous Ransomware Case Confirms
13M+ Emails Sent in Tech Support Scam Targeting Users, Organizations in Japan
Inside the OpenAI – Hugging Face Incident: The AI Breach With No Human Attacker Behind It
Federal Agencies Warn of Ongoing PLC Exploitation Against Critical U.S. Infrastructure
Device Code Phishing: Turning a Convenience Feature Into an MFA Bypass
Volume Is Not Risk: Making Sense of the “Vulnpocalypse”
Six Minutes to Compromise: How ‘Patriot Bait’ Actor Used AI to Build and Deploy a C&C Botnet
TONResolver RAT Abuses TON Blockchain to Target Japan's Hotel Industry
CISOs vs. Boards: Myth or Misunderstanding?
Escape Artists: 'Incorrigible' AI Models Resist Rehabilitation
Vatican's Official Prayer App Leaks 700K+ Global Users' PII
Default Azure Automation Setting Enables Cross-Tenant Identity Takeover
Europe's Multilingual Reality Exposes AI Security Gaps
Russian Hackers Exploit Zimbra Zero-Day Against US, Ukraine Targets
Agentic AI Challenges Progress in Confidential Computing
Brazilian Banking Trojan Actively Spreading in Portugal
Ransomware Attack Puts a Chill on Japanese Frozen-Food Chain
Flaws in Passkey Implementation Show Old Attacks Still Work
They hacked Google's AI in Seoul
☔️🌅
Life in the Nordics 🌲 | Foraging Blueberries, Mushrooms & Nosework Training with Our Dogs
Winter vanlife = good times
What an experience! Getting a Christmas tree from our own piece of land. #movingupnorth!
Had to much GLÖGG and lost my camera during - 13371122 - Intigriti + Visma
IS THIS THE END?
Escaping the grind and decompiling python 3.9 pyc files to find vulnerabilites
How to turn bugs into a "passive" income stream! ft Detectify's Almroot
HOW DID THIS HAPPEN!? (13370822 LHE VLOG)
Ransomware in the Dairy Aisle: A Look at Fairlife’s Cyberattack
UK’s Largest Cybercrime Case Ends in Prison for Spider Hacker
Hacking US Elections: The First Tranche of Declassified Election Integrity Documents
Inside Microsoft’s Record-Breaking 622-Bug Release
Breaking the Knot: Marlinspike Capital Inverts the Cybersecurity Investment Playbook
Inside “Gold Eagle”: The White House’s New AI-Driven Clearinghouse for Critical Infrastructure
CISA Warns Russian FSB Hackers Are Targeting Critical Infrastructure Routers
The Threat Mechanism and Mitigation of Pink Vishing Campaigns
See It Once, Stop It Everywhere
Cybercriminals Targeting World Cup Fans
78% of CFOs Say Payment Blind Spots Increase Customer Friction
85% of CFOs Say Automation Cuts Payments Friction
42% of Issuers Say AI Has Cut Fraud Losses by at Least $5 Million
LexisNexis and Promon Help Brands Fight Rising Mobile App Fraud
42% of Issuers Say Fraud and Disputes Are Driving Up Costs
JPMorganChase and Amazon Back Aspen Institute Drive Against Scams
World Cup Gives Cross-Border Payments Their Super Bowl Moment
Banks Face a New ACH Fraud Test as Nacha Rules Take Effect
The latest Nacha fraud rules require banks to expand fraud monitoring and adopt broader, risk-based oversight across ACH activity.
Nvidia Wants Banks to Hunt Fraud Rings, Not Just Bad Charges
Nvidia’s AI blueprint maps connections across accounts and devices to catch the fraud network, not just the charge.
AI Forces Compliance Teams to Rethink Alert Strategy
Forgotten UEFI shims undermining Secure Boot
ESET Threat Report H1 2026
Cyber readiness for SMBs: Getting the basics right
This month in security with Tony Anscombe – June 2026 edition
Inside the inbox: Why cybercriminals want to break into your email account
SMB cyber readiness: the road to resilience starts here
Gamaredon in 2025: Leveraging tunnels, workers, dead drops, and new alliances
ESET takes part in Operation Endgame to disrupt Amadey and Stealc
Killing me gently: Inside Gentlemen’s EDR killer framework
Protecting legacy OT systems against modern cyberthreats
CISA Adds One Known Exploited Vulnerability to Catalog
CISA Urges Hardening Fortinet Devices After Reports of Credential Exposure
CISA Adds One Known Exploited Vulnerability to Catalog
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA Adds One Known Exploited Vulnerability to Catalog
CISA Adds One Known Exploited Vulnerability to Catalog
CISA Adds Three Known Exploited Vulnerabilities to Catalog
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA Adds One Known Exploited Vulnerability to Catalog
CISA Adds One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to its KEV Catalog, based on evidence of active exploitation.
Apollo Pharmacy Blood Glucose Monitoring System APG-01 BT
CISA Adds One Known Exploited Vulnerability to Catalog
Schneider Electric EasyLogic T150 and Saitel DP
AVer PTC cameras
Rockwell Automation FactoryTalk Historian Site Edition
AzeoTech DAQFactory
Schneider Electric Easergy, EcoStruxture, PowerLogic, and Saitel Products
Mitsubishi Electric MELSEC iQ-F Series
Mitsubishi Electric Co.'s MELSEC iQ-F Series FX5-ENET/IP Ethernet Module
CISA Urges Hardening Fortinet Devices After Reports of Credential Exposure
Any solutions we can use?
Possible targeted attack
RoguePlanet: Windows Zero-Day That Weaponizes Defender's Own Quarantine Pipeline
Facebook messenger to text
Managing Solution Agents
Nottingham University data breach affects over 450,000 students
SWGs that support 3rd party external DNS resolver
Sub:jugation - Hijacking Cloud Identities by Recycling Namespaces in Global OIDC Issuers
Chrome extensions with 10M+ installations are actively vulnerable to UXSS & UXSG
Cybersecurity researchers aren't happy about the guardrails on Anthropic's Fable | TechCrunch
DIY pwnagotchi-like device on esp32
Flipper Blackhat + Bjorn
Do you think AI is making hacking easier or harder
What can i do left? PSN
Proxmark5 campaign ending in less than 18 hours.
How to bypass speed queen coin slot for washer and dryer
Self-hosting stuff for when things get ugly
Malware Includes Taboo In Text To Prevent LLM Analysis
added Mac support for my corporate hacking game, demo on Steam
Catfished
Reverse engineered BLE protocol of a $7 generic Chinese smart ring from Temu, and built an iOS app around it
[Reverse-Engineering] Skeet CS:GO source code (Gamesense)
[Reverse-Engineering] Skeet CS:GO source code (Gamesense)
Giulio Zausa's MMO-CHIP Makes Reverse Engineering Old Silicon Chips a Multiplayer Game
I built 99 adversarially malformed PE files to test tool robustness - here’s what happened
Drive Firmware Security - Phison S11
IDA 9.4 Beta | Hex-Rays Docs
Trane Tracer HVAC cybersecurity issues
🚀 Release PyMemoryEditor v2.0 — read, write and scan the memory of any running process, in pure Python (Windows, Linux & macOS)
I reverse engineered Lofree Hypace mouse firmware flashing protocol to bypass their official web based configuration on MacOS.
US charges suspected Russian hacker with facilitating cyber campaign
Hawkish GOP lawmaker Don Bacon says he was hacked by Russia
Oops, I Weaponized the Database: Abusing AI Features in SQL Server 2025
GreatXML: GreatXML bitlocker bypass vulnerability
GreatXML a bitlocker that seems to only work if you ever had Defender Offline Scan
I found 23 Chrome extensions hijacking 758,000 users' searches for affiliate revenue
[Op Report] From SSA Phish to AdaptixC2: A Multi-RAT Intrusion
GhostTrace – CLI forensic scanner for Windows: 22 modules, MITRE ATT&CK mapped, read-only by default
Miasma-style supply chain attacks
On affected platforms running Arista EOS where a tunnel decapsulation configuration—such as VXLAN (Virtual Extensible LAN), decap-groups, or a GRE (Generic Routing Encapsulation) tunnel interface—is present, the switch will incorrectly decapsulate and forward other unexpected tunneled packet
I built 99 adversarially malformed PE files to test tool robustness - here’s what happened
ClickFix attack in the wild — fake Cloudflare CAPTCHA delivering obfuscated PowerShell dropper
WordPress malware in official WooCommerce theme (Kiosko): hidden admin users and corrupted sitemap
Inside the DPRK-Linked Backdoor Loitering in the VS Code Marketplace
Fake Interview deploys stealthy cross platform (macOS/Windows) through npm package install in take home assessment
73 Microsoft GitHub repositories impacted by Miasma malware
Unauthorized Onlyfans Payment
Building A Malware Lab From Scratch Part 2!
Detecting npm Native Addon Malware: node-gyp Abuse
Microsoft Warns of GPU Cryptojacking Campaign Spread Through AI Chatbot Links
Microsoft Build 2026: Building agentic apps with Microsoft Fabric and Microsoft Databases
Microsoft Build 2026 highlights advancements in app development with Microsoft Fabric and Microsoft Databases, emphasizing a unified data and AI platform.
Azure IaaS: Defense in depth built on secure-by-design principles
Explore how Azure IaaS uses defense in depth and secure-by-design principles to deliver layered, scalable cloud security across compute, network, and data.
Enforcing trust and transparency: Open-sourcing the Azure Integrated HSM
Learn how Microsoft Azure Integrated HSM delivers hardware‑enforced key protection in the cloud, combining FIPS Level 3 assurances with transparency and open‑source collaboration.
Azure IaaS: Keep critical applications running with built-in resiliency at scale
Learn how Azure IaaS helps organizations start from a resilient platform foundation with availability, continuity, and recovery capabilities.
Azure IaaS: Explore new resources for building a stronger, more efficient infrastructure
Learn how Azure IaaS helps you modernize infrastructure, improve performance and resilience, optimize costs, and prepare for AI workloads. Read more.
Azure reliability, resiliency, and recoverability: Build continuity by design
Learn how Azure reliability, resiliency, and recovery capabilities work together to improve cloud continuity. Read more.
Defending Against China-Nexus Covert Networks of Compromised Devices
Iranian-Affiliated Cyber Actors Exploit Programmable Logic Controllers Across US Critical Infrastructure
U.S. organizations should review the TTPs and IOCs in this advisory for indications of current or historical activity on their networks, and apply the
Business Fraud at Network Scale: What the $3.5B Medicare Hospice Crisis Reveals About Know Your Business
What is Customer Due Diligence (CDD)
Why Legacy Identity Verification Can’t Stop AI-Enabled Fraud
AML, KYC and Identity Verification in Australia
When Fraud Becomes Background Noise: The Industrialization of Digital Deception
The Efficiency Era of KYC: Reverification and Reusable Identity Take Center Stage
The End of Static KYB: Business Identity in Constant Motion
Know Your Agent: The Next Chapter in Digital Trust
When Rules Move Faster Than Readiness: Regulatory Adaptability as a Competitive Advantage
Digital Identity Trends 2026: AI Fraud, Compliance, and Orchestration
AI in Tax Season: Risks, Scams, and How to Protect Your Data
Tax Season Scams to Watch For This Year
Beware of Misleading Tax Advice on Social Media
Each year the IRS educates taxpayers on the most trending fraud schemes that could deceive individuals and businesses during tax season. In late 2024, The IRS took to warning the…
Scammers Up Their Game With AI
Learn how to spot the threats and protect yourself from scammers using AI for phishing and deepfakes with smart security practices.
The Essential Guide to Safeguarding Your Online Passwords
Protect your personal and business data with strong passwords, two-factor authentication, and smart cybersecurity practices.
Beware: Tax Season is Scam Season
Tax season is also prime time for tax scams. To safeguard your personal information, consider these key points: Communication methods The IRS initiates contact primarily through m…
Stop Scams: Fraud Prevention Starts with Your Employees
You can be as proactive and protective as possible when it comes to cyber security for your business, but there’s one vulnerability you cannot eliminate: human error. In fact, sta…
‘Tis the Season for Holiday Shopping Scams
The holidays are typically the time of year for gifting presents to friends and family or donations to charity. Unfortunately, not-so-jolly fraudsters take advantage of this gener…
IRS Issues “Dirty Dozen” Fraud Warnings
Each year, the IRS releases a “Dirty Dozen” series to highlight the most common fraud schemes taxpayers should be aware of.
IRS Identity Theft Season Begins Now
Each year thieves try to steal billions in federal withholdings by stealing your identity. As the IRS focuses more attention on this quickly growing problem, now is the time of ye…
How FIN6 Exfiltrates Files Over FTP
Emulating FIN6 - Active Directory Enumeration Made EASY
The SECRET to Embedding Metasploit Payloads in VBA Macros
Offensive VBA 0x4 - Reverse Shell Macro with Powercat
Offensive VBA 0x3 - Developing PowerShell Droppers
Offensive VBA 0x2 - Program & Command Execution
Offensive VBA 0x1 - Your First Macro
Emulating FIN6 - Gaining Initial Access (Office Word Macro)
FIN6 Adversary Emulation Plan (TTPs & Tooling)
Developing An Adversary Emulation Plan
Student Loan Breach Exposes 2.5M Records
2.5 million people were affected, in a breach that could spell more trouble down the line.
Watering Hole Attacks Push ScanBox Keylogger
Researchers uncover a watering hole attack likely carried out by APT TA423, which attempts to plant the ScanBox JavaScript-based reconnaissance tool.
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Over 130 companies tangled in sprawling phishing campaign that spoofed a multi-factor authentication system.
Ransomware Attacks are on the Rise
Lockbit is by far this summer’s most prolific ransomware group, trailed by two offshoots of the Conti group.
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Tens of thousands of cameras have failed to patch a critical, 11-month-old CVE, leaving thousands of organizations exposed.
Twitter Whistleblower Complaint: The TL;DR Version
Twitter is blasted for security and privacy lapses by the company’s former head of security who alleges the social media giant’s actions amount to a national security risk.
Firewall Bug Under Active Attack Triggers CISA Warning
CISA is warning that Palo Alto Networks’ PAN-OS is under active attack and needs to be patched ASAP.
Fake Reservation Links Prey on Weary Travelers
Fake travel reservations are exacting more pain from the travel weary, already dealing with the misery of canceled flights and overbooked hotels.
iPhone Users Urged to Update to Patch 2 Zero-Days
Separate fixes to macOS and iOS patch respective flaws in the kernel and WebKit that can allow threat actors to take over devices and are under attack.
Google Patches Chrome’s Fifth Zero-Day of the Year
An insufficient validation input flaw, one of 11 patched in an update this week, could allow for arbitrary code execution and is under active attack.
No matching sources found.