1,437 articles
VulnerabilityTwo of this year’s fastest CISA remediation deadlines hit devices that cannot run EDR. A practical checklist for the class attackers reach for first.
Palo AltoA newly catalogued authentication bypass in Palo Alto Networks PAN-OS lets an unauthenticated attacker reach management functionality. Here is the exposure and the fix.
CrowdStrikeCrowdStrike revealed Slim Spider, a financially motivated cybercrime group abusing cloud IMDS credentials to penetrate Brazilian instant payment (Pix) and crypto custody systems.
LinuxRed Hat patched CVE-2026-76578 (CVSS 9.8) in FreeIPA and 389 Directory Server, where an LDAP Access Control Instruction flaw allowed unauthenticated clients to create permanent domain admins.
Deep DiveThe European Commission’s cybersecurity package proposes amendments to NIS2 and a revised Cybersecurity Act. Here is what compliance teams need to track.
Crypto / Web3A vulnerability in the Elements sidechain protocol led to an unauthorized 4,000 BTC withdrawal from the Liquid Federation multi-sig peg, prompting an emergency network freeze and partial fund recovery.
DevSecOpsA practical, ordered checklist for defending against malicious packages and install-time credential theft — with the exact commands and settings.
Deep DiveThe Chinese state-aligned group has moved well beyond telecoms into transportation and government, in what is now one of the broadest espionage campaigns on record.
Deep DiveWith 99% of SaaS compromises originating at the identity provider, MFA is no longer the control organisations think they bought. Here is what changed.
Emerging crews Storm and Krybit claimed attacks on two healthcare providers, with a combined 244 GB of patient and employee data alleged stolen.
Deep DiveThe 2026 benchmark from foothold to active exfiltration is 72 minutes, a fourfold reduction. Human-paced triage no longer fits inside the window.
DevSecOpsA self-propagating worm compromised hundreds of popular npm packages, harvesting cloud keys and CI tokens then using them to publish further poisoned releases.
Four high-severity vulnerabilities in widely deployed enterprise software — including a build-artefact repository that sits directly in the software supply chain.
DevSecOpsA campaign beginning in late June 2026 built hundreds of fake brand repositories on GitHub and used SEO to place them at the top of software download searches.
CiscoCisco disclosed CVE-2026-20212 (CVSS 9.8), an unauthenticated root code execution flaw on Silicon One-based Nexus 9000 datacenter switches due to open debugging ports.
Threat IntelResearchers logged 7.4 million infected devices between January and June 2026 — a 27% jump — as the infostealer market matured into a fully automated criminal supply chain.
Deep DivePublic companies must disclose material cyber incidents within four business days. The deadline is simple; deciding what counts as material is not.
An August attack compromised multiple VMware ESXi nodes at hosting provider HostDZire, encrypting virtual disks beyond recovery across India, the Netherlands and the US.
Adversary-in-the-middle phishing now defeats standard MFA at industrial scale. Microsoft tracked a single April 2026 campaign spanning 26 countries in 72 hours.
The Rhysida group claimed an attack on Berlin’s Senate network, part of a run of incidents that also struck a national tax authority and a justice ministry within two weeks.
A cyberattack on CEVA Logistics stopped goods moving out of eight European sites, delaying deliveries for major customers and reviving hard questions about logistics resilience.