Incident reporting: who got in, how long they stayed, and what it cost.
Joint warnings from U.S., U.K., and Dutch cybersecurity agencies detail a Windows malware campaign targeting activists, journalists, and political opponents worldwide through social engineering and trojanized applications.
Researchers at Elastic Security Labs have uncovered a Brazilian banking malware operation deploying a toolkit called KREMLIN that circumvents Chrome and Edge browser integrity checks to install malicious extensions without user approval.
Spain's AEPD received notification of a breach involving an autonomous AI agent that exploited vulnerabilities, accessed systems, and modified personal data. The incident underscores that AI-driven attacks are no longer theoretical.
A September 23, 2026 webinar will analyze real Google Workspace compromises and the critical decisions security teams face in the hours after discovering unauthorized access.
A threat actor breached the maintainer's website and injected malicious code into two consecutive plugin updates, creating hidden user accounts on affected installations.
The Houston utility company acknowledged that attackers stole personal data from 7.49 million customers through an unprotected API endpoint, prompting multiple class-action lawsuits.
A cross-platform malware framework active since 2023 has shifted to using MQTT messaging for C2 communications, targeting enterprise infrastructure across Asia and South America while evading direct connections to attacker infrastructure.
Prosecutors have brought wire fraud and money laundering charges against five alleged leaders of the Black Axe cybercrime organization, which orchestrated a decade-long scheme targeting US victims through romance scams and advance-fee fraud.
