Breaches, vulnerabilities and the people cleaning up after them. Reporting for defenders, not for panic.
Threat actors are exploiting Bing's trusted domain in Google search advertisements to funnel macOS users toward fake Claude installers that execute malicious commands through a technique researchers call "Adception."
Attackers are chaining two unpatched vulnerabilities in AhsayCBS backup software to breach organizations and deploy cryptocurrency miners and webshells, affecting at least five targets as of early October.
Federal authorities have apprehended another alleged member of the ShinyHunters extortion group in connection with last month's compromise of FBI systems, marking the latest in a series of enforcement actions against the increasingly fragmented criminal operation.
A Russian national believed to hold a senior position within the Qilin ransomware operation has been arrested in Germany following his extradition from Japan, where he was detained while traveling.
Security researchers have detected real-world attacks targeting CVE-2026-102255, a maximum-severity flaw in SonicWall SMA1000 appliances, within days of the company's Tuesday patch release.
Oleg Korniev admitted to managing Your Mule Cashout, a criminal organization that processed over $14.7 million in stolen funds for cybercriminals across multiple continents since 2007.
Microsoft is warning that devices running outdated Windows editions will lose access to Windows Update services once security certificates expire in mid-2027, unless administrators and users upgrade to supported versions beforehand.
A new remote code execution vulnerability in NetScaler ADC and Gateway appliances requires urgent patching, though Citrix says no active exploitation has been detected yet.
