Breaches, vulnerabilities and the people cleaning up after them. Reporting for defenders, not for panic.
The FBI seized domains belonging to NightmareStresser, a major booter service that rented botnet access to conduct distributed denial-of-service attacks. The action is part of Operation PowerOFF, an ongoing international law enforcement effort targeting DDoS-for-hire infrastructure.
A China-linked threat group has been conducting sustained attacks on government agencies across eight Latin American countries using a sophisticated new backdoor that replaces their previous custom malware.
Microsoft has released a temporary fix for a critical authentication issue affecting Windows 11 users after this month's security patches inadvertently enabled Machine Identity Isolation enforcement on incompatible systems.
Cisco has released patches for a critical Identity Services Engine vulnerability being actively exploited in the wild, with the U.S. government mandating remediation for federal agencies within three days.
Microsoft is investigating reports that a recent security update is severing domain trust relationships, locking users out of enterprise systems even with valid credentials.
Joint warnings from U.S., U.K., and Dutch cybersecurity agencies detail a Windows malware campaign targeting activists, journalists, and political opponents worldwide through social engineering and trojanized applications.
Researchers at Elastic Security Labs have uncovered a Brazilian banking malware operation deploying a toolkit called KREMLIN that circumvents Chrome and Edge browser integrity checks to install malicious extensions without user approval.
A New Jersey judge has transferred 14 domain names from the Radaris data broker network to plaintiffs after the company repeatedly dodged legal accountability for publishing law enforcement officials' personal information.
