Breaches, vulnerabilities and the people cleaning up after them. Reporting for defenders, not for panic.
Prosecutors have brought wire fraud and money laundering charges against five alleged leaders of the Black Axe cybercrime organization, which orchestrated a decade-long scheme targeting US victims through romance scams and advance-fee fraud.
Cisco has released a patch for a critical vulnerability in its Secure Email Gateway that attackers have been actively exploiting since September 2026. The flaw allows unauthenticated remote attackers to execute commands with root privileges.
Microsoft has issued out-of-band fixes for Remote Desktop Services failures and related issues that emerged following this month's security patches, affecting multiple Windows and Windows Server versions.
A vulnerability in a VPN device used by Japan's Government Solution Service enabled attackers to access personal data of government workers and officials. The Digital Agency discovered the intrusion on June 25 and contained it within days.
Twitch Enhanced Viewer | JeetBot, installed by over 30,000 users across Chrome and Firefox, transmits authentication credentials to a commercial streaming service operated in Russia, leaving tokens exposed in server logs.
A widespread scanning operation is targeting internet-accessible Vite development servers to extract sensitive cloud credentials and configurations, exploiting a high-severity file access bypass vulnerability.
A September 23, 2026 webinar will examine how attackers use malicious OAuth applications and social engineering to breach Google Workspace environments without needing to steal passwords or exploit vulnerabilities.
The fintech platform disclosed that attackers obtained customer financial records and identity documents by spoofing official government communications.
