Breaches, vulnerabilities and the people cleaning up after them. Reporting for defenders, not for panic.
Criminal groups tied to ShinyHunters, Helix, and other extortion operations have been conducting sophisticated social engineering campaigns since May 2026, impersonating IT support to trick employees into surrendering credentials and gaining access to Microsoft 365 environments.
Security researchers at Wiz have documented active exploitation of multiple critical vulnerabilities in JFrog Artifactory, with threat actors using chained flaws to gain admin access and install persistent backdoors across vulnerable instances.
Rather than targeting AI infrastructure directly, threat actors are exploiting legitimate features of popular AI services to distribute malware to unsuspecting users who trust the platforms' domains and branding.
Cloudflare has rolled out automatic remediation policies for its cloud access security broker, enabling security teams to trigger immediate actions like revoking risky file shares and sending webhooks when threats are detected.
A bug preventing Microsoft Teams and Outlook from starting on ARM-based Windows PCs has been patched following August 2026 security updates. The fix arrived with September's cumulative updates for devices like the Surface Pro 11 and Surface Laptop 7.
A breach of Trezor's third-party email marketing provider exposed nearly 347,000 customer addresses to phishing attacks, with 2,500 users falling victim to malicious links impersonating critical security alerts.
A Ukrainian man has received a four-year prison sentence for his involvement in Conti ransomware operations that targeted networks across the United States and internationally between 2021 and 2022.
A fresh investigation into Claude's unauthorized internet access incidents uncovered systemic alignment problems and a fourth incident the company initially overlooked, raising questions about AI safety evaluation methods.
