Current analysis, technical guidance and reporting across security, infrastructure, automation and artificial intelligence.
Cl0p’s Windchill campaign is not primarily a story about a list of famous victims. It is a warning about what happens when dozens of enterprises expose the same high-value software weakness at the same time. Cl0p says it stole data…
Google found an agentic attack framework managing more than 23,800 harvested secrets. In a separate operation, another framework built and launched a credential campaign in under six hours.
A new White House programme will let vetted U.S. security companies conduct surveillance and disruptive operations against foreign cybercrime groups under federal direction. It is a significant expansion of private-sector offensive capability, but the memorandum’s legal guardrails leave difficult questions about attribution, accountability and escalation.
Researchers found that Belgium’s widely used Connective signing extension could expose eID and Maestro card data, recover PINs and execute attacker-controlled code through its native host. The flaws were fixed in July, but the case shows how a powerful browser extension can quietly undermine an otherwise strong national identity system.
Exploit code for CVE-2026-55040, a Microsoft SharePoint authentication bypass, was weaponised almost immediately after Rapid7 published its analysis. With thousands of SharePoint servers exposed online and a separate SharePoint flaw now tied to ransomware, administrators should treat patching, exposure reduction and compromise checks as one urgent task.
What evidence should justify an identity decision? Practical review questions for remote certificate providers.
Organisations have sent hundreds of thousands of messages, credentials and attachments to addresses at domains they did not control because developers treated names such as noreply.net and deleteduser.com as harmless placeholders. Those domains were not fictional. Security researchers registered them…
Trezor says ShipMonk retained data it had promised to delete, exposing another 67,000 US customers to phishing and potential physical-security risk.
NASA's AIT-GUI exposed command, script, and sequence functions without authentication or CSRF protection. Even a private deployment could be reached through an operator's browser.
Reco has linked sustained Salesforce and ServiceNow probing to one IP and a custom Go toolset, exposing how over-permissioned guest identities become cross-platform data-extraction paths.
Microsoft’s August 2026 updates fix a WinSock privilege-escalation flaw used by North Korea’s Lazarus group against defence, aerospace and aviation organisations. The exploit helped Operation Dream Job turn a local Windows foothold into SYSTEM access, deploy a kernel rootkit and interfere with endpoint-security controls.
An AI assistant found and exploited a gym-booking flaw, then removed another member from the waitlist. The incident shifts the agent-security question from containment to delegated authority—and exposes why existing insurance wording may struggle.
