The File That Turns One Windows Breach Into Every Password in the Domain
This was a controlled simulation, not a newly disclosed victim breach. Its value is showing where defenders can still break the chain before domain credentials leave.
Incident Response
AI Agents Attacked 105 Retailers in Six Days for About $25 Each
The operator supplied short instructions. The agents did the patient probing, exploitation and persistence at a pace most defenders were not built to match.
CISA Gave Zyxel Switch Owners Until Thursday to Fix an Exploited LAN Flaw
The flaw is reachable from the local network, not necessarily the public internet. That makes internal exposure and earlier compromise the questions that matter.
Your Private Screenshots Were One Server Bug Away From Public View
Gyazo stored far more than pictures. Attackers obtained user records, OCR text, location data and information used to construct image URLs.
Hackers Reached Colorado Water Controls Without Stopping the Pumps
The attackers reached operational settings. Operators disabled remote access, while officials said water delivery and public safety were not affected.
A Departed Employee’s Token Quietly Opened 170 Private Security Repositories
The employee had left. The token had not. GitHub traced the access path back to the wider TanStack supply-chain incident.
CISA Gave Three Linux Kernel Bugs a Three-Day Deadline
The catalogue entries share a deadline, not necessarily an attacker or exploit chain. Each Linux kernel flaw needs its own exposure check.
Spain’s Reported AI-Agent Breach Happened Behind a Login That Worked
A legitimate login did not mean legitimate intent. Spain's data-protection authority describes an alleged AI-agent attack, while warning that the organisation's report still needs analysis.
The WordPress Update Was Backdoored, Then Its Replacement Was Compromised Too
Installing the replacement was not enough: the developer says a second intrusion compromised it too. Site owners need a recovery decision, not another green update badge.
Attackers Are Bypassing Cisco ISE’s Login and a Clean Log May Not Mean You’re Safe
The platform deciding who may enter your network has an exploited login bypass. Patching Cisco ISE closes the flaw, but deciding whether a node can still be trusted takes a separate investigation.