Threat actors are increasingly using dark web forums and marketplaces to coordinate supply-chain attacks, with intelligence analysts identifying early warning indicators months before public disclosures. Recent analysis reveals that compromised vendor credentials, stolen code-signing certificates, a
Linus Torvalds says AI-generated bug reports are flooding Linux security mailing lists, making them “almost entirely unmanageable.” New rules incoming.
The Federal Communications Commission (FCC) has proposed new regulations that would effectively eliminate anonymous phone ownership in the United States by requiring identity verification for all mobile device activations. The proposal mandates carriers to collect and verify government-issued identi
HOLLOWGRAPH represents a sophisticated cyber espionage campaign that abuses Microsoft 365 calendar functionality as command-and-control (C2) infrastructure. Threat actors exploit legitimate calendar sharing features to establish covert communication channels, encoding commands within calendar events
Microsoft just took down Fox Tempest, a criminal network that helped hackers sign malware with fake certificates to bypass security. Trust nothing.
Oracle E-Business Suite (EBS) is being actively targeted through CVE-2026-46817, a critical vulnerability allowing unauthenticated remote code execution. Attackers are exploiting this flaw in the wild to gain initial access to enterprise systems, deploy web shells, and establish persistence. Organiz
Gentlemen ransomware-as-a-service (RaaS) has emerged with sophisticated tactics that leverage multiple Endpoint Detection and Response (EDR) killing tools to disable security software before encryption. The operation employs bring-your-own-vulnerable-driver (BYOVD) attacks and exploits legitimate ut
Windows 11 finally restoring taskbar features users have demanded for 5 years. Small taskbar and customizable Start menu also in testing.
JetBrains has disclosed multiple critical vulnerabilities affecting its popular IDE products, including authentication bypass and remote code execution (RCE) flaws. These vulnerabilities impact TeamCity, YouTrack, and other JetBrains server products, potentially allowing attackers to gain unauthoriz
A comprehensive year-long analysis of Microsoft Defender for Office 365 reveals significant strengths and weaknesses in email security protection. The benchmark data shows a 97.4% phishing detection rate but identifies concerning gaps in zero-day threat protection and business email compromise (BEC)