An active exploitation campaign targeting FortiGate firewalls, in which attackers weaponize a critical vulnerability to plant ...

ScreenConnect abuse shows worm-like propagation of a four-stage VBScript chain; ConnectWise advises disabling file transfers ...

SonicWall patched two zero-days in SMA 1000 VPNs, including a CVSS 10 pre-auth SSRF flaw, after confirming active ...

Fire Ant hackers, a China-linked espionage group, hacked Cisco routers and enterprise authentication servers in 2026, ...

Fire Ant compromises Cisco routers to spy on traffic, hide activity, and move toward high-value systems across networks.

Alleged Chinese-speaking actor breached Philippine nuclear and naval targets by exploiting known flaws, stealing sensitive ...

Microsoft Threat Intelligence provides analysis of a ClickFix campaign that uses fake CAPTCHA prompts, DLL sideloading, and a reverse tunnel, with detections and hunting guidance.

Rob Allen from ThreatLocker joins us to discuss securing agentic AI with zero-trust controls, least privilege, and access ...

SPECTRE backdoor, deployed by Chinese-speaking hacker group UAT-10147, blinds CrowdStrike Falcon, SentinelOne, and Microsoft Defender at the kernel level using BYOVD callback unlinking while all three ...

The Open Secure AI Alliance introduced SAFE guidelines and open agent-security tools at Black Hat, giving enterprises a framework for safer AI deployment.

In an unprecedented move, Marvel has published the first three pages of its Spider-Man: Brand New Day script, revealing exactly how the movie begins. The film's opening minutes incorporate much of the ...

A cyber threat actor is using the React2Shell vulnerability as the basis for a widespread credential-harvesting campaign that has compromised everything from AI tool API keys to cloud platform ...