The U.S. has charged 17 Iranians, alleged members of a hacking-for-hire company called Mabna Institute, involved in years-long operations that stole data from American organizations. […]
US charges Iranian hackers over $3.4 billion intellectual property theft Read More »
Huntress observed a 155x increase in password spraying attacks in H1 2026, including a campaign that generated more than 81 million login attempts in two weeks. The attacks exploited legacy authentication and gaps in MFA policies that left some login flows unprotected. […]
Password spraying attacks surge 155x as hackers exploit MFA gaps Read More »
Most email defenses still do the job they did a decade ago. Scan the message, look for something malicious, block it. That worked when the danger sat in the payload, a bad link or an attachment. It stopped working when the danger moved into the message’s intent, and it is failing now that the sender
Phishing 3.0: The Fight Moves to Agent Versus Agent Read More »
Cybersecurity researchers have flagged a global cybercrime operation that abuses thousands of hacked WordPress websites as infrastructure to disseminate malware, commandeer infected hosts, store stolen documents, screenshots, and activity logs created to track the status of the activity. “The operation doesn’t rely on a single piece of malware, but on a whole toolkit of criminal
StopAndProtect Uses Nearly 2,000 Hacked WordPress Sites to Spread Malware and Steal Data Read More »
Microsoft has resolved a bug that caused Windows Defender to crash after a recent security update, resulting in 0xc0000005 access violation errors on some affected systems. […]
Microsoft fixes known issue causing Windows Defender crashes Read More »
Microsoft has reminded customers that systems running Home and Pro editions of Windows 11 24H2 will stop receiving updates in two months. […]
Windows 11 24H2 Home and Pro reach end of support in 2 months Read More »
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned that hackers are exploiting a critical-severity remote code execution (RCE) flaw in the Windows Internet Key Exchange (IKE) Service Extensions component. […]
Critical RCE flaw in Windows IKE Extension now actively exploited Read More »
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added four critical vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, stating they are being exploited in the wild. The shortcomings added to the KEV catalog are listed below – CVE-2026-65400 (CVSS score: 9.8) – An improper authentication vulnerability impacting Apple macOS that could allow
Critical macOS, SharePoint, vCenter, and Microsoft IKE Flaws Under Active Exploitation Read More »
A JavaServer Pages (JSP) web shell deployed following the exploitation of a critical security flaw in PTC Windchill and FlexPLM servers is specifically designed for the enterprise Product Lifecycle Management (PLM) software, according to new findings from ReliaQuest. The cybersecurity company characterized the web shell as a fully equipped extortion platform capable of mapping sensitive
Clop-Linked Windchill Web Shell Decrypts Credentials and Maps Engineering Data Read More »
Microsoft Defender Experts have linked more than 30 web domains to MacSync Stealer, a macOS-focused information stealer, after correlating recurring endpoint and network behaviors across changing infrastructure, tracing the malware from payload retrieval through data collection, staging, and exfiltration. The tech giant said it required multiple endpoint and network behaviors to align before
Microsoft Links 30+ Rotating Domains to MacSync Stealer Infrastructure Read More »