⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
Microsoft is now enabling Windows settings backup and restore by default on enterprise systems that are joined to Microsoft Entra and running Windows 11 26H2. This change aims to simplify user data recovery but may require administrators to assess data governance and security policies.
This article reports that Malwarebytes received multiple independent security testing awards, including a perfect AV-TEST score, MRG Effitas Level 1 Certification, and 100% threat prevention in AVLab tests. These results confirm the product's strong protection, performance, and low false positive rates.
This article covers a major data breach at the Defense Manpower Data Center that exposed personal information of millions of military personnel, veterans, and families. The attackers exploited a file-sharing system vulnerability over roughly nine months, prompting government notifications and raising serious concerns about identity theft risks.
OpenAI disrupted a coordinated distillation campaign that illicitly extracted protected reasoning from its AI models, attributing the activity to individuals associated with Moonshot AI. The operators manipulated model interactions at scale without breaking encryption, and OpenAI has since deployed additional mitigations and closed a pathway for replaying encrypted reasoning.
This article reports that CISA added a critical authentication bypass flaw in Cisco Catalyst SD-WAN Manager to its KEV list due to active exploitation. The vulnerability, CVE-2026-76504, allows unauthenticated remote attackers to access the system with admin privileges.
Cisco Talos researchers share practical ways defenders can frustrate adversaries at different stages of an operation, including deception techniques, behavioral detections, and breaking dependencies between stages. These methods slow adversaries down, increase visibility, and force them to change course, costing them time and resources.