⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
Ransomware attackers struck Colombia's Justice Ministry just days ahead of a presidential transition, highlighting ongoing threats to critical infrastructure and government organizations in the country. The attack reflects a broader surge in cybercriminal activity across Latin America, where state-linked and critical entities remain prime targets.
Microsoft's August 2026 Patch Tuesday addresses 421 vulnerabilities, 62 rated critical, including three zero-days. One Windows flaw has been actively exploited by the Lazarus group to gain SYSTEM privileges, while another publicly disclosed privilege escalation bug with a proof-of-concept poses additional risk.
LevelBlue SpiderLabs details how their machine-learning URL scanner identifies emerging phishing campaigns by tracking instances where their engine is the sole detector on VirusTotal. The blog examines several notable campaigns that employ multi-stage redirection chains, where victims are relayed through multiple infrastructure layers to evade detection.
At Black Hat USA 2026, AI dominated discussions, but the central takeaway was not about its capabilities but the pressing question of accountability when AI systems fail. The article explores how cybersecurity controls lag behind rapid AI advancements, leaving organizations and regulators grappling with who bears responsibility for breaches or errors.
Attack Chains addresses the challenge of disconnected security alerts by automatically linking low-confidence signals into a coherent attack narrative. Instead of burdening analysts with manual correlation, the solution provides a unified view of adversary campaigns unfolding within the environment.
Three separate data breaches at Britain's ACRO criminal records office went undetected for two years due to unread antivirus alerts and an unpatched content management system. A reprimand notice revealed the security lapses that exposed sensitive criminal records data.