Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
CISA has confirmed that ransomware gangs are actively exploiting two recently patched SonicWall SMA1000 vulnerabilities, including a critical SSRF flaw. The advisory urges organizations to apply the available patches to defend against these attacks.
AI is making phishing, credential theft, and social engineering more efficient, bypassing traditional trust signals like passwords and MFA. Specops examines why organizations are adopting device trust as a key component of Zero Trust strategies.
LevelBlue SpiderLabs investigated a case where a loader chain led to an undocumented remote access trojan (RAT) named CNCMachineRMS. The analysis traces the infection process and reveals the unexpected final payload.
Check Point's weekly threat intelligence report covers multiple incidents, including a cyberattack on North Carolina Ports, a Ryde data breach affecting 4.5 million users, and a Coinkite bitcoin theft. The report also details a Beacon data breach impacting charity CRM software.
Justin Swaddle, a member of The Com from Leeds, was jailed for two years for abusing over 100 girls worldwide. The National Crime Agency reported he targeted 117 victims aged 13 to 17.
North Korea's Kimsuky hacking group is assembling offline AI tools to automate phishing and malware development. Genians found evidence of running language models on their own servers, pointing to faster, harder-to-detect attacks.