Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
Broadcom has released security updates to fix five vulnerabilities in VMware vCenter, ESX, Workstation, and Fusion, including three critical flaws that allow attackers to bypass authentication, execute arbitrary code, or escape from a virtual machine to the host.
This article is a personal narrative about a challenging hike in Shenandoah National Park, describing the steep climbs and rock scrambles. It is not related to cybersecurity.
Talos Intelligence's Q2 2026 Incident Response Trends report reveals a sharp rise in authentication abuse and advanced phishing tactics, with phishing accounting for over half of all engagements. Attackers are exploiting QR codes and platforms like ARToken to bypass multi-factor authentication (MFA), while ransomware groups abuse legitimate tools like MeshAgent and Zoho Assist for stealthy access.
Welcome to this week’s edition of the Threat Source newsletter.
This article is a personal narrative about a challenging hike in Shenandoah National Park, describing the steep climbs and rock scrambles. It is not related to cybersecurity.
Amazon Inspector has introduced a plugin system for its SBOM Generator (inspector-sbomgen), a tool that creates software bills of materials (SBOMs) for AWS workloads. The new plugin capability allows users to write custom package collectors without needing source code compilation or waiting for official releases.