⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
Cisco Talos IR reports phishing and authentication abuse as top attack vectors in Q2 2026. Ransomware incidents remained steady, with attackers using trojanized remote management tools for stealthy access.
Phishing was the leading initial attack vector in Q2 2026, accounting for over half of Cisco Talos IR engagements—up from a third last quarter. Attackers used QR code-embedded PDFs hosted on trusted cloud platforms to bypass email gateways, while authentication abuse surged to 65% of cases, with adversaries exploiting MFA weaknesses via AitM proxies, session-token theft, and MFA fatigue.
Phishing was the primary means of gaining initial access this...
This article from Cisco Talos IR reports on Q2 2026 incident response trends. Phishing remained the top initial access vector, appearing in over half of engagements, while authentication abuse increased significantly.
JetBrains patched CVE-2026-63077 (CVSS 9.8) in TeamCity On-Premises, an unauthenticated remote code execution vulnerability exploitable via the agent polling protocol. All on-premises versions are affected, with fixes in versions 2025.11.7 and 2026.1.3.
JetBrains has issued an urgent warning to users of on-premise versions of TeamCity to update their software following the discovery of a critical vulnerability, CVE-2026-63077, with a CVSS score of 9.8. This flaw, discovered by Antoni Tremblay on July 10, 2026, allows unauthenticated attackers to bypass authentication checks and execute arbitrary operating system commands on the TeamCity server.