⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
LevelBlue's SpiderLabs released the Q2 2026 TTP Briefing, analyzing the latest tactics, techniques, and procedures observed during frontline incident response investigations. The report highlights that stolen identities are increasingly outpacing existing defense capabilities, emphasizing the need for improved security measures.
The LevelBlue SpiderLabs Q2 2026 TTP Briefing highlights a surge in identity-based attacks, with stolen credentials outpacing defensive measures. Threat actors increasingly exploit weak authentication protocols and compromised identities to bypass traditional security controls, targeting organizations across finance, healthcare, and critical infrastructure.
LevelBlue SpiderLabs' Q2 2026 TTP Briefing highlights a surge in identity-based attacks, with stolen credentials outpacing defensive measures. The report, based on global incident response investigations, reveals that adversaries are increasingly leveraging compromised identities to bypass traditional security controls.
filepath.Join was never designed to be a security boundary. We found two CSI drivers that shipped on the assumption it was, and the result was cross-tenant data access with optional node destruction, using nothing more than a valid Kubernetes manifest.
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to disclose sensitive information, cause a denial of service, or potentially execute arbitrary code.
The UK's National Cyber Security Centre and international partners have issued a warning about a new zero-click phishing campaign. The campaign is attributed to the Russian state-sponsored cyber threat group known as LAUNDRY BEAR and targets Western organizations.