Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
Content In the second quarter of 2026, the AhnLab SEcurity intelligence Center (ASEC) collected and analyzed attack logs targeting poorly managed Linux SSH servers through honeypots.
AhnLab ASEC analyzed attack logs from Q2 2026 targeting poorly managed Linux SSH servers via honeypots. The analysis covers attack sources that progressed to malware installation commands and includes malware statistics.
This report highlights a notable increase in exploits targeting public assets, identities, and AI stacks in Q2 2026. CISA KEV listings rose to 75, a 27% increase compared to the same period in 2025.
This report from AhnLab ASEC analyzes attack logs from Q2 2026 targeting MS-SQL and MySQL servers on Windows. It summarizes the damage, attack status, and classification of malware and tools used.
AhnLab ASEC compiled an analysis of attack status for poorly managed Windows web servers in Q2 2026. The report targets IIS and Apache Tomcat servers and classifies the malware used.
Google, in coordination with the FBI and Lumen, disrupted the NetNut residential proxy network, also known as Popa, by disabling accounts and sharing technical intelligence. This action builds on a previous disruption of the IPIDEA proxy network and aims to degrade NetNut's operations and its reseller program.