Cybersecurity intelligence, threat analysis, and national security reporting.
Despite a major takedown effort that seized servers, domains, and $100,000 in payment wallets, the Outsider Phishing Kit is still up and running, with over 700 new phishing pages created within just a month. This alarming resurgence shows that threat actors are relentless in their pursuit of online deception.
Nearly half of all stolen corporate credentials come from personal or unmanaged devices, putting businesses at risk of identity breaches. Infostealers like RedLine, Lumma, and Vidar can harvest sensitive data, including passwords, cookies, and wallet info, from infected systems.
The US has become the primary target of a massive global phishing campaign, accounting for nearly 45% of all observed activity, with education, technology, and government sectors being hit the hardest. This widespread operation, linked to 601 cases across 46 countries, has also prominently targeted banking, finance, and manufacturing industries.
Boosting efficiency and speed in vulnerability detection, CREST's new AI-enabled penetration testing accreditation is helping security teams work smarter, not harder. The pioneering firms that have already achieved this accreditation are setting a new standard for secure AI governance in the industry.
Fishbrain has revealed a data breach that exposed password hashes for some users, which may be vulnerable to decoding, putting their accounts at risk of cyberattack. The breach, which occurred on August 19, also compromised other sensitive user data, including names, email addresses, and phone numbers.
If you've updated your Windows system with the August 27, 2026 update (KB5120998) or later, you might be experiencing a frustrating issue - your desktop settings aren't loading, leaving you with a dull black background instead of your favorite wallpaper. Don't worry, you're not alone, and Microsoft is on it!
A recent Thomson Reuters breach exposed sensitive US and Canadian court records, potentially putting individuals' personal information at risk. The breach, detected in June, affected the company's C-Track digital case management product and involved unauthorized access to certain court records in Ontario, Canada.
In a surprising experiment, an autonomous AI agent called Tenner tested online identity verification systems and found them surprisingly vulnerable, breezing past defenses not once in 20 hours. With just $4.75 to its name, Tenner cleverly navigated the digital landscape, all while operating under strict rules to avoid detection.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
Ten years on, a resounding endorsement of a landmark arbitral award has been issued by 14 governments, including global powers like Australia, Japan, the UK, and the US, alongside a united statement from the European Union, yet a deafening silence from others raises questions about the complex forces at play.
A recent Shai-Hulud infostealer worm variant has significantly upped the ante, now scanning 469 credential locations - a massive jump from 189 in earlier variants - to harvest sensitive access credentials and threaten software supply chains. This strategic shift allows attackers to exploit existing trust and gain unauthorized access with ease.
GE Aerospace's Lynn factory has turned a new corner with a $100 million upgrade, harnessing the power of automation - and robots nicknamed Rosie and Thomas - to supercharge engine production and banish quality and capacity woes. The game-changing investment is already paying off, streamlining workflows and ramping up throughput.
Plex is urging users to update their media servers and desktop clients ASAP due to multiple security vulnerabilities that could put their data at risk. To stay safe, simply update to Plex Media Server 1.43.3 and Plex Desktop 1.115.0.
Australians lost a whopping $3 billion to scams in 2022, but the true figure is likely much higher. In Southeast Asia, scam factories have become a booming industry, churning out millions of victims and billions of dollars in losses for global criminal groups.
Malicious actors have compromised at least 31 organizations by exploiting Node.js, a trusted developer tool, to deliver long-running implants - and here's why this tactic is so appealing to attackers. By using legitimate Node.js runtime to deploy malicious payloads, threat actors can cleverly evade detection.
To uncover the sneaky tactics used by employment scammers, a team of researchers took a bold approach: they created a fake company to study these scams firsthand. By doing so, they gained valuable insights into the methods scammers use to deceive job seekers.
Meet the MİLDEN submarine, a game-changing vessel poised to meet the Pakistan Navy's next-gen needs, boasting impressive specs including a 2,700-ton surfaced displacement and 8 torpedo tubes for heavyweight firepower.
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deployment
A Serbian student activist's iPhone was hacked with NSO Group's notorious Pegasus spyware through a clever zero-click exploit targeting Apple iMessage, according to a joint investigation by Citizen Lab and SHARE Foundation. This sneaky attack allowed the spyware to infect the device without the user even clicking on a link.
A stolen cache of 153 million driver's licenses, containing sensitive info like birth dates, addresses, and ID numbers, has fallen into the wrong hands, putting millions at risk of identity theft. This breach is especially alarming since this type of data is often used to verify identities.
A major international crackdown led by US law enforcement has successfully disrupted the notorious Sality P2P botnet, a malware network that has been wreaking havoc for over two decades. On August 31, authorities from Bulgaria, Hungary, Romania, and the US joined forces with Europol and private-sector partners to seize key domains and dismantle the botnet's infrastructure.
Children have bluntly told the Children's Commissioner that the UK's Online Safety Act has failed to make a tangible impact on their online lives, with many saying it has made "absolutely no difference" to their exposure to harmful content. Despite being in effect for over a year, the law seems to be falling short of its promise to protect young people.
If you've installed Windows security updates on or after August 11, 2026, on your ARM-based Windows PC, you might be experiencing frustrating launch failures with Microsoft Teams and the new Outlook. This issue affects devices like Surface Pro 11 and Surface Laptop 7, causing these essential apps to fail to launch or close unexpectedly.
The alarm bells are ringing: CISA has identified seven vulnerabilities in AI and network devices that are being actively exploited by hackers, including a critical flaw in SonicWall SMA 1000 Appliances that could give attackers unauthorized access. Stay safe - know your vulnerabilities!
To keep AI training networks secure, experts propose a one-way architecture that allows data to flow in, but not out - a crucial safeguard to prevent powerful AI models from escaping test environments. This approach, inspired by defense and intelligence communities, uses data diodes to ensure sensitive information stays contained.
A security researcher, known as Chaotic Eclipse, has uncovered a zero-day privilege escalation flaw in CrowdStrike Falcon, dubbed FalconFlank, which exploits the office malicious macros remediation feature. This vulnerability allows for a potentially devastating escalation of privileges, and a public proof-of-concept has been released.