Continuous enterprise threat intelligence tracking active in-the-wild zero-days (CISA KEV), Microsoft Windows KB cumulative updates, MSRC security advisories, and CVE remediation.
Fenix24 found only four of more than 800 clients came close to stated ransomware recovery targets of 24-48 hours
Alleged Black Axe leaders extradited to the US over romance scams, BEC and money laundering claims
IANS finds AI is dominating net-new budgets even as overall funding for the function is flat
Microsoft has been forced to issue an out-of-band fix for several issues stemming from this month’s Patch Tuesday
Socket has discovered a Twitch browser extension forwarding users' OAuth tokens to a Russian bot service
A human attacker exploited a Marimo RCE and reached an SSH bastion in eight seconds
MarketsandMarkets has projected the cyber warfare market to double by 2031, amid growing demand for defensive and offensive cyber capabilities in the military
An unauthorized party used a legitimate government email domain to fraudulently request Revolut customer data
CISA warns that threat actors are exploiting a vulnerability with a CVSS score of 10.0
Researchers confirm that OpenAI agents uploaded hundreds of malicious packages to RubyGems
KnowBe4 researchers observed a new phishing campaign leveraging Microsoft 365’s Direct Send to send malicious emails
A new Syskit study has shown that only 43% of organizations with AI agents deployed in Microsoft 365 environments completed a permission review before doing so
CISA has updated its insider threat guide with new advice on remote work, AI and risk detection
MantaxOtax Android malware combines ransomware with extensive spyware capabilities
The new document appears to be part of a broader shift by the US government towards the proactive disruption of cyber threat actors
Anthropic has found a fourth case of its model accessing third-party systems without authorization
The US Treasury has placed sanctions on notorious Chinese cybercrime marketplace Xinbi Guarantee
The hacking tool, built using a combination of AI models, is effective against Android and iOS devices
Gigabud clones banking apps into a work profile to break the link between malware alerts and fraud
ClickFix campaign uses browser-injected JavaScript and Google Sheets to steal cryptocurrency
SpyCloud claims non-human identities are the most likely route into the enterprise
The update contained 119 critical flaws and two zero days, with security teams needing to prioritize updates
Onapsis urges SAP customers to patch “Overpass” vulnerability, which has a CVSS score of 10.0
After a major cyber-attack targeted France's national tax authority, the Prime Minister called for the establishment of a new dedicated cyber incident response capability