Crafty Phishing Campaigns Auto-Adapt to Victim's Device, OS
Attackers fingerprint victims through user-agent data to deliver OS-specific payloads, increasing compromise rates and campaign profitability.
Security & Lifecycle News
Aggregated from vendor advisories, security research, and industry publications.
Godot says bye bye AI, bans vibe-coded contributions
'We can’t trust heavy users of AI to understand their code enough to fix it,' say maintainers who previously called the flood of vibe-coded pull requests 'demoralizing'
ChocoPoc malware delivered via trojanized exploits on GitHub
Multiple weaponized proof-of-concept (PoC) exploits on GitHub delivered a Python-based remote access trojan (RAT) called ChocoPoC that can execute commands and steal sensitive data…
New ChocoPoC malware targets researchers via trojanized PoC exploits
Multiple weaponized proof-of-concept (PoC) exploits on GitHub were found delivering a Python-based remote access trojan (RAT) named ChocoPoC that can execute commands and steal sen…
Somebody told DeepSeek to build in-browser ransomware and it gleefully complied
'The original incomplete DeepSeek sample can be transformed into a fully functional attack with minimal effort,' Check Point researcher tells The Reg
And the Winner in Dominant Malware Delivery? ClickFix
Researchers say the highly effective social engineering technique is no longer the exception for malware attacks — it's now the rule.
Unpatched Argo CD Repo-Server Flaw Could Let Attackers Take Over Kubernetes Clusters
Argo CD, a widely used tool for deploying software to Kubernetes, has an unpatched flaw in its repo-server component that lets an unauthenticated attacker run code, provided they c…
TCG079: Why Your State File is Actually a Distributed Systems Problem
Malcolm Matalka joins William and Eyvonne to challenge the narrative that Infrastructure as Code (IaC) is dead. Malcolm argues that the real value of IaC was never the syntax, but …
19-Year-Old Scattered Spider Suspect Extradited to Face U.S. Hacking Charges
A teenager accused of belonging to the hacking group Scattered Spider has been extradited from Finland to face U.S. charges of conspiracy, computer intrusion, and fraud, the U.S. D…
Kyndryl: AI success hinges on workforce readiness
Enterprise AI adoption is outpacing workforce readiness, according to new research from Kyndryl that found only 23% of leaders believe their organizations are prepared to support A…
An artificial cell with a full lifecycle has been created for the first time
SpudCell can feed, divide, and even outcompete its siblings. It's not truly alive, its creator tells us, but it could still transform the bioengineering world
AI search could kill the web without new quality signals and revenue models
Penance payments to websites for failing to forward traffic aren't enough
Microsoft Adds New Teams Controls to Block Unauthorized AI Bots From Meetings
Microsoft's new Teams admin policy requires organizer approval for external AI bots, giving organizations greater visibility and control over automated participants in sensitive me…
SEO-Poisoned Software Sites Abuse ScreenConnect to Deploy AsyncRAT
Unknown threat actors are leveraging the ScreenConnect remote access tool as a way to deploy and execute AsyncRAT. Kaspersky said the activity is part of a "massive, multi-domain,…
DHS confirms hackers breached HSIN info-sharing platform
The Department of Homeland Security is investigating a cyberattack that compromised the Homeland Security Information Network (HSIN), a sensitive information-sharing platform used …
VEIL#DROP Malware Chain Uses Blogger Platform to Deliver PureLogs Stealer
Cybersecurity researchers have flagged a new multi-stage malware delivery attack chain that uses social engineering and Blogger pages to deliver an information stealer called PureL…
Red teamers turned Claude Desktop into a double agent to do their evil bidding
People trust their AI assistants and it's easy to abuse this trust
Webinar: Why traditional email security is no longer enough
Modern phishing, business email compromise, and account takeover attacks increasingly exploit trusted identities and legitimate business workflows, making them harder for tradition…
Hackers target Microsoft 365 accounts with 81 million login attempts
An aggressive password-spraying campaign targeting Microsoft 365 environments generated more than 81 million login attempts over a two-week period. [...]
NAN126: Fine-Tuning Open Source LLMs for Network Engineering
Eric welcomes Eduard Dulharu, a veteran network architect and the Founder and CTO of vExpertAI, to talk about how agentic AI, open-source LLMs, and digital twins are changing netwo…
NASA unsure Boeing Starliner will ever be certified for human flight
Inspector General's report says time is running out for the Calamity Capsule
D2DO306: Platform Engineering in the Agentic Era (Sponsored)
Platform engineering forms the foundation for developers to build on, and you shouldn’t be surprised that folks from VMware have been thinking about platforms for a long time. In t…
When Too Much Security Data Becomes the Risk
Rapid growth turned routine firewall logs into a security and budget liability. One CISO used artificial intelligence to filter what data truly belongs in the SIEM.
Ousaban Banking Trojan Targets Iberian Bank Users with Fake PDF Lures
A Brazilian banking trojan called Ousaban is going after Windows users who bank in Spain and Portugal. Fortinet's FortiGuard Labs identified the campaign in May 2026. It opens wit…
Adobe Patches 7 CVSS 10.0 Flaws in ColdFusion and Campaign Classic
Adobe has released patches for multiple maximum-severity security flaws impacting Adobe ColdFusion and Adobe Campaign Classic. The ColdFusion updates "resolves critical and import…
'Phantom Squatting': An Emerging AI-Driven Supply Chain Threat
LLMs consistently hallucinate Web domains for legitimate brands that attackers can register for malicious activity in a difficult-to-detect attack vector.
When backups aren't enough: the case for real disaster recovery
PARTNER CONTENT: The gap between having a backup and actually recovering from a disaster is wider than most IT teams realize
Critical Cursor Flaws Could Let Prompt Injection Escape Sandbox and Run Commands
Two flaws in Cursor, an AI code editor, could let a single, ordinary-looking prompt break out of the editor's safety sandbox and run any command on a developer's computer. There is…
Microsoft lets Azure Linux 4 out of the cloud in downloadable ISO form
Fedora-derived server distro is ready for local testing, but production deployments should wait
Turning Indicators into Intelligence in OpenCTI with Criminal IP
Threat intelligence is only as useful as the context behind it. Criminal IP explains how its integration enriches threat indicators in OpenCTI with risk scoring, infrastructure int…