Two Billion Installs Undone By One Sloppy Build Flag
One build flag exposed two billion Microsoft Android installs. Here's the cybersecurity pipeline discipline that actually prevents the next one. Read on.
June 2026
The SVG Attachment That Walks Past Your Email Filter
SVG phishing attachments are slipping past mail filters that trust the image extension. Here's the gap and how to close it before users click.
NIST’s Vulnerability Database Has 27,000 Unread Tickets
NIST's vulnerability database is 27,000 tickets behind. Here's how cybersecurity teams should patch when the catalog stops working. Read on.
Your Help Desk Speaks Fluent Prompt Injection
Meta's AI support bot reset passwords for hijacked Instagram accounts. Here's the cybersecurity playbook for AI in privileged workflows. Start here.
The Netlogon Bug That Outran Patch Tuesday
A critical Netlogon bug is under active attack while Microsoft fights three other fires. Here's the cybersecurity work your AD team owes itself this week.
AI Agents Got DNS Before They Got A Threat Model
AI agents got DNS-based discovery before anyone built a cybersecurity story around it. Here's what defenders should do before the breach reports start.
May 2026
NetSupport Is The Payload. The Loader Is Still Unnamed.
An unnamed loader is dropping NetSupport RAT in live networks. Here's why cybersecurity teams keep missing it, and what to do anyway.
When Did You Last Write A Detection That Fired?
YARA-X 1.17.0 just dropped. The real cybersecurity question isn't which scanner you run; it's whether anyone on your team writes detections. Find out.
The Plugin That Opened The Door To The Botnet
The 17M-device botnet Dutch police just dismantled and the WP Maps Pro admin bug are the same cybersecurity story. Here's how to break the pipeline.
Your Endpoint Manager Just Shipped The Infostealer
Two cybersecurity vendors shipped the threats they sold to stop. See how to harden your security stack before the next advisory lands.