The Netlogon Bug That Outran Patch Tuesday
A critical Netlogon bug is under active attack while Microsoft fights three other fires. Here's the cybersecurity work your AD team owes itself this week.
June 2026
May 2026
NetSupport Is The Payload. The Loader Is Still Unnamed.
An unnamed loader is dropping NetSupport RAT in live networks. Here's why cybersecurity teams keep missing it, and what to do anyway.
The Plugin That Opened The Door To The Botnet
The 17M-device botnet Dutch police just dismantled and the WP Maps Pro admin bug are the same cybersecurity story. Here's how to break the pipeline.
Russia’s Best New Exploit Is A Wire Transfer
Russian intelligence is buying Western tech through shell companies while running cyber recon on the same vendors. Rethink your cybersecurity scope now.
The VPN Bypass That Builds Its Own Tunnel
PAN-OS CVE-2026-0257 is under active exploitation. Get the cybersecurity playbook for edge-appliance bypass before Monday.
Booter Services Now Have Tier 2 Support And Refund Policies
DDoS-as-a-Service now ships with tier pricing, support, and resellers. The Dutch 17M-device botnet seizure won't change your cybersecurity math. See why.
Kimsuky’s New C2 Channel Is Microsoft’s Own VS Code Tunnels
Kimsuky's HTTPSpy rides Microsoft VS Code Tunnels as C2 while npm typosquats drain CI/CD secrets. Here's what to actually do about it.
Your Encryptor Just Promoted Itself To Worm
The Gentlemen ransomware self-propagates without an operator while AI scaffolds the rest. Here's what your cybersecurity playbook needs to fix this quarter.
Your Idle GPUs Just Became Someone Else’s Income
Cryptojacking now ships with a RAT, and this week's cybersecurity reports show three delivery channels feeding the same wallet. Here's what to change tonight.
Your Extortion Crew Stopped Encrypting Files Months Ago
Extortion crews dropped encryption and moved to silent data theft. Your cybersecurity stack still watches for the old playbook. Here's what to fix first.