Play Was the Install Button
StreamRat used Meta and TikTok ads to put a banking Trojan in front of 570,000 people. Audit how your cybersecurity program treats ads.
ASCII Smuggling Just Hit Production
ASCII smuggling is hiding phishing from your cybersecurity stack. See what to inspect before the next deal email lands.
You Didn’t Pay. The Admin Keys Still Worked
Exposed admin keys beat ransom theater: MAG's 8.8M dump and court-platform breaches show what cybersecurity teams should fix first. Steal the checklist.
The Student Never Opened the Message
A Serbian student's iPhone got Pegasus with zero taps. See what that means for cybersecurity programs that still treat phones as perks. Check your MDM list.
22,000 Exchange Servers Still Honor Replayed Auth After August 11
22,000 Exchange servers still take replayed auth. Prove the patch, isolate OWA, and hunt sessions. Your cybersecurity queue starts here.
Gig Laptops Turn Client Access Into Free Infrastructure
A malware crew hit 80,000 freelance PCs your cybersecurity program never inventories. Lock contractor access before the next campaign. Read how.
The Clone Came With a Shell Command
Hostile git configs can make coding agents run attacker code. See the cybersecurity gap on developer laptops, then lock the clone down.
Unpatched File Portals Export Your Most Sensitive Stores
Old ownCloud bugs emptied a nuclear agency's files. Your cybersecurity program still skips catalogs. Check your versions before someone else does.
Who Else Has a Scan of Your License?
153 million license scans are for sale, and ID checks are now a cybersecurity hole. Audit your proofing vendors before the next upload.
One Compromised Router. Months of Trusted Access.
Fire Ant turned compromised routers into trusted launchpads. See how that breaks cybersecurity telemetry, and what to lock down this week.
Hundreds of Dollars Bought Another Plant Exploit
AI ported a PLC exploit in hours for hundreds of dollars. That's the new cybersecurity math for plants. See what to change before the next SKU.
Your Package Repo Is the New Domain Controller
CVE-2026-82329 is already in the wild. If your cybersecurity program still treats Artifactory as plumbing, audit publishes now.
Your Email Gateway Can’t Hear This Attack
Spring Ring used Teams voice phishing to skip email filters and hunt domain controllers. See the cybersecurity controls your tenant is missing.
The Fridge Went Dark at Fort Irwin
Commissary fridges went dark at seven DoD bases. If your cybersecurity program skips OT, you're already late. See what to inventory first.
ClaudeBot Came Looking for Your Secrets
Fake AI crawlers are probing .env files under famous names. See how this cybersecurity blind spot works, then check your logs.
Your Intel Feed Just Ate a Retraction
The DoJ walked back a China "victim" claim. If your cybersecurity tickets copy press releases, you're briefing fiction. Fix the queue.
Forty-Eight Quiet Hours Bought Them Persistence
Weekend silence is a cybersecurity bill: 48 hours of dwell time, then weeks of identity cleanup. Staff the gap before Monday.
The Human Check Is the Attack Path
Fake Cloudflare captchas now walk users into PowerShell. That's a cybersecurity gap in how you design trust. See what to lock down.
The vendor already published the fix
A previously patched NetScaler is still getting hit. Your cybersecurity spreadsheet says you're current. Check the firmware, then tell us what you found.
They Got the Factory Back. HR Was Already Gone
Hasbro's factory came back. The employee-data letter didn't. Quiet tunnels and unpatched CMS plugins are the real cybersecurity lag. Audit your finish line.
IPBan Pro 5.1.0 Released
New release of IPBan Pro 5.1.0 which contains several months of improvements. Client [...]
Android Just Blinded Your Firewall
Android 17's Encrypted Client Hello blinds SNI-based cybersecurity filters. Audit your rules before the fleet upgrades.
The Model’s No Is Paper Thin
Unit 42 shows LLM refusal is paper-thin. If that is your cybersecurity control, you have work. See what to lock down this week.
How Do You Know They Actually Stole It?
Ransomware leak sites omit, invent, and pad. Build a cybersecurity inventory from your own logs before you answer the note. Start with egress.
The Bug With No CVE Score Drained Six Blockchains
Six blockchains got drained by a bug with no CVE score. Here's what that gap in cybersecurity risk scoring means for your team. Read on.
