global
-
Itron, Inc. Discloses Unauthorized Intrusion into Corporate Network
In a significant disclosure regarding the security posture of critical infrastructure providers, Itron, Inc., a global leader in smart metering…
Read More » -
Deceptive Excel Lures: How Kimsuky APT Leverages LNK Files and Cloud Services to Target Life Sciences
In a sophisticated display of social engineering and technical evasion, North Korean state-backed actors are increasingly deploying weaponized, Excel-themed files…
Read More » -
Securing the Frontier: OpenAI’s GPT-5.5 Bio Bug Bounty Program Aims to Improve AI Safety and Performance
As large language models (LLMs) transition from general-purpose assistants to highly sophisticated cognitive engines, the surface area for potential misuse…
Read More » -
The Trojan Interview: How Void Dokkaebi Exploits Developer Trust to Fuel Supply Chain Attacks
In the high-stakes world of software engineering, a job offer is often the ultimate motivator. However, the threat actor known…
Read More » -
Critical Authentication Bypass Vulnerability (CVE-2025-65856) in Hangzhou Xiongmai XM530 IP Cameras
A high-severity security flaw has been uncovered in the Hangzhou Xiongmai Technology XM530 series IP cameras, posing an imminent threat…
Read More » -
The Invisible Shadow: How Signaling Vulnerabilities Enable Global Mobile Surveillance
A groundbreaking investigation by Citizen Lab has pulled back the curtain on a series of sophisticated, multi-year surveillance campaigns that…
Read More » -
500,000 Britons’ Genetic Data Listed for Sale on Alibaba — And No One Noticed Until It Was Too Late
Sometime in mid-April 2026, a product appeared on Alibaba — China’s sprawling, Amazon-like e-commerce platform — that had no business…
Read More » -
The Evolution of Deception: Unmasking North Korean ‘Laptop Farms’ and Remote Work Infiltration
North Korean threat actors are refining a high-stakes social engineering playbook, leveraging the global shift toward remote work to bypass…
Read More » -
The Multi-Stage Supply Chain Compromise of Checkmarx KICS
In a sophisticated demonstration of supply chain exploitation, the official Checkmarx KICS (Keeping Infrastructure as Code Secure) ecosystem has fallen…
Read More » -
Inside the ProxySmart Ecosystem: How a Belarusian Platform is Powering a Global SIM Farm-as-a-Service Network
Infrastructure intelligence firm Infrawatch has recently uncovered a sprawling, globally distributed SIM Farm-as-a-Service ecosystem, all orchestrated through a single software…
Read More » -
Exploiting the Frictionless Frontier: How Criminal Syndicates Weaponize French Freelancer Fintech Accounts
The rapid evolution of digital banking has provided unprecedented convenience for the modern entrepreneur, but it has also inadvertently engineered…
Read More » -
The Trojan Candidate: How Jasper Sleet Infiltrates Cloud Environments via Remote Hiring Exploits
In a sophisticated evolution of social engineering, Microsoft has issued a critical warning regarding Jasper Sleet, a North Korea-aligned threat…
Read More » -
Claude Mythos Breach Exposes Critical Flaw in AI Security Supply Chains
In a significant blow to the specialized AI security sector, a group of unauthorized actors has successfully bypassed multi-layered access…
Read More » -
Over 1,300 SharePoint Servers Remain Vulnerable to Active Spoofing Exploits
In what is becoming a stark case study in patch management latency, more than 1,370 Microsoft SharePoint servers remain exposed…
Read More » -
Critical Security Alert: Addressing the .NET 10.0.7 Out-of-Band Patch for CVE-2026-40372
In a rare move that highlights the severity of a recent cryptographic regression, Microsoft has released an emergency out-of-band (OOB)…
Read More » -
CISA Issues Urgent Alert Over Compromised Axios NPM Package
The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent advisory regarding a sophisticated software supply chain attack targeting…
Read More » -
The Rise of ‘Gentlemen’: A Multi-Platform RaaS Threat Targeting Enterprise Infrastructure
The ransomware landscape is witnessing the rapid ascent of a sophisticated Ransomware-as-a-Service (RaaS) operation known as Gentlemen. Unlike many opportunistic…
Read More » -
Critical Exposure Alert: Over 6,000 Apache ActiveMQ Instances Vulnerable to Remote Code Execution
In a significant blow to enterprise perimeter security, a massive wave of internet-facing Apache ActiveMQ brokers has been identified as…
Read More »