Today · 09:56 UTC

Threat actors are exploiting a recently patched security flaw impacting Gravity SMTP, a WordPress plugin that's installed on about 100,000 sites. The vulnerability, tracked as CVE-2026-4020 (CVSS score: 5.3), is a medium…

Yesterday · 18:37 UTC

Security researchers at Paradigm Shift have published a working exploit, dubbed usbliter8, that achieves arbitrary code execution inside the SecureROM of Apple's A12 and A13 chips. That code is burned into the silicon at…

Yesterday · 18:33 UTC

The Gentlemen ransomware-as-a-service (RaaS) operation is actively developing and maintaining a suite of endpoint detection and response (EDR) killers that it hands out to affiliates for impairing system defenses before…

18 Jun 2026 · 12:00 UTC

View CSAF Summary Successful exploitation of this vulnerability could allow an attacker to upload malicious .ctl files that may lead to arbitrary code execution. The following versions of AzeoTech DAQFactory are affected…

18 Jun 2026 · 12:00 UTC

View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to obtain sensitive health-related information and prevent legitimate users from establishing a connection with the device. The f…

18 Jun 2026 · 12:00 UTC

CISA is aware of global reports that malicious cyber actors have targeted internet-accessible Fortinet devices across government and private sector organizations using compromised credentials. This activity, referred to…

Yesterday · 20:25 UTC

Threat actors are exploiting an unauthenticated information disclosure vulnerability in the WordPress plugin Gravity SMTP, active on 100,000 sites. [...]

Yesterday · 22:31 UTC

Market intelligence platform Klue has publicly confirmed a recent security incident that allowed threat actors to steal OAuth tokens used to connect to customers' Salesforce environments, as the new "Icarus" extortion gr…

Today · 14:09 UTC

Microsoft has attributed a recent Mastra AI supply chain attack that compromised more than 140 npm packages to the North Korean hacking group Sapphire Sleet, also known as BlueNoroff. [...]

Yesterday · 10:15 UTC

SocGholish malware has been removed from 15,000 sites associated with Evil Corp hackers

Yesterday · 11:00 UTC

Working with frontier AI models, this new platform aims to help discovering, prioritizing, validating and remediating code vulnerabilities

Yesterday · 09:00 UTC

Half of cybersecurity leaders lack confidence in detecting threats on Slack, Teams and other non-email platforms, despite growing attacker focus

18 May 2026

Cloudflare shares findings from testing Mythos and other security-focused LLMs against live code across critical infrastructure, including model strengths, weaknesses, and what is needed before this work can scale.

18 Jun 2026 · 22:03 UTC

Cybersecurity firms, researchers and officials took down 106 servers and remediated nearly 15,000 sites that were infected with the malware. The post Authorities disrupt Evil Corp’s SocGholish botnet appeared first on Cy…

18 Jun 2026 · 15:25 UTC

The threat group’s remarkable success targeting open-source software was inevitable and fueled by the industry’s decision to prioritize code shipping over security. The post How software development’s speed obsession ena…

18 Jun 2026 · 20:20 UTC

While preventing third parties from profiting off unauthorized deepfakes of artists and performers is a bipartisan concern, some business and digital rights groups are opposed. The post Congress tees up No FAKES Act, aim…

18 Jun 2026 · 20:05 UTC

A leaked GitHub token underscores what most organizations get wrong: Treating secrets management as a tooling problem rather than an identity problem.

Yesterday · 13:00 UTC

As threats proliferate and AI complicates cybersecurity, CISOs say the job is getting harder, but more companies still want cybersecurity expertise, if even on a part-time basis.

18 Jun 2026 · 19:09 UTC

The threat group's curious business model may combine opportunistic monetization alongside intel collection, without much coordination between the two.

18 Jun 2026 · 11:04 UTC

At least one malware developer is adding text about nuclear and biological weapons to their spyware, in an effort to stop automatic AI analysis. Details: The _index.js payload begins with a large JavaScript block comment…

Yesterday · 21:03 UTC

Dolphins, sharks, turtles, and human workers are all victims of unregulated squid fishing fleets. Another news article. As usual, you can also use this squid post to talk about the security stories in the news that I hav…

Yesterday · 11:03 UTC

On June 9th, Anthropic released its Fable generative AI model. Three days later, the US government classified it as a dangerous munition, and used its export-control authority to prohibit any foreign nationals from acces…

18 Jun 2026 · 01:49 UTC

[This is a Guest Diary by Adam Nason, an ISC intern as part of the SANS.edu BACS program]

Yesterday · 08:37 UTC

I detected an interesting phishing email this morning. It targets a major Belgian bank:

18 Jun 2026 · 02:00 UTC

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

Today · 11:15 UTC

Tests of age-verification technology show the risks of life-altering errors.

Yesterday · 13:36 UTC

A French launch startup is scrapping the name of its rocket, apparently due to a trademark issue.

Yesterday · 11:15 UTC

Researchers say these coral strongholds may help repopulate more degraded reefs.

18 Jun 2026 · 17:37 UTC

For the past four years, a sprawling Android-based botnet called Popa has forced millions of consumer TV boxes to relay Internet traffic linked to advertising fraud, account takeovers, and mass data-scraping efforts. Thi…

17 Jun 2026 · 13:20 UTC

This week in cybersecurity from the editors at Cybercrime Magazine Sausalito, Calif. – Jun. 17, 2026 – Watch the YouTube video “I started my cybersecurity ‘career’ as one of the earlier virus developers in the world,” Ni…

Today · 12:00 UTC

Figures including Jared Kushner and Scott Bessent named in directory of Dialog participants that was exposed onlineA website leak has exposed participants in the secretive, Peter Thiel-founded Dialog retreats which inclu…

Today · 09:59 UTC

Does a thought-experiment about US ascendancy in the technology say as much about AI jitters as it does about the reality?It’s 2031 and the US and China are about to tear Europe into pieces.The US ploughed vast sums into…

Yesterday · 07:00 UTC

Investigation: The entrepreneur was once the toast of London’s tech scene, a ‘global leader of tomorrow’ who starred on Dragons’ Den and promised untold riches for the startups she championed. But people she worked with…

18 Jun 2026 · 01:36 UTC

Updated ASD ISM drops with new and revised controls.

18 Jun 2026 · 23:35 UTC

Elevates CTO to executive leadership team.

18 Jun 2026 · 04:02 UTC

Unifies company messaging in move away from email.

9 Jun 2026 · 22:28 UTC

Anthropic released Fable 5, a public version of its advanced Mythos AI model class, while keeping tighter controls around cybersecurity and other sensitive uses.

Yesterday · 16:08 UTC

Just as last week was ending, the US government forced Anthropic to pull its two newest models, Fable 5 and Mythos 5, citing national security concerns after Amazon researchers allegedly found a way to bypass Fable 5’s g…

Yesterday · 16:01 UTC

Just as last week was ending, the US government forced Anthropic to pull its two newest models, Fable 5 and Mythos 5, citing national security concerns after Amazon researchers allegedly found a way to bypass Fable 5’s g…

Yesterday · 22:40 UTC

For the last 30 years, stopping the flow of cybersecurity-related software has proven to be ineffective. It's unclear why it would work now with Anthropic’s cybersecurity model Mythos.

Yesterday · 10:40 UTC

Miami-based AI startup Subquadratic came out of stealth mode last month with a huge claim. It announced that it had solved a mathematical bottleneck that had been holding back large language models for almost a decade. T…

Today · 14:00 UTC

From its opening minutes, Moves of the Diamond Hand is upfront about what it offers: You're going to have a lot of strange conversations, and you're going to roll a lot of dice. Get on board with this proposition, and th…

Today · 12:00 UTC

Hi, friends! Welcome to Installer No. 133, your guide to the best and Verge-iest stuff in the world. (If you're new here, welcome, happy belated Juneteenth, and also you can read all the old editions at the Installer hom…

Today · 07:00 UTC

I can't remember the last time I got excited about a fan. Normally, I just buy whatever Vornado or Dreo model fits my budget, but that was before I started testing the battery-powered Standing Circulator Fan from SwitchB…

Today · 10:00 UTC

The new Siri AI is conversational, omnipresent, and actually helpful.

18 Jun 2026 · 22:12 UTC

Leaked files show the invite-only network grades members by their money and fame, shaping who’s in, who’s out, and who pays.

18 Jun 2026 · 21:03 UTC

Anthropic still can’t distribute Claude Mythos or Fable 5 after running afoul of the Trump administration. But no one can say exactly what the company did wrong.

18 Jun 2026 · 21:21 UTC

Taiwan's drone spending plans for defense could also boost business overseas.

18 Jun 2026 · 17:02 UTC

Biggest AI firms will likely recoil at Bernie Sanders' AI wealth fund.

17 Jun 2026 · 19:25 UTC

Nvidia's self-improvement program for robots enlists teams of AI coding agents.

18 Jun 2026 · 20:00 UTC

In a consequential grid infrastructure decision, the Federal Energy Regulatory Commission (FERC) today issued a major milestone on large-load interconnection impacting how those building AI factories, semiconductor fabri…

18 Jun 2026 · 13:00 UTC

The digital era gave the advertising and marketing industry speed; the AI era is giving it autonomous operations. For companies building next-generation technologies for advertising and marketing, the question is no long…

18 Jun 2026 · 13:00 UTC

Play favorite titles from popular game libraries, keep progress synced and jump back into gaming sessions on virtually any device. That’s the power of GeForce NOW cloud gaming. From providing access to members’ favorite…

Today · 02:00 UTC

The Australian Fertilizer Corporation has secured offtake agreements with international and domestic customers to sell its entire production capacity, despite not yet being built.

Yesterday · 20:30 UTC

After being tossed a lifeline last year, Queensland's peanut harvest is in full swing with plans in place to help the industry thrive once again.

Yesterday · 18:30 UTC

Chemicals hiding in old fridges and air conditioners can contribute to the greenhouse gas effect if not properly disposed.

Yesterday · 17:08 UTC

This week's release includes five new modules, including a full unauthenticated RCE chain for Paperclip AI and a VS Code extension persistence technique. On the post-exploitation side, the new windows/local/ntlm_relay_2_…

17 Jun 2026 · 11:20 UTC

Executive summaryRapid7 researchers have identified a sophisticated malware campaign attributed to the threat actor "Dropping Elephant," characterized by the use of a China-themed decoy document to deliver a heavily rewo…

18 Jun 2026 · 14:45 UTC

Security leaders are facing an unusual set of circumstances. The drumbeat for better security prioritization has been rising for years in boardrooms around the world. The desire is there, but the processes of the past ar…

Yesterday · 00:17 UTC

AutoJack is a novel exploit chain showing how a single malicious webpage can turn an AI browsing agent into a remote code execution vector on the host machine. By abusing trust in localhost, missing authentication, and u…

18 Jun 2026 · 03:43 UTC

A poisoned npm package infected 140+ projects with a hidden payload. This report highlights how to detect, hunt, and defend against supply chain attacks using Microsoft Defender and actionable threat intelligence. The po…

18 Jun 2026 · 19:36 UTC

New Forrester Total Economic Impact™ study shows Microsoft Security consolidation delivers ROI, lowers risk, and prepares organizations to secure AI. The post New Forrester study shows customers who unified with Microsof…

18 Jun 2026 · 10:03 UTC

On June 17, 2026, an attacker compromised the @mastra npm organization and quietly added easy-day-js as a dependency across 140+ packages in the Mastra AI framework ecosystem. easy-day-js is a typosquat of the popular da…

Yesterday · 20:44 UTC

A coordinated 8-month supply chain attack planted credential-stealing code inside fake AI coding assistants on the JetBrains Marketplace, quietly exfiltrating OpenAI, DeepSeek, and SiliconFlow API keys to an attacker-con…

18 Jun 2026 · 10:03 UTC

npm and Python supply chain attacks run on developer machines and steal secrets. See how Package Configs audits registry, cooldown, and auth across your fleet

18 Jun 2026 · 03:43 UTC

A poisoned npm package infected 140+ projects with a hidden payload. This report highlights how to detect, hunt, and defend against supply chain attacks using Microsoft Defender and actionable threat intelligence. The po…

Today · 02:05 UTC

We provide guidance for preparing for and mitigating large-scale credential attacks, focusing on recent campaigns targeting security vendors' devices. The post Threat Brief: Mitigating Large-Scale Credential Attacks appe…

18 Jun 2026 · 19:24 UTC

When a security event occurs in your Amazon Web Services (AWS) environment, rapid response is critical. However security teams often struggle with time-consuming, manual processes that slow down investigations. Analysts…

18 Jun 2026 · 16:50 UTC

Amazon Web Services (AWS) is excited to release the Spring 2026 System and Organization Controls (SOC) 1 and 2 reports in machine-readable OSCAL format alongside the PDF version of the reports. The reports cover 188 serv…

17 Jun 2026 · 15:34 UTC

What we believe We’ve been thinking deeply about enterprise security. The operating model that served us for the past decade (collect telemetry, store it, query it, build dashboards to watch it) is no longer keeping pace…

18 Jun 2026 · 05:00 UTC

18 Jun 2026 · 05:00 UTC

17 Jun 2026 · 05:00 UTC

18 Jun 2026 · 17:00 UTC

OpenAI introduces new spend controls and usage analytics for ChatGPT Enterprise, helping organizations manage costs and scale AI with confidence.

18 Jun 2026 · 08:00 UTC

Researchers used an OpenAI reasoning model to help diagnose rare diseases, identifying 18 new diagnoses in previously unsolved cases.

18 Jun 2026 · 11:00 UTC

Learn how GPT-5.5 Instant improves ChatGPT’s health and wellness responses with stronger reasoning, better context, clearer communication, and physician-informed evaluations.

18 Jun 2026 · 18:00 UTC

In the latest Threat Source, Hazel channels her inner Spielberg to explore why humans are delightfully irrational, reminding us that while security best practices are simple in theory, they’re a lot harder to pull off wh…

18 Jun 2026 · 10:00 UTC

Cisco Talos detailed a new approach to reverse engineering that pairs local AI agents with traditional analysis tools like the VB6 disassembler vbdec. Instead of awkwardly bolting AI onto the software, vbdec exposes its…

17 Jun 2026 · 13:38 UTC

Key Points Introduction In this research, we analyze a clipboard hijacker campaign that is hidden inside a collection of “solutions” and “tools” that claim to give users an unfair advantage. These offers include Solana a…