Hardened container images solved one part of the software supply chain problem. The operating system layer can now ship with few or no vulnerabilities…
Tag: EN
Prolific Chinese espionage group exploits BeyondTrust zero-day
Researchers said the first known attack by Armory Castle, also known as UNC5221, occurred almost seven weeks ago. The threat group previously compromised…
Microsoft fixes bug causing Windows black screens, Explorer crashes
Microsoft has resolved a known issue that was causing black screens, desktop loading issues, and Explorer crashes after installing Windows 11 updates…
Almost 50 arrested as police target Western Balkan network linked to killings
Nearly 50 suspects have been arrested in an international operation targeting a drug trafficking network with Western Balkan members, linked to killings,…
Anthropic Grants AI Safety Evaluator METR Employee-Level System Access
Anthropic grants METR researchers employee-level access to internal systems for AI safety reviews, raising questions about independent oversight and…
Microsoft Disrupts Global Yam Store Network Behind One Billion Phishing Messages
Microsoft and partners reveal a major Chinese-language phishing network centered around the Yam Store marketplace
Samsung Galaxy Update Warning: Older Phones Face Security Support Changes
Samsung Galaxy security support is changing for older phones. Find out which devices still receive updates and what owners should do next.
China-nexus espionage actor targets BeyondTrust support tool in zero-day campaign
Researchers say the hacker is harvesting credentials and stealing sensitive information.
Europol urges early action to protect cryptocurrencies and sensitive data from quantum threats
The timing of these capabilities remains uncertain. However, this should not be the main concern. Adapting systems and coordinating security upgrades will…
PLEASE_READ_ME: The Opportunistic Ransomware Devastating MySQL Servers
Guardicore Labs uncovers a Ransomware detection campaign targeting MySQL servers. Attackers use Double Extortion and publish data to pressure victims.
AdFection: How mercenary spyware invades victims’ devices through targeted advertising
Researchers say the attacks have serious implications for the online advertising world, and regulators.
AhsayCBS Flaws Exploited to Deploy Web Shells Get New Fixes After Incomplete Patches
Singapore-based Ahsay Backup has released security updates to address two security flaws in AhsayCBS that have been exploited by bad actors to drop web…
When an agent acts, who is accountable?
For most of the history of enterprise software, accountability has been relatively easy to understand. A person logs in, a person has a set of…
UK keeps AI safeguards in the maybe pile for Cyber Security BIll
Officials say amendments remain under consideration despite minister’s pledge to act
UAT-11985 Uses Fake Event Invites to Target Taiwan Research Affiliates With Google AitM Phishing
Cybersecurity researchers have disclosed details of an advanced persistent threat (APT) spear-phishing campaign that has targeted individuals affiliated…
Post-quantum updates to our TLS guidance
The NCSC publishes its recommendations for configuring post-quantum cryptography in TLS. Now is time to migrate.
AI-Fueled Attacks and Critical Flaws Escalate Global Cyber Risk
Weekly summary of Cybersecurity Insider newsletters
Networking problems after the October 2026 Windows update? NTLM might be to blame
Legacy protocol is going to be axed, and enforcement by default will highlight how migration is going
Israeli Ad Firm Built a Spyware Pipeline Inside the Online Advertising System, Researchers Say
An Israeli advertising company quietly turned the infrastructure of targeted digital ads into a delivery mechanism for mercenary spyware, according to new…
New YuanKong Android RAT Hijacks Phones to Steal Banking PINs and Passwords
A newly analyzed Android remote-access Trojan called YuanKong can watch and control a victim’s phone, capture passwords and payment PINs, and send stolen…