Cybersecurity
Cybersecurity collects analysis on vulnerabilities, exploits, patch management, ransomware, supply chain, AI security and threat intelligence. These articles help IT professionals, developers and security analysts follow operational threats, vendor updates and technical trends.
Revolut Tricked by Authentic Government Email: Passports and Transaction Histories Exposed
Revolut handed over KYC data and complete Bitcoin transaction histories to an attacker after receiving a fraudulent request from an un…
Elastic Framework Detects Linux LPE: From CVE-Specific to Behavior-Oriented
Elastic Security Labs has released a detection engineering framework for Linux local privilege escalation that shifts from reactive pe…
CISA and FBI: No PR Spin During IT/OT Outages
CISA and the FBI have issued joint guidance urging service providers to prioritize factual transparency and avoid marketing-driven nar…
CISA/FBI Post-Attack Communication Guidance Splits Experts
CISA and the FBI released joint guidance on September 8, 2026, urging service providers to replace PR spin with technical transparency…
GuardBreaker: UAC-0099 Tricks LLM Scanners with a VBScript Comment
Russia-aligned group UAC-0099 used the GuardBreaker technique to make an LLM-based scanner refuse analysis of a malicious VBScript. Th…
Brevo-Trezor: 138 Accounts, 347,000 Emails — The Weak Link Is SaaS
A SAML SSO flaw at email provider Brevo exposed 138 accounts and fueled a phishing wave of 347,000 emails targeting Trezor hardware wa…
Florida DAVID Database Breached via Police Credentials Stored on Personal Device
The Florida Department of Highway Safety and Motor Vehicles confirmed on September 4, 2026, that the DAVID database — containing recor…
Brevo breach: 138 accounts compromised, crypto phishing sent from legitimate domains
An attacker exploited a SAML SSO vulnerability in Brevo to send phishing emails to crypto customers from authentic corporate domains.…
Check Point Sounds Third Critical Alert in Four Months: Two VPN Flaws Enable Unauthenticated RCE
Check Point released patches on September 9, 2026 for two critical VPN vulnerabilities rated CVSS 9.8, both allowing unauthenticated r…
PaperCut: 440 Servers Compromised by AI Agents — 11 Organizations Breached in 26 Seconds
A Russian-speaking threat actor deployed hundreds of AI agents on OpenAI Codex and DeepSeek to automate exploitation of two PaperCut N…
IDScan Confirms Breach: 153 Million Driver's Licenses for Sale on Dark Web
IDScan.net has confirmed a data breach exposing millions of identity documents. The dark web service Nexus was selling them with trace…
Midnight Blizzard Used Claude AI to Automate the Malware Evasion Loop
Anthropic disrupted a GTG-20006 operation attributed to Midnight Blizzard: AI agents autonomously modified and recompiled malware to r…