Cybersecurity
Cybersecurity collects analysis on vulnerabilities, exploits, patch management, ransomware, supply chain, AI security and threat intelligence. These articles help IT professionals, developers and security analysts follow operational threats, vendor updates and technical trends.
ShinyHunters Claims Florida DMV Breach, 200,000 Driver Records at Risk
ShinyHunters claims to have breached the Florida DMV's DAVID platform, threatening to release over 200,000 driver records. The group's…
npm: Known Worm Evades Registry Malware Scanning After 111-Day Dormancy
The Shai-Hulud npm worm resurfaced on September 7, 2026 with the identical SHA-256 hash documented four months earlier, bypassing the…
BengalSEO Poisons Bing to Deliver Malware and Tech Support Scams Since 2015
The BengalSEO cybercrime group, operating from Rajasthan, India since at least 2015, systematically manipulates Bing search results th…
Chrome 0-Day and MikroTik Hijacks: Critical Week for Patching
Seven actively exploited zero-day vulnerabilities hit Chrome, MikroTik routers, N-able platforms, and Magento. The gap between patch a…
Trezor: 81,000 Customers Exposed, ShipMonk Violated Data Deletion Contract
The Trezor breach impacts 81,000 customers, 67,000 of whom believed their data had been deleted per contract. ShipMonk retained the da…
Bimbo Bakeries: 8 Months of Forensics for an ERP Breach via CVE-2025-61882
Bimbo Bakeries USA confirmed a data breach through Oracle EBS with an eight-month gap between discovery and notification. The case hig…
Check Point Report: AI Agents Compromise Enterprise Network in Under 10 Hours
The September 7, 2026 report documents an AI-assisted ransomware attack that compressed weeks of intrusion into hours, alongside zero-…
Autonomous AI Agents Compromise Enterprise Network in Under 10 Hours
Check Point Research's September 7, 2026 report documents an AI-orchestrated attack that compressed weeks of tradecraft into a single…
FalconFlank Exposes the EDR Paradox: Protection Becomes Attack Surface
Researcher Nightmare Eclipse released FalconFlank, a working zero-day privilege escalation PoC against CrowdStrike Falcon Sensor. The…
N-able Patches CVE-2026-86218: Pre-Auth RCE with CVSS 10.0 and Contradictory Messaging
N-able released emergency hotfix 2026.3 HF4 on September 5, 2026, for CVE-2026-86218, a pre-authentication remote code execution flaw…
SonicWall SMA1000: Second Zero-Day Chain in Seven Weeks, 400+ Appliances Exposed
SonicWall disclosed two actively exploited zero-day vulnerabilities in the SMA1000 series on September 1, 2026. The SSRF-to-command-in…
ScreenConnect Weaponized: Self-Propagating Malware Spreads via File Transfer
Huntress documented a campaign that turns ConnectWise ScreenConnect into an automatic propagation vector. Modified clients, initially…