Cybersecurity
Cybersecurity collects analysis on vulnerabilities, exploits, patch management, ransomware, supply chain, AI security and threat intelligence. These articles help IT professionals, developers and security analysts follow operational threats, vendor updates and technical trends.
Spring Ring: The Teams Vishing Campaign That Jumps From Chat to Domain in Minutes
From January to April 2026, the Spring Ring campaign impersonated IT help desk staff on Microsoft Teams to trick employees into runnin…
Russian Hackers of UAC-0099 Weaponize AI Guardrails as Evasion Tactic
On August 31, 2026, ESET disclosed an evasion technique: UAC-0099 hackers, a Russian group affiliated with the GRU, embed nuclear weap…
Infostealer on Attacker Workstation Exposes Blind Eagle Campaign
An information stealer infection on a suspected threat actor's workstation has laid bare the full infrastructure of a phishing campaig…
KEV Beats CVSS: The Framework CISOs Use When Scores Lie
On August 31, 2026, vulnerability prioritization gained an official decision framework: CISA BOD 26-04 mandates four scoring variables…
Attacker's Own Infostealer Infection Exposes Full Arsenal of Colombian Blind Eagle Campaign
A consumer infostealer accidentally infected a threat actor's workstation, leaking browser history, local folders, credentials, and a…
CSN ICT 2026 Report: Mediterranean Commercial Fleets Operating Under Digital Siege
The CSN ICT 2026 report finds Cyprus and Greece commercial fleets under sustained digital assault. Maritime cyber incidents doubled in…
Beacon CRM Breached, Robert Burns Trust Warns Donors: The Risk
A cyberattack on Beacon CRM, a SaaS provider for the non-profit sector, exposed contact data for over 1,000 organizations. The Robert…
DOJ Corrects Record: NASA and Senate Were QTFY Targets, Not Victims
The U.S. Department of Justice revised its August 26 statement on August 29, 2026, clarifying that NASA, the U.S. Senate, and the Fede…
CareCloud Breach Exposes 3.75 Million Patient Records: The B2B Model Hides the Victims
CareCloud confirmed in March that an unauthorized actor accessed an AWS environment for six days, compromising 3,756,469 individuals.…
TA4922 Launches PackClient Campaigns in Asia: Modular RAT Bought on Telegram
Chinese threat group TA4922 deployed the PackClient RAT framework across China and India via tax-themed phishing between May and July…
'Superior' Campaign: 19 Extensions in Google and Microsoft Stores Turned Into Data-Theft Platforms
Socket identified 19 malicious extensions in the Chrome Web Store and Edge Add-ons Store. The modular framework hit nearly 80,000 user…
McKesson in ShinyHunters' Crosshairs: 284 Million Records and a $55 Million Ransom
McKesson disclosed a security incident involving unauthorized access to third-party applications. The ShinyHunters group claims to hav…