Cybersecurity
Cybersecurity collects analysis on vulnerabilities, exploits, patch management, ransomware, supply chain, AI security and threat intelligence. These articles help IT professionals, developers and security analysts follow operational threats, vendor updates and technical trends.
CISA KEV Tops 1,739 Entries: The Failure of CVSS as a Standalone Priority Metric
The CISA KEV catalog has surpassed 1,739 entries. Theoretical CVSS severity does not predict real-world exploitation: decade-old bugs…
CISA Adds Five Critical Vulnerabilities to KEV Catalog With Three-Day Federal Deadline
CISA has given federal agencies a three-day deadline to patch five N-day vulnerabilities in open-source software. The move is tied to…
ASOS: A Single Corporate Login Opened the Door to Millions of Customers
The October 6 breach shows marketing notification platforms are the new security weak point: one stolen credential was enough to hijac…
Ransomware Negotiator Arrested: The Dubrovsky Case and the Blurred Line Between Defense and Collusion
Canadian cybersecurity executive Edward Dubrovsky, 54, was arrested in Pennsylvania on federal extortion and conspiracy charges. Inves…
The Phantom Decryptor: The CEO Who Sold Hope at Ransom Prices
Zohar Pinhasi, CEO of MonsterCloud, has been indicted in Brooklyn for defrauding ransomware victims. He secretly paid ransoms and bill…
AI Agents Now Leave Forensic Traces: Two Scripts to Extract Them
The SANS FOR577 course integrated two Python scripts into its Day 5 material on October 8, 2026, for forensic analysis of residues lef…
Botnet Hides C2 in a GitHub Poem; AI Surfaces as Offensive Tool in South Korean Bank Breaches
Three developments define the week in threat intelligence: the PoeLLM botnet reconstructs its command-and-control IP from keywords hid…
Small Business Declines Security, Shuts Down After Ransomware: The Case
A U.S. construction firm turned down a cybersecurity proposal over cost. Three weeks later, ransomware encrypted its server and attach…
Pwn2Own Ireland 2026: The Collision Paradox on "Fully Patched" Devices
At Pwn2Own Ireland 2026, researchers earned $1.262 million for 98 zero-day vulnerabilities across 61 successful attempts. Ikotas Labs…
Belarusian Cyber Partisans Claim 2023 Breach of Russian Health Ministry
The Belarusian Cyber Partisans have confirmed they breached the Moscow Department of Health in 2023, partially corroborating a report…
iRhythm Technologies Exposes 360,000 Patients: The Four-Month Disclosure Gap
iRhythm Technologies began notifying victims on October 2, 2026, of a data breach that occurred between June 3 and June 8, 2026. The C…
FBI Arrests Third ShinyHunters Suspect: Third Arrest in 12 Days After FBIJobs.gov Breach
The FBI arrested a Canadian citizen in Pennsylvania on October 9, 2026, identifying them as a primary co-conspirator in the ShinyHunte…