Filtered by topic: Cybersecurity Clear ✕
Chinese hackers hijack auth flow, spy on isolated network for a decade By Bill Toulas June 13, 2026 10:06 AM Chinese hackers took control of a target organization's authentication stack…
…News sites Nextgov , which first reported the incident, and Bleeping Computer report that DHS officials are probing a cyberattack on its Homeland Security Information Network, or HSIN, which allows government agencies and…
…Each week, we round up the security and privacy news we didn’t cover in depth ourselves. Click the headlines to read the full stories. And stay safe out there LastPass Suffers…
…And most importantly, make sure infected devices aren't on the network when you do. 2. Connect the infected device to a guest network If your device is infected with malware, you…
Everyone's dunking on GitHub right now and yeah fair enough. But can we be honest about something? We've spent years obsessing over cloud misconfigs, network segmentation and perimeter defense while completely ignoring t…
Seriously, the amount of snake oil out there right now is insane. My c-suite keeps buying these "autonomous AI agents" thinking they're going to replace half the SOC, and instead I'm just spending my entire week babysitt…
Signups, silence, and a suspicious text: users joined GTFOICE.org to protest ICE and woke up to messages claiming their data was sent to federal agencies. Just four days ago, Project Salt Box’s Michael Wriston and Defian…
Overview: On May 24, 2026, the data breach notification service Have I Been Pwned (HIBP) integrated a dataset originating from an April 2026 extortion campaign targeting 7-Eleven. The breach, attributed to the threat act…
…Those tainted pieces of code have allowed TeamPCP’s hackers to breach hundreds of companies that installed the software, says Ben Read, who leads strategic threat intelligence at the cloud security firm…
…runtime download network hxxps[://]upload[.]pypi[.]org/legacy/ Worm publishes poisoned PyPI packages network hxxp[://]169[.]254[.]169[.]254/latest/meta-data/iam/security-credentials/ AWS IMDS credential theft network hxxps[://]login…
…Lynx emerged in mid-2024 and is believed by security researchers to be a rebrand of the INC ransomware gang rather than a new extortion group. SOCRadar says a second technical white…
…Fortinet security flaws are often exploited in ransomware attacks (often as zero-day bugs) and in cyber espionage campaigns to breach the targets' networks. Most recently, Fortinet released security updates to address…
The data we glean from attacks trains our machine learning models and improves the efficacy of our network and application security products, but historically hasn’t been available to query directly. This…
…As in the previous Shai-Hulud campaign impacting TanStack and Mistral packages, the payload collects secrets from developer and CI/CD environments and exfiltrates them over the Session P2P network to complicate…