Attackers exploit identity verification processes, particularly during onboarding and account recovery, to gain unauthorized access to corporate systems.
A bug in Microsoft's automated network maintenance request system caused a massive outage of Microsoft 365 services, affecting thousands of customers. The outage began on July 23 and was resolved by 2:26 PM ET.
Clop ransomware gang targets Windchill and FlexPLM instances, exploiting CVE-2026-12569 to exfiltrate sensitive data and extort organizations.
The Cybersecurity and Infrastructure Security Agency's new ANCHOR-CI framework aims to improve collaboration between the government and private companies to protect critical infrastructure from cyber threats and natural disasters.
HalluSquatting is an attack where researchers pre-compute fake repository, package, or skill names that AI coding agents predictably invent, register those names first, and load them with malicious instructions.
Botnets powered by residential proxy networks are proliferating, with nearly 60 million victim IP addresses worldwide, according to Lumen's Black Lotus Labs.
Threat actors are using email addresses exposed in ShinyHunters data breaches to send sextortion emails demanding $2,000 in Bitcoin.
The traditional model of finding and patching vulnerabilities is no longer effective, prompting a shift towards risk-based disclosure and prioritization.
Steam forum users are being targeted by ClickFix attacks that pretend to offer fixes for game issues but actually infect devices with XMRig cryptominers.
A 26-year-old Illinois man was sentenced to 76 months in prison for hacking into over 750 women's Snapchat accounts to steal nude photos.