From VPN Gateway to Hypervisor: How Ransomware Crews Are Turning a Months-Old Palo Alto Flaw Into Domain-Wide Access
Patched is not the same as safe if the patch never got installed. Palo Alto Networks’ Unit 42 team said...
Year: 2026
The Private Key Was the Number 4: How Eight Weak Certificate Authority Keys Set Off an Internet-Wide Scramble
The padlock in a browser address bar rests on a simple promise: only the certificate authority holds the private keys...
At Least 600 Victims and No Affiliates: A Profile of SafePay, the Ransomware Crew Now Flagged by the FBI and CISA
Federal agencies do not issue a dedicated ransomware advisory for every gang. When the FBI, CISA, the U.S. Secret Service...
PHP Ships an Emergency Fix This Morning for Two Leaked Critical Flaws: Your Questions on PHP2Shell, Answered
Somewhere in almost every small business’s online footprint there is PHP: the company website, a customer portal, a hosting control...
Microsoft Now Calls AI Agents Your Newest Insiders: A Five-Rung Ladder for Keeping Your Company’s Agents on a Short Leash
Here Is How Layered Defenses Help When the Insider Is SoftwareFor years insider risk meant people: a careless employee, a...
One Police Login Saved on a Personal Device Opened Florida’s Driver Records. Now the Letters Are Going Out
The most important detail in Florida’s driver-records breach is not the size of the database or the name of the...
PeerStitch, Part by Part: How a Memory-Only Implant Hid Inside FortiGate Firewalls Without Opening a Single Port
Firewalls sit at the edge of the network precisely so that everything else can trust them. That is what makes...
A Fake ChatGPT Helper, a Pasted Command and a Signed Siemens App: Five Places to Stop the Latest ClickFix Attack
ClickFix tricks are not new: a web page shows a fake CAPTCHA or error and tells the visitor to paste...
Washington Formally Shuts DeepSeek Out of Civilian Agencies: Reading the DHS Order Line by Line
A notice scheduled to appear in the Federal Register on Tuesday makes official something the government decided months ago: the...
A Paid SEO Plugin Shipped a Self-Healing Backdoor for 11 Hours: The Rank Math PRO Response Clock for WordPress Site Owners
Most WordPress owners are taught that the safe move is to keep plugins updated. This incident turns that advice on...
