Browsing Tag
security
5486 posts
Infostealers Hit 7.4M Hosts and Steal 1.7 Billion Credentials in 6 Months
Cybercrime accelerated in early 2026 as infostealers harvested 1.7 billion credentials and ransomware operations affected 6,256 victims in six months worldwide.
Hacker Leaks 40GB of Alleged UK National Grid Infrastructure Data (Updated)
A hacker claims to have leaked 40GB of National Grid data, including source code, DevOps scripts, cloud configurations and internal project files.
ShipMonk Breach Impacts 13,689 Trezor Customers in 7 Countries
Trezor says the ShipMonk breach compromised personal and delivery information belonging to 13,689 hardware wallet customers located in 7 affected countries.
Suspected APT Exploits Critical VMware vCenter Vulnerabilities in 47 Countries
QUIRSO links 361 victim IP addresses in 47 countries to a suspected APT campaign exploiting critical VMware vCenter vulnerability, CVE-2026-59310.
DPRK-Linked Hackers Use Ethereum Dead Drops in Malicious npm Packages
DPRK-linked hackers planted malicious code in 6 npm packages that use Ethereum transactions to locate attacker-controlled servers and download malware payloads.
Non-Custodial Crypto Payment Gateways: Why the Security Model Matters for Merchants
Disclosure: This article was prepared in collaboration with Bcon Global. The information provided here is based on their…
XSS2Shell Vulnerability Puts 500 Million WordPress Sites at Risk of RCE
The XSS2Shell bug in WordPress could turn a failed login into server code execution after an attacker tricks a logged-in administrator; update to version 7.0.3.
Tested, Breached, Fixed: What a Real Security Audit Looks Like
Most organisations believe their defences are solid right up until the moment they discover they are not. A…
5 Best AI Detection & Response Platforms for 2026
Compare AI detection & response platforms for 2026, including Dash, Lakera, Operant AI, HiddenLayer and Prisma AIRS, for runtime threat protection and response.
Kali365 Exploits Microsoft Device Login to Access US Corporate Data
Learn how Kali365 has been abusing Microsoft device login to gain OAuth tokens, targeting US firms, and how SOC teams can detect, hunt, and stop these phishing attacks.