Xsolis disclosed a breach affecting 1.4M people after a phishing attack exposed personal and health data from its hospital clients’ systems.

Once you ingest major telemetry sources, how can we add value for our Threat Hunters? Check out how we brought in potentially malicious sandbox submissions to the analysts’ queue for triage.

Two men pleaded guilty in the United Kingdom this week to criminal charges stemming from an August 2024 cyberattack that crippled Transport for London, the entity responsible for the public transport network in the Greater London area. The duo were…

A SANS audit of 14 patched SonicWall firewalls shows Akira ransomware still getting in via stale accounts and LDAP misconfigurations the firmware update never touched.

Algerian man Abdellah Belmili was extradited to the U.S. and charged with running two illicit cybercrime marketplaces that targeted major American banks.

Cybercriminals are using a PowerShell script to hijack Telegram sessions and gain access to users' accounts without a password or verification codes.

The DOJ seized cloud infrastructure tied to Cambodia's Huione Group, disrupting a massive cybercrime marketplace used for billions in crypto scams and laundering.

Four flaws in Dify exposed cross-tenant data, documents and AI conversations. Two critical bugs enabled unauthenticated access and data theft

DPRK-linked implant embeds 38 fabricated system messages that spoof an LLM triage harness, hiding a credential stealer and Telegram C2 underneath.

Two alleged Scattered Spider members pleaded guilty to the Transport for London cyberattack that exposed customer data.

Vulnerabilities in QNAP NAS, including CVE-2025-59382, could enable code execution, data theft, privilege escalation, and DoS attacks.

The National Health Care Fraud Takedown led to charges against 455 defendants tied to over $6.5 billion in alleged health care fraud.

KDDI data breach exposes up to 14.22M emails and passwords via ISP systems after threat actor exploited third-party software flaws.

A nationwide GSM-R outage halted trains across Germany, exposing the risks of relying on an aging rail communications system.

Three malicious npm packages posing as PostCSS tools have been installing a Windows RAT on developer machines. Here is how to detect them and what to do if you find them.

An epidemic of cyberattacks exposes widening gaps in open source software security, as experts warn that U.S. government defense efforts have stalled.

FortiBleed exposed credentials for 73,000+ Fortinet firewalls, revealing a large-scale access-brokering operation targeting orgs worldwide

U.S. CISA adds Ubiquiti UniFi OS and Lantronix EDS5000 flaws to its Known Exploited Vulnerabilities catalog.

Attackers exploit Cisco Unified CM flaw (CVE-2026-20230) allowing unauth HTTP requests to trigger SSRF, write files, and gain root access

Frontier AI could drive a 10x surge in vulnerabilities. CTEM helps orgs continuously identify, prioritize, and reduce real cyber risk