Cybersecurity 101
Indicators of Compromise (IOCs): What They Are and How to Use Them
A complete guide to indicators of compromise (IOCs) — the major types, the IOC vs IOA distinction, the Pyramid of Pain, and how IOCs are shared via STIX/TAXII.
Qantas Discloses Data Breach Affecting 5.7 Million People Traced to Tech-Support Scam
A scale-significant airline-industry disclosure traced to a tech-support scam — sector-advisory coverage this week, based on early single-source reporting that Qantas has yet to fully detail.
Ukraine and CERT-UA Document Sandworm CAPTCHA-PowerShell Trick Targeting Ukrainian Users
Another Sandworm-attributed technique lands from CERT-UA — end-user awareness and defender posture review this week for Ukraine-adjacent organizations.
F5 Publishes Patches for Multiple NGINX and BIG-IP Vulnerabilities
F5's July patch cycle continues — defender verification across NGINX and BIG-IP deployments this week.
Researchers Document “ClickLock” macOS Stealer That Reportedly Kills Apps Until Victim Enters Password
A novel macOS stealer technique with credential-and-crypto targeting — defender posture review for Mac-issuing organizations this week.
Zoom Publishes Critical Windows Vulnerability Patch (CVE-2026-53412, CVSS 9.8); Splunk Ships Companion Critical Patches
A CVSS 9.8 Zoom Windows flaw and companion Splunk patches — defender teams verify across enterprise deployments this week.
Two Scattered Spider Members Sentenced to Five-and-a-Half Years for £29 Million TfL Attack
The biggest cybercrime conviction in UK history — Scattered Spider's TfL attackers face five-and-a-half years, and the £29M cost lands as a defender-team reminder this week.
US Unseals Indictment Charging Russian “Bulletproof” Web Hosts Over Cyberattacks That Netted $62 Million
A US indictment against Russian bulletproof hosting operators — law-enforcement continuation coverage this week.
CISA Urges Immediate Patching for Three Exploited SharePoint Vulnerabilities (Two Are Zero-Days)
CISA raises the SharePoint patch stakes — three actively exploited flaws, two of them zero-days, and defender teams accelerate verification this week.
CyberScoop Reports SonicWall SMA 1000 Zero-Days Were Reportedly Exploited Three Weeks Before Vendor Disclosure
A three-week pre-disclosure exposure window for the SonicWall SMA zero-days — defender teams review the timeline this week.
Chaotic Eclipse / Nightmare-Eclipse Drops "LegacyHive" Windows Zero-Day PoC Hours After Patch Tuesday
A Windows User Profile Service PoC drops the same day as Patch Tuesday — the researcher's fourth CyberSignal-tracked disclosure this cycle, and a defender review for this week.
Compromised @asyncapi npm Packages Deliver Multi-Stage Botnet Loader
Another JavaScript-ecosystem supply-chain compromise, confirmed by four vendors: four @asyncapi npm packages were observed distributing a multi-stage botnet loader, and all five malicious versions have since been pulled from npm — defender inventory work this week.
UK Government Updates National Risk Register with Catastrophic Cyber-Attack Warnings
The UK Government adds catastrophic cyber warnings to its National Risk Register — UK-operating defenders align posture this week.