Ransomware
FortiBleed-Linked Actors Reportedly Collaborating With INC and Lynx Ransomware Operations
Threat-cluster convergence between FortiBleed and two ransomware families — defender teams stay in credential-verification posture this week.
Latest
Data Breaches
US Government Confirms New Breach Affecting Federal Systems in Sector-Advisory Disclosure
Another federal-agency disclosure — sector-advisory tracking for federal-adjacent defenders this week.
Threat Intelligence
Kaspersky Details Umbrij, a New ToddyCat Tool Targeting Corporate Gmail via OAuth Tokens
An APT-tooling disclosure with corporate-Gmail implications — defender teams review OAuth-token hygiene this week.
Phishing
Microsoft and Trend Micro Document Blockchain-Abuse Phishing Against EU and Asia Hospitality
Two vendor-documented hospitality-sector phishing campaigns land the same week — sector-advisory work for hotel-industry defenders this week.
Artificial Intelligence (AI)
Adversa AI Research — “GuardFall” Shell Injection Bypasses 10 of 11 Open-Source AI Coding Agents
An AI-coding-agent bypass with cross-vendor implications — defender posture-review work for organizations running open-source agents this week.
Artificial Intelligence (AI)
"BioShocking" Research Tricks AI Browsers Into Leaking User Credentials
A multi-vendor AI-browser research disclosure — defender posture-review work for organizations deploying agentic browsers this week.
Policy & Government
House Passes Kids Internet and Digital Safety (KIDS) Act 267-117; Senate Approval Unlikely
A bipartisan House vote on child-safety platform obligations — Senate outlook and industry response in focus this week.
Policy & Government
OMB Director Vought Signals Openness to Re-Staffing CISA
A policy-signal shift on CISA staffing — federal-adjacent defender teams and industry partners watch for follow-through this week.
Vulnerabilities
Progress Publishes Advisory for Critical Kemp LoadMaster Flaw CVE-2026-8037
A pre-authenticated critical vulnerability in a widely-deployed load balancer — patch verification for defender teams this week.
Microsoft 365
Huntress Documents 81M+ Azure CLI Password-Spray Attempts Against 78 Microsoft Accounts
A scale-significant Azure CLI credential-attack campaign — defender teams stay in account-hardening posture this week.
Policy & Government
Microsoft Publishes Quantum-Safe Guidance as the Risk Timeline Shifts
Microsoft's PQC guidance lands alongside the accelerated federal deadline — vendor roadmap alignment this week.
Artificial Intelligence (AI)
CIA's Ratcliffe Frames Advanced AI as ‘Akin to Digital Nuclear Weapons’
A senior US-intelligence framing lands mid-cycle — how AI-cyber policy hardens in focus this week.