Microsoft Ecosystem
A routine April security update, KB5082063, crashed LSASS and sent Windows domain controllers into endless reboot loops. Microsoft's out-of-band fix stops the bleeding — but the real cost is the trust it drains from "patch fast."
Enterprise Infrastructure
By wrapping malicious payloads inside legitimate QEMU virtual machines, threat actors are effectively blinding EDR and AV solutions, turning an open-source emulator into a potent defense evasion tool. ABINGDON, UK — A sophisticated shift in ransomware delivery has been identified by security researchers at Sophos and BleepingComputer. Threat actors are
Artificial Intelligence (AI)
A systemic design choice in the Model Context Protocol (MCP) allows arbitrary command execution across the AI ecosystem. Despite 10+ critical CVEs and a 150-million download "blast radius," Anthropic maintains the behavior is expected. SAN FRANCISCO, CA — A foundational vulnerability has been identified at the heart of
Enterprise Infrastructure
A new global scan by Censys reveals that nearly half of all internet-facing FTP servers lack basic encryption, leaving enterprise data pipelines vulnerable to credential sniffing and man-in-the-middle attacks. ANN ARBOR, MI — In an era dominated by zero trust and encrypted tunnels, one of the internet’
Data Breaches
Security researchers have identified a persistent vulnerability in the world’s most popular messaging app that allows attackers to scrape granular user metadata, bypassing end-to-end encryption (E2EE) protections. MENLO PARK, CA — While WhatsApp’s end-to-end encryption ensures that the content of a message remains private, a
Microsoft Ecosystem
A new human-operated intrusion playbook leverages cross-tenant communication to bypass traditional email security, targeting high-privilege credentials through "Helpdesk" deception. REDMOND, WA — Microsoft Threat Intelligence has issued a critical warning regarding a sophisticated surge in "Helpdesk Impersonation" attacks conducted via Microsoft Teams. The campaign,
Data Breaches
The popular frontend cloud platform has confirmed a security incident after threat actors leveraged an infostealer infection at an integrated AI vendor to access Vercel’s internal environments. SAN FRANCISCO, CA — Vercel, the platform behind the Next.js framework, has officially disclosed a security breach originating from a compromised third-
Data Breaches
ShinyHunters didn't breach Zara, Carnival, and 7-Eleven's networks — it logged into the SaaS and CRM platforms they trusted, then exported the databases. The real lesson: in an identity-first, extortion-only world, you own every dataset anyone can reach with your name on it.
Cyber Attacks
A targeted attack took Tallahassee's website offline and disrupted city-county dispatch and GIS systems. Officials say no data was compromised — but a same-day denial is a status update, not a completed forensic verdict.
Data Breaches
An exposed API on Indonesia's mandatory game-rating portal leaked 1,000+ developer credentials and unreleased-game footage — including 007: First Light spoilers. The real lesson isn't the breach; it's the compliance systems that force publishers to hand over their crown jewels.
Data Breaches
South Africa’s largest lender by assets is reeling from a major security incident after a threat actor publicly released a massive cache of sensitive banking data. JOHANNESBURG, SOUTH AFRICA — Standard Bank has confirmed it is managing a "data incident" following reports that a threat actor has successfully
Digital Identity
Following a coordinated global takedown of the Tycoon 2FA infrastructure, decentralized threat actors are abandoning traditional Adversary-in-the-Middle (AiTM) kits in favor of more resilient device code phishing tactics. LONDON, UK — The landscape of Multi-Factor Authentication (MFA) bypass is undergoing a rapid transformation. Just weeks after an