Threat Intelligence
In a stark assessment of the global threat landscape, the UK’s lead cyber official warns that a coalition of nation-state adversaries — supercharged by artificial intelligence — now poses an unprecedented risk to critical national infrastructure. LONDON, UK — The United Kingdom is facing a "perfect storm" of cybersecurity
Token Theft
Researchers have uncovered a sophisticated evolution of the NGate malware family, which now weaponizes legitimate payment applications to intercept card data and relay physical transactions across the internet in real-time. SÃO PAULO, BRZ — A high-impact cyber-espionage and financial theft campaign is currently sweeping through Brazil, utilizing a
Threat Intelligence
In a rare turn of events, security researchers have observed a surge in failed exploitation attempts targeting a high-severity vulnerability in discontinued TP-Link routers, highlighting the technical hurdles of weaponizing code for aging hardware. SHENZHEN, CHINA — A wave of automated attacks targeting the TP-Link Archer AX21 (v1.
Vishing
Attackers are exploiting a loophole in Apple’s automated account recovery and security notification systems to bombard users with legitimate system alerts, driving them toward fraudulent support centers. CUPERTINO, CA — Security researchers from Malwarebytes and reports from the Apple user community have identified a sophisticated campaign that uses Apple’s
Mobile Security
A sophisticated "FakeWallet" campaign has bypassed Apple’s stringent review process, leading to the theft of millions in digital assets through fraudulent Ledger and Trezor clones. CUPERTINO, CA — Apple’s reputation for hosting a "curated and secure" ecosystem is facing renewed scrutiny following the discovery of
Vulnerabilities
Researchers at Pillar Security successfully bypassed Antigravity’s most restrictive "Secure Mode" using a prompt injection that transformed a simple file-search tool into an arbitrary command execution engine. MOUNTAIN VIEW, CA — Google has issued a critical patch for Antigravity, its flagship agentic Integrated Development Environment (IDE), after
Fraud
In a staggering breach of professional ethics, a third cybersecurity "expert" has admitted to operating as an inside man for one of the world's most prolific ransomware cartels, using his position to facilitate extortions instead of preventing them. TAMPA, FL — The U.S. Department of Justice
Third Party Risk
An investigation into the "connective tissue" of the industrial internet reveals that thousands of legacy Serial-to-IP converters are currently vulnerable to unauthenticated remote code execution. SAN JOSE, CA — Forescout’s research division, Vedere Labs, has released a comprehensive security advisory titled "BRIDGE:BREAK," detailing
Microsoft Ecosystem
An out-of-band update arrives days after the April Patch Tuesday release triggered critical LSASS crashes and BitLocker recovery prompts across enterprise domain controllers. REDMOND, WA — Microsoft has released a series of emergency out-of-band (OOB) updates to address a cascade of failures introduced by its April 2026
Enterprise Infrastructure
By wrapping malicious payloads inside legitimate QEMU virtual machines, threat actors are effectively blinding EDR and AV solutions, turning an open-source emulator into a potent defense evasion tool. ABINGDON, UK — A sophisticated shift in ransomware delivery has been identified by security researchers at Sophos and BleepingComputer. Threat actors are
Artificial Intelligence (AI)
A systemic design choice in the Model Context Protocol (MCP) allows arbitrary command execution across the AI ecosystem. Despite 10+ critical CVEs and a 150-million download "blast radius," Anthropic maintains the behavior is expected. SAN FRANCISCO, CA — A foundational vulnerability has been identified at the heart of
Enterprise Infrastructure
A new global scan by Censys reveals that nearly half of all internet-facing FTP servers lack basic encryption, leaving enterprise data pipelines vulnerable to credential sniffing and man-in-the-middle attacks. ANN ARBOR, MI — In an era dominated by zero trust and encrypted tunnels, one of the internet’