Blog

Researchers have released a working exploit for a pre-auth AnyDesk Linux remote code execution bug, quietly patched in June, that grants root access over direct TCP.

Anthropic's OSS Scanner offers free, opt-in AI-powered security scans for open-source projects, emailing model-generated vulnerability reports directly to maintainers.

Ransomware trackers logged record attack volumes in Q3 2026, with sharp surges against finance, technology, healthcare and government organizations worldwide.

UK, US and allies have issued a joint advisory exposing China-based Integrity Technology Group as a key enabler of global data theft and critical infrastructure attacks.

Researchers at Pwn2Own Ireland 2026 remotely compromised fully patched Google Pixel 10 phones, earning about $560K and exposing serious mobile attack paths.

US authorities seized seven Flax Typhoon-linked domains and disrupted Microscan and FishHub tools used to probe and breach critical infrastructure.[1][2][4]

US officials seized domains for Microscan and FishHub, disrupting Flax Typhoon’s Chinese-linked operations against critical infrastructure and issuing new guidance.

FBI and global partners say China-linked Integrity Technology Group operated a portal that exposed stolen emails from public institutions across Southeast Asia.

US prosecutors say MonsterCloud owner Zohar Pinhasi secretly paid ransomware gangs while claiming proprietary decryption tools, overbilling victims by millions.

US authorities have captured alleged Tren de Aragua malware engineer Anibal Canelon Aguirre, accused of leading a multimillion‑dollar ATM jackpotting scheme.[2][3]