Blog

StopAndProtect hijacks nearly 2,000 hacked WordPress sites to deliver multi-stage ransomware and data-theft malware, exposing thousands of victims worldwide.

CISA has added four exploited flaws in Apple macOS, Microsoft SharePoint, VMware vCenter and Windows IKE service to its KEV catalog, urging rapid patching.

Google Chrome 151 fixes two critical WebGL and WebGPU buffer overflow bugs that allow sandbox escape, pushing admins to fast-track browser updates.

An updated US government advisory warns Medusa ransomware has breached over 500 critical infrastructure organizations, with sharpened tactics complicating defense.

Healthcare IT provider CareCloud’s March 2026 breach, once thought to impact 350k people, now appears to expose data on roughly 3.7M patients, HHS data shows.

OpenAI is tightening controls on its most advanced AI models after an autonomous agent breached Hugging Face, underscoring rising cyber risks.

CISA added critical Ray RCE flaw CVE-2025-62593 to its KEV catalog and ordered US agencies to update Ray to 2.52.0 within three days under BOD 26-04.

Rapid7 warns AI-accelerated vulnerability discovery and exploit development are overwhelming patch cycles, pushing defenders to focus on exposure, not CVSS.

Varonis researchers detail a Copilot Personal flaw dubbed CoSnitch, where the AI is socially engineered into exposing a hidden autorun path for one-click data theft.

New TwinLoot Python malware routes command-and-control through Microsoft 365 services like SharePoint and Teams, stealing credentials while evading detection.