The suspected China-linked threat actor known as Warlock is still continuing to weaponize Microsoft SharePoint vulnerabilities, likely both old and new, in attacks targeting organizations in Portuguese- and Spanish-speaking countries.… Read More »Warlock Exploits SharePoint Flaws to Disable Security Tools and Deploy Ransomware
The U.K.’s domestic intelligence and security agency has warned that more than 100 academics have helped China boost its intelligence gathering efforts on behalf of Beijing’s state security service. In… Read More »MI5 Says China’s MSS Funded Research Involving 100+ U.K.-Linked Academics
Featuring: Cybersecurity is being reshaped by the expansion of cloud infrastructure, AI, distributed systems, and increasingly complex digital environments. As organizations manage more identities, devices, data, and internet-facing infrastructure, security… Read More »The State of Cybersecurity in 2026: Key Segments, Insights, and Innovations
Dell has released security updates to address multiple critical security flaws in Dell Container Storage Modules (CSM) that could be exploited by bad actors to take over susceptible systems. The… Read More »Dell CSM Flaws Enable Unauthenticated Admin Access and Root on Kubernetes Nodes
Government and policy organizations across Asia have become the target of a new campaign orchestrated by a China-nexus threat actor. The activity, which has targeted government and policy organizations in… Read More »Antino Backdoor Uses Outlook and OneDrive for C2 in China-Nexus Espionage Campaign
A critical flaw in GitLab’s AI Gateway could let a logged-in user with Duo Agent Platform access run commands on the gateway under certain conditions, GitLab said in an advisory. The… Read More »GitLab Patches Critical 9.9 AI Gateway Flaw Allowing Command Execution on Self-Hosted Servers
OpenAI has parted ways with three members of its safety team after they leaked private information in violation of company policies, The Wall Street Journal reported. “We have parted ways… Read More »OpenAI Parts Ways With Three Safety Researchers Over Sensitive Information Mishandling
The quarterly board meeting is two weeks out. The security team is pulling exports from the identity provider, the cloud posture tool, the vulnerability scanner, the SIEM and the EDR… Read More »Why CISOs Struggle to Answer the Board’s Three Hardest Questions, and How to Fix the Report
Google has announced a new security measure that limits access to Android’s accessibility services to verified applications classified as Accessibility Tools when Advanced Protection is enabled. With malicious Android applications… Read More »Android 17 Advanced Protection Locks Accessibility Services to Verified Accessibility Tools
The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on Thursday, added a critical security flaw impacting Fortinet FortiMail to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation.… Read More »Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes