​The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a high-severity security flaw impacting SolarWinds Serv-U multi-protocol file server software to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence… Read More »CISA Adds Actively Exploited SolarWinds Serv-U DoS Flaw to KEV Catalog

​A researcher has reverse-engineered the iOS SDK that Bright Data embeds in consumer apps and documented how it turns devices, including always-on smart TVs, into exit nodes that relay web-scraping… Read More »Free Apps Are Quietly Turning Smart TVs Into Web-Scraping Proxies for AI

​Microsoft’s GitHub repositories have become the latest to fall victim to the ongoing Miasma self-replicating supply chain attack campaign. The incident impacted 73 Microsoft repositories across four of its GitHub… Read More »Miasma Worm Hits 73 Microsoft GitHub Repositories in Major Supply Chain Attack

​Two things landed within days of each other this week. A security startup reported 21 previously unknown vulnerabilities in FFmpeg, the media library inside almost everything that touches video, all… Read More »AI Agent Uncovers 21 Zero-Days in FFmpeg; Chrome Patches Record 429 Bugs

​Cisco has warned that a high-severity security flaw impacting Catalyst SD-WAN Manager has come under active exploitation. The vulnerability, tracked as CVE-2026-20245, carries a CVSS score of 7.8 out of… Read More »Cisco Catalyst SD-WAN Manager CVE-2026-20245 Flaw Actively Exploited – No Patch Available

​Multiple software supply chain attacks have hit the npm ecosystem, with threat actors using both malicious and poisoned versions of over 50 legitimate packages to distribute a Rust-based information stealer… Read More »IronWorm and New Miasma Worm Variant Hit npm in Supply Chain Attacks

​Arabic-speaking users have emerged as the target of a new Android spyware codenamed Asin, according to findings from ESET. The Slovakian cybersecurity company said it first detected the malware spread… Read More »Android Spyware Asin Targets Arabic Users via Fake News, PDF and War Map Apps

​Cybersecurity researchers have discovered a previously unreported threat cluster dubbed OP-512 that has been observed targeting Microsoft Internet Information Services (IIS) servers to deploy a bespoke web shell framework. ReliaQuest… Read More »New Threat Cluster OP-512 Targets Microsoft IIS Servers with Custom Web Shell Framework

​Eighteen months ago, the AI SOC was a marketing line. Today it’s a budget item. The category has crossed over from interesting to inevitable, with billions of dollars now flowing… Read More »Only 10% of SOCs Say They’re Getting Excellent Value From AI. Here’s What the Second Wave Has to Deliver