This week’s updates show how small changes can create real problems. Not loud incidents, but quiet shifts that are easy to miss until they add up. The kind that affects… Read More »ThreatsDay Bulletin: New RCEs, Darknet Busts, Kernel Bugs & 25+ More Stories
A study by OMICRON has revealed widespread cybersecurity gaps in the operational technology (OT) networks of substations, power plants, and control centers worldwide. Drawing on data from more than 100… Read More »Survey of 100+ Energy Systems Reveals Critical OT Cybersecurity Gaps
Beyond the direct impact of cyberattacks, enterprises suffer from a secondary but potentially even more costly risk: operational downtime, any amount of which translates into very real damage. That’s why… Read More »3 Decisions CISOs Need to Make to Prevent Downtime Risk in 2026
SolarWinds has released security updates to address multiple security vulnerabilities impacting SolarWinds Web Help Desk, including four critical vulnerabilities that could result in authentication bypass and remote code execution (RCE).… Read More »SolarWinds Fixes Four Critical Web Help Desk Flaws With Unauthenticated RCE and Auth Bypass
Google on Wednesday announced that it worked together with other partners to disrupt IPIDEA, which it described as one of the largest residential proxy networks in the world. To that… Read More »Google Disrupts IPIDEA — One of the World’s Largest Residential Proxy Networks
Cybersecurity researchers have flagged a new malicious Microsoft Visual Studio Code (VS Code) extension for Moltbot (formerly Clawdbot) on the official Extension Marketplace that claims to be a free artificial… Read More »Fake Moltbot AI Coding Assistant on VS Code Marketplace Drops Malware
The “coordinated” cyber attack targeting multiple sites across the Polish power grid has been attributed with medium confidence to a Russian state-sponsored hacking crew known as ELECTRUM. Operational technology (OT)… Read More »Russian ELECTRUM Tied to December 2025 Cyber Attack on Polish Power Grid
A critical sandbox escape vulnerability has been disclosed in the popular vm2 Node.js library that, if successfully exploited, could allow attackers to run arbitrary code on the underlying operating system.… Read More »Critical vm2 Node.js Flaw Allows Sandbox Escape and Arbitrary Code Execution
Threat actors with ties to China have been observed using an updated version of a backdoor called COOLCLIENT in cyber espionage attacks in 2025 to facilitate comprehensive data theft from… Read More »Mustang Panda Deploys Updated COOLCLIENT Backdoor in Government Cyber Attacks
If you work in security operations, the concept of the AI SOC agent is likely familiar. Early narratives promised total autonomy. Vendors seized on the idea of the “Autonomous SOC”… Read More »From Triage to Threat Hunts: How AI Accelerates SecOps