The Operators of a well-known malvertising campaign have developed a novel technique to avoid detection: hiding their activity in the victim’s browser to secretly build and then deliver the final payload. The new tactics by SourTrade, a prolific and evolving… Read More "SourTrade Malvertising Campaign Secretly Builds Malware in the Browser"
25 Security Vulnerabilities That Have Defined the 2020s (Thus Far)
Welcome to vulnerability management’s big bang. If it feels like your security team is running a marathon on a treadmill set to a permanent incline of 12.0 with 50lb sandbags tied around each ankle, you’re in good company. We have… Read More "25 Security Vulnerabilities That Have Defined the 2020s (Thus Far)"
SAP Patches Critical Code Injection, Memory Corruption Vulnerabilities
Enterprise software maker SAP on Tuesday announced the release of 28 new security notes, two updates to previous notes, and a GitHub advisory. Four of the notes published on SAP’s August 2026 Security Patch Day resolve critical vulnerabilities, the most… Read More "SAP Patches Critical Code Injection, Memory Corruption Vulnerabilities"
Kimwolf v7 Android Botnet Makes HTTP/2 DDoS Traffic Look Like Legitimate Browsing
Ravie LakshmananAug 11, 2026Botnet / Vulnerability Cybersecurity researchers have discovered a new version of the Kimwolf/AISURU Android and Internet of Things (IoT) botnet that comes with significant improvements to improve its operational resilience and conduct distributed denial-of-service (DDoS) attacks. The… Read More "Kimwolf v7 Android Botnet Makes HTTP/2 DDoS Traffic Look Like Legitimate Browsing"
Zoom zero-click RCE flaws allow attackers to compromise meeting participants
“The entire operation, from finding the flaw to building a working exploit, was carried out by A [Security] using fewer than 20 prompts on publicly available AI models in under 24 hours,” the company said in its report. “This class… Read More "Zoom zero-click RCE flaws allow attackers to compromise meeting participants"
Gunra Ransomware Gang Exploits Fortinet Flaws, Bypasses MFA
A burgeoning ransomware-as-a-service (RaaS) operation is using known exploited vulnerabilities in campaigns against critical infrastructure and government organizations around the globe. US and South Korean government agencies issued a joint cybersecurity alert on Monday regarding Gunra, a ransomware gang that… Read More "Gunra Ransomware Gang Exploits Fortinet Flaws, Bypasses MFA"
RedWing Android Spyware Sold as a Service on Telegram
A new Android spyware strain has been observed being rented out to criminals through Telegram, giving even low-skilled attackers the tools to hijack phones and steal banking credentials, researchers have found. Zimperium’s zLabs named the malware RedWing and described it… Read More "RedWing Android Spyware Sold as a Service on Telegram"
Surviving a LockBit Ransomware Attack: The ROI of Visibility
In August 2023, while thousands of students at William Jewell College were hauling mini-fridges and textbooks into dorms, the invisible, digital heart of the campus was flatlining. There was no internet. No email. Even the HVAC system, tied to a… Read More "Surviving a LockBit Ransomware Attack: The ROI of Visibility"
The AI Governance Gap Is a Leadership Problem: Waiting Won’t Close It
AI governance, once the purview of the legal department, is now knocking on the CEO’s door. But many C-Suite executives are still treating it as something to delay addressing until after AI regulations are set in stone. This can be… Read More "The AI Governance Gap Is a Leadership Problem: Waiting Won’t Close It"
Incident Response Playbook for Actionable Workflows
Covers malware only, not identity or cloud Written when endpoint malware was the primary threat Add explicit identity and cloud/SaaS containment branches No backup decision owner Assumes the primary owner is always reachable Two-deep on-call rotation with clear handoff rules… Read More "Incident Response Playbook for Actionable Workflows"