A cryptocurrency-stealing malware campaign has been spreading by faking its own popularity, dressing up booby-trapped “tools” with bogus GitHub stars, inflated download counts and AI-narrated YouTube tutorials. New analysis from Check Point Research traced the operation to a Rust-based clipboard… Read More "Fake GitHub Stars and AI Videos Mask a Crypto Clipper"
Most guidance published on AI agent security is written for enterprise organizations. It assumes dedicated AI security functions, red teams, platform engineering groups, and the budget to commission purpose-built tooling. If your security team is three people covering five hundred… Read More "Practical MCP Security: A Playbook for Mid-Market Teams"
Well hey y’all. I just got hooked up with this space to somewhat-routinely write about vulnerabilities, cybersecurity, and infosec history. I’m currently at runZero, where I’m the vice president of security research, which basically means that I spend most of… Read More "No Exploits Required – SecurityWeek"
NIST SP 800-53 Rev. 5 Access control (AC), Audit & accountability (AU), Identification & authentication (IA), Configuration management (CM) Widely used baseline for federal and enterprise environments. Maps directly to GPO-enforced controls.[4] NIST SP 800-63B Rev. 4 (2025) 15-character minimum… Read More "Active Directory Hardening: Plan, Checklist, and Best Practices"
Ravie LakshmananJun 18, 2026Malware / Cryptocurrency Microsoft has disclosed details of a Windows-based cryptocurrency clipper campaign that has targeted users since February 2026. “The clipper in this campaign relies on Windows Script Host and ActiveX-driven logic to launch a bundled… Read More "Microsoft Details Windows Clipper Malware Campaign Using USB LNK Worm and Tor-Based C2"
“Attribution is ongoing, but the operational fingerprints are clear,” SOCRadar researchers said in a blog post, adding that the tooling and targeting choices are consistent with Russian-speaking threat actors. According to independent analyses, including by SOCRadar, Hudson Rock, and security… Read More "FortiBleed campaign exposes 75,000 Fortinet firewalls worldwide"
A coordinated campaign against government and financial targets across Latin America has been laid bare by the attackers’ own mistake, after they left a staging server exposed online. New analysis from CloudSEK detailed the operation, which it named Operation Escaneo,… Read More "LATAM Infrastructure Hit by Fortinet and Ivanti Exploits"
%20(1).jpg?w=1140&resize=1140,855&ssl=1 "25 Security Vulnerabilities That Have Defined the 2020s (Thus Far)")
Welcome to vulnerability management’s big bang. If it feels like your security team is running a marathon on a treadmill set to a permanent incline of 12.0 with 50lb sandbags tied around each ankle, you’re in good company. We have… Read More "25 Security Vulnerabilities That Have Defined the 2020s (Thus Far)"
Accenture on Thursday announced that it’s taking a majority stake in Dragos and fully acquiring runZero and NetRise as part of a major OT cybersecurity push valued at roughly $4.1 billion. Dragos is widely recognized for its vendor-neutral platform specializing… Read More "Accenture to Acquire Majority Stake in Dragos, All of runZero, NetRise in $4.1 Billion OT Cybersecurity Push"
The Hacker NewsJun 18, 2026AI Security / Data Security If an autonomous AI agent interacts with your company’s core intellectual property today, can your security team instantly name the person who authorized it? For most enterprises, the answer is a… Read More "How to Find Hidden Access Risks Inside Your Network"
