Security teams have never had more IP data at their disposal. Every day, analysts ingest enrichment feeds, geolocation data, reputation scores, telemetry, and threat intelligence from a growing ecosystem of vendors and platforms. Yet despite this abundance of information, many… Read More "94% of Incidents Involve Anonymized Infrastructure. Teams Are Still Reactive"
Parallelly, the other two modules inject credential harvester code into the authentication system file, and backdoor code into the custom hooks configuration file, respectively. “Upon establishing a foothold on the REDCap server, UNC6508 performed internal reconnaissance and credential discovery to… Read More "China-linked hackers target US, Canada research using legacy REDCap exploits"
A notorious ransomware group secretly infiltrated the network of a major company for up to two months by hiding command and control (C&C) traffic in Microsoft Teams, before unleashing their attack, researchers have warned. The investigation report, published by Symantec… Read More "DragonForce Ransomware Exploited Microsoft Teams to Hide Attack"
Arch Linux on Monday announced that it has suspended new account registrations on the Arch User Repository (AUR) in response to a wave of malicious packages being published as part of an ongoing supply chain attack. A community-driven repository, AUR… Read More "Atomic Arch Supply Chain Attack Hits 1,500 AUR Packages"
Ravie LakshmananJun 16, 2026Vulnerability / Threat Intelligence Bad actors are exploiting multiple security vulnerabilities in Fortinet FortiSandbox, according to threat intelligence firm Defused Cyber. In a post shared on X, the company said it has observed exploitation of CVE-2026-39813, CVE-2026-39808,… Read More "Attackers Exploit Three Fortinet FortiSandbox Flaws, One Patched Last Week"
Cisco said the flaw stems from insufficient validation of user-supplied input during a file upload process. An authenticated remote attacker with valid credentials and at least write access could exploit the flaw by sending a crafted HTTP request to an… Read More "Cisco patches SD-WAN flaw amid evidence of active exploitation"
A new version of the Gremlin stealer has evolved from a basic credential harvester into a modular toolkit, according to researchers at Palo Alto Networks’ Unit 42. The infostealer first emerged in April 2025, now just 12 months later the… Read More "Gremlin Stealer Evolves into Modular Threat"
Over two dozen fintech and technology organizations have formed a coalition to secure open source software (OSS) from accelerated, AI-driven exploitation. Named Athena, it has gathered industry leaders such as BNY, Chainguard, Cisco, Cloudflare, Corridor, DepthFirst, Docker, JPMorganChase, Kyndryl, LTM,… Read More "Tech Coalition ‘Athena’ Targets OSS Vulnerabilities Ahead of Disclosure"
Ravie LakshmananJun 16, 2026Malware / Cyber Attack The North Korean state-sponsored hacking group known as ScarCruft (aka APT37) has been observed using spear-phishing messages impersonating Microsoft Account security notifications to deliver malware called NarwhalRAT. “The attack email contained a message… Read More "Fake Microsoft Alerts Used to Deploy North Korean NarwhalRAT Malware"
Gartner says teams should use outcome-driven metrics that link zero-trust initiatives directly to business objectives.“It’s crucial to focus on schedule adherence, cost discipline, and control effectiveness,” says Gartner. “Focus on outcomes like reduced breach incidents, improved compliance rates, and enhanced… Read More "Zero trust isn’t broken. Most companies just do it wrong."
