A previously undocumented remote access trojan (RAT) known as STX RAT has been identified following an attempted deployment in a financial services environment in late February 2026. The malware, tracked by eSentire’s Threat Response Unit, uses a distinctive communication marker… Read More "STX RAT Targets Finance Sector With Advanced Stealth Tactics"
Cyber threat monitoring is critical for effective cybersecurity, yet most organizations operate with gaping blind spots. In this post, we shed some light on the limitations of conventional approaches to help you achieve comprehensive visibility of your attack surface. Why… Read More "What Is Cyber Threat Monitoring in 2026?"
Obsidian Security has released technical information and proof-of-concept (PoC) code targeting a remote code execution (RCE) vulnerability in Flowise. The issue, tracked as CVE-2026-40933 (CVSS score of 9.9), was disclosed in April along with several other security defects impacting AI… Read More "Exploit Code Published for Critical Flowise RCE Vulnerability"
Malicious npm packages have been identified distributing malware that steals credentials and attempts to spread across developer ecosystems. According to new research from Socket, the activity mirrors earlier worm-style supply chain attacks that used blockchain-hosted infrastructure, including Internet Computer Protocol… Read More "Npm Supply Chain Attack Uses Worm-Like Propagation"
Russia’s intelligence agencies have grown more aggressive in their efforts to steal Western technology and defense secrets as sanctions squeeze the country’s wartime economy, three senior European intelligence officials told The Associated Press. Moscow’s agents are building fake companies, recruiting… Read More "Russian Spies Are Aggressively Seeking Western Technology as Sanctions Bite, Officials Say"
The rush to adopt AI in enterprise environments is not only creating new security vulnerabilities, but is also reviving old security failures, a top Mandiant executive has warned. Speaking to Infosecurity during Google Cloud Next 26, Jurgen Kutscher, VP of… Read More "AI Rush is Reviving Old Cybersecurity Mistakes, Mandiant VP Warns"
Aligning with a NIST framework is a strategic initiative for any organization serious about cybersecurity. It provides a clear roadmap to defending against sophisticated supply chain attacks, meeting evolving regulatory demands, and managing growing cyber risk exposure from third-party vendors.… Read More "NIST compliance in 2026: A complete implementation guide"
Security researchers have revealed details of a new extortion group that has been actively targeting retail and hospitality businesses since February 2026. Palo Alto Networks’ Unit 42 teamed up with the Retail and Hospitality Information Security and Analysis Center (RH-ISAC) to… Read More "BlackFile Group Targets Retail and Hospitality with Vishing Attacks"
A team of hackers associated to the North Korean-linked Lazarus Group has conducted a large-scale cyber theft campaign targeting over 100 cryptocurrency organizations across more than 20 countries, according to Arctic Wolf. The spear-phishing campaign involved multiple social engineering techniques,… Read More "North Korean Hackers Target Crypto Firms with ClickFix and Zoom Lures"
Vendor security questionnaires are frustrating, both to the organizations sending them and the vendors receiving them. While these frustrations remain unaddressed, they will only continue to impede the efficiency of vendor risk management programs. Fortunately, suffering through security assessments isn’t… Read More "Making the Vendor Questionnaire Process More Efficient in 2026"
