The ransomware ecosystem is moving from fragmentation back to consolidation, with Qilin emerging as the dominant ransomware-as-a-service (RaaS) operation after the disruption of major groups including LockBit and RansomHub. Yet despite Qilin’s strong position, the rapid emergence of other groups,… Read More "Qilin Dominates Ransomware Market – Infosecurity Magazine"
Medical technology giant Medtronic is notifying more than 3.8 million individuals that their personal and medical information was compromised in a recent data breach. The incident occurred in April 2026, when the infamous extortion group ShinyHunters accessed the company’s corporate… Read More "Medtronic Data Breach Impacts 3.8 Million People"
To interpret PCAP files for network troubleshooting, engineers typically start by identifying the affected source, destination, protocol, and time window. They then look for packet loss, retransmissions, latency, connection resets, DNS failures, TLS negotiation issues, routing problems, or unusual traffic… Read More "How Automated PCAP Analysis Improves Network Troubleshooting"
A new report from the Citizen Lab has revealed that former Member of the European Parliament Stelios Kouloglou had his mobile device repeatedly hacked with the notorious Pegasus spyware while serving on a committee that was tasked with investigating the… Read More "European Parliament Member Investigating Spyware Was Hacked With Pegasus"
Smaller leak but still dangerous Even though watchTowr was only able to leak bytes of data using this flaw, compared to kilobytes with previous CitrixBleed issues, the exposed information could still be useful to attackers. While the proof-of-concept did not… Read More "New CitrixBleed-like NetScaler flaw sees exploit attempts in the wild"
A lack of skilled staff is the top operational challenge faced by today’s security operations centers (SOCs), although practitioners and leaders have diverging perceptions of hiring needs, according to SANS Institute. The 2026 SANS SOC Survey was based on interviews… Read More "Staffing Is Top SOC Challenge Even as AI Proliferates, Says SANS"
A threat actor exploited a vulnerability in Langflow to access an organization’s instance and abuse it in an agentic ransomware attack, cloud security firm Sysdig reports. Langflow is a Python-based, LLM-agnostic open source framework used for building LLM-driven applications and… Read More "Agentic AI Used to Conduct Ransomware Attack via Langflow"
Organizations can test Active Directory security through vulnerability assessments, penetration testing, security audits, and configuration reviews. Security teams should evaluate password policies, access permissions, domain controller security, trust relationships, security groups, and authentication protocols. Regular testing helps identify weaknesses and… Read More "Top 19 Active Directory Security Best Practices for IT Professionals"
In a large-scale coordinated international operation, the FBI and Google’s Threat Intelligence Group have disrupted NetNut, one of the world’s largest commercial residential proxy networks. The network, which security researchers also track as the ‘Popa’ botnet, co-opted over two million… Read More "FBI, Google Take Down NetNut Proxy Network Used by Cyber Threat Actors"
.png?w=1140&resize=1140,855&ssl=1 "Best TPRM Software for Higher Education: What to Look For")
Higher education institutions don’t run on a single vendor ecosystem. They run on dozens of overlapping ones. Teaching, research, identity, payments, student services, cloud infrastructure, alumni engagement, and campus operations all rely on different third-party vendors. These often enter the… Read More "Best TPRM Software for Higher Education: What to Look For"
