Category Newsletter

Supply chain attacks, MFA bypasses, and AI-powered social engineering dominate the security landscape this week in triaging the week 112.

Critical security updates for Android and iOS, major flaws in Linux (CrackArmor), attacks using fake VPNs and hijacked GitHub repos, and the disruption of a massive 3-million device botnet in triaging the week 111.

AI fuels wave of industrial-scale malware, forcing defenders to battle new threats on the cloud, mobile, and the abuse of legitimate tools in triaging the week 110.

AI-native attacks, zero-day surges, and a global crackdown on violent cybercrime mark a week where trust is the ultimate vulnerability in triaging the week 109.

AI-augmented attacks, state-sponsored RaaS, and blockchain C2 are defining the new cyber landscape in triaging the week 108.

New AI-driven malware, a surge in supply chain attacks, and critical vulnerabilities found in major password managers in triaging the week 107.

AI in the crosshairs: State-sponsored espionage, cloud worms, and supply chain attacks dominate in triaging the week 106.

Supply chain attacks, AI-centric vulnerabilities, abused kernel drivers, and AI assistant marketplaces hit hard in triaging the week 105.

Destructive nation-state attacks, new AI-weaponized malware, critical zero-day vulnerabilities, supply-chain attacks affecting NPM and PyPI, and 175K exposed Ollama AI servers in triaging the week 104.

AI-coded malware, weaponized extensions, social engineering the help desk, and exploiting zero-days across critical infrastructure. All in this week's edition of triaging the week.

Quishing and Browser-in-the-Browser attacks steal credentials, exploitation of LLM services and automation platforms, a massive leak of BreachForums accounts, and urgent patches for Cisco and Fortinet in triaging the week 102.

State-sponsored espionage, active exploitation of critical vulnerabilities in legacy hardware and popular software, and new malware campaigns targeting cloud services and user credentials in triaging the week 101.

State-sponsored espionage using Windows Group Policy, new malware (SantaStealer, PyStoreRAT, DocSwap) distributed through phishing, fake GitHub repos, and compromised app stores in triaging the week 100.

Active exploitation of the critical "React2Shell" vulnerability, malicious VSCode extensions target developers, and urgent security warnings for Fortinet, Ivanti, and Docker Hub users in triaging the week 099.

Critical supply chain vulnerabilities, compromised browser extensions, maximum-severity RCE flaws in React frameworks, and the rise of malicious AI models in triaging the week 098.