Collaborate Disseminate
Security failures rarely arrive loudly. They slip in through trusted tools, half-fixed problems, and habits people stop questioning. This week’s recap shows that pattern clearly.
Attackers are moving faster than defenses, mixing old tricks with new pat… Continue reading ⚡ Weekly Recap: Firewall Flaws, AI-Built Malware, Browser Traps, Critical CVEs & More
If there’s a constant in cybersecurity, it’s that adversaries are always innovating. The rise of offensive AI is transforming attack strategies and making them harder to detect. Google’s Threat Intelligence Group, recently reported on adversaries using… Continue reading Winning Against AI-Based Attacks Requires a Combined Defensive Approach
The North Korean threat actor known as Konni has been observed using PowerShell malware generated using artificial intelligence (AI) tools to target developers and engineering teams in the blockchain sector.
The phishing campaign has targeted Japan, Au… Continue reading Konni Hackers Deploy AI-Generated PowerShell Backdoor Against Blockchain Developers
A new multi-stage phishing campaign has been observed targeting users in Russia with ransomware and a remote access trojan called Amnesia RAT.
“The attack begins with social engineering lures delivered via business-themed documents crafted to appear ro… Continue reading Multi-Stage Phishing Campaign Targets Russia with Amnesia RAT and Ransomware
The Russian nation-state hacking group known as Sandworm has been attributed to what has been described as the “largest cyber attack” targeting Poland’s power system in the last week of December 2025.
The attack was unsuccessful, the country’s energy m… Continue reading New DynoWiper Malware Used in Attempted Sandworm Attack on Polish Power Sector
AI agents are accelerating how work gets done. They schedule meetings, access data, trigger workflows, write code, and take action in real time, pushing productivity beyond human speed across the enterprise.
Then comes the moment every security team ev… Continue reading Who Approved This Agent? Rethinking Access, Accountability, and Risk in the Age of AI Agents
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added a critical security flaw affecting Broadcom VMware vCenter Server that was patched in June 2024 to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of ac… Continue reading CISA Adds Actively Exploited VMware vCenter Flaw CVE-2024-37079 to KEV Catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added four security flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation in the wild.
The list of vulnerabilities is as follows -… Continue reading CISA Updates KEV Catalog with Four Actively Exploited Software Vulnerabilities
Fortinet has officially confirmed that it’s working to completely plug a FortiCloud SSO authentication bypass vulnerability following reports of fresh exploitation activity on fully-patched firewalls.
“In the last 24 hours, we have identified a number … Continue reading Fortinet Confirms Active FortiCloud SSO Bypass on Fully Patched FortiGate Firewalls
TikTok on Friday officially announced that it formed a joint venture that will allow the hugely popular video-sharing application to continue operating in the U.S.
The new venture, named TikTok USDS Joint Venture LLC, has been established in compliance… Continue reading TikTok Forms U.S. Joint Venture to Continue Operations Under 2025 Executive Order