Collaborate Disseminate
Organizations have never had greater awareness of cyber risk. Yet turning that awareness into operational resilience has never been more challenging. The 2026 Bitdefender Cybersecurity Assessment confirms this is the case, as this year’s findings revea… Continue reading 2026 Cybersecurity Assessment: The Gap Between Awareness and Resilience
Microsoft on Tuesday said it’s accelerating its quantum safe security roadmap, stating technology advances in quantum computing are making it essential to replace existing encryption standards sooner than previously expected.
“Advances in quantum rese… Continue reading Microsoft Accelerates Post-Quantum Cryptography Shift to 2029
Large language models keep inventing web addresses that do not exist. Attackers have started buying those made-up domains before anyone else can, then hosting phishing pages on them to catch traffic that AI tools point their way.
Palo Alto Networks’&n… Continue reading Phantom Squatting Uses AI-Hallucinated Domains for Phishing and Malware
Anthropic is putting Claude Fable 5 back online worldwide. On June 30, the U.S. Commerce Department lifted the export controls it had imposed on Fable and its more tightly controlled sibling Mythos 5 about two and a half weeks earlier.
Fable 5 re… Continue reading Anthropic Restores Claude Fable 5 After U.S. Lifts Jailbreak-Linked Export Controls
Cybersecurity researchers have warned of a “massive, ongoing, automated password spray attack” aimed at Microsoft’s Azure command-line interface (CLI), compromising dozens of accounts in the process.
The activity, per Huntress, originates from an IPv6… Continue reading Azure CLI Password Spray Hits at Least 78 Microsoft Accounts in 81M+ Attempts
ClickFix, the trick that fools people into running malware by hand, has quietly grown a back office.
New research shows the malicious commands behind its fake “prove you’re human” pages are now handed out by API-driven servers that give each visitor t… Continue reading Researcher Analyzes 3,000 Live ClickFix Payloads, Exposing API-Driven Malware Delivery
Citrix on Tuesday released security updates to address multiple flaws in NetScaler ADC (formerly Citrix ADC) and NetScaler Gateway (formerly Citrix Gateway) that could be exploited by an attacker to facilitate arbitrary file reads or trigger a denial-o… Continue reading Citrix Patches Six NetScaler Flaws Allowing File Read and Denial-of-Service
New Microsoft research shows how attackers can hijack AI agents that act on a user’s behalf, using nothing more than a poisoned tool description to make the agent quietly hand over company data to an outsider.
The trick is that the agent nev… Continue reading Microsoft Warns Poisoned MCP Tool Descriptions Can Make AI Agents Leak Data
A new two-stage malware family called RustDuck is hijacking home routers, IP cameras, Android boxes, and poorly secured servers, then stitching them into a network built to knock websites and online services offline.
Researchers at QiAnXin’s XLab… Continue reading RustDuck Botnet Rebuilds in Rust to Hijack Routers and Servers for DDoS
Threat actors are continuing to exploit a critical Langflow vulnerability as part of fresh attacks designed to deliver a Monero cryptocurrency miner.
The activity has been found to weaponize CVE-2026-33017 (CVSS score: 9.3), an unauthenticated remote … Continue reading Langflow RCE Exploited to Deploy Monero Miner on Exposed AI App Endpoints