CVE volumes may plausibly reach 100,000 this year

The number of vulnerabilities to be disclosed in 2026 is almost certain to exceed last year's total, and may be heading towards 100,000, according...

North Korean Hackers Use Deepfake Video Calls to Target Crypto Firms

Campaign combines stolen Telegram accounts, fake Zoom calls and ClickFix attacks to deploy infostealer malware - Read more

The game is over: when “free” comes at too high a price. What we...

We often describe cases of malware distribution under the guise of game cheats and pirated software. Sometimes such methods are used to spread complex...

North Korean actors blend ClickFix with new macOS backdoors in Crypto campaign

A financially motivated threat actor tracked as UNC1609 is using a ClickFix-style social engineering campaign to deploy multiple macOS malware...

The Security Interviews: Mick Baccio, Splunk

Mick Baccio, global security advisor at Splunk SURGe and Cisco Foundation AI, reveals how the experience of running cyber on a dime for a...

Spam and phishing in 2025

The year in figures 99% of all emails sent worldwide and 43.27% of all emails sent in the Russian web segment were spam 50% of all...

CVE-2026-21511 Microsoft Outlook Spoofing Vulnerability

Acknowledgement added. This is an informational change only. - Read more

CVE-2026-21256 GitHub Copilot and Visual Studio Remote Code Execution Vulnerability

Changes made to the security updates links and information. This is an informational change only. - Read more

Mispadu Phishing Malware Baseline: Delivery Chains, Capabilities, and Common Campaigns

By: Max Gannon, Intelligence TeamMispadu is a long-standing Banking Trojan that has only continued to grow in popularity since its first observation in 2019....

Latest article

CyberSentinel AI with 33 Security Tools, Including Nmap, SQLMap, ZAP, and uses Claude, GPT

A new open-source cybersecurity platform called CyberSentinel AI v3.0 has emerged as a significant development in autonomous security tooling, combining 33 real-world penetration testing...

JCPenney – 368,418 breached accounts

In June 2026, retailer JCPenney and associated brands were targeted in a ShinyHunters "pay or leak" extortion campaign. Data allegedly obtained from JCPenney through...

Threat actor adds advanced ‘EDR killer’ tools to ransomware-as-a-service platform

One of the world’s top ransomware groups has given its criminal affiliates access to advanced tools capable of successfully disabling...