1. Executive summary JADEPUFFER, an actor attributed by Sysdig to an autonomous LLM-driven AI agent (no MITRE ATT&CK profile exists for this actor;
1. Executive summary CVE-2026-53359 ("Januscape") is a HIGH-severity (CVSS 8.8) use-after-free vulnerability in the Linux KVM hypervisor'
1. Executive summary A critical code injection vulnerability (CVE-2026-6875, CVSS 9.5) in the ServiceNow AI Platform is being actively exploited in the wild
1. Executive summary Kaspersky has published analysis of a new .NET Native AOT communication module (AzureCommunication.dll) within the Project CAV3RN cyberespionage framework, targeting entities in
1. Executive summary Rapid7's MDR team discovered an exposed, misconfigured server functioning as a comprehensive malware delivery and QA lab, containing over 1,000
1. Executive summary A threat campaign dubbed "The TFF Trap" is using business email compromise (BEC) phishing as an initial access vector to deliver
1. Executive summary Group-IB has disclosed HOLLOWGRAPH, a targeted espionage implant that uses compromised Microsoft 365 mailboxes as a command-and-control (C2) channel via
1. Executive summary CVE-2026-63030 (CVSS 9.8 CRITICAL, CWE-436) is an unauthenticated remote code execution vulnerability in WordPress Core, exploited via the REST
1. Executive summary On 2026-07-20, the group "safepay" publicly listed wdk.de — the Frankfurt am Main-based association of German manufacturers — as
1. Executive summary On 2026-07-20, the ransomware group "safepay" publicly claimed a victim, lbb-treuhand.de, a German tax consulting, auditing, accounting,
1. Executive summary On 2026-07-20, the ransomware group "safepay" publicly listed the German IT services company cenesco.de as a victim on
1. Executive summary The FakeGit campaign, disclosed by Island researchers, has created approximately 7,600 malicious GitHub repositories using 6,600 lookalike developer profiles to distribute