1. Executive summary Elastic Security Labs documented a new Contagious Interview campaign (tracked as REF9403) deploying OTTERCOOKIE-aligned malware via trojanized coding challenge repositories distributed through
1. Executive summary From late April to mid-June 2026, Microsoft Defender Experts observed two prevalent intrusion chains delivering ACR Stealer, an information-stealing malware-as-
1. Executive summary Unit 42 published a supplementary analysis to its 2026 Global Incident Response (IR) Report on 16 July 2026, concluding that AI is functioning
1. Executive summary Cisco Talos has disclosed a financially motivated campaign by threat actor UAT-11795 distributing trojanized installers for widely used software (MobaXterm, WebEx, Zoom,
1. Executive summary CVE-2026-25089 is a critical (CVSS 9.8, CWE-78) OS command injection vulnerability in Fortinet FortiSandbox, FortiSandbox Cloud, and FortiSandbox PaaS.
1. Executive summary CVE-2026-58644 is a critical (CVSS 9.8) deserialization of untrusted data vulnerability in Microsoft SharePoint Server, enabling an unauthenticated, remote attacker
1. Executive summary ClickLock Stealer is a previously undocumented macOS infostealer detailed by Group-IB, active since approximately May 2026, with at least 100 confirmed victims
1. Executive summary Kaspersky GReAT has published details of "OkoBot," a sophisticated Windows malware framework active since at least March 2025 that deploys more
1. Executive summary CISA has confirmed active in-the-wild exploitation of four Microsoft SharePoint Server vulnerabilities — CVE-2026-32201 (CVSS 6.5 MEDIUM), CVE-2026-
1. Executive summary Fortinet FortiSandbox versions 4.4.0 through 4.4.8 contain CVE-2026-39808, a critical (CVSS 9.8) OS command injection vulnerability
1. Executive summary On 16 July 2026, the ransomware group "incransom" publicly listed ASA International (asa-international.com) as a victim on its leak
1. Executive summary A flaw in Anthropic's Claude for Chrome browser extension allows a malicious extension co-installed in the same browser to trigger