1. Executive summary A critical vulnerability in Oracle E-Business Suite (EBS) Oracle Payments — CVE-2026-46817 (CVSS 9.8 CRITICAL; CWE-269 Improper Privilege Management,
1. Executive summary Independent researchers Charles Ye, Jasmine Cui, and MIT associate professor Dylan Hadfield-Menell have published a paper titled "Prompt Injection as Role
Inside Mirage2FA — Reverse-Engineering a Two-Year M365 Phishing Operation Adverse Trace OSINT · 2026-06-29 · TLP:CLEAR Campaign: AT-IR-2026-MIRAGE2FA · Activity: Jun 2024
1. Executive summary A previously undocumented cross-platform infostealer dubbed "Djinn Stealer" is being deployed in the wild via exploitation of CVE-2026-48558,
1. Executive summary Nissan has disclosed a data breach affecting current and former employees across the US, Canada, Mexico, and Brazil, linked to the widespread exploitation
1. Executive summary The Gentlemen, a ransomware-as-a-service (RaaS) operation active since mid-2025 and ramping significantly through 2026, has been attributed to Storm-
1. Executive summary Nissan Americas has notified current and former employees across the US, Canada, Mexico, and Brazil that a cyberattack against Oracle PeopleSoft may have
1. Executive summary On 2026-06-29, ransomware tracking site ransomware.live published a victim listing naming Bristol Place (bristolplace.net, GB) as a target of
1. Executive summary On 2026-06-29, the ransomware operator/group "qilin" publicly claimed a ransomware attack against Gsma, an organisation based in Great
1. Executive summary On or around 11 June 2026, threat actors exploited a compromised legacy credential associated with Klue's Salesforce integration to steal OAuth
1. Executive summary Security researchers at Mozilla's Zero Day Investigative Network (0DIN) have demonstrated a proof-of-concept attack that abuses Anthropic's
1. Executive summary Microsoft's security team has removed 119 malicious Edge extensions from the official Microsoft Edge Add-ons store that were part of