1. Executive summary Email bombing, also called form bombing, list bombing or subscription bombing, floods a target mailbox with hundreds or thousands of automated sign-up,
1. Executive summary A credential belonging to ConnectWise Cloud Backup (formerly SkyKick) was used on 2026-10-15 to authenticate as the application itself into customer
1. Executive summary A malicious npm package named imgdecode, uploaded on 30 September 2026 by the account malfexteste8, is part of the MALFEX software supply chain
1. Executive summary Citizen Lab has documented a campaign, AdFection, in which ads brokered by Israeli adtech firm Discover-Tech were used to fingerprint devices and
1. Executive summary A credential belonging to ConnectWise Cloud Backup (formerly SkyKick) was used to authenticate into customer Microsoft 365 tenants and obtain Microsoft Graph access
1. Executive summary A zero-day in BeyondTrust Remote Support appliances, tracked as CVE-2026-102764, was exploited in espionage intrusions before a patch existed, and
Ukraine wrecked Russia's best data centers and idled all three AI supercomputers. Then the internet decided that had also killed the bots. It hadn&
1. Executive summary Threat actors are impersonating the brands of popular AI platforms, including Anthropic's Claude, OpenAI's ChatGPT, Google Gemini, Microsoft Copilot,
1. Executive summary Volexity's third "Mind the (Patch) Gap" post is a tooling walkthrough, not a new intrusion report: it demonstrates how
1. Executive summary CVE-2026-102764 is an authentication bypass by spoofing vulnerability in BeyondTrust Remote Support (CVSS 9.3, critical, CWE-290) that could allow
1. Executive summary CVE-2025-61624 is a path traversal flaw (CWE-22) in FortiOS, FortiPAM, FortiProxy and FortiSwitchManager that lets an authenticated attacker holding an
1. Executive summary GitLab released 19.4.2, 19.3.5 and 19.2.8 on 2026-10-12 to fix CVE-2026-97229, an integer