1. Executive summary Between 11–12 June 2026, threat actors compromised market intelligence platform Klue via a legacy credential associated with an integration service, then stole
1. Executive summary Market intelligence platform Klue has confirmed a security incident in which attackers abused a compromised legacy credential tied to an integration service to
1. Executive summary A new ransomware operation dubbed Prinz Eugen has been observed targeting organisations with a hands-on-keyboard approach, prioritising recently modified files for
1. Executive summary Microsoft has attributed the compromise of more than 140 npm packages in the @mastra scope to the North Korean state-sponsored group Sapphire
1. Executive summary A dataset dubbed "FortiBleed" containing valid administrative and SSL VPN credentials for approximately 73,932 Fortinet FortiGate firewall URLs across 194
1. Executive summary CrowdStrike has published Part 1 of a two-part series documenting abuse of Microsoft's ClickOnce deployment technology. ClickOnce is a Microsoft
1. Executive summary Between 11–17 June 2026, threat actors compromised the backend of Klue, a market-intelligence platform that integrates with multiple SaaS systems, and
1. Executive summary The Gentlemen ransomware-as-a-service (RaaS) operation is actively developing and distributing a suite of endpoint detection and response (EDR) killer tools
1. Executive summary Microsoft Defender Security Research disclosed an exploit chain ("AutoJack") in AutoGen Studio, the open-source prototyping UI for Microsoft Research'
1. Executive summary CVE-2026-20253 is a critical (CVSS 9.8) unauthenticated remote code execution flaw in Splunk Enterprise, triggered by missing authentication controls on
1. Executive summary A phishing campaign targeting customers of Belfius, a major Belgian bank, has been observed using an IPv4-mapped IPv6 address notation (::ffff:) inside
1. Executive summary CrowdStrike has published research on continued abuse of Microsoft's ClickOnce application deployment technology as a malware delivery and persistence vector. The