1. Executive summary Truffle Security scanned 224 million public GitHub repositories in August 2025 and found 1,103,438 exposed credentials; when the firm re-tested
1. Executive summary The Dutch Institute for Vulnerability Disclosure (DIVD) was breached on 21 September 2026 by an attack that chained two zero-days in Zammad,
1. Executive summary The US Treasury Department's Office of Foreign Assets Control has sanctioned Anibal Alexander Canelon Aguirre, known as 'Prometheus', described
1. Executive summary CISA added CVE-2026-76504, an authentication bypass in Cisco Catalyst SD-WAN Manager, to the Known Exploited Vulnerabilities catalog on 2026-09-
1. Executive summary BSI's Warn- und Informationsdienst published WID-SEC-2026-3695 on 2026-10-01, rating multiple vulnerabilities in Kiteworks as high severity.
1. Executive summary A ransomware group tracked as "kairos" listed Le Centre National de l'Expertise Hospitalière (CNEH), a French health-sector training
1. Executive summary Ransomware.live recorded a public claim attributed to Safepay that names the German domain wolfusofsky.de as a victim. The supplied source does
1. Executive summary MetaMask disclosed on 2026-10-01 that it is responding to an "ongoing security incident" affecting part of its infrastructure, and
1. Executive summary SANS ISC reported a phishing email linking to a legitimate, ConnectWise-signed ScreenConnect client preconfigured for an account operated by the attacker. The
1. Executive summary CVE-2026-73570 is an unauthenticated OS command injection flaw in the Zimbra Collaboration Suite SNMP notification path, rated CVSS 8.9 HIGH
1. Executive summary Microsoft Threat Intelligence observed phishing campaigns in July 2026 that delivered a legitimate, digitally signed MSP360 RMM installer (v2.5.0.67) under
1. Executive summary A ransomware group calling itself lamashtu listed PROJAHN, a German manufacturer and distributor of precision and hand tools, on its leak site on