Microsoft sees some new wrinkles in invoice-scam emails
1. Executive summary Between 3–5 August 2026, Microsoft Threat Intelligence observed a business email compromise (BEC) campaign distributing more than one million fraudulent invoice emails
1. Executive summary Between 3–5 August 2026, Microsoft Threat Intelligence observed a business email compromise (BEC) campaign distributing more than one million fraudulent invoice emails
1. Executive summary CVE-2026-84869 is a critical (CVSS 9.9) improper privilege management and missing authorization vulnerability (CWE-269 / CWE-862) in ConnectWise ScreenConnect,
1. Executive summary Elastic Security Labs has published a detection-engineering framework for Linux local privilege escalation (LPE), validated against 11 public proof-of-concept exploits
1. Executive summary On 11 September 2026, the ransomware operator "Panzer" listed Konica Minolta Bulgaria — the Bulgarian sales, marketing and technical arm of the
1. Executive summary Anthropic's latest AI misuse report (154 pages, covering December 2025–August 2026) documents that both state-sponsored and financially motivated threat
1. Executive summary Anthropic has disclosed and disrupted a campaign by a Russian state-sponsored espionage cluster it tracks as GTG-20006 — linked in broader reporting
1. Executive summary The EU Cyber Resilience Act's Article 14 mandatory vulnerability and incident reporting duties became applicable on 2026-09-11. Manufacturers of
1. Executive summary Anthropic's latest AI misuse report (covering activity disrupted between December 2025 and August 2026) documents state-sponsored and criminal operators using
1. Executive summary A social engineering campaign tracked since May 2026 has attackers calling and texting employees directly on their personal (BYOD) phones while posing as
1. Executive summary FinCEN has issued an alert to the U.S. financial industry alongside a study of more than 33,000 cyber fraud incident reports
1. Executive summary Traefik v3.2.0 through v3.7.12 fails to apply its entrypoint header-name sanitization — aliasHeadersStrategy / underscoreHeadersStrategy in delete or reject mode,
The "mass" sample arrived as an AES-encrypted ZIP. What it turned out to be: a decoy Romanian engineering app, a fake Chinese security