1. Executive summary The "Phantom Deal" campaign is a social-engineering operation in which threat actors conduct deep reconnaissance on target companies and then
1. Executive summary Cisco has disclosed three critical (CVSS 9.8) vulnerabilities following a comprehensive internal security review of IOS XR Software and a separate finding
1. Executive summary CISA has published ICS advisory ICSA-26-246-06 covering CVE-2026-77393 in Inductive Automation Ignition 8.1.53 and earlier: the
1. Executive summary On 3 September 2026, the researcher known as Nightmare Eclipse (aliases Chaotic Eclipse, Infinite Nightmare, MSNightmare) published a working proof-of-concept for
1. Executive summary CISA has published ICS advisory ICSA-26-246-02 covering CVE-2026-75925, a CRLF injection vulnerability (CWE-93, with CWE-306 as
1. Executive summary Microsoft has documented a high-volume, finance-themed phishing campaign that repurposed "ASCII smuggling" — invisible Unicode tag characters (U+E0000–U+
1. Executive summary Recorded Future's Insikt Group identified 215 actively exploited CVEs in H1 2026, up 34% from 161 in H1 2025, with exploitation
1. Executive summary The Children's Commissioner for England, Dame Rachel de Souza, told the House of Lords Communications and Digital Committee that the UK&
1. Executive summary A high-severity second-order SQL injection vulnerability, CVE-2026-19949 (CVSS 8.8, HIGH; not currently listed in CISA KEV, EPSS ~1%
1. Executive summary SANS Institute fellow Eric Johnson and AWS security leaders including Gee Rittenhouse (Security Hub, GuardDuty, Inspector) have published guidance stating that system-prompt
1. Executive summary Unit 42 has published details of two ongoing, multi-stage intrusion and data-exfiltration campaigns targeting Latin American organizations — CL-CRI-1131 (Mexican
1. Executive summary GitGuardian researchers report that a recent variant of the Shai-Hulud infostealer worm has expanded its credential-scanning behaviour from 189 to 469