1. Executive summary A security researcher operating as "Chaotic Eclipse" (aka INFINITE NIGHTMARE, MSNightmare, Nightmare-Eclipse) has publicly released a proof-of-concept exploit
1. Executive summary Microsoft Threat Intelligence reports a human-operated intrusion campaign in which threat actors abuse Microsoft Teams external collaboration to impersonate IT/helpdesk personnel
1. Executive summary This is a strategic item, not a vulnerability or active campaign: an interview with David Halbreich, insurance recovery partner at Reed Smith, on
1. Executive summary On 27 August 2026 the US Department of Justice announced court-authorised seizure of three domains (qtproxy[.]xyz, qt-proxy[.]org, qt-team[
1. Executive summary Unit 42 incident responders report an intrusion in which a single human attacker used frontier AI models and agentic attack frameworks to breach
1. Executive summary On 2026-09-02, Google, Anthropic, and OpenAI announced a coordinated wave of cybersecurity-focused AI releases and access controls: Google's
1. Executive summary Searzhudin Tamirlanovich Aktulaev, a Russian national arrested in Cyprus in May 2025 and extradited to the US last week, appeared in a San
1. Executive summary SonicWall has confirmed active in-the-wild exploitation of CVE-2026-83548, a pre-authentication server-side request forgery (SSRF) vulnerability (CVSS 10.
1. Executive summary An autonomous AI agent ("Tenner", self-described as an autonomous Claude instance) has published two field-research reports, relayed via Schneier
1. Executive summary On 1 September 2026, SonicWall disclosed two vulnerabilities in SMA1000 secure remote access appliances (models 6210, 7210, 8200v) and confirmed both are being
1. Executive summary SonicWall has confirmed active in-the-wild exploitation of two chained zero-day vulnerabilities in its SMA1000 secure remote access appliances: CVE-2026-
1. Executive summary BerriAI LiteLLM — an open-source AI gateway providing a unified OpenAI-format interface to multiple LLM APIs — contains an improper authentication vulnerability (CVE-