1. Executive summary Microsoft Defender Experts published analysis of MacSync Stealer, a macOS-focused information stealer delivered via ClickFix social engineering that tricks users into pasting
1. Executive summary Varonis Threat Labs disclosed a prompt-injection technique dubbed "CoSnitch" that manipulates Microsoft Copilot's reasoning engine into disclosing its
1. Executive summary ShinyHunters (MITRE G1057) has publicly named Logitech / Streamlabs (Switzerland) as a ransomware victim on their leak site, issuing a final warning with a
1. Executive summary A threat actor using the alias "TheHatman" claims to have exfiltrated millions of employee records from the Microsoft Azure tenants of
1. Executive summary BSI/WID has published advisory WID-SEC-2026-2870 reporting a high-severity SQL injection vulnerability in SuiteCRM. A remote, authenticated attacker can
1. Executive summary A single attacker operating from IP 158.220.87.79 (Contabo VPS, Germany) has been systematically scraping unauthenticated guest-accessible data from Salesforce
1. Executive summary QR-code phishing ("quishing") is an active and growing attack vector in which threat actors embed malicious URLs in QR codes
1. Executive summary The threat actor Storm-0501 (MITRE G1053) is actively conducting cloud ransomware campaigns targeting Microsoft Azure environments. The group has shifted from traditional
1. Executive summary On 17 August 2026, the actor "xpl0itrs" publicly claimed a ransomware attack against BMW Group (Germany), listing the victim on their
1. Executive summary On 18 August 2026, the actor "Storm" publicly claimed a ransomware attack against Penfold, a London-based, FCA-regulated fintech pension
1. Executive summary On 2026-08-18, the actor "lockbit5" publicly claimed a ransomware attack against Terra-Petra (terra-petra[.]com), an environmental engineering
1. Executive summary CVE-2025-62593 is a CRITICAL code injection vulnerability (CVSS 9.4) in Ray-Project Ray, an open-source AI compute engine, affecting