1. Executive summary The HoneyMyte APT group (also associated with the MITRE-confirmed actor Mustang Panda, G0129) has significantly upgraded the CoolClient backdoor with a signed
1. Executive summary A supply-chain compromise originating in Aqua Security's Trivy scanner — not the LiteLLM PyPI package as initially reported — affected approximately 2,
1. Executive summary RingCentral has disclosed a data breach affecting approximately 1.6 million individuals, resulting from a "sophisticated social engineering campaign" in July
1. Executive summary Intruder's 2026 Cloud Security Index report finds that weak identity and access management (IAM) controls and missing logging/alerting are the
1. Executive summary Jamf Threat Labs has disclosed AmnesiaStealer, a Rust-based macOS infostealer distributed via a counterfeit GitHub download page using ClickFix social-engineering lures.
1. Executive summary Recorded Future / Insikt Group published analysis of 24 threat actors advertising malware crypting services, identifying a competitive, reputation-driven criminal market heavily focused
1. Executive summary Check Point Research's Q2 2026 ransomware landscape report records 2,139 victims on data-leak sites — flat quarter-over-quarter but
1. Executive summary A persistent cross-site scripting (XSS) vulnerability — CVE-2026-34491, CVSS v3.1 8.0 (HIGH) / v4.0 8.6 (HIGH) — affects Johnson
1. Executive summary On 12 August 2026, the clop ransomware group publicly claimed a victim identified as "SHELL.COM (August 2026)" with a country
1. Executive summary Siemens has disclosed a critical OS command injection vulnerability (CVSS 3.1: 9.1, CRITICAL) in Siveillance Video Management Servers, traced to the
1. Executive summary CISA published ICS advisory ICSA-26-225-03 disclosing two vulnerabilities in Johnson Controls Inc. (JCI) Airwall (versions ≤4.0.4). CVE-2026-
1. Executive summary Cisco Talos has disclosed "JWR," a previously undocumented real-time phishing-as-a-service (PhaaS) framework and likely variant of the