1. Executive summary At DEF CON, Israeli startup Tenet demonstrated "Ghostjacking," a prompt-injection technique that plants malicious instructions inside logs and alerts on
1. Executive summary Q2 2026 saw sustained ransomware operational tempo against enterprise targets, with Qilin (no MITRE ATT&CK profile; attribution unconfirmed) accounting for 14.
1. Executive summary Two malicious VS Code extensions — helper-beeps.solidity-pro and web3devtoolsx.solidity-pro — have been identified as delivering a full-spectrum information stealer
1. Executive summary On 2026-08-08, the Qilin ransomware group publicly listed Clausing (Germany; www.clausing-tiefbau.com) as a victim on its leak site.
1. Executive summary Insikt Group identified 85 high-impact vulnerabilities actively exploited or weaponized in July 2026, a 44% increase from June. Ten of these CVEs
1. Executive summary A financially motivated data-theft and extortion campaign attributed to the threat cluster UNC6671 is actively targeting financial services, private equity, and professional
1. Executive summary On 2026-08-07, the ransomware operator "spacebears" publicly claimed an attack against Hitech Distribuzione Informatica S.r.l. (HTDI), an
1. Executive summary Security researcher Dirk-jan Mollema demonstrated that malware running in a signed-in Windows session can silently invoke the victim's Windows
1. Executive summary The OWASP GenAI Security Project released the 2026 edition of its Top 10 for LLM Applications, the first edition weighted by real-world
1. Executive summary A sustained, automated SSH credential-stuffing campaign — correlated with the "mdrfckr" SSH campaign — continues to target internet-exposed Linux systems globally.
1. Executive summary CVE-2026-63077 is a critical (CVSS 9.8) deserialization of untrusted data vulnerability in JetBrains TeamCity On-Premises, enabling unauthenticated remote code
1. Executive summary On August 4, 2026, an attacker compromised the maintainer account for the widely used keyv and cacheable npm namespaces and published trojanized releases