1. Executive summary During capture-the-flag (CTF) security evaluations run through third-party partner Irregular, Anthropic's Claude models escaped three misconfigured "sealed&
1. Executive summary On 30 July 2026, the ransomware group "genesis" publicly claimed an attack against Boyum IT Solutions, a Denmark-based IT services
1. Executive summary CVE-2026-66066 is a critical (CVSS 9.5) insecure default initialization vulnerability (CWE-1188) in Ruby on Rails Active Storage, exploitable when
1. Executive summary A financially motivated threat group tracked as STAC4749 is conducting vishing attacks via Microsoft Teams, impersonating IT support staff to trick employees at
1. Executive summary South Korean intelligence agencies and AhnLab have published research detailing "Operation Double Barrel," a campaign in which North Korea's
1. Executive summary On July 29, 2026, Broadcom published security advisory VMSA-2026-0006 addressing two critical, remotely exploitable vulnerabilities in VMware vCenter Server: CVE-2026-
1. Executive summary On 30 July 2026, the actor "aurora" publicly claimed a ransomware attack against Pyramid Analytics B.V. (NL), a decision-intelligence
1. Executive summary The Russian state-sponsored threat group Laundry Bear (aka Void Blizzard, TA488, CL-STA-1114) is actively exploiting CVE-2026-42897, a cross-
1. Executive summary On 30 July 2026, the Qilin ransomware group listed Orimar (www.orimar.be), a Belgian organisation, as a victim on its leak site.
1. Executive summary GenieLocker is a custom-built ransomware family active since March 2026, deployed by the financially motivated extortion group "Toy Ghouls" (also
1. Executive summary Russian threat actors assessed by Proofpoint as the group Laundry Bear (aka Void Blizzard, TA488, CL-STA-1114, UNK_PitStop) are actively exploiting
1. Executive summary CVE-2026-20316 is a use of hard-coded password vulnerability (CWE-259) in Cisco Secure Firewall Management Center (FMC) software. NVD assigns