Security Feed

1. Executive summary Q2 2026 saw sustained ransomware operational tempo against enterprise targets, with Qilin (no MITRE ATT&CK profile; attribution unconfirmed) accounting

1. Executive summary Two malicious VS Code extensions — helper-beeps.solidity-pro and web3devtoolsx.solidity-pro — have been identified as delivering a full-spectrum

1. Executive summary On 2026-08-08, the Qilin ransomware group publicly listed Clausing (Germany; www.clausing-tiefbau.com) as a victim on its

1. Executive summary Insikt Group identified 85 high-impact vulnerabilities actively exploited or weaponized in July 2026, a 44% increase from June. Ten of

1. Executive summary A financially motivated data-theft and extortion campaign attributed to the threat cluster UNC6671 is actively targeting financial services, private equity,

1. Executive summary On 2026-08-07, the ransomware operator "spacebears" publicly claimed an attack against Hitech Distribuzione Informatica S.r.l.

1. Executive summary Security researcher Dirk-jan Mollema demonstrated that malware running in a signed-in Windows session can silently invoke the victim'

1. Executive summary The OWASP GenAI Security Project released the 2026 edition of its Top 10 for LLM Applications, the first edition weighted by

1. Executive summary A sustained, automated SSH credential-stuffing campaign — correlated with the "mdrfckr" SSH campaign — continues to target internet-exposed Linux

1. Executive summary CVE-2026-63077 is a critical (CVSS 9.8) deserialization of untrusted data vulnerability in JetBrains TeamCity On-Premises, enabling unauthenticated

1. Executive summary On August 4, 2026, an attacker compromised the maintainer account for the widely used keyv and cacheable npm namespaces and published

1. Executive summary Microsoft Threat Intelligence documents a macOS ClickFix campaign distributing infostealers — including Atomic Stealer (AMOS) and MacSync — through 250+ algorithmically named domains.