Security Feed

1. Executive summary A new ransomware operation dubbed Prinz Eugen has been observed targeting organisations with a hands-on-keyboard approach, prioritising recently modified

1. Executive summary Microsoft has attributed the compromise of more than 140 npm packages in the @mastra scope to the North Korean state-sponsored

1. Executive summary A dataset dubbed "FortiBleed" containing valid administrative and SSL VPN credentials for approximately 73,932 Fortinet FortiGate firewall URLs

1. Executive summary CrowdStrike has published Part 1 of a two-part series documenting abuse of Microsoft's ClickOnce deployment technology. ClickOnce is

1. Executive summary Between 11–17 June 2026, threat actors compromised the backend of Klue, a market-intelligence platform that integrates with multiple SaaS

1. Executive summary The Gentlemen ransomware-as-a-service (RaaS) operation is actively developing and distributing a suite of endpoint detection and response (EDR)

1. Executive summary Microsoft Defender Security Research disclosed an exploit chain ("AutoJack") in AutoGen Studio, the open-source prototyping UI for Microsoft

1. Executive summary CVE-2026-20253 is a critical (CVSS 9.8) unauthenticated remote code execution flaw in Splunk Enterprise, triggered by missing authentication

1. Executive summary A phishing campaign targeting customers of Belfius, a major Belgian bank, has been observed using an IPv4-mapped IPv6 address notation

1. Executive summary CrowdStrike has published research on continued abuse of Microsoft's ClickOnce application deployment technology as a malware delivery and persistence

1. Executive summary A publicly disclosed proof-of-concept (PoC) exploit named RoguePlanet targets a local elevation-of-privilege (EoP) vulnerability in the Microsoft

1. Executive summary A large-scale, currently active credential-compromise campaign — dubbed "FortiBleed" — is targeting internet-exposed Fortinet FortiGate firewalls and VPN