Past the Perimeter: Why Identity, Not Exploits, Now Drives Ransomware- 261
July 17, 2026
For three consecutive years, unpatched vulnerabilities held the dubious distinction of being ransomware's most common
Free Hosting, Weaponized: How 148 npm Packages Turned Students' Browsers Into a Botnet- 260
July 15, 2026
For roughly two weeks in May, a campaign hiding inside the npm package registry turned an ordinary
A Quiet Patch with a Familiar Shape: 7-Zip's Latest Reminder About Archive Trust- 259
July 19, 2026
7-Zip’s release of version 26.02 closes a heap-based buffer overflow in the utility’
Trust as the Attack Surface: Inside the ClickFix Campaigns Powering ACR Stealer- 258
July 19, 2026
No vulnerability was patched, no exploit chain engineered, in the campaigns Microsoft disclosed distributing ACR Stealer through
Listening to the Seabed: Denmark's Bet on Acoustic Sensing as a First Line of Maritime Defense- 257
July 19, 2026
Europe's undersea infrastructure — power interconnectors, data cables, offshore wind arrays — has become one of the
Beneath the Radar: A Reawakened Espionage Toolkit Targets Southeast Asian Governments- 256
July 18, 2026
For over a year, an intrusion set moving through government and diplomatic networks across Southeast Asia left
The Certificate Authority's Blind Spot: How a Trusted Signing Chain Became a Weapon- 255
July 18, 2026
In April 2026, a routine support interaction at DigiCert — a customer service chat, a screenshot-disguised ZIP
The ransomware gang that used a training-data BTC address by mistake was actually the AI's mistake- 254
July 4, 2026
Researchers at Sysdig have documented what they believe is the first fully autonomous ransomware operation on record:
A breach nobody's attributed yet, hitting the platform that's coordinating World Cup security- 253
July 1, 2026
The Department of Homeland Security has confirmed that an unknown threat actor breached the Homeland Security Information
North Korea just made its malware payload host itself on the blockchain- 252
July 5, 2026
North Korean threat actors behind the long-running Contagious Interview campaign have distributed more than 100 malicious
