AI Decision Models Streamline Alert Triage but Depend on Input Quality
New decision models from OpenAI, TypeSafe AI, and others offer fast, cheap, and auditable alert triage, but their accuracy rests on the forensic evidence they are given.
Security & Privacy
Breaches, offensive and defensive AI, and surveillance.
Help TDS Linked to Hotejka as 20,000 Cloudflare Pages Domains Fuel Scams
Researchers tie the long-running Help TDS traffic distribution system to the Hotejka affiliate program, which uses thousands of free Cloudflare Pages sites to push tech support scams.
Silent Lynx Exploits WinRAR Flaw in CIS Government Attacks
A Kazakhstan-nexus threat actor has added a WinRAR vulnerability to its arsenal, deploying custom reverse shells against government organizations across nine CIS countries.
KGB RAT Windows trojan sells spying, theft, and 'fun' harassment features
A cheap Windows trojan built on NjRAT bundles webcam spying, credential theft, and psychological harassment for as little as $150 a month.
NGINX Patches Five Flaws, Including Possible RCE and TLS Client-Cert Bypass
New NGINX releases address five vulnerabilities, including memory bugs that may enable remote code execution and a TLS issue affecting client-certificate verification.
Optro adds auditable AI agents for GRC workflows
New platform automates governance, risk, and compliance tasks while keeping human oversight and audit trails.
Critical Langflow RCE Vulnerability Exploited in 1,423 Honeypot Attempts
A critical authenticated remote code execution flaw in Langflow is being actively exploited, with honeypot sensors recording over 1,400 attempts.
Proxyjacking campaign hits D-Link, Ubiquiti devices in 34 countries
Attackers are hijacking routers to resell stolen bandwidth through a commercial residential proxy network.
Netskope CISO James Robinson's Unplanned Path to Security Leadership
James Robinson's career shows that cybersecurity leadership often emerges from an unplanned, winding journey across many companies.
Ransomware, Wallet Drainers, and RATs Dominate Threat Roundup
A weekly security bulletin highlights active PAN-OS exploits, a DNS-based crypto wallet drainer, and remote access trojans with harassment features.
Microsoft fixes Windows 11 bug behind black screens and Explorer crashes
A known issue that caused black screens and File Explorer crashes after recent Windows 11 updates has been resolved by Microsoft.
Qualys TruConfidence aims to automate cyber risk remediation
The new engine from Qualys uses patch reliability scoring and compensating controls to let security teams remediate vulnerabilities at machine speed without disrupting operations.
F-Secure Launches Victim-First Scam Encyclopedia Covering 50+ Fraud Types
The new resource draws on decades of threat intelligence to explain consumer fraud from the victim's viewpoint and track emerging cybercrime.
CenterPoint Energy Breach Exposes Data of 1 Million Texans
A data breach at CenterPoint Energy has compromised sensitive personal information of roughly one million Texas residents.
GhostAction Hits 1,900 GitHub Accounts and 30,000 Repositories
A resurgent supply chain attack is using compromised GitHub accounts to steal CI/CD secrets, cloud credentials, and API keys at scale.
INTERPOL operation nets 95 arrests in global CSAM crackdown
A coordinated 17-country operation shows how international police collaboration is targeting child sexual abuse material shared in private messaging groups.
Android Adds AI Defenses Against Scam Messages and Call Forwarding
Google is rolling out AI-powered protections targeting messaging scams and call-forwarding abuse on Android.
Fake CAPTCHAs push malware and credential theft
Barracuda found CAPTCHA abuse in 43% of the phishing-kit attacks it examined in 2025, using the familiar check to build trust and hide malicious activity.