On June 10, 2026, the Cybersecurity and Infrastructure Security Agency (CISA) issued Binding Operational Directive 26-04, which transforms federal vulnerability management by shifting agencies from static CVSS-based patching to a…
If Q1 set the pace for Rapid7’s tools, Q2 accelerated it. This quarter brought a steady stream of product enhancements, platform investments, and customer-driven innovation across Rapid7’s portfolio. Each release…
Varonis Threat Labs discovered Dolphin X advertised on a cybercrime forum by a vendor using the alias “Kontraktnik.”
Okta’s vision of building a world where anyone can safely use any technology, powered by their Identity, continues to be our guiding factor. Today, almost 20,000 customers rely on Okta’s…
Malware: BEACON, Cobalt Strike, EKZ Infostealer, EKZ Stealer, GOLD IONIC, Inc, INC, Incransom, INC Ransom, INC Ransomware, Lynx, Lynx Ransomware, RainINC, Ransom.Inc, Tarnished Scorpion, Warble, Water Anito CVEs: CVE-2019-6693, CVE-2020-9289,…
For 96 years, the World Cup has been a global phenomenon, uniting nations and communities through a shared love of sportsmanship. While its popularity is nothing new, what is novel…
Executive Summary A Russian-speaking threat actor known as “Trim” has spent the better part of 2026 systematically dismantling the guardrails on publicly available frontier AI models and rebuilding them as…
Phishing campaigns are increasingly shifting away from traditional malware in favor of trusted business applications and legitimate IT tools. Research from BlueVoyant shows attackers are using realistic DocuSign-themed pages to…
“People who work in SOCs are now seeing overwhelming volumes of data, and they’re getting fatigued,” Griffiths tells CSO. AI can help automate portions of analysis, validate alerts, and improve…
Amelia Coen | Tuesday, 5 August 2025 at 11:08 UTC Ever wondered how attackers can compromise modern websites by exploiting invisible cracks in HTTP infrastructure to win big bounties? In…
