LiteLLM 1.82.7–1.82.8 supply chain attack exposed 33,185 secrets across 6,943 machines, leaving 3,760 valid credentials ...
Qilin disables 300+ EDR drivers using BYOVD in 2025 attacks, delaying encryption six days, increasing breach impact.
BKA identified REvil leaders tied to 130 German attacks causing €35.4M damage, exposing key ransomware figures.
AI matured detection capabilities, but over 100 engagements show human leadership drives cyber resilience and action.
AI-driven attacks optimize mediocrity in standardized environments, lowering costs to $5 per attack and raising SMB ...
M stolen after six-month DPRK social engineering campaign began fall 2025, exposing Drift’s contributors and cloud assets.
CVE-2026-35616 (CVSS 9.1) exploited since March 31, 2026, affects FortiClient EMS 7.4.5–7.4.6, enabling privilege escalation.
Strapi plugins exploit Redis and PostgreSQL via postinstall scripts, enabling persistent access and data theft.
"The C2 hosts a web-based graphical user interface (GUI) titled 'NEXUS Listener' that can be used to view stolen information ...
Drift lost $285M on April 1, 2026 after nonce-based social engineering enabled admin takeover, exposing DPRK-linked crypto ...
AI extensions after DeepSeek block at U.S. law firm, routing traffic to China servers, exposing compliance risk.
The activity begins with the attackers distributing malicious VBS files via WhatsApp messages that, when executed, create ...