New Research: 64% of 3rd-Party Apps Access Sensitive Data Without Justification
A study of 4,700 websites finds 64% of third-party apps access sensitive data without business need,…
AI Agents: New Privilege Escalation Paths in Cybersecurity
Enterprise AI agents boost automation but often run with broad permissions, allowing actions beyond user access…
Drones to Diplomas: Russian University Linked to $25M Essay Mill
A $25M academic cheating network with Google Ads has ties to a Kremlin-linked oligarch whose university…
Kimwolf Botnet Stalks Local Networks: Unsecured Devices Expose Home Networks
The Kimwolf botnet infects devices, tunnels through proxy networks, and exploits local networks via unsecured Android…
Who Benefited from the Aisuru and Kimwolf Botnets?
An investigation into the actors who profited from the Aisuru and Kimwolf botnets, focusing on residential…
Microsoft January 2026 Patch Tuesday fixes 3 zero-days, 114 flaws
Microsoft’s January 2026 Patch Tuesday addresses 114 flaws, including one actively exploited and two publicly disclosed…
Windows 11 KB5074109 & KB5073455 Cumulative Updates Released
Microsoft releases Windows 11 KB5074109 & KB5073455 updates for versions 25H2/24H2 and 23H2, fixing vulnerabilities, bugs…
Microsoft rolls out new Secure Boot certificates for Windows devices
Microsoft has begun automatically replacing expiring Secure Boot certificates on eligible Windows 11 24H2 and 25H2…
Central Maine Healthcare data breach impacts 145,000+ individuals
Central Maine Healthcare (CMH) reports a data breach affecting over 145,000 individuals after a two-month intrusion.…
Ukraine’s Army Targeted in Charity-Themed Malware Campaign
Ukraine’s Defense Forces were targeted with PluggyApe backdoor malware in a charity-themed campaign linked to Russian…
Latest Posts
- Drones to Diplomas: Russia’s University Linked to $25M Essay Mill
- The Kimwolf Botnet is Stalking Your Local Network
- Who Benefited from the Aisuru and Kimwolf Botnets?
- Windows 11 PCs may fail to shut down after January update: Microsoft confirms
- Cisco Patches AsyncOS Zero-Day Exploited Since November 2025
