-
New Research: 64% of 3rd-Party Apps Access Sensitive Data Without Justification
A study of 4,700 websites finds 64% of third-party apps access sensitive data without business need,…
-
AI Agents: New Privilege Escalation Paths in Cybersecurity
Enterprise AI agents boost automation but often run with broad permissions, allowing actions beyond user access…
-
Drones to Diplomas: Russian University Linked to $25M Essay Mill
A $25M academic cheating network with Google Ads has ties to a Kremlin-linked oligarch whose university…
-
Kimwolf Botnet Stalks Local Networks: Unsecured Devices Expose Home Networks
The Kimwolf botnet infects devices, tunnels through proxy networks, and exploits local networks via unsecured Android…
-
Who Benefited from the Aisuru and Kimwolf Botnets?
An investigation into the actors who profited from the Aisuru and Kimwolf botnets, focusing on residential…
-
Microsoft January 2026 Patch Tuesday fixes 3 zero-days, 114 flaws
Microsoft’s January 2026 Patch Tuesday addresses 114 flaws, including one actively exploited and two publicly disclosed…
-
Windows 11 KB5074109 & KB5073455 Cumulative Updates Released
Microsoft releases Windows 11 KB5074109 & KB5073455 updates for versions 25H2/24H2 and 23H2, fixing vulnerabilities, bugs…
-
Microsoft rolls out new Secure Boot certificates for Windows devices
Microsoft has begun automatically replacing expiring Secure Boot certificates on eligible Windows 11 24H2 and 25H2…
-
Central Maine Healthcare data breach impacts 145,000+ individuals
Central Maine Healthcare (CMH) reports a data breach affecting over 145,000 individuals after a two-month intrusion.…
-
Ukraine’s Army Targeted in Charity-Themed Malware Campaign
Ukraine’s Defense Forces were targeted with PluggyApe backdoor malware in a charity-themed campaign linked to Russian…
Latest Posts
- Drones to Diplomas: Russia’s University Linked to $25M Essay Mill
- The Kimwolf Botnet is Stalking Your Local Network
- Who Benefited from the Aisuru and Kimwolf Botnets?
- Windows 11 PCs may fail to shut down after January update: Microsoft confirms
- Cisco Patches AsyncOS Zero-Day Exploited Since November 2025
