News Articles
Latest articles, insights, and updates from the blog.
New Wazza Phishing Kit Hits Banks, Gov't, Manufacturers
ANY.RUN researchers detail Wazza, a phishing kit targeting banks, government, and manufacturers across the US, EU, and Australia in 2026.
Chrome 155 Patches 247 Flaws, Four Rated Critical
Google's Chrome 155 update fixes 247 vulnerabilities, including four critical use-after-free bugs. Here's what businesses should verify now.
Three-Year NPM Supply Chain Campaign Hits 40,000 Downloads
A three-year NPM supply chain campaign called MALFEX has delivered malware through eight packages downloaded 40,000 times, researchers say.
AI-Found Rejetto HFS Flaw Now Under Active Attack
CVE-2026-61500 lets attackers steal Rejetto HFS's session-cookie signing key for admin access and remote code execution. Active exploitation reported.
ShinyHunters Suspect 'Rey' Reportedly Detained in Jordan
Reuters reports a ShinyHunters extortion suspect known as 'Rey' was detained in Jordan on Sept. 29, 2026, and is reportedly aiding an FBI probe.
N0n Ransomware Gang Emerges With Dozen Victims
A new ransomware gang called N0n emerged in September 2026, claiming dozens of victims. Here's what businesses need to know and do now.
Warlock Group Widens SharePoint Attacks on Infrastructure
A China-based hacker group tracked as Warlock is expanding SharePoint exploitation into critical infrastructure. Here's what operators should patch and watch.
Treasury Sanctions ATM Jackpotting Malware Developer
Treasury's OFAC sanctioned a wanted ATM jackpotting malware developer tied to Tren de Aragua. Here's what it means for ATM operators and small businesses.
Star Blizzard's New RedFlick Chain Deploys CosmicPulse
Russian APT Star Blizzard now uses a RedFlick infection chain to deploy the CosmicPulse backdoor in larger-scale phishing campaigns.
Dutch Police Rearrest Hacker Tied to ShinyHunters Probe
Dutch police arrested Pepijn van der Stap, convicted in 2023 for hacking and extortion, as part of a ShinyHunters investigation reported September 29, 2026.
Google Warns ShinyHunters Targets Oracle PeopleSoft Flaw
Google warns ShinyHunters retooled its exploit for Oracle PeopleSoft flaw CVE-2026-35273 in new 2026 attacks; here's what admins should do now.
SharePoint Bug CVE-2026-65660 Added to CISA's KEV List
CISA added the actively exploited SharePoint flaw CVE-2026-65660 to its KEV catalog with a September 28, 2026 federal deadline. What to do now.
Stay ahead of cyber threats
Get proactive protection before the next breach makes headlines. Talk to our experts today.