Cyber threats and incidents

Microsoft Patched Actively Exploited Office Zero-Day CVE-2026-21509 Bypassing OLE Mitigations

What happened The Microsoft Office zero-day patch addressed CVE-2026-21509, a high-severity security...

Fake Notepad++ and 7-Zip Websites Delivered Legitimate RMM Tools for Remote Control and PatoRAT Deployment

What happened The fake Notepad++ and 7-Zip distribution campaign used fraudulent websites...

CVE-2026-24061 Exposed GNU Inetutils telnetd Servers to Unauthenticated RCE via Argument Injection

What happened The GNU Inetutils telnetd vulnerability exposed large numbers of internet-accessible...

Lazarus Operation DreamJob Targeted European Drone Firms Using DLL Side-Loading and ScoringMathTea RAT

What happened The Lazarus targeting campaign, tracked as Operation DreamJob, was linked...

SyncFuture Phishing Campaign Abused Security Software and Microsoft-Signed Binaries for Multi-Stage Malware

What happened The SyncFuture campaign used phishing emails impersonating the India Income...

Popular

Practitioners at the Podium: The Teaching CISOs to Watch

Some of the best security education comes from people...

Following the Money: America’s Financial Services CISOs to Watch

From global money transfers and buy now, pay later...

Vital Signs: America’s Healthcare CISOs to Watch

Healthcare remains one of the most targeted industries in...

Securing the State: The UK’s Government Cybersecurity Leaders to Watch

The UK’s government departments and public services hold the...

Bloom Security and Cyera Integrate to Bring Data-Aware AI Security to the Endpoint

Bloom Security has introduced an integration with Cyera DSPM...