All articles
Sourced cybersecurity news on breaches, exploited CVEs, ransomware, threat actors, AI security, and the operational patches that matter.
-
FBI Probes Nexus Service Selling 153M Driver's Licenses
IDScan.net told Oregon 13 million people were affected, versus the 153M license scans Nexus claimed. The FBI and Canada's OPC are investigating.
-
AI Hacking: Attack Paths, Real CVEs and Defensive Controls
AI hacking covers AI-assisted intrusions and attacks on models, agents and ML supply chains, mapping attack paths, a PyTorch RCE and defensive controls.
-
Bulletproof Hosting: Why Takedowns Keep Failing
Sanctions and server seizures hit bulletproof hosting through 2025 and 2026, yet the infrastructure keeps returning. What actually degrades it.
-
CVE Tracking in 2026: Prioritize When NVD Stops Scoring
NIST moved the NVD to a triage model in April 2026. Here is what CVE tracking and patch prioritization look like when most records never get scored.
-
Standard Chartered's CISO on AI's Dual Role in Bank Security
Standard Chartered group CISO Cezary Piekarski says AI now accelerates bank defenses and adversary tradecraft alike, and CISOs must speak business terms.
-
Hotel Wi-Fi Hijack Uses Fake Updates to Deliver Spyware
Microsoft attributes CaptiveCrunch to Storm-2945, a Midnight Blizzard sub-cluster using hotel captive portals to deploy malware and steal cloud tokens.
-
H96 Android TV Boxes Ship With Ad-Fraud and Proxy Malware
Bitsight traced 38,000 H96 Android TV boxes shipping with pre-installed malware that rents the owner's IP as a proxy and runs ad fraud when idle.
-
UAC-0145 Uses ClickFix CAPTCHAs to Deploy Malware in Ukraine
UAC-0145 ran ClickFix CAPTCHA lures on 10 or more compromised sites in mid-2026, tricking Ukrainian targets into running PowerShell that stages malware.
-
Netherlands Seizes 800 Servers Over Russian-Linked Hosting
Dutch FIOD agents seized more than 800 servers and arrested two hosting co-owners over EU sanctions tied to the Stark Industries Solutions network.
-
Cisco SD-WAN Flaw: CISA Emergency Directive 26-03
CVE-2026-20182 is a maximum-severity authentication bypass in Cisco Catalyst SD-WAN, added to CISA's KEV catalog on May 14 amid active exploitation.
-
May 2026 Security Roundup: Cisco, Exchange, and Exim
The May 2026 security roundup covers exploited Cisco SD-WAN and Exchange flaws, a critical Exim bug, NGINX and Defender issues, and Patch Tuesday.
-
Remediation Programs: Why Fix Validation Matters
Mandiant M-Trends 2026 puts mean time to exploit at negative seven days while Verizon's 2025 DBIR finds edge devices take 32 days to remediate.
-
AI Fraud Detection: How It Works and Where It Fails
How AI fraud detection actually works across supervised models, anomaly detection, and graph neural networks, and where attackers and data silos break it.
-
RubyGems Suspends Signups After Malicious Package Flood
RubyGems disabled new account registrations on May 12, 2026 after attackers bulk-uploaded hundreds of malicious gems alongside a DDoS on the registry.
-
AI Security Threat Intelligence Hub
Tech Sentinel's AI security hub: agentic AI threat models, a PyTorch model-loading RCE, AI fraud detection limits, and supply-chain fraud cases.
-
AI Agents Rewrite the Threat Model for Security Teams
Clinejection, the AI-augmented FortiGate campaign, and the OpenClaw exposure wave show why agentic AI is best treated as an insider-threat problem.
-
Cybersecurity Burnout Is a Structural Problem
A Sophos survey found widespread cyber fatigue and burnout; rising CVE volumes, shorter exploitation windows, and understaffing strain security teams.