SecurityMicrosoft Restores Some GitHub Repos, Keeps Others Offline as Miasma Probe Continues

VulnerabilityWinRAR Flaw Exploited by Russia-Aligned Groups to Deploy Stealers in Ukraine

MalwareResearchers Build Self-Replicating AI Worm That Operates Entirely on Local, Open-Weight Models

VulnerabilityChrome V8 Zero-Day CVE-2026-11645 Exploited in the Wild - Patch Now

SecurityThe Hidden Security Risk in Modern Networks: The Work Between Tools

SecurityNew FROST Attack Lets Websites Track What Sites and Apps You Open via SSD Timing

MalwareHades PyPI Attack: 19 Packages Poisoned to Auto-Run Bun Credential Stealer

VulnerabilityLiteLLM Flaw CVE-2026-42271 Exploited in the Wild, Chains to Unauthenticated RCE

VulnerabilityOne-Character Linux Kernel Flaw Enables Local Root Access, Exploits Now Public

MalwareMeta Blocks NSO Group's New WhatsApp Phishing Attack, Files Contempt Order

VulnerabilityCritical Check Point VPN Flaw Exploited to Bypass Passwords in IKEv1 Setups

MalwareAI Phishing Is Crushing SOCs with Alert Volume: How to Reduce Tier 1 Overload

SecurityISC Stormcast For Tuesday, June 9th, 2026 https://isc.sans.edu/podcastdetail/9964, (Tue, Jun 9th)

SecurityTeamPCP Supply Chain Campaign: Activity Through 2026-06-07, (Mon, Jun 8th)

SecurityISC Stormcast For Monday, June 8th, 2026 https://isc.sans.edu/podcastdetail/9962, (Mon, Jun 8th)

SecurityThe Evil MSI Background is Back!, (Fri, Jun 5th)

SecurityISC Stormcast For Friday, June 5th, 2026 https://isc.sans.edu/podcastdetail/9960, (Fri, Jun 5th)

SecurityMicrosoft's Coreutils for Windows, (Thu, Jun 4th)

SecurityISC Stormcast For Thursday, June 4th, 2026 https://isc.sans.edu/podcastdetail/9958, (Thu, Jun 4th)

SecurityContinuing Scans for swagger.json, (Wed, Jun 3rd)

SecurityISC Stormcast For Wednesday, June 3rd, 2026 https://isc.sans.edu/podcastdetail/9956, (Wed, Jun 3rd)

MalwareNew Wave Of Phishing Emails with SVG Files, (Tue, Jun 2nd)

SecurityReporting from Vegas: Networking, AI, and good boys

MalwareWinning the cyber marathon with Tony Giandomenico

SecurityHypotheses, telemetry, and human judgment: Inside Cisco Talos Threat Hunting

SecurityLess panic patching, more precision

SecurityDICOM, Pydicom, GDCM, and Orthanc: A technical tour of what really happens in the heap

VulnerabilityMediaArea heap-based buffer overflow vulnerabilities

SecurityIntroducing EvidenceForge: Synthetic security logs that don’t look (as) fake

SecurityThe art of being ungovernable

VulnerabilityTP-Link, Photoshop, OpenVPN, Norton VPN vulnerabilities

SecurityFrom PDB strings to MaaS: Tracking a commodity BadIIS ecosystem used by Chinese-speaking threat

SecurityThe time of much patching is coming

VulnerabilityOngoing exploitation of Cisco Catalyst SD-WAN vulnerabilities

MalwareArgamal: Malware hidden in hentai games

SecurityWardriving assessment across Mexico: Preparing for the 2026 World Cup

SecurityContainers on fire: from container escapes to supply chain attacks

VulnerabilityWhat’s in the container? Analyzing vulnerabilities, risks and protection with Kaspersky Container Security and the KIRA AI assistant

MalwarePirates in the crosshairs: how one cybercrime gang has been infecting book, movie, and TV show fans for years

SecurityCloud Atlas activity in the second half of 2025 and early 2026: new tools and a new payload

VulnerabilityHow an image could compromise your Mac: understanding an ExifTool vulnerability (CVE-2026-3102)

SecurityIT threat evolution in Q1 2026. Mobile statistics

SecurityIT threat evolution in Q1 2026. Non-mobile statistics

APTKimsuky targets organizations with PebbleDash-based tools

SecurityWhen “Hi, This Is IT” Comes Through Microsoft Teams

VulnerabilityThreat Brief: Active Exploitation of PAN-OS CVE-2026-0257

SecurityThe npm Threat Landscape: Attack Surface and Mitigations (Updated June 2)

MalwareOperation FlutterBridge: macOS Malvertising Campaign Spreads New FlutterShell Backdoor

Security2026 World Cup: Discussing The World’s Biggest Game’s Attack Surface

SecurityOut of the Crypt: The Evolving Cyber Extortion Economy

APTTracking Iranian APT Screening Serpens’ 2026 Espionage Campaigns

APTPaved With Intent: ROADtools and Nation-State Tactics in the Cloud

SecurityTracking TamperedChef Clusters via Certificate and Code Reuse

VulnerabilityGremlin Stealer's Evolved Tactics: Hiding in Plain Sight With Resource Files

SecurityInside AD CS Escalation: Unpacking Advanced Misuse Techniques and Tools

APTThreat Brief: Exploitation of PAN-OS Captive Portal Zero-Day for Unauthenticated Remote Code Execution

Security8th June – Threat Intelligence Report

MalwareImpersonation, Click Hijacking, and TDS: Inside a Malware Distribution Ecosystem

Security1st June – Threat Intelligence Report

SecurityAI Threat Landscape Digest March-April 2026

Security25th May – Threat Intelligence Report

MalwareFast and Furious – Nimbus Manticore Operations During the Iranian Conflict

Security18th May – Threat Intelligence Report

SecurityThus Spoke…The Gentlemen

Security11th May – Threat Intelligence Report

MalwareThe State of Ransomware – Q1 2026

Security4th May – Threat Intelligence Report

MalwareVECT: Ransomware by design, Wiper by accident