CVE & Exploits · Sep 1, 2026
CISA Adds PaperCut NG/MF Flaws to Its Actively Exploited Vulnerabilities List
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has officially listed several security weaknesses in…
S
Suresh Kanwar
Suresh reports on security breach post-mortems and enterprise incident response, breaking down attack timelines after major disclosures.
239 stories filedFiled by Suresh Kanwar
CVE & Exploits · Sep 1, 2026
Threat Actors Weaponize Critical Langflow and Rails Vulnerabilities to Harvest Credentials and Run C2 Operations
Security researchers at VulnCheck have identified active exploitation of two high‑severity vulnerabilities affecting…
Malware · Aug 16, 2026
Stealthy New macOS Malware 'AmnesiaStealer' Grants Attackers Real-Time Control Over Web Browsers
A sophisticated new strain of information-stealing malware targeting macOS users has been discovered, raising fresh…
CVE & Exploits · Aug 15, 2026
Critical macOS Screen Sharing Flaw Exploited to Hijack Systems for Cryptocurrency Mining
Cybercriminals are actively exploiting a critical vulnerability in macOS Screen Sharing to hijack vulnerable Mac…
CVE & Exploits · Aug 14, 2026
As AI Fuels a Torrent of Software Vulnerabilities, NIST Turns to Automation for Relief
In an era where artificial intelligence is rapidly accelerating both cyber defense and exploitation, the National…
DDoS · Aug 12, 2026
Stealthy Upgrades: Kimwolf v7 Botnet Masking DDoS Traffic as Ordinary Web Browsing
Cybersecurity analysts have uncovered a sophisticated upgrade to a notorious malware family targeting connected…
DDoS · Aug 11, 2026
DDoS attacks over 1 Tbps surged fivefold in the second quarter
Cloudflare says it mitigated more than 800 network-layer distributed denial-of-service (DDoS) attacks exceeding 1 Tbps…
Breaches · Aug 11, 2026
Malicious MCP Servers Can Split Instructions to Make AI Coding Agents Exfiltrate Secrets
A malicious tool server connected to an AI coding assistant can quietly walk off with SSH keys, environment secrets,…
Threats · Aug 11, 2026
Hacker Conversations: Marcus Hutchins and the Journey From the Gray Zone to Redemption
Marcus Hutchins doesn’t personally consider himself a hacker – but he accepts the epithet because it’s a widely used…
Ransomware · Aug 10, 2026
China-Linked Hackers Deploy New StormEncryptor Ransomware, Likely via N-central Flaw
Microsoft has disclosed that Storm-1175, a financially motivated threat actor linked to China, has deployed a…
CVE & Exploits · Aug 10, 2026
Researchers Uncover RovoBlast Vulnerability in Atlassian AI Assistant
Atlassian fixed a flaw letting one crafted link make its Rovo AI assistant exfiltrate company data
Phishing · Aug 10, 2026
Kimsuky Builds Offline AI Stack to Boost Phishing and Automate Malware Development
North Korea's state hackers are no longer content to type prompts into public chatbots. One of the country's main…