Phishing · Sep 18, 2026
T‑Mobile customers hit by fake rewards‑expiration texts in new phishing wave
A widespread SMS phishing operation is masquerading as messages from T‑Mobile, warning recipients that their…
S
Suresh Kanwar
Suresh reports on security breach post-mortems and enterprise incident response, breaking down attack timelines after major disclosures.
240 stories filedFiled by Suresh Kanwar
.jpg?width=720&quality=80&disable=upscale)
Malware · Sep 18, 2026
Chinese APT “FamousSparrow” Targets U.S. Political Networks in Latin America Amid Eco‑Strategic Rivalry
A covert cyber‑espionage campaign attributed to the Chinese group known as FamousSparrow is reportedly harvesting…
Malware · Sep 17, 2026
ESET Reports FamousSparrow’s Shift from SparrowDoor to New SparroWocky Backdoor
Cyber‑security firm ESET announced that the threat actor known as FamousSparrow has retired its previously identified…
Malware · Sep 17, 2026
Iran‑linked Handala Hack leverages new “CRUDEEXCLUDE” tool to bypass Microsoft Defender and drop novel “HEAVYGRAM” payload
Security researchers have identified a previously unknown malware family, dubbed HEAVYGRAM, being delivered by the…
Malware · Sep 17, 2026
AI‑Powered “RatHat” Android Malware Targets Financial Information, Researchers Find
Security firm Zimperium has identified a new Android threat it has named RatHat, a malicious program that combines…
Threats · Sep 17, 2026
Cyber Essentials Certification Surges 20% Yet Overall Adoption Stagnates
Government data released this week show that the Cyber Essentials scheme, the United Kingdom's baseline security…
Ransomware · Sep 17, 2026
DOJ Takes Down NightmareStresser Domains in Broad DDoS‑for‑Hire Sweep
The U.S. Department of Justice announced Tuesday that it has seized the web domains used by NightmareStressor, a…
CVE & Exploits · Sep 17, 2026
Cisco Urges Immediate Patch for Critical ISE Vulnerability Amid Active Exploitation
Cisco has issued an advisory warning that a critical vulnerability in its Identity Services Engine (ISE) is being…
CVE & Exploits · Sep 17, 2026
AI‑Driven Pentesting Aims to Shrink Exploit‑to‑Patch Gap, New Guide Shows CISO Path
Security leaders are confronting a widening window between the discovery of web‑application flaws and the time it takes…
Threats · Sep 17, 2026
Serverless Security Becomes a Feature of Broader Platforms, Not a Standalone Product
In 2026, organizations seeking to protect serverless workloads are no longer offered a dedicated security product that…
Phishing · Sep 17, 2026
Cybercriminal Group BlackHatSect0r Hijacks Self‑Hosted AI to Scale Credential Theft
A French‑speaking hacking collective known as BlackHatSect0r && DXQRTXX has reportedly subverted safety mechanisms in a…
CVE & Exploits · Sep 17, 2026
Cisco Issues Emergency Patch After Active Exploitation of ISE Zero-Day
Cisco has released an emergency software update following the discovery that a zero‑day flaw in its Identity Services…