3+ week, 1+ day ago   (527+ words) Microsoft has confirmed that a critical remote code execution flaw in Entra ID, its cloud-based identity and access management platform, has already been exploited in the wild. The vulnerability, tracked as CVE-2026-69836, was disclosed on August 20, 2026, and carries the maximum…...

2+ week, 6+ day ago   (823+ words) On the defensive side, Anthropic expanded Claude Security’s vulnerability-scanning capabilities, underscoring how the same technology is being pulled in opposite directions by attackers and defenders alike. Identity and access management dominated the vulnerability news cycle, with a critical Entra ID…...

3+ week, 2+ day ago   (603+ words) A new Windows malware campaign is hiding malicious code inside ordinary English words, making the payload look less suspicious during analysis. The technique is being used to deliver Amatera Stealer, an information-stealing threat that targets sensitive data stored on infected…...

4+ day, 17+ hour ago   (513+ words) Panzer ransomware has entered Italy amid a sharp rise in attacks. The ransomware-as-a-service, or RaaS, operation surfaced on August 5 and listed a kitchen manufacturer in Treviso and a telecommunications engineering firm in Catanzaro among its alleged victims. The group advertises…...

1+ week, 3+ day ago   (339+ words) Anthropic has rolled out two new frontier AI models, Claude Fable 5.1 and Claude Mythos 5.1, positioning them as the most capable systems yet for software development, enterprise knowledge work, and scientific research. While both models share identical underlying architecture, they differ…...

4+ week, 16+ hour ago   (455+ words) Microsoft will make passkeys the default authentication experience in Microsoft Entra ID as part of a broader move away from phishing-prone sign-in methods. Beginning September 1, 2026, users currently enabled for SMS or voice authentication will be automatically enabled for passkeys. During…...

5+ day, 19+ hour ago   (601+ words) The activity focused on targets in Romania, Spain, and Turkey, where seemingly ordinary Microsoft Word attachments became the opening move in a staged intrusion. The campaign relies on spearphishing emails carrying macro-enabled documents. Victims are urged to enable content, which…...

2+ day, 18+ hour ago   (1415+ words) Bottom line up front: the encryption engines are largely solved BitLocker and FileVault are strong, free, and built in. What you’re actually buying in 2026 is management: proof for auditors, key escrow and recovery, policy across mixed fleets, and pre-boot options…...

1+ week, 2+ day ago   (614+ words) The Gentlemen ransomware operation is moving from access to full network encryption at striking speed. In some intrusions, attackers disabled defenses and recovery services before deploying ransomware in less than 24 hours across enterprises. The group runs as a ransomware-as-a-service operation,…...

3+ week, 4+ day ago   (1531+ words) Network sandboxing detonates unknown files and URLs in an isolated environment to see what they actually do catching malware that has never been seen before and therefore has no signature. Palo Alto WildFire leads on scale and integration, VMRay leads…...