4+ day, 17+ hour ago   (513+ words) Panzer ransomware has entered Italy amid a sharp rise in attacks. The ransomware-as-a-service, or RaaS, operation surfaced on August 5 and listed a kitchen manufacturer in Treviso and a telecommunications engineering firm in Catanzaro among its alleged victims. The group advertises…...

1+ week, 3+ day ago   (579+ words) Silver Fox-linked hackers are using counterfeit software installers to break into Windows systems and weaken the protections meant to stop them. Most observed victims were linked to China-based operations or Chinese-speaking users, but the lure can cross industry boundaries. Microsoft…...

2+ week, 6+ day ago   (823+ words) On the defensive side, Anthropic expanded Claude Security’s vulnerability-scanning capabilities, underscoring how the same technology is being pulled in opposite directions by attackers and defenders alike. Identity and access management dominated the vulnerability news cycle, with a critical Entra ID…...

5+ day, 18+ hour ago   (1524+ words) Macs get malware. Not as much as Windows, but the volume of macOS infostealers harvesting browser credentials, crypto wallets, and keychain data has grown sharply, and they arrive through cracked software, fake installers, and malicious ads rather than exploits. Bitdefender…...

2+ week, 3+ day ago   (600+ words) Cybercriminals are using a counterfeit Claude desktop application to compromise Windows systems, disable key security checks, and install remote-access malware. The campaign turns a familiar AI software search into a route for credential theft and long-term access. It also shows…...

1+ week, 2+ day ago   (297+ words) A critical vulnerability in Sangoma Switchvox is being actively exploited, affecting the enterprise VoIP platform used to manage business phone systems, voicemail, call forwarding, monitoring, and analytics. CVE-2026-9586 is an unauthenticated SQL injection vulnerability affecting Sangoma Switchvox SMB Edition 8.3, build…...

3+ week, 1+ day ago   (622+ words) Anthropic has expanded access to its frontier AI cyber-defense capabilities by making Claude Mythos 5 available in Claude Security, enabling enterprise customers to scan codebases for vulnerabilities and receive AI-generated remediation guidance. The move is designed to give defenders stronger vulnerability…...

3+ week, 2+ day ago   (527+ words) CERT Polska has warned that threat actors are actively exploiting a critical remote code execution vulnerability in Zimbra Collaboration Suite. Tracked as CVE-2026-73570, the flaw allows unauthenticated attackers to run arbitrary operating system commands as the zimbra user on affected…...

5+ day, 18+ hour ago   (444+ words) N-able has released N-central 2026.3 Hotfix 4 to fix CVE-2026-86218. This critical vulnerability could allow an unauthenticated attacker to execute code remotely on an exposed N-central server. The update, identified as build 2026.3.1.14, was issued for on-premises N-central deployments. N-able urged self-hosted customers…...

5+ day, 19+ hour ago   (1503+ words) Business antivirus has become endpoint security: prevention, detection, and response in one agent rather than signature scanning alone. CrowdStrike leads on detection engineering and threat intelligence, Microsoft Defender for Endpoint wins on economics for Microsoft 365 E5 organizations, and SentinelOne offers the…...