7+ hour, 15+ min ago   (341+ words) Beta Build 26220.9343 lets Windows 11 recover over Wi-Fi or Ethernet directly from WinRE, no boot drive needed The recovery path runs through WinRE, and setup is straightforward before anything starts downloading. Getting there takes two routes: boot into the Windows Recovery…...

8+ hour, 10+ min ago   (25+ words) The Dutch NCSC now expects attackers to target two critical Check Point VPN flaws soon, despite no public proof-of-concept exploit. The warning raises the urgen...

1+ day, 15+ hour ago   (602+ words) Multiple espionage groups have been using a new exploit kit dubbed BlueMoon in seemingly opportunistic and rushed deployments, cybersecurity firm Proofpoint reports. The China-linked APT Violet Typhoon (also tracked as APT31, JungleBamboo, TA412, and Tide Castle) was the first to use it…...

16+ hour, 17+ min ago   (148+ words) Two PaperCut vulnerabilities are now chained into a fully automated attack pipeline with in-memory persistence—and 47% of installations can't patch. On August 26, security researchers at Huntress identified anomalous activity in customer logs involving base64-encoded commands like whoami and tasklist. This…...

1+ day, 3+ hour ago   (1283+ words) I keep hearing the same interpretation of the Cyber Resilience Act (CRA): when the CRA says that security updates must be provided “free of charge,” it means the enterprise open-source subscription model is effectively over in Europe. The reasoning sounds…...

1+ day, 16+ min ago   (65+ words) Three V8 bugs, individually medium-severity, chain into SYSTEM-level access through the patch-gap window. Four espionage clusters adopted the kit within days. The structural shift: browser-based AI agents inherit the same attack surface. Heath Callahan Trust, Identity & Security All stories by Heath…...

1+ day, 18+ hour ago   (355+ words) Published on September 11, 2026 BlueMoon exploit kit chains Windows and Chrome zero-days in targeted attacks, giving cyber-espionage groups a way to execute code, escape Chrome’s sandbox, and gain elevated Windows privileges. Proofpoint observed attacks involving BlueMoon starting on August 28, 2026, while Volexity…...

2+ day, 1+ hour ago   (642+ words) A new exploit kit is revealing the perils of the “patch later” mentality. According to the Proofpoint Threat Research team, espionage-motivated threat actors are using a new malicious toolkit to chain together four separate Chrome browser and Microsoft Windows vulnerabilities…...

2+ day, 10+ hour ago   (523+ words) AdaptHealth confirms 4.1 million people exposed in July cyberattack Over 36,000 exposed Plex servers vulnerable to recent flaws AI-powered attack exploited PaperCut flaws to hack 395 organizations Cisco FMC flaws exploited by ransomware gang, state-sponsored hackers IDScan confirms breach tied to 153 million stolen…...

2+ day, 12+ hour ago   (23+ words) Check Point has released same-day fixes for two CVSS 9.8 vulnerabilities in Quantum VPN certificate processing that could let unauthenticated remote attackers e...