Modern browsers have become one of the largest attack surfaces in enterprise environments—and attackers know it. … Chrome Security Update Fixes 26 RCE VulnerabilitiesRead more
incident response
Loblaw Data Breach: Threat Actor Gains Access to Internal IT Network and Customer Data
Loblaw Companies Limited—Canada’s largest food and pharmacy retailer—has confirmed a data breach affecting portions of its … Loblaw Data Breach: Threat Actor Gains Access to Internal IT Network and Customer DataRead more
LangSmith Vulnerability: CVE‑2026‑25750 and How to Prevent Account Takeover
LangSmith, the AI observability platform behind many enterprise LLM stacks, ingests over one billion events per … LangSmith Vulnerability: CVE‑2026‑25750 and How to Prevent Account TakeoverRead more
Dohdoor Malware: Multi‑Stage DoH Backdoor Targeting U.S. Schools & Healthcare
A new threat cluster, UAT‑10027, is actively deploying a previously unseen backdoor called Dohdoor against U.S. … Dohdoor Malware: Multi‑Stage DoH Backdoor Targeting U.S. Schools & HealthcareRead more
WebDAV Malware Delivery: How Hackers Exploit Windows File Explorer
Phishing is no longer confined to the browser. A fast‑growing tactic—WebDAV malware delivery—leverages legacy behavior in … WebDAV Malware Delivery: How Hackers Exploit Windows File ExplorerRead more
ARPA TLD Phishing: How IPv6 Tunnels Evade Enterprise Defenses
Phishing has evolved beyond look‑alike domains and typo‑squats. Recent research exposes ARPA TLD phishing, where threat … ARPA TLD Phishing: How IPv6 Tunnels Evade Enterprise DefensesRead more
Metasploit Exploit Modules: Feb 2026 RCE & Evasion Update
Metasploit exploit modules just received a major February 2026 update that materially changes how red and … Metasploit Exploit Modules: Feb 2026 RCE & Evasion UpdateRead more
Steaelite RAT and the Rise of Double-Extortion Cyberattacks Against Enterprises
In late 2025 and early 2026, security researchers began observing a surge in double‑extortion ransomware attacks … Steaelite RAT and the Rise of Double-Extortion Cyberattacks Against EnterprisesRead more
Wireshark 4.6.4 Patches Critical DoS Vulnerabilities
Wireshark 4.6.4 has been released with important security and stability fixes, addressing multiple denial-of-service (DoS) risks … Wireshark 4.6.4 Patches Critical DoS VulnerabilitiesRead more
Claude Code Remote Control: Security & Risk Guide
Remote development is no longer a luxury — it’s an operational necessity. As hybrid work models … Claude Code Remote Control: Security & Risk GuideRead more