FBI and Secret Service Warn of FortiBleed Lockout Threat
The FBI and Secret Service are warning Fortigate admins that their systems are still being targeted
general
20 articles
ChainDrop and PolinRider Use Blockchain C2 to Steal Cloud and CI/CD Credentials
Threat actors are increasingly using blockchain networks as resilient command-and-control infrastructure to steal cloud credentials from developer endpoints ...
Oracle Health Data Breach Tally Climbs to Nearly 20 Million
The figure is far higher than the counts that surfaced in earlier filings and patient notifications. The post Oracle Health Data Breach Tally Climbs to Nearl...
Ransomware recovery firm boss charged with secretly paying attackers and overcharging victims
The owner of Florida-based ransomware remediation company MonsterCloud has been charged with fraud for allegedly paying ransomware gangs behind his clients’ ...
FortiBleed Attackers Locking Victims Out of Fortinet Devices
Attackers are creating new accounts and deleting existing ones and passwords to prevent legitimate access. The post FortiBleed Attackers Locking Victims Out ...
Attackers Hijack .gh, .sl, and .as Domains to Obtain Unauthorized SSL Certificates
Attackers compromised the infrastructure of third-party country-code top-level domains (ccTLDs) for Ghana (.gh), Sierra Leone (.
U.S. Offers Up to $10 Million for Tips on Zhang Yu, Charged in HAFNIUM Hacks
The U.S.
MonsterCloud Owner Accused of Billing Over $19M While Secretly Paying Ransoms to Decrypt Data
The U.S.
12 Best ASPM Platforms Compared (2026): Features & Pricing
Apiiro leads risk-graph depth, ArmorCode aggregation breadth, and the acquisition wave (Dazz into Wiz, Bionic into CrowdStrike, Enso into Snyk) tells you whe...
12 Best SCA Tools Compared (2026): Features & Pricing
Snyk is the best developer-platform SCA, Sonatype the repository-firewall powerhouse, and Socket the malicious-package specialist the CVE-scanners aren’t. Tw...
Discord Security Bot Double Counter Hacked, Exposing Data of Millions of Users
The Discord security bot Double Counter experienced a targeted infrastructure breach that compromised personal information linked to millions of accounts. Ac...
9 Best IAST Tools Compared (2026): Features & Pricing
Contrast Security remains the dedicated IAST anchor, Black Duck’s Seeker the QA-leverage specialist, and Dynatrace/Datadog prove the category’s future is obs...
Atlassian Vulnerability Comes Under Attack Hours After Details Go Public
Threat actors are exploiting CVE-2026-21589, a critical Atlassian flaw that can expose sensitive files across multiple Data Center products. Threat actors ha...
12 Best DAST Tools Compared (2026): Features & Pricing
PortSwigger’s Burp Suite anchors practitioner testing at published prices, Invicti leads proof-based fleet automation, and Bright Security heads the develope...
U.S. Offers $10 Million Reward for Chinese Hacker Behind Alleged COVID-19 Research Cyberattacks
The U.S.
12 Best SAST Tools Compared (2026): Features & Pricing
GitHub CodeQL is the bundled baseline for GitHub estates, Snyk Code and SonarQube lead the developer-first lane, and Checkmarx/Veracode/Fortify anchor enterp...
Critical Citrix NetScaler CVE-2026-88771 Exploited for Reverse Shells and Persistent Access
Attackers are exploiting CVE-2026-88771, a critical pre-authentication command-injection vulnerability in Citrix NetScaler ADC and NetScaler Gateway, to depl...
Samsung Galaxy S26 hacked three more times at Pwn2Own Ireland
On the second day of Pwn2Own Ireland 2026, security researchers collected $232,500 in cash awards after exploiting 45 unique zero-day vulnerabilities. [.
Hackers Abuse GitHub Actions to Steal SSH Keys, Cloud Credentials and Access Tokens
Hackers are abusing GitHub Actions to steal SSH keys, cloud credentials, and access tokens through malicious workflows disguised as security checks. The work...
Pricing your bad days and how to build an economic model for security decisions
Ivan Milenkovic, VP Risk Technology EMEA at Qualys, explains how security leaders can build an economic model that puts money behind their decisions. He sugg...