Latest Briefings
Nearly 300 Fake GitHub Repos Used to Push BoryptGrab Infostealer
A Russia-linked campaign impersonated legitimate security, crypto, and developer tools across 292 GitHub repositories to trick users into downloading a memory-resident infostealer.
US Unseals Indictment, Offers $10M Bounty Over Russian Bulletproof Hosting Ring
Federal prosecutors have unsealed charges against three Russian nationals accused of running Media Land and ML Cloud, bulletproof hosting services that allegedly…
SAP Patches Critical CVSS 9.9 NetWeaver Flaw Among 16 July Fixes
SAP's July 2026 patch batch closes three critical vulnerabilities in NetWeaver, Approuter, and Commerce Cloud, headlined by a near-maximum-severity memory corruption bug…
SonicWall SMA1000 Zero-Days Under Active Attack, CISA Sets Federal Patch Deadline
SonicWall confirms two SMA1000 vulnerabilities, including a maximum-severity SSRF flaw, are being exploited in the wild. CISA has added both to its…
Microsoft Ships Windows 10 KB5099539, Bundling Record July Patch Tuesday Fixes
The extended security update patches July 2026's record-breaking 570 vulnerabilities for ESU-enrolled and LTSC devices, while adding networking hardening and RDP certificate…
Microsoft’s July Patch Tuesday Sets Record With 622 Fixes, Two Zero-Days Under Attack
Microsoft's largest security update on record addresses 622 vulnerabilities this month, including actively exploited flaws in Active Directory Federation Services and SharePoint…
Jscrambler NPM Package Hijacked to Push Rust Info-Stealer Malware
A threat actor used stolen NPM publishing credentials to push malicious versions of Jscrambler's popular code protection package, embedding a preinstall hook…
US Treasury Sanctions VPN Provider and Cryptor Seller Tied to Ransomware Gangs
OFAC designated First VPN Service, its administrator, and a Belarusian crypter seller for supplying anonymity and detection-evasion tools that fueled ransomware attacks…
Google, Microsoft Pull ModHeader Extension Over Hidden History Collector
A dormant browsing-history collector was discovered inside the official store version of ModHeader, a header-editing extension with about 1.6 million installs, prompting…
Nihon Kotsu, Japan’s Largest Taxi Operator, Shuts Down Systems After Malware Attack
A weekend malware intrusion knocked out dispatch, booking, and reservation systems at Nihon Kotsu, forcing Japan's biggest taxi and chauffeur operator to…
Malicious Jscrambler npm Package Backdoored With Infostealer for Two Hours
A threat actor published a rogue version of the Jscrambler npm package using stolen publishing credentials, planting an infostealer that harvested developer…
EU Weighs Bloc-Wide Social Media Age Limit of 13 for Kids
European Commission President Ursula von der Leyen is floating a harmonized EU rule barring unsupervised under-13s from social media, as member states…