The Dutch Nationaal Cyber Security Centrum (NCSC) is warning of imminent exploitation of two critical flaws in Check Point VPN tracked as CV…

Anthropic says multiple threat groups, including the financially motivated and state-sponsored espionage groups linked to Russia and China, …

The Florida Department of Highway Safety and Motor Vehicles (FLHSMV) has confirmed that its DAVID driver database suffered a data breach, sa…

Microsoft says threat actors linked to ShinyHunters, Helix, and other extortion gangs are using passkey and single sign-on-themed social eng…

Threat actors linked to a China-aligned espionage group are exploiting a critical vulnerability (CVE-2026-51990) in Tencent's Sogou Input Me…

Microsoft has disclosed details of two campaigns in which threat actors are abusing third-party email delivery infrastructure to blast finan…

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added five security flaws impacting JFrog Artifactory, ConnectWise Scre…

Over the past year, we watched a new class of alert appear in enterprise security operations centers and grow faster than anything else in t…

The "major malicious attack" that targeted RubyGems in May 2026 was the work of a swarm of OpenAI agents, according to a new report publishe…

GitLab has released patches to address multiple flaws, including a maximum-severity security vulnerability that has witnessed in-the-wild pr…

Owners of operational technology encouraged to address avoidable vulnerabilities, and build long-term cyber resilience.…

A statement from Ollie Whitehouse, Chief Technology Officer at the NCSC, on AI security following recent incidents.…

GCHQ’s National Cyber Security Centre and international partners issue warning as ‘LAUNDRY BEAR’ cyber threat group exposed for targeted phi…

New advisory highlights Russian state cyber actors’ global exploitation of poorly configured routers…

Five Eyes cyber security agencies urge organisations to act on rapidly transforming cyber risk.…

I identified an attacker using a semi-autonomous coding agent to run an offensive operation: finding poorly secured LLM resale gateways, ac…

[This is a Guest Diary by Aaron Ng, an ISC intern as part of the SANS.edu BACS program]
…