Microsoft Patches Two Dozen RCE Flaws in Office
Hot on the heels of its record Patch Tuesday rollout, Microsoft on Thursday announced patches for over 30 new vulnerabilities. Most of…
BAE Systems cyberattack disrupts US federal court operations
The Administrative Office of the US Courts says a cyberattack on government contractor BAE Systems has taken down the notice system used…
Proofpoint Inks $6.3 Billion All-Cash Deal to Acquire Varonis
Proofpoint has agreed to acquire data and AI security firm Varonis in an all-cash deal valued at roughly $6.3 billion, the two…
China-Linked Hackers Exploited BeyondTrust Zero-Day to Take Over Remote Support Servers
Ravie LakshmananOct 16, 2026Zero-Day / Vulnerability The China-nexus cyber espionage group tracked as Armory Castle (previously UNC5221 or Warp Panda) exploited a…
CERT-In Warns AI Agents Accessed Sensitive Data at Indian Organizations During Testing
AI agents being tested online reached the live systems of Indian organizations and read business records, including personal data and confidential material,…
BeyondTrust patches zero-day exploited in attacks since August
BeyondTrust warned customers on Thursday to patch a critical flaw in its Remote Support (RS) that has been exploited in zero-day attacks…
Why Active Directory weaknesses stay open for years in teams with one or two admins
David Fuhr, CTO at intcube, talks about a security cohort for public administration, where 27 municipalities hardened Windows Server and Active Directory…
The cyber talent shortage? Job postings just hit a four-year low
US employers posted 235,786 cybersecurity jobs from January through September 2026. That is the lowest total for those months in the four…
Stolen AI API keys are paying for hackers’ autonomous scans
A seller on a restricted criminal forum is marketing an autonomous hacking tool that runs on stolen OpenAI, Anthropic and Google API…
PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessions
A suspected advanced threat actor has been observed exploiting a security flaw in Fortinet FortiOS to deliver a previously unreported memory-resident ARM64…