Ken Underhill

Proofpoint uncovered a suspected China-aligned campaign targeting vulnerable Roundcube mail servers.

The Accenture breach reinforces the need to secure development environments.

Trust remains the biggest barrier to adopting AI agents in modern security operations.

Januscape (CVE-2026-53359) enables guest-to-host VM escape in Linux KVM on Intel and AMD systems.

BeyondTrust has patched four RS and PRA vulnerabilities, including two critical authentication bypass flaws.

SonicWall found healthcare remains the top cybersecurity target, with rising malware, ransomware, and medical IoT threats.

Barracuda found phishing attacks increasingly abuse Microsoft authentication, session tokens, and fileless malware.

Cisco Talos uncovered ARToken, a Microsoft 365 phishing platform built for persistent access and BEC attacks.

CVE-2026-8451 is a Citrix NetScaler vulnerability that can leak process memory through specially crafted SAML requests.

Silent Swap uses a fake Chrome extension to silently replace cryptocurrency wallet addresses and steal digital assets.

The U.S. Department of State is offering up to $10 million for information on Russian-linked groups UNC5792 and UNC4221.

Aflac disclosed a data breach at its Japan subsidiary that exposed sensitive customer and bank account information.