Ken Underhill

A hidden MCP API in Comet let extensions execute local commands on user devices.

The UK, US, and Australia sanctioned Media Land, a Russian network enabling major cyberattacks.

Amazon warns that nation-state hackers are now using cyber intrusions to enable real-world missile targeting and physical strikes.

CrowdStrike found that political trigger words can cause DeepSeek-R1 to generate insecure code, raising vulnerability rates by nearly 50%.

A WhatsApp flaw allowed researchers to scrape 3.5 billion accounts, showing how simple app features can create serious security risks.

Learn how Graylog helps lean security teams cut noise, boost visibility, and achieve readiness with smarter workflows and automation.

A fake CAPTCHA click led to a 42-day Akira ransomware breach that went largely undetected despite extensive security tooling.

A new ShadowRay 2.0 campaign is abusing a Ray vulnerability to seize control of AI infrastructure worldwide.

A glob CLI flaw lets attackers run commands via malicious filenames, putting CI/CD pipelines at risk.

The Cloudflare outage showed how one failure can disrupt the internet and highlighted the need for stronger cyber resilience.

The alleged Everest ransomware breach could expose millions of Under Armour customers to serious security and privacy risks.

An Iranian campaign called SpearSpecter is quietly targeting senior officials with tailored social engineering and fileless malware.