Matt Gonzales

Fortinet warns that critical FortiMail zero-day CVE-2026-104286 is under active attack. See affected versions, mitigations, and what to do now.

Microsoft warns that Star Blizzard is using RedFlick and Windows scheduled tasks to deploy the CosmicPulse backdoor in targeted attacks.

BigCommerce merchants were affected after compromised Ribon app credentials exposed customer data, including names, emails, phone numbers, and addresses.

An IDScan breach filing lists 13 million people affected after a dark-web marketplace claimed to hold 153 million driver’s license records.

ShinyHunters claims it breached FBI systems using an Oracle PeopleSoft zero-day, exposing sensitive employee and applicant data.

More than 36,000 Plex Media Servers were found unpatched after a security warning. Here’s what administrators should know and how to update.

Meta patched a Muse AI agent flaw that could have allowed local malware or socially engineered commands to hijack the assistant and abuse permissions already granted by Mac users across connected devices running Muse.

RatHat Android malware can pose as Google Chrome, abuse Accessibility and ADB, steal credentials, and reinstall itself after removal.

Hackers are exploiting a critical Sangoma Switchvox flaw that enables unauthenticated remote code execution. Admins should patch and check for compromise.

Apple patched critical iPhone flaws that could allow malicious code execution, including an ImageIO vulnerability. Here’s what users should know.

OpenAI slows frontier AI training as Astra nears a critical cyber threshold, raising new questions about AI security, autonomy, and defense.

Learn about the features and capabilities of the top breach and attack simulation (BAS) tools in 2026