Ungentlemanly behavior: Insights into a ransomware operation
Counter Threat Unit™ (CTU) researchers identified a consistent post-exploitation playbook used in The Gentlemen ransomware-as-a-service (RaaS) scheme, operated by a...
AndyC
Andy Curtis is an award-winning security consultant, researcher and public speaker. He has been working in the computer security industry since the early 1990s, having been employed by state and federal government, leading healthcare and banking providers across three continents. He has given talks about computer security for some of the world’s largest companies, worked with law enforcement agencies on investigations into hacking groups, and is a regular voice on TV and radio explaining IT security threats.
Using High-Energy Laser, US Shoots Down Drones Near Mexico Border
This week, the US Army used a high-energy multipurpose laser to shoot down three drones near the US-Mexico border, which...
North Korea-linked IT Workers Are Getting Hired Inside Western Companies
North Korea-linked IT Workers Are Getting Hired Inside Western Companies Pierluigi Paganini September 01, 2026 Huntress found five DPRK-linked workers...
Chaotic Eclipse Releases Kaspersky Zero-Day HardBreacher
Chaotic Eclipse Releases Kaspersky Zero-Day HardBreacher Pierluigi Paganini September 01, 2026 Chaotic Eclipse released HardBreacher, a PoC exploit for a...
U.S. CISA adds PaperCut NG/MF flaws to its Known Exploited Vulnerabilities catalog
U.S. CISA adds PaperCut NG/MF flaws to its Known Exploited Vulnerabilities catalog Pierluigi Paganini September 01, 2026 U.S. Cybersecurity and...
Rewiring Democracy Series on The Renovator
Rewiring Democracy Series on The Renovator Nathan E. Sanders and I are writing a series of essays on real-world examples...
What went wrong with Apple’s design group?
Design a team Take Ive. There could be a reality in which some of this instability began with his departure. One argument might...
Q&A: Serval CEO describes building an ‘AI-native’ alternative to ServiceNow
“We have a separate agent, called Catalyst, that builds those automations. Admins talk to Catalyst, which can build any automation,...
Microsoft 365 outage enters second day as search disruptions persist
About an hour later, it said that a potential corrective action for the affected infrastructure had been identified and the...
Threat Actors Don’t Want Better Attacks. They Want Repeatable Ones
The most common way into a company last year was to ask. A web page tells the visitor to prove...
Attackers Steal METR API Key and Consume AI Credits Worth About $600,000
Ravie LakshmananSep 01, 2026Cyber Attack / Artificial Intelligence METR (short for Model Evaluation and Threat Research and pronounced "Meter"), a...
Russia-Aligned UAC-0099 Plants Nuclear Weapon Prompt in Malware to Disrupt AI Analysis
Ravie LakshmananSep 01, 2026Malware / Artificial Intelligence Cybersecurity researchers have disclosed a new technique dubbed GuardBreaker that's been put to...
Attackers Exploit Critical Langflow and Rails Flaws in Credential-Probing and C2 Activity
Ravie LakshmananSep 01, 2026Vulnerability / Artificial Intelligence Threat actors are exploiting two critical flaws impacting Langflow and Ruby on Rails,...
This month in security with Tony Anscombe – August 2026 edition
Details about the Hugging Face hack, critical infrastructure under attack, a spoofed in-flight Wi-Fi network, and more of this month's...
ADHA sticks with Accenture for My Health Record support
The Australian Digital Health Agency will stick with Accenture for infrastructure services underpinning My Health Record, signing a new $162m...
