China-Linked Storm-1175 Exploits Zero-Days to Rapidly Deploy Medusa Ransomware
Ravie LakshmananApr 07, 2026Vulnerability / Threat Intelligence A China-based threat actor known for deploying Medusa ransomware has been linked to the...
AndyC
Andy Curtis is an award-winning security consultant, researcher and public speaker. He has been working in the computer security industry since the early 1990s, having been employed by state and federal government, leading healthcare and banking providers across three continents. He has given talks about computer security for some of the world’s largest companies, worked with law enforcement agencies on investigations into hacking groups, and is a regular voice on TV and radio explaining IT security threats.
Flowise AI Agent Builder Under Active CVSS 10.0 RCE Exploitation; 12,000+ Instances Exposed
Threat actors are exploiting a maximum-severity security flaw in Flowise, an open-source artificial intelligence (AI) platform, according to new findings...
Weekly Update 498
07 April 2026 This week, more time than I'd have liked to spend went on talking about the trials of...
Quantum-Safe Key Encapsulation Mechanisms for Sensitive Context Transport
The quantum threat to ai context transport Imagine someone could record every single secret message your ai sends today...
How a Single Source of Truth Streamlines Regulatory Compliance
Key takeaways Many regulatory requirements depend on maintained records, documented procedures, ownership, review history, and supporting proof. A stronger...
Why AI Bot Protection and Control Are Essential for Application Security
AI-driven automation is no longer emerging. It is already integrated and accepted as internet traffic. From AI assistants and...
Schema Confidence Gap: AI Data Quality Risks Explained
You shipped AI to production on a foundation you don’t trust. That’s not accidental. It’s structural. Our recently published...
How does Agentic AI contribute to tech stability
Could Agentic AI Be the Key to Enhanced Technological Stability? Where machine identities and cybersecurity are paramount, the concept...
How can Agentic AI keep you ahead of cyber threats
How Are Non-Human Identities (NHIs) Vital for Cybersecurity? Have you ever thought about the silent guardians of your organization’s...
Phishing LNK files and GitHub C2 power new DPRK cyber attacks
Phishing LNK files and GitHub C2 power new DPRK cyber attacks Pierluigi Paganini April 06, 2026 DPRK-linked hackers use GitHub...
BKA unmasks two REvil Ransomware operators behind 130+ German attacks
BKA unmasks two REvil Ransomware operators behind 130+ German attacks Pierluigi Paganini April 06, 2026 German police BKA identified two...
[un]prompted 2026 – Agents Exploiting “Auth-By-One” Errors
Author, Creator & Presenter: Brendan Dolan-Gavitt, AI Researcher, XBOW & Vincent Olesen, AI Researcher, XBOW Our thanks to prompted...
Protecting Your Data with Veeam
The days of using backup as a simple “set it and forget it” insurance policy are officially over. If...
Iran-Linked Password-Spraying Campaign Targets 300+ Israeli Microsoft 365 Organizations
An Iran-nexus threat actor is suspected to be behind a password-spraying campaign targeting Microsoft 365 environments in Israel and the U.A.E....
DPRK-Linked Hackers Use GitHub as C2 in Multi-Stage Attacks Targeting South Korea
Ravie LakshmananApr 06, 2026Malware / Threat Intelligence Threat actors likely associated with the Democratic People's Republic of Korea (DPRK) have been...
