Fortinet patches actively exploited FortiOS SSO auth bypass (CVE-2026-24858)
Fortinet patches actively exploited FortiOS SSO auth bypass (CVE-2026-24858) Pierluigi Paganini January 28, 2026 Fortinet released fixes for a critical...
Blog
31 More Charged in Massive ATM Jackpotting Scheme Linked to Tren de Aragua Gang
An already expansive investigation into a widespread scheme to steal money from ATMs around the United States grew even larger...
How two companies are moving AI prototypes to production
He offered a number of examples involving AI in production. The company, for example, built a migration buddy agent to help...
Fake Moltbot AI Coding Assistant on VS Code Marketplace Drops Malware
Cybersecurity researchers have flagged a new malicious Microsoft Visual Studio Code (VS Code) extension for Moltbot (formerly Clawdbot) on the...
Russian ELECTRUM Tied to December 2025 Cyber Attack on Polish Power Grid
Ravie LakshmananJan 28, 2026Critical Infrastructure / Threat Intelligence The "coordinated" cyber attack targeting multiple sites across the Polish power grid...
Two High-Severity n8n Flaws Allow Authenticated Remote Code Execution
Ravie LakshmananJan 28, 2026Vulnerability / Workflow Automation Cybersecurity researchers have disclosed two new security flaws in the n8n workflow automation...
From Triage to Threat Hunts: How AI Accelerates SecOps
If you work in security operations, the concept of the AI SOC agent is likely familiar. Early narratives promised total...
Critical vm2 Node.js Flaw Allows Sandbox Escape and Arbitrary Code Execution
Ravie LakshmananJan 28, 2026Vulnerability / Open Source A critical sandbox escape vulnerability has been disclosed in the popular vm2 Node.js...
Build Practical Cyber Defense Skills with This 5-Course Bundle
TL;DR: This $19.99 cybersecurity bundle includes five courses and lifetime access to in-demand tools, techniques, and real-world training. For IT...
Eeny, meeny, miny, moe? How ransomware operators choose victims
Counter Threat Unit™ (CTU) researchers are frequently asked about ransomware groups posing a threat to organizations in specific verticals or...
Stop Staring at JSON: How GenAI is Solving the API “Context Crisis”
There is a moment that happens in every SOC (Security Operations Center) every day. An alert fires. An analyst looks...
PackageGate bugs let attackers bypass protections in NPM, PNPM, VLT, and Bun
PackageGate bugs let attackers bypass protections in NPM, PNPM, VLT, and Bun Pierluigi Paganini January 28, 2026 Koi researchers found...
Trust At Scale: The Commons, Threats, and AI in the Loop | Sonatype
Dependency management used to be a private embarrassment: an Ant script, a /lib folder, and classpath roulette. You could ship...
Why “Platform Consolidation” Often Increases Risk Instead of Reducing It
One vendor. Many engines. The same security problems. In boardrooms across the globe, a compelling narrative dominates enterprise security strategy:...
11 cool things Copilot can do in Excel
For best results with Copilot in Excel, put your data in table format. Click the Copilotbutton in the toolbar to...