Security

Diagram showing a compromised third‑party backup service credential granting access to multiple Microsoft 365 tenants

Hackers Use Compromised ConnectWise Credential ...

Researchers have uncovered an active intrusion campaign that exploits a compromised credential from ConnectWise Cloud Backup to infiltrate 173 Microsoft 365 tenants. The breach demonstrates how a single stolen account...

Hackers Use Compromised ConnectWise Credential ...

Researchers have uncovered an active intrusion campaign that exploits a compromised credential from ConnectWise Cloud Backup to infiltrate 173 Microsoft 365 tenants. The breach demonstrates how a single stolen account...

Screenshot of the npm page for imgdecode showing its download count and publisher name

MALFEX npm Package 'imgdecode' Hides Shellcode ...

Researchers have uncovered a malicious npm package called imgdecode that embeds a Windows native shellcode loader, tying it to the MALFEX software‑supply‑chain campaign. The package was uploaded on September 30 2026 and...

MALFEX npm Package 'imgdecode' Hides Shellcode ...

Researchers have uncovered a malicious npm package called imgdecode that embeds a Windows native shellcode loader, tying it to the MALFEX software‑supply‑chain campaign. The package was uploaded on September 30 2026 and...

Diagram showing how a backdoor in encryption allows unauthorized decryption of messages

Encryption Is Getting Squeezed From All Sides

Canada’s planned surveillance law marks the newest point in a global cascade of measures that erode the strength of encryption, a cornerstone of digital privacy. For anyone who relies on...

Encryption Is Getting Squeezed From All Sides

Canada’s planned surveillance law marks the newest point in a global cascade of measures that erode the strength of encryption, a cornerstone of digital privacy. For anyone who relies on...

Screenshot of a phishing email masquerading as a Claude notification with a malicious link

Fake Claude, ChatGPT Attacks Surge, Putting Dev...

Impersonation campaigns targeting AI brands are on the rise, and they are now being weaponized against enterprise developers. The lure of familiar names like Claude or ChatGPT lowers suspicion, turning...

Fake Claude, ChatGPT Attacks Surge, Putting Dev...

Impersonation campaigns targeting AI brands are on the rise, and they are now being weaponized against enterprise developers. The lure of familiar names like Claude or ChatGPT lowers suspicion, turning...

Diagram showing a remote support tool connecting to an edge device with highlighted attack vector

BeyondTrust Remote Support Zero-Day Continues T...

Edge devices—routers, remote‑access appliances, and on‑premise gateways—have become the newest battleground for zero‑day exploits, and the latest addition is a remote‑support flaw in BeyondTrust. The pattern shows vendors repeatedly exposing...

BeyondTrust Remote Support Zero-Day Continues T...

Edge devices—routers, remote‑access appliances, and on‑premise gateways—have become the newest battleground for zero‑day exploits, and the latest addition is a remote‑support flaw in BeyondTrust. The pattern shows vendors repeatedly exposing...

Map of Chicago precincts highlighting areas where police shared data with ICE during protests

Chicago-Area Cops Helped HSI Spy on Minnesota A...

Chicago-area police have been documented assisting ICE investigative agents in monitoring anti‑ICE activists, even though Illinois law positions the state as a sanctuary. The cooperation blurs the line between local...

Chicago-Area Cops Helped HSI Spy on Minnesota A...

Chicago-area police have been documented assisting ICE investigative agents in monitoring anti‑ICE activists, even though Illinois law positions the state as a sanctuary. The cooperation blurs the line between local...