Security Bulletin

Following insights from Bleeping Computer, threat actors are leveraging email addresses exposed in data breaches, previously leaked by the ShinyHunters extortion group, to perpetrate a new sextortion email campaign demanding $2,000 in Bitcoin.

An FBI agent explains how the mulitnational law-enforcement Operation Cronos was successful in disrupting the largest ransomware group of its time.

The Click To Pray app, endorsed by the Pope and used by hundreds of thousands worldwide, was leaking user names and email addresses for months.

Bleeping Computer reports that the parcel delivery company OnTrac has experienced a data breach, potentially exposing customer personal details following a cyberattack on its corporate network.

As attackers shift from password theft to session and token theft to bypass multifactor authentication controls, organizations must move beyond login security and protect authenticated sessions.

Confidence in autonomous security tools is declining, and here's why.

Block rate is not a proxy for detection coverage against these threats

AI search visibility demands smarter bot security, not open access.

Despite the CMMC pause, leaders still have to stand behind what they sign.

Guardrails cannot serve as the primary security boundary for AI agents. Identity controls impose firmer limits.

ASM operates as a six-stage governance chain: discover, classify, assign, route, reduce, and monitor