Security Bulletin

The threat actors engineered a Golang-based sniffer to target 430,000 FortiGate firewalls and identify 110 million credentials in the ongoing global campaign.

Once you ingest major telemetry sources, how can we add value for our Threat Hunters? Check out how we brought in potentially malicious sandbox submissions to the analysts’ queue for triage.

An attacker can use a crafted file to trigger a heap buffer overflow and overwrite a function pointer.

Here’s why the next social engineering wave won’t hit inboxes – it will just simply call employees on the phone.

The vulnerability

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

The incident occurred early Saturday, June 20, when the Defesa Civil Nacional's dispatch platform was compromised.

A survey of over 7,800 individuals across eight countries revealed that between 40% and 50% of respondents still rely on browser-based password storage for convenience.

The phishing test email, sent during a period of intense work for healthcare professionals implementing the new CorCare software system, contained a button to claim an extra paid vacation day.

Researchers from Flare analyzed 470 underground forum posts between January 2025 and June 2026, revealing a service layer that bridges infostealer infections and account takeover activities.

The updated policy states that in certain circumstances, users may be asked to provide a scan of a government-issued passport or driver's license, along with a selfie and a facial geometry template.