Security Bulletin

Researchers at Group-IB have identified that Gigabud is now being paired with Vwork, a modified version of the Shelter app, attributed to the GoldFactory threat group.

The unpatched Plex Media Server instances are running versions 1.43.2 and earlier.

Democratic senators Ron Wyden and Sheldon Whitehouse, along with Republican congressman Pat Harrigan, sent a letter to U.S. Secretary of Commerce Howard Lutnick urging the addition of three Indian companies—BellTroX, CyberRoot, and Sunkissed Organic...

The CMMC program, particularly its Phase 2 requirements, faced criticism for being overly burdensome and costly for small and medium-sized businesses.

The new capabilities address the challenge of AI agents inheriting access through existing vulnerabilities like hard-coded credentials and dormant accounts, allowing them to escalate privileges rapidly.

The Radware H1 2026 Global Threat Analysis Report indicates a significant shift in attack methods, with direct-path volumetric floods, particularly stateless UDP floods, now comprising 73% of mitigated packets.

Researchers at Aikido Security discovered four packages containing the Shai-Hulud worm, which had the same malicious payload hash as the original attack from May.

The system measures spending agent by agent across cloud, code, and endpoints, offering a more comprehensive view than gateway-centric tools.

The BlueMoon exploit kit targeted U.S. defense contractors, NGOs, and Southeast Asian government agencies.

The WeWorm tool exploits a zero-click remote code execution vulnerability in WeChat's voice-over-IP stack.

An analysis of Project Glasswing findings shows only a fraction have reached disclosure, and an even smaller number have been fixed.

In one of India's least industrialized regions, we're helping rural women access the digital tools they need to build real enterprises — and the ripple effects are opening pathways to economic mobility for entire communities.