Security Bulletin

New Omdia research shows that most infrastructure leaders have some regrets about their initial AI infrastructure decisions. I’m breaking down the lessons learned and how to build a hybrid strategy.

A ransomware affiliate appears to be sidling up to victims with offers of aid, masking its true intention of diverting ransom payments.

The Python-based malware framework takes living-off-the-land tactics to a new heights of stealth, with a modular implant that steals credentials and achieves persistence.

Consulting Engineer Apprentice Charu P. conquered her fears to emcee a big event and found a supportive community that helped her shine.

The flaw allowed the agent to extract a Jira token by opening a crafted issue.

GLM-5.3 reportedly outperforms models like Fable 5 and GPT-5.6 Sol on the CyberGym benchmark, showing an advanced ability to identify vulnerabilities and even construct exploitation chains.

The breach, which occurred between March 2, 2025, and April 11, 2026, exposed customer names, email addresses, shipping addresses, and phone numbers.

The PATCHCORD backdoor employs a stealthy persistence mechanism by hijacking browser shortcuts for Edge, Chrome, and Firefox, ensuring the malware runs before the intended application launches.

Anthropic has raised the risk level for its Threat Model 2 from "very low" to "low," citing recent cybersecurity incidents involving its models.

The attacks, which began Tuesday evening and continued into Wednesday, targeted both Threema and its Swiss colocation partner, Nine.

Researchers found that by combining two vulnerabilities, they could take over an Android device by delivering a payload and getting the victim to answer their phone.