Curated cybersecurity news and emerging threats relevant to startups, SMBs, and growing teams.
Industry news, vulnerability disclosures, compliance updates, and threat intelligence—handpicked for relevance to your environment.
Each item includes our perspective on why it matters to your security posture.
Microsoft's record-breaking Patch Tuesday closes two zero-days already under attack, a 15-year-old Linux kernel bug hands out root, SonicWall SMA appliances get chained in the wild, and Japan's largest taxi operator goes dark.
Read source →A joint advisory on Russian FSB router hacking, a compromised npm package dropping a Rust infostealer, Progress Software's emergency ShareFile shutdown, and CISA confirming ransomware gangs are exploiting a Microsoft Defender flaw.
Read source →This week's cybersecurity roundup: Russian hackers hijacking doorbell cameras to track NATO weapons shipments, a Linux kernel root flaw hitting Android, a new Entra passkey vishing campaign, and prompt injection hidden in images to fool AI code reviewers.
Read source →This week's cybersecurity roundup: a DHS platform breach, a Dutch telecom hack traced to an insider, six new U-Boot bootloader flaws, a critical Zimbra XSS bug, and two fresh CISA KEV additions.
Read source →A roundup of the week's key cybersecurity news: actively exploited CVEs, a major insurance data breach, an npm supply chain attack, and a new SharePoint extortion group.
Read source →An INTERPOL-coordinated operation across 97 countries closed over 23,000 fraud cases, froze 31,014 bank accounts, and identified 142,000+ victims of social engineering scams.
CVE-2026-50656, a race condition in the Microsoft Malware Protection Engine, let local attackers spawn a SYSTEM-level shell on fully patched Windows hosts. Microsoft has shipped a fix.
A ransomware family tied to the Hyadina group (rebranded from Beast) uses a Microsoft-signed malicious kernel driver, AnyDesk, and PsExec to disable security tooling before encrypting data.
Ubiquiti shipped fixes for seven critical UniFi OS vulnerabilities, including CVE-2026-50746, an unauthenticated CVSS 10.0 command injection bug reachable by any device on the same network segment.
Sysdig researchers found JadePuffer, a ransomware operation where an autonomous LLM agent handled recon, credential theft, lateral movement, and encryption without a human operator.