Password Spray Without Smart Lockout Blocking
A legacy Entra ID endpoint kept alive for Office 2013 clients lets attackers spray passwords past Smart Lockout, confirm valid […]
CopyEscape: Taking Over Docker Hosts with docker cp
Imperva Red Team uncovered CVE-2026-17106, a container-to-host arbitrary file-write vulnerability in Docker’s docker cp command. Docker later confirmed that the
Post-quantum migration gets harder when every user holds a key
In this Help Net Security interview, Christopher Smith, CEO of Quantus, discusses what cryptographic inventories turn up in banks and
NSA installs DHS lawyer as new general counsel
The National Security Agency recently appointed a new top lawyer, discreetly filling a role that has become a lightning rod
CIS Benchmarks August 2026 Update
The following CIS Benchmarks have been updated during the past month. We’ve highlighted the major updates below. Each Benchmark includes
Microsoft named a Leader in the 2026 IDC MarketScape for MDR/MXDR for the Enterprise
Security teams are being asked to defend a growing attack surface with fewer people and around the clock, against threat
Canadian Man Pleads Guilty in Snowflake Extortions – Krebs on Security
A 26-year-old Canadian man once described as one of the most consequential cybercrime threat actors of 2024 has pleaded guilty
Analyzing Aeternum’s Blockchain-Based C2 Operations and Communications
Executive Summary Aeternum is a recently discovered C++ botnet loader that shifts its command-and-control (C2) infrastructure entirely to the public
Dismiss Church’s Trademark Lawsuit Against “Mormon Stories” Podcast, EFF Urges Court
Imagine if McDonald’s could use trademark law to control how you use the term “fast food.” Or if the Canadian
Cybercrime Magazine’s Best Convos At Black Hat USA 2026
The premier Cybersecurity event of the year, Black Hat USA 2026 in Las Vegas, ended yesterday and the Cybercrime Magazine media team