A tale of two eras
Welcome to this week’s edition of the Threat Source newsletter. To the surprise of absolutely no one who has seen […]
Computer Security
A phishing attack that doesn’t steal your password
A phishing kit subverting Microsoft’s legitimate authentication flow lets attackers break into accounts without stealing passwords or creating fake login
Maine forced to take down data breach portal after fake notices filed with authorities
The US state of Maine has taken its public data breach notification portal offline after someone submitted fraudulent breach disclosures
Week in review: Accenture data breach, great open-source cybersecurity tools
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Securing the inbox: Where identity,
Found fast, fixed slow: The gap the AI clearinghouse must close
The AI-focused executive order President Donald Trump signed last month gave the Treasury Department, the National Security Agency, and the
Local agentic reverse engineering through vbdec’s live COM object model
Analysis tools do not need AI built in to support agentic workflows; they simply need to expose their data through
Threat landscape for SMBs in 2026: fake AI tools, phishing and more
Small and medium-sized businesses (SMBs) remain attractive targets for cybercriminals – in both mass cyberattacks and sophisticated campaigns targeting larger
FishMonger’s arsenal upgraded: SprySOCKS for Windows
ESET researchers have discovered two as-yet undocumented Windows variants of SprySOCKS, a previously Linux-only backdoor reportedly used by FishMonger, the
AI gets hacked, and BitLocker gets bypassed • Graham Cluley
PAUL DUCKLIN How does that poem go? Great fleas have lesser fleas upon their backs to bite them, and lesser
The open source library holding up your stack might have one maintainer
Every serious software product runs on code that someone else wrote and released for free. A web service leans on