Inside an IoT Botnet Framework With LLM-Assisted Development
Executive Summary We identified a previously undocumented modular internet-of-things (IoT) botnet framework named TuxBot v3 Evolution. The malware authors leveraged […]
Data Security
July 2026 Patch Tuesday: Updates and Analysis
Exploited Zero-Day Vulnerability in Active Directory Federation Services CVE-2026-56155 is an Important elevation of privilege vulnerability affecting Active Directory
The Vulnerability Flood Is Now a Board Conversation. Here’s How to Lead It.
I’ve had some version of the same conversation dozens of times since Mythos and Daybreak emerged. CISOs want to know
Russian Cybercrime Indictment Targets Bulletproof Hosting
Three Russian nationals have been charged in a sweeping Russian cybercrime indictment tied to an alleged bulletproof hosting operation that
Finland issues wanted notice for hacker behind massive psychotherapy data breach
Finnish police have reportedly issued a wanted notice for convicted hacker Aleksanteri Kivimäki after the country’s Supreme Court refused to
Iran Expands Handala Brand to Physical Threats
Executive Summary Iran’s Ministry of Intelligence (MOIS) has likely broadened the use of its “Handala” brand to encompass MOIS’s external
Ransomware Sanctions Target VPN, Malware Providers
The U.S. Treasury Department has announced new ransomware sanctions against a virtual private network (VPN) provider, its administrator, and a
US unseals indictment against alleged operators of Russian bulletproof hosting service
Federal prosecutors on Tuesday unsealed an indictment against three Russians associated with a bulletproof hosting provider sanctioned by the U.S.
The FBI Warned About Fake Permit Fees. The Harder Question Is Where the Money Goes.
A fast-growing scam impersonates city and county planning departments, sending property owners real-looking invoices for fake permit fees and pressuring
Nihon Kotsu Cyberattack Disrupts Japan Taxi Service
The Nihon Kotsu cyberattack has disrupted operations at Japan’s largest taxi operator after the company confirmed that its internal systems