North Korea’s Lazarus Group targets healthcare orgs with Medusa ransomware Summary Security researchers from Symantec and Carbon Black report that North Korea’s state‑linked Lazarus Group has started using the Medusa…
Patch these 4 critical, make-me-root SolarWinds bugs ASAP Summary If you run SolarWinds Serv-U, patch immediately. Four critical vulnerabilities (all rated 9.1 CVSS) — CVE-2025-40538 (broken access control), CVE-2025-40540 and…
Iron Age mass grave reveals unprecedented violence against women and children Summary A ninth-century mass grave at Gomolava in what is now Serbia contains 77 individuals whose remains point to…
CISA gives federal agencies three days to patch actively exploited Dell bug Summary The Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2026-22769 to its Known Exploited Vulnerabilities (KEV) catalogue…
‘Universal vaccine’ protects mice against multiple pathogens Summary Researchers describe a nasally delivered ‘universal’ vaccine that protected mice for at least three months against multiple respiratory viruses and bacteria, including…
Best-in-Class ‘Starkiller’ Phishing Kit Bypasses MFA Summary Researchers at Abnormal AI have analysed a polished phishing-as-a-service (PhaaS) platform called Starkiller that live-proxies real login pages to harvest credentials and session…
FBI: More than 700 ATM jackpotting incidents with losses over $20 million occurred in 2025 Summary Criminals are increasingly using malware to make ATMs spit out cash without any legitimate…
Critical Grandstream VoIP Bug Highlights SMB Security Blind Spot Summary Punchy take: a single memory‑corruption bug just shoved voice infrastructure back up the risk list for every small and midsized…
Dell’s Hard-Coded Flaw: A Nation-State Goldmine Summary A China-related threat cluster (UNC6201) exploited a critical Dell RecoverPoint for Virtual Machines vulnerability (CVE-2026-22769, CVSS 10) since at least mid-2024. Mandiant /…
Fed agencies ordered to patch Dell bug by Saturday after exploitation warning Summary A Chinese state-backed group has been exploiting a zero-day, CVE-2026-22769, in Dell RecoverPoint for Virtual Machines. Dell…
