2+ day, 19+ hour ago   (707+ words) Hackers are using passkey-themed phishing to take control of Microsoft 365 accounts and collect cloud data. It can defeat MFA protections. The campaign starts with calls and texts to employees. Attackers pose as IT support, claim a passkey, MFA, or single…...

2+ day, 23+ hour ago   (1179+ words) Bottom line up front: no single product “stops ransomware.” Modern attacks are staged intrusions initial access, credential theft, lateral movement, exfiltration, then encryption and each stage has different controls. The list below is therefore organized by role in the kill…...

3+ day, 23+ hour ago   (425+ words) A newly published ShieldCrash proof of concept from researcher MSNightmare claims that Microsoft Defender remains vulnerable to an arbitrary file-read flaw, despite Microsoft’s earlier fix for ShieldBreak, tracked as CVE-2026-69414. The researcher says the issue could let a local attacker…...

4+ day, 54+ min ago   (1220+ words) Allowlisting inverts the security model: instead of detecting bad software, only approved software runs. Done well, it stops ransomware protection threats and unknown malware regardless of signatures. Done badly, it breaks the business in week one. ThreatLocker scores highest for…...

4+ day, 58+ min ago   (1517+ words) Patching remains the single highest-value security control most organizations execute badly. Automox leads on cloud-native simplicity, Tanium on speed at enormous scale, and Action1 offers something rare in enterprise software a genuinely free tier for smaller estates. Adopting modern patch management…...

3+ day, 22+ hour ago   (355+ words) Microsoft has disclosed a new security flaw in Windows BitLocker, the operating system’s built-in disk encryption feature, that could let an attacker execute malicious code on a vulnerable device. Tracked as CVE-2026-69449 and published on September 8, 2026, the vulnerability stems from…...

4+ day, 14+ hour ago   (433+ words) Microsoft released its September 2026 Patch Tuesday security updates on September 8, addressing 973 vulnerabilities, including two zero-days already exploited in attacks. Microsoft’s release notes attribute 723 addressed vulnerabilities to Windows, 111 to Office, 62 to SQL, 22 to developer tools, 16 to SharePoint Server, and nine to…...

4+ day, 20+ hour ago   (628+ words) A new intrusion campaign shows how quickly a Windows domain can be turned into a launchpad for deeper compromise. The operators used a Sliver command-and-control beacon, account creation, credential theft and remote administration to establish control after gaining an initial…...

5+ day, 18+ hour ago   (412+ words) ConnectWise has warned customers about a newly identified security issue affecting file transfer behavior in ScreenConnect Remote Access Support and Access sessions. The issue impacts both cloud-hosted and on-premises ScreenConnect deployments, and the company has released interim mitigation guidance while…...

5+ day, 19+ hour ago   (642+ words) A new Windows attack shows how a trusted program can become a path to sensitive system functions. The method, called Bring Your Own Trusted Caller, or BYOTC, turns a legitimate user-mode application into the tool that asks a privileged driver…...