Information security, breaches, and defence.
Cybersecurity researchers have discovered a previously undocumented malware called GoSerpent that has been put to use in cyber attacks targeting entities in Southeast Asia since late 2025 with a focus on long-term access and intelligence gathering.
Why it matters
The discovery of GoSerpent highlights the ongoing threat of cyber espionage and the need for increased security measures to protect sensitive information.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued a directive for federal agencies to address two critical Fortinet FortiSandbox flaws (CVE-2026-39808 and CVE-2026-25089) by Sunday. These vulnerabilities, which allow unauthenticated remote code execution, are actively being exploited in the wild, as confirmed by CISA and threat intelligence firm Defused.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent directive for federal agencies to address a critical, actively exploited remote code execution (RCE) vulnerability in Microsoft SharePoint Server. This zero-day flaw, CVE-2026-58644, allows unauthorized attackers to execute arbitrary code with low complexity, posing a significant threat to on-premise…
ClickLock is a new macOS malware that tricks users into revealing their login password by terminating all visible processes and displaying a fake password dialog. The malware can steal sensitive information, including login credentials, password-manager data, and browser information.
Two hackers, Owen Flowers and Thalha Jubair, were sentenced to 5.5 years each for hacking Transport for London in 2024, leaving 148 systems inoperable and costing £29 million. They were part of the Scattered Spider extortion crew. The NCA says its action against the two men effectively halted the group, and cites Microsoft's assessment that the arrests materially degraded the group's …
Updated as new stories ingest
Microsoft announced that Windows Server 2022 will reach the mainstream end date in October 2026, but will switch to extended support and continue receiving security updates for five more years.
Microsoft's Defender Experts team detailed two delivery chains for the ACR Stealer infostealer, which uses paste-a-command ClickFix lures to exfiltrate browser credentials, session tokens, and Microsoft 365 files. Neither chain exploits a vulnerability, relying entirely o…
The Brief
Editorially curated. No noise. Unsubscribe in one click.