60
CISA, Microsoft warn of active exploitation of Windows Shell vulnerability (CVE-2026-32202)
60
60
Threat Source newsletter (March 23, 2023) — Meta is threatening to ban news sharing in Canada. Good.
60
60
PoC exploit for Ivanti Endpoint Manager vulnerabilities released (CVE-2024-13159)
60
60
Alert: New Vulnerabilities Discovered in QNAP and Kyocera Device Manager
60
60
60
60
60
60
60
Microsoft patches actively exploited zero-day (CVE-2021-36948), more Print Spooler flaws
60
Researcher Uncovers Critical Flaws in Multiple Versions of Ivanti Endpoint Manager
60
60
60
ThreatsDay: CEO Phishing Kits, 5K Dropbox Account Hacks, OAuth Traps + 17 More Stories
Microsoft warns of Teams IT-impersonation intrusions deploying Node.js implants; Spring Ring vishing hit 150+ employees across 10 companies; The Gentlemen ransomware claims 683 victims.
Microsoft warned of a human-operated campaign abusing Teams external collaboration to impersonate IT help desk staff, deploy malicious MSI packages staging Node.js runtimes and obfuscated JavaScript implants, then pivot to domain controllers over WinRM. Unit 42 documented the Spring Ring vishing operation targeting over 150 employees across at least 10 companies using 26 attacker identities, including an NTLM relay variant against domain controllers. Sophos reported The Gentlemen ransomware (Gold Sherwood) reached 683 total victims by end of July 2026, adding 169 in July, with a playbook using BYOVD-based EDR killers and backup tampering. Group-IB found the Outsider phishing-as-a-service platform created 700+ new phishing pages within a month despite law enforcement takedowns.
72
Microsoft Patch Tuesday, May 2022 Edition
60
Ransomware incidents in Japan in the first half of 2026: Investigation of The Gentlemen’s infrastructure and evidence of Qilin's AI usenew
Cisco Talos reports 90 ransomware incidents hit Japanese organizations in H1 2026, led by The Gentlemen, with Qilin using AI for efficiency.
Cisco Talos observed 90 ransomware incidents against Japanese organizations from January to July 2026, up about 4.7% year over year, with manufacturing accounting for 34% of victims. The Gentlemen was the most active group with 14 incidents; its leak-site listings grew from 48 in January to 105 in July. Qilin and SafePay followed with seven incidents each, and Talos notes Qilin is leveraging AI to improve operational efficiency.
62
Microsoft Fixes Three Zero
60
60
60
60
60
60
60
60
Microsoft Releases Windows Updates to Patch Actively Exploited Vulnerability
60
December 2023 Patch Tuesday: 33 fixes to wind the year down
60
Microsoft, Adobe, SAP deliver critical fixes for September 2025 Patch Tuesday
60
60
NTLM Hash Exploit Targets Poland and Romania Days After Patch
60
60
60
60
60
Five New Exploited Bugs Land in CISA's Catalog — Oracle and Microsoft Among Targets
60
60