The FBI’s CJIS Security Policy has undergone significant changes with the release of version 6.1, building on the modernized policy introduced in version 6.0 last year. The latest update refines the security standards for handling and protecting Criminal Justice Information (CJI) by addressing omissions, corrections, and additions highlighted throughout 2025. For organizations responsible for CJI, … Read more
A Critical Issue with Microsoft Office’s Copy and Paste Functionality Has Been Fixed, But What Does This Mean for Users? In a recent update, Microsoft addressed a critical issue affecting millions of Office users worldwide. The problem, which was caused by this month’s security updates, resulted in copy-and-paste failures, autofill issues, and formula dragging problems … Read more
A sophisticated PowerShell backdoor has been discovered, allowing attackers to remotely steal sensitive information from compromised Windows systems. Dubbed “TASK#STOMP,” this malware is being used in targeted attacks against individuals and organizations worldwide. The malware uses a combination of legitimate tools and social engineering tactics to gain access to victims’ machines. First, an attacker sends … Read more
A Critical Week in Cybersecurity: Cisco Zero-Day, AI Agent Vulnerability, and More This week has been marked by a series of significant security incidents that have left many organizations scrambling to patch vulnerabilities and protect themselves against emerging threats. At the heart of these issues lies a fundamental problem: identity exposure. When an attacker gains … Read more
Colorado’s Water Utilities Fall Victim to Sophisticated Cyberattacks A pair of private water utilities in Colorado recently found themselves under attack from sophisticated hackers targeting their operational technology (OT) systems. The attackers, described as “foreign actors” by a spokesperson for Governor Jared Polis, attempted to disrupt the utilities’ industrial control systems (ICS). While the disruptions … Read more
CrowdSec Confirms Source Code Stolen in Supply Chain Attack, Impact Limited to Its Own Organization In a shocking revelation, French cybersecurity firm CrowdSec has confirmed that its source code was stolen from its GitHub repositories in May 2026. The company, which provides open-source threat intelligence and a lightweight security engine to detect and block attacks, … Read more
Rust Developers Targeted in Ongoing Social Engineering Campaign A sophisticated social engineering campaign is currently targeting members of the Rust project and owners of popular crates, with attackers attempting to hijack developer credentials and deploy malicious packages. The campaign, which has been ongoing for some time, involves attackers using video calls to trick targets into … Read more
A string of problems plaguing Microsoft’s September 2026 security updates has struck again, this time affecting the built-in File History backup feature in Windows. The feature, designed to automatically save copies of files to an external hard drive or network storage location, may stop working on some systems after installing the latest patches. File History … Read more
Cybersecurity experts have sounded the alarm over a sophisticated attack vector that leverages Polygon, a popular blockchain network, to deploy the ChainScript Remote Access Trojan (RAT). The method, dubbed “ClickFix,” has already been used in real-world attacks, highlighting the growing threat of domain name system (DNS) tunneling and cross-domain privilege escalation. The ClickFix campaign involves … Read more
A Malware Campaign Uses PNG Steganography to Hide Payloads in Images A recent malware campaign has caught the attention of cybersecurity experts due to its innovative use of steganography, a technique that conceals data within seemingly innocuous files. The threat actors behind this campaign have been using PNG images to hide malicious payloads, making it … Read more