EU Grocers Pay a Steep Price for Unpatched Fridge Firmware

Hundreds of stores lost millions of dollars because they hired third parties to manage the outdated OT firmware running their cooling systems.

Yam Store: The Phishing Network Behind a Billion Messages

A sprawling cybercrime marketplace supplied cloud infrastructure and phishing kits that helped fuel more than 1 billion phishing messages worldwide.

Anthropic 'SneakPeek' Flaw Is a Silent Zero-Click Threat

A bug in Claude Code Desktop's preview pane can allow adversaries to quietly steal credentials from developers, including SSH private keys, AWS credentials, and Claude 0Auth tokens.

Ransomware Gangs Embrace Physical Threats, Family Stalking?

Organizations are reporting that employees face threats to their families, stalking, physical violence, and abduction. But these alarming claims are hard to verify.

Zero-Days Lurk in Microsoft's Overgrown October Patch Tuesday

The scary surprises for the largest security update ever include security bypasses and unauthenticated RCEs.

Anthropic Finds Ingredients for Future AI Worms

Anthropic's latest study combined IoT and network tests to explore AI self-replication, which researchers said would be "challenging" to shut down.

Maximum-Severity SSRF Flaw in SonicWall SMA Devices Under Attack

Attackers are currently targeting a critical vulnerability in SMA 1000 appliances, putting SonicWall customers in a familiar yet unenviable position.