Most ransomware playbooks don't address machine credentials. Attackers know it.

The gap between ransomware threats and the defenses meant to stop them is getting worse, not better. Ivanti’s 2026 State of Cybersecurity Report found that the preparedness gap widened by an average [...]

GitHub confirms 3,800 internal repos stolen through poisoned VS Code extension as supply chain worm hits Microsoft’s Python SDK

GitHub confirmed on May 20 that a poisoned VS Code extension installed on an employee’s device gave attackers access to roughly 3,800 internal repositories at the Microsoft-owned code storage and au [...]

New UK law would ban ransomware payments by publicly funded orgs

The British government has announced plans to move forward with a law that would bar public organizations from paying off ransomware attackers. The proposed legislation would add schools, town council [...]

NASCAR's driver streams finally bring multiview to Max

Max is set to expand its viewing options, starting with the first race of this year's NASCAR Cup Series this Sunday. For the first time, the streaming service will offer a multiview option with t [...]

New ransomware targets AI model weights and can't even collect the ransom

The same attacker broke into the same internet-facing Langflow server twice, and the second time brought ransomware built to destroy trained AI models. Sysdig's Threat Research Team documented th [...]

Vercel breach exposes the OAuth gap most security teams cannot detect, scope or contain

One employee at Vercel adopted an AI tool. One employee at that AI vendor got hit with an infostealer. That combination created a walk-in path to Vercel’s production environments through an OAuth gr [...]

How to guard against a vicious Medusa ransomware attack - before it's too late

By following these seven tips from federal authorities, you can prevent Medusa from wreaking havoc on your life and business. [...]

US government warns Medusa ransomware has hit hundreds of critical infrastructure targets

Medusa ransomware has been around since 2021, targeting more than 300 critical infrastructure firms, CISA warns. [...]

Your IT stack is the enemy: How 84% of attacks evade detection by turning trusted tools against you

It’s 3:37 am on a Sunday in Los Angeles, and one of the leading financial services firms on the West Coast is experiencing the second week of a living-off-the-land (LOTL) attack. A nation-state cybe [...]