News that matters, without the noise.

OpenAI Hit by TanStack Supply Chain Attack

Two employee devices were compromised in the attack, and credential material was stolen from OpenAI code repositories. The

Cyber Pioneers Ponder Past as Prologue

Robert “RSnake” Hansen, Katie Moussouris, Rich Mogull, Richard Stiennon, and Bruce Schneier reflect on how their favorite columns

Microsoft Details Kazuar Malware’s Modular Architecture and P2P Botnet Operations

A nation-state malware known as Kazuar has resurfaced with a far more dangerous design than anyone expected. What

TeamPCP Ups the Game, Releases Shai-Hulud Worm’s Source Code

The hacking group is encouraging miscreants to use the code in supply chain attacks, promising monetary rewards. The

Microsoft warns of Exchange zero-day flaw exploited in attacks

On Thursday, Microsoft shared mitigations for a high-severity Exchange Server vulnerability exploited in attacks that allow threat actors

China-Linked Hackers Deploy New TencShell Malware Against Global Manufacturer

A suspected China-linked threat actor targeted the Indian branch of a global manufacturer leveraging an open source offensive

Hackers Abuse Scheduled Tasks to Maintain Persistence in FrostyNeighbor Attacks

A state-aligned hacking group known as FrostyNeighbor has resurfaced with a fresh wave of cyberattacks targeting government organizations

79 Chrome Vulnerabilities Patched, Including 14 Critical One’s – Update Now!

Google has rolled out a massive security update for its Chrome browser, sealing a staggering 79 vulnerabilities before

Critical Next.js Vulnerability Exposes Cloud Credentials, API keys, and Admin Panels

A high-severity vulnerability in Next.js threatens self-hosted web applications with severe data breaches. Threat actors can now exploit

[Guest Diary] New Malware Libraries means New Signatures, (Fri, May 15th)

ISC Stormcast For Friday, May 15th, 2026 https://isc.sans.edu/podcastdetail/9934, (Fri, May 15th)

Taiwan Incident Highlights Cybersecurity Gaps in Rail Systems

A Taiwanese student experimenting with software-defined radio technology shut down three bullet trains for nearly an hour, leading