News that matters, without the noise.

WantToCry Ransomware Abuses SMB Services to Remotely Encrypt Files

A ransomware strain called WantToCry has been targeting businesses by abusing a widely used file-sharing protocol to encrypt

Supply Chain Security Crisis: Too Many Vulnerabilities, Too Little Visibility

New vulnerabilities are being discovered too fast, the time-to-exploitation is too short, and our visibility into them is

Microsoft warns of new Defender zero-days exploited in attacks

On Wednesday, Microsoft started rolling out security patches for two Defender vulnerabilities that have been exploited in zero-day

Would you pay for a robot haircut?

The EU Is Going Through a Trump-Fueled Breakup With Big Tech

France is already moving on from Zoom and Microsoft Teams in favor of homegrown alternatives. Other countries are

Two U.S. Executives Plead Guilty in India-Based Tech-Support Fraud Schemes

Two former executives of a U.S.-based call routing and analytics company have pleaded guilty to federal charges for

New GhostTree Attack Causing EDR Products to Hang and Leave Files Unscanned

A novel evasion technique called GhostTree, which exploits NTFS junctions to create recursive directory loops. Uncovered by Varonis

GitHub Internal Repositories Breached via Malicious Nx Console VS Code Extension

GitHub on Wednesday officially confirmed that the breach of its internal repositories was the result of a compromise

Highly Critical Drupal Core Flaw Exposes PostgreSQL Sites to RCE Attacks

Drupal has released security updates for a “highly critical” security vulnerability in Drupal Core that could be exploited

Claude Code’s Network Sandbox Vulnerability Exposes User Credentials and Source Code

Anthropic’s Claude Code AI coding assistant harbored a critical network sandbox bypass for over five months, allowing attackers

ISC Stormcast For Thursday, May 21st, 2026 https://isc.sans.edu/podcastdetail/9940, (Thu, May 21st)

Gremlin Stealer Stores C2 URLs and Exfiltration Paths in Encrypted Resource Sections

A newly analyzed variant of the Gremlin stealer malware has raised alarms by hiding its command-and-control (C2) addresses