News that matters, without the noise.

HollowFrame Loader Deploys Matryoshka Backdoor in Spear-Phishing Attack on Law Firm

Cybersecurity researchers have shed light on a previously undocumented Go-based loader framework called HollowFrame and a Rust-based malware

RHSA-2026:48815: Moderate: libsolv security update

An update for libsolv is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support

DSA-6405-1 linux – security update

https://security-tracker.debian.org/tracker/DSA-6405-1

Keycloak Vulnerability Exposes User Names and Email Addresses Across Admin Boundaries

Keycloak has addressed a broken access control vulnerability that could allow restricted administrators to access usernames, email addresses,

CISA warns of cyberattacks disrupting U.S. water utilities

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning of a significant increase in attacks targeting internet-exposed

Passkeys Stop Phishing Attacks🎣

Your Inexperience Is Why They’ll Hire You (GRC Audit)

RHSA-2026:48760: Important: python-pillow security update

An update for python-pillow is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support

RHSA-2026:48864: Important: abrt security update

An update for abrt is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions

CyberStrike – AI-Powered Security Platform for Automated Penetration Testing

A new open-source project called CyberStrike is positioning itself as the first AI agent built specifically for offensive

In Other News: OpenAI Open Source Tool, AWS Links Hacks to North Korea, Mythos Crypto Research

Noteworthy stories that might have slipped under the radar: parcel delivery company OnTrac hacked, Adobe patches, UK Department

Cyberattacks on Minnesota Water Systems Investigated as Officials Warn About Iranian Hackers

Iran has the “geopolitical motivations” and a recent history of targeting water systems, experts pointed out. The post