News that matters, without the noise.

New Wave Of Phishing Emails with SVG Files, (Tue, Jun 2nd)

For a few days, my SANS ISC mailbox is flooded with emails that delivers SVG files. An SVG

Nimbus Manticore APT Abuses Fake Recruitment Portal to Deliver Custom Malware

A state-linked hacking group has been caught running a carefully crafted fake recruitment operation to push custom malware

Critical StrongDM Vulnerability Allows Attackers to Steal and Reuse Authentication

A critical authentication flaw in StrongDM’s desktop application has been identified that allows attackers to hijack user sessions

Oracle’s First Monthly Patches Resolve 77 Vulnerabilities

Oracle’s monthly Critical Security Patch Update (CSPU) rollouts are meant to deliver critical fixes faster. The post Oracle’s

MYDFIR DFIR Course: Overview (NEW DFIR COURSE)

POV: Avoiding your responsibilities

Gamaredon APT Hides Malware in Windows Features and Abuses Cloud Platforms for C2

Gamaredon, a Russian state-backed espionage group, is deploying a new VBScript worm that hides inside native Windows features

Dashlane Discloses Brute-Force Attack, Encrypted Vaults of Fewer Than 20 Users Downloaded

Password manager Dashlane has disclosed that “fewer than” 20 users on the personal subscription plan had their encrypted

RHSA-2026:22334: Important: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat

Hackers Use Meta’s AI Bot to Reset Passwords and Hijack Instagram Accounts

A critical logic flaw in Meta’s AI-powered Instagram support chatbot allowed attackers to bypass two-factor authentication entirely, not

RHSA-2026:22330: Important: fence-agents security update

An update for fence-agents is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions.

RHSA-2026:22329: Important: openssh security update

An update for openssh is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support