The ransomware ecosystem continues to fragment, with 31 new “name-and-shame” groups emerging in a year’s time.

A new attack is targeting networks with air-gapped machines

Security pros say teams should install the macOS 15.0.1 patch and first run it in a production environment with their security tools to ensure compatibility.

The largest regulated water utility company in the U.S. said ‘unauthorized activity’ was detected last week.

Security pros say teams running Okta Classics should take immediate action, checking their logs for exploitation.

Phishing attacks are become more prevalent as threat actors are arming themselves with potent new tools.

The “BabyLockerKZ” variant has been in use by an unnamed threat actor since late 2023.

Security pros says while Star Blizzard will most likely regroup, it does degrade their operations and gives defenders some time to deploy AI-powered tools.

Attackers leverage exposed access keys to run chatbot services at the victim’s expense.

Ivanti is advising administrators to get up to date on their patches following a new spell of exploits against Endpoint Manager (EPM).