Endpoint/Device Security

Researchers identified continued development of the botnet despite “Operation Endgame” disruption.

CVE-2026-1281 and CVE-2026-1340 have CVSS scores of 9.8 and have already been exploited.

The Cybersecurity and Infrastructure Security Agency has unveiled a new shopping guide detailing software and hardware with quantum-resistant encryption in a bid to bolster federal agencies' readiness for post-quantum cryptography, CyberScoop reports.

Trusted RMM tools weaponized for stealthy malware compromise Threat actors have been leveraging remote monitoring and management tools to facilitate clandestine persistent backdoor compromise of enterprise environments as part of the new advanced dual-vector Skeleton Key attack campaign, according to SiliconANGLE.

Companies need to drop their fear of using automated IT that can make decisions on its own, says Tanium Chief Security Advisor Tim Morris.

Fortinet plans to update a FortiGate patch it first issued last month in the coming days.

The ClickFix variant crashes the user’s browser and instructs them to copy and paste commands to fix the issue.

Coverage from The Register indicates that a group of CrowdStrike shareholders who sued the company following its 2024 global outage will need to revise their claims, as a Texas judge has dismissed their case for failing to adequately state a claim.