CYBERSECURITY

ZerOwl — Find Vulnerabilities Before Hackers Do
Russia's 'Fancy Bear' APT Continues Its Global Onslaught

Russia's 'Fancy Bear' APT Continues Its Global Onslaught

Trend Micro put out two reports about a group of threats called Pawn Storm This article explores pawn storm security. . The security company said on March.

Hims Breach Exposes the Most Sensitive Kinds of PHI

Hims Breach Exposes the Most Sensitive Kinds of PHI

Hims & Hers Health, also known as Hims, had a security problem with its third-party customer support system This article explores leaked hims data. . This.

Google Rolls Out DBSC in Chrome 146 to Block Session Theft on Windows

Google Rolls Out DBSC in Chrome 146 to Block Session Theft on Windows

All Windows users of Google's Chrome web browser can now use Device Bound Session Credentials (DBSC) This article explores session cookies attackers.

GlassWorm Campaign Uses Zig Dropper to Infect Multiple Developer IDEs

GlassWorm Campaign Uses Zig Dropper to Infect Multiple Developer IDEs

Researchers have found a new version of the GlassWorm campaign This article explores glassw worm used. . It has a new Zig dropper that is meant to get.

FINRA Launches Financial Intelligence Fusion Center to Combat Cybersecurity and Fraud Threats

FINRA Launches Financial Intelligence Fusion Center to Combat Cybersecurity and Fraud Threats

The Financial Intelligence Fusion Center will help member firms, their customers, and the securities industry share information quickly This article.

Do Ceasefires Slow Cyberattacks? History Suggests Not

Do Ceasefires Slow Cyberattacks? History Suggests Not

Handala, Iran's most well-known false-flag hacktivist group, said it would join a temporary ceasefire This article explores threats worse ceasefires.

Browser Extensions Are the New AI Consumption Channel That No One Is Talking About

Browser Extensions Are the New AI Consumption Channel That No One Is Talking About

Discover how AI browser add-ons don't follow DLP rules and aren't recorded in SaaS systems. They run directly in browsers and can see everything a user.

Compromised Nextend servers sent out the Backdoored Smart Slider 3 Pro Update.

Compromised Nextend servers sent out the Backdoored Smart Slider 3 Pro Update.

Unknown cyber threats took advantage of the update system for the Smart Slider 3 Pro plugin in WordPress and Joomla This article explores plugin involved.

Shadow AI in Healthcare Is Here to Stay

Shadow AI in Healthcare Is Here to Stay

Healthcare workers use AI apps and chatbots that haven't been approved This article explores ai healthcare discovered. . If security teams don't know.

RSAC 2026: How AI Is Reshaping Cybersecurity Faster Than Ever

RSAC 2026: How AI Is Reshaping Cybersecurity Faster Than Ever

On the last day of the RSAC 2026 Conference, Kelly Jackson Higgins, Editor-in-Chief of ZeroOwl and Vice President of Cybersecurity Editorial at Informa.

Qilin and Warlock Ransomware Use Vulnerable Drivers to Disable 300+ EDR Tools

Qilin and Warlock Ransomware Use Vulnerable Drivers to Disable 300+ EDR Tools

Cisco Talos and Trend Micro have found evidence that hackers are using the "bring your own vulnerable driver" (BYOVD) method to turn off security tools on.

Multi-OS Cyberattacks: How SOCs Close a Critical Risk in 3 Steps

Multi-OS Cyberattacks: How SOCs Close a Critical Risk in 3 Steps

The old way of thinking about a single operating system has been replaced by a more complicated world where threats can get into systems on many different.

Lies, Damned Lies, and Cybersecurity Metrics

Lies, Damned Lies, and Cybersecurity Metrics

Even though a lot of money has been spent on tools, people, and other resources, cybersecurity results are still getting worse This article explores.

Iran-Linked Password-Spraying Campaign Targets 300+ Israeli Microsoft 365 Organizations

Iran-Linked Password-Spraying Campaign Targets 300+ Israeli Microsoft 365 Organizations

A hacker who is thought to be connected to Iran is thought to be behind a campaign to spread passwords This article explores uae attacks linked. . The.

Iran-Linked Hackers Disrupt U.S. Critical Infrastructure by Targeting Internet-Exposed PLCs

Iran-Linked Hackers Disrupt U.S. Critical Infrastructure by Targeting Internet-Exposed PLCs

Iranian cyber actors are putting US industrial control systems that are connected to the internet at risk. These cyberattacks have made PLCs less.

Human vs AI: Debates Shape RSAC 2026 Cybersecurity Trends

Human vs AI: Debates Shape RSAC 2026 Cybersecurity Trends

RSAC 2026 is a very important event for people who work in cybersecurity This article explores informa techtarget ai. . Expect to talk about new threats.

Focusing on the People in Cybersecurity at RSAC 2026 Conference

Focusing on the People in Cybersecurity at RSAC 2026 Conference

Discover how Even though AI integration is getting a lot of attention around the world, cybersecurity experts are still very important. Cybersecurity.

DPRK-Linked Hackers Use GitHub as C2 in Multi-Stage Attacks Targeting South Korea

DPRK-Linked Hackers Use GitHub as C2 in Multi-Stage Attacks Targeting South Korea

Fortinet FortiGuard Labs started the attack chain with hidden Windows shortcut (LNK) files This article explores korea hacking group. . You can use LNK.

BKA Identifies REvil Leaders Behind 130 German Ransomware Attacks

BKA Identifies REvil Leaders Behind 130 German Ransomware Attacks

The German Federal Criminal Police Office, or BKA, has revealed the true identities of two well-known people who were part of the former REvil (also known.

Axios Attack Shows Social Complex Engineering Is Industrialized

Axios Attack Shows Social Complex Engineering Is Industrialized

Discover how A North Korean threat group called UNC1069 broke into the Axios package on npm. Jason Saayman, the lead maintainer, was tricked into.

Anthropic's Claude Mythos Finds Thousands of Zero-Day Flaws Across Major Systems

Anthropic's Claude Mythos Finds Thousands of Zero-Day Flaws Across Major Systems

Anthropic showed off Project Glasswing, an AI-based cybersecurity project that uses Claude Mythos This article explores project glasswing ai. . The goal.

AI Is Becoming a Digital Employee. Why Are We Still Securing It Like Software?

AI Is Becoming a Digital Employee. Why Are We Still Securing It Like Software?

Discover how When you use traditional software, you get clear instructions on how to use the systems. When we deploy an AI agent, on the other hand, we.

⚡ Weekly Roundup: Fortinet Exploits, Chrome 0-Day, Paragon Spyware, and More

⚡ Weekly Roundup: Fortinet Exploits, Chrome 0-Day, Paragon Spyware, and More

North Korean hackers got into the Axios package, which has more than 100 million downloads a week. The fact that the malware deletes itself shows that the.

Fortinet Patches Actively Exploited CVE-2026-35616 in FortiClient EMS

Fortinet Patches Actively Exploited CVE-2026-35616 in FortiClient EMS

Fortinet has released out-of-band patches to fix a serious security hole in FortiClient EMS This article explores vulnerable versions forticlient.

Six months of social engineering by the DPRK led to the $285 million Drift Hack.

Six months of social engineering by the DPRK led to the $285 million Drift Hack.

Drift has revealed that a cyberattack on April 1, 2026, that stole $285 million was the result of months of social engineering campaigns run by North.

Top 5 this week

Page 7 of 28