2026

The Gentlemen Ransomware Claims 478 Victims, Can Spread Like a Worm 2026-06-11 at 20:18 By A new analysis of The Gentlemen operation has revealed that the financially motivated threat group initially operated as an affiliate responsible for conducting double extortion attacks, while leveraging resources from various ransomware-as-a-service (RaaS) schemes like LockBit (aka Tenacious Mantis), Qilin […]

Locking Down the Server 2026-06-11 at 17:12 By Michael Dullea How privileged access controls help you stay ahead of AI-driven vulnerability discovery This article is an excerpt from SECURITY.COM View Original Source

OceanLotus Hits Vietnam Investors With SPECTRALVIPER in FireAnt Attack 2026-06-11 at 17:11 By The Vietnam-aligned threat actor known as OceanLotus has been attributed to two distinct campaigns that targeted domestic entities and stock investors with a backdoor known as SPECTRALVIPER. The campaigns involve a prolonged cyber espionage operation aimed at a Vietnamese infrastructure and transport

Cybersecurity Stars Awards 2026: Winners Announced Across 95 Categories 2026-06-11 at 16:26 By Most good security work is invisible by design. Today is the exception. The 2026 Cybersecurity Stars Awards winners are announced across 95 subcategories in four main award categories. The reason is simple. Cybersecurity is full of work that deserves recognition and rarely

ThreatsDay Bulletin: Worm Code Leaked, AI Agent Phished, Claude Action Patch + 28 New Stories 2026-06-11 at 16:20 By It’s been one of those weeks. You expect the usual noise: recycled malware, sloppy attacks, another easy target getting hit. Instead, there’s a supply chain attack kit in a public repo, a $5,000-a-month RAT that clones

AI Broke Vulnerability Management. That’s Why CISOs Are Moving Budget to BAS. 2026-06-11 at 14:30 By For thirty years, vulnerability management ran on a buffer: the months between when a vulnerability was found and when someone could figure out how to weaponize it. The solution was straightforward enough; triage by severity, schedule the fix, validate,