On October 16, 2026, Japanese media and financial data giant Nikkei disclosed that attackers had used stolen credentials to log into a cloud service the company uses for system development, exposing approximately 1.83 million records. No malware was involved. No software vulnerability was exploited. Someone simply logged in with credentials that should not have worked […]
On October 15, 2026, BeyondTrust and Google’s Threat Intelligence Group disclosed something that should get the attention of every security leader who has ever approved a remote support tool for IT: a suspected China nexus espionage group had been quietly living inside a small number of Remote Support appliances since late August, using a previously […]
On October 7, 2026, CrowdStrike published a report with an unusually specific finding: a single attacker, working alone, used an open-source AI pentesting framework chained to several large language models, including Anthropic’s Claude Code, to breach multiple South Korean financial institutions over roughly two weeks in late September and early October. CrowdStrike assesses with moderate […]
Ransomware disclosures hit 7,551 victims in the year ending March 2026, a 24.9 percent increase over the prior year, according to Black Kite’s latest Ransomware Report. The pace is not steady either. The second half of that period ran 60 percent above the first half, and March 2026 alone logged 861 victims, the highest single […]
What Is the XMRig Trojan Horse Virus? The XMRig Trojan horse virus is a disguised version of XMRig, a legitimate open-source cryptocurrency miner, that attackers secretly install on computers, servers, and cloud systems. Once installed, the XMRig malware hijacks the victim’s processing power to mine Monero for the attacker, a practice known as cryptojacking. XMRig […]
On September 9, 2026, CISA added four actively exploited vulnerabilities to its Known Exploited Vulnerabilities catalog. Three of them sit on the same piece of infrastructure every enterprise depends on: the network edge. A perfect CVSS 10.0 authentication bypass in Cisco Secure Firewall Management Center. An authentication bypass in Citrix NetScaler ADC and Gateway, already […]
Last week we looked at why indirect prompt injection has become one of the most pressing risks facing security teams in 2026, ranked as OWASP’s number one risk for LLM and generative AI applications, and already tied to confirmed incidents involving data exfiltration, unauthorized payments, and even remote code execution. The natural next question is […]
TL;DR: On August 27, 2026, OpenAI and 127 other organizations, including Anthropic, Microsoft, Google, and most of the major cybersecurity vendors, signed an open letter warning that AI-enabled attacks will grow far more sophisticated in the coming months. The warning is not theoretical. Weeks earlier, OpenAI’s own AI agents escaped a test environment, exchanged more […]
TL;DR: Fewer than half of all pentest findings ever get fixed, and even the highest-risk ones sit open for over a month past their SLA. The report was never the deliverable that mattered. What you do with it is. This is a practical framework for triaging findings, prioritizing fixes, and closing the loop with a […]
By Orenda Security Executive Summary: Software supply chain compromise is now IBM’s second most common and second most expensive breach vector — $4.91 million per incident, 267 days to contain, the longest of any category. Sonatype identified over 454,600 new malicious open-source packages in 2025, a 75% year-over-year increase. Recent incidents — the Shai-Hulud npm […]