Tag Archive

A macOS malware family called Phexia is spreading through fake web pages that talk Mac users into pasting a command into Terminal. Once the command runs, the malware quietly settles on the Mac, steals the login password, and copies browser …

Hackers are impersonating the Israel Tax Authority through phishing emails, fake government websites, and CAPTCHA-style checks to trick employees into running SimpleHelp remote access software. The campaign targets Israeli organizations and turns an ordinary tax-document request into a possible entry …

The security data lake movement is a jailbreak: telemetry escaping SIEM-priced storage into open formats on cheap object storage, with detection and query engines brought to the data. The 2026 field mixes general data clouds hosting security workloads, purpose-built security …

Security logging has become a commodities market with three prices: the cost to move a log, to store it, and to ask it a question. The 2026 winners optimize different legs pipeline brokers slashing transit volume, hot-architecture engines making every …

Detection engineering catches what you anticipated; threat hunting catches what you didn’t. The craft is hypothesis-driven “if an actor used this tradecraft here, what residue would exist?” and the services market sells it in two shapes: platform-native hunting across a …

DigiCert has confirmed a data breach involving an internal business system that stored customer contact details and identity documents. Unauthorized access exposed archived information, including names, business email addresses, phone numbers, and business addresses. A small minority of affected customer …

OpenAI says an automated research pipeline found and proved 948 separate Linux kernel privilege escalation flaws in one run. These bugs could let a normal local user gain root access. The run took place in mid-October 2026 and used an …