Agentic remediation automates the mobilization phase of CTEM to eliminate vulnerability backlogs and achieve Shift Zero by enabling autonomous, low-risk fixes under human supervision.
Kaspersky researchers uncovered a previously unknown wiper malware called Lotus Wiper that was deployed in destructive attacks against Venezuela's energy and utilities sector, erasing data across physical drives and rendering affected machines unrecoverable.
A 20-year-old known online as HexDex was detained in western France on Monday, suspected of orchestrating roughly 100 data breaches targeting sports federations, government databases, and private firms.
A Mirai-based botnet is actively exploiting CVE-2025-29635, a command injection vulnerability in discontinued D-Link DIR-823X routers that no longer receive security updates. Akamai researchers warn that the attacks mirror a proof-of-concept exploit previously published on GitHub.
More than 1,300 Microsoft SharePoint servers remain unpatched against CVE-2026-32201, a spoofing vulnerability that was exploited as a zero-day before patches arrived and continues to be abused in ongoing attacks.
A surge of attacks targeting a critical unauthenticated RCE flaw in BeyondTrust's Bomgar Remote Support has compromised MSPs and downstream customers, with LockBit ransomware deployed in multiple incidents.
The UK's online safety regulator has launched formal investigations into Telegram, Chat Avenue, and Teen Chat over allegations of child sexual abuse material and grooming facilitation.
A newly identified data-wiping malware called Lotus was used in targeted attacks against Venezuelan energy and utility organizations, leaving systems in an unrecoverable state through multi-stage disk destruction.
U.S. lawmakers are exploring harsher penalties for ransomware attacks on hospitals, including terrorism designations and homicide prosecution, as FBI data shows healthcare incidents nearly doubled to 460 cases in 2025.
Angelo John Martino III, a ransomware negotiator for DigitalMint, pleaded guilty to secretly conspiring with BlackCat affiliates to extort the very clients he was hired to protect, helping extract over $75 million in ransom payments.