Dutch authorities arrested two men for operating IT infrastructure used by Russia to carry out cyberattacks and seized over 800 servers.
A threat group tracked as UNC6692 is leveraging Microsoft Teams impersonation and email bombing to deliver a sophisticated custom malware suite called 'Snow,' designed for deep network compromise and credential theft.
Microsoft is restructuring the Windows Insider Program into just two channels — Experimental and Beta — while ending gradual feature rollouts in the Beta Channel to address long-standing tester frustrations.
Senior U.S. military leaders are confronting urgent questions about securing and controlling AI systems as the Pentagon accelerates adoption of autonomous weapons and machine-learning tools for battlefield decisions.
A newly identified Chinese APT called GopherWhisper has been abusing legitimate platforms including Slack, Discord, and Microsoft Graph to conduct espionage against a Mongolian government entity, ESET researchers warn.
Microsoft is rolling out phishing-resistant passkey support for Entra-protected resources on Windows devices beginning late April, with general availability expected by mid-June 2026.
A newly identified threat actor called BlackFile has been conducting data theft and extortion attacks against retail and hospitality organizations since February 2026, using vishing calls and fake IT helpdesk personas to steal employee credentials.
Home security giant ADT confirmed cybercriminals breached its systems and stole a limited set of customer data, including names, addresses, and partial Social Security numbers. The ShinyHunters group claims to have taken 10 million records and is demanding a ransom.
Microsoft is introducing several Windows Update improvements giving users greater control over update timing and reducing unexpected restart interruptions, now rolling out to Windows Insiders in Dev and Experimental channels.
U.S. and U.K. cybersecurity agencies are warning that a sophisticated backdoor called Firestarter is burrowing into Cisco Firepower and Secure Firewall devices, surviving patches, reboots, and firmware updates through deep hooks into the ASA core process.