338 million attack simulations reveal the state of enterprise defense
Picus' Blue Report 2026 finds 69% prevention across more than 338 million simulations, but post-compromise prevention falls to 37%.
Picus' Blue Report 2026 finds 69% prevention across more than 338 million simulations, but post-compromise prevention falls to 37%.
The ransomware-as-a-service operation is finding success against critical infrastructure targets with leaked Conti code and old flaws in firewalls and VPN appliances.
Lazarus targets defense professionals with fake Lockheed Martin jobs, exploiting a Windows zero-day to deploy backdoors.
Adobe patches seven ColdFusion, Commerce, and Campaign Classic flaws that could enable code execution, privilege escalation, or denial-of-service.
Leaked passwords, social engineering and spoofed social media sites are among the tools hackers are using to gather individuals' private content and sell it online, the FBI said.
Nightmare Eclipse has dropped ShieldBreak, a Windows zero-day exploit that allows any user to gain System privileges.
Google Chrome blocks abusive web push notifications with Safe Browsing, FCM rate limiting, and smarter permission controls.
95% of the 2,500 organizations supposedly affected by the LiteLLM supply chain attack were exposed by the Trivy hack.
Cisco says attackers are exploiting CVE-2026-20349 in ASA and FTD, letting crafted HTTP requests trigger DoS via Remote Access SSL VPN.
Saisie en mars, arrestation en mai : les autorités pensaient avoir cassé le botnet. La version 7 tournait déjà depuis février, avec un carnet d'adresses logé sur Ethereum.
FBI Atlanta confirms it's looking into the incident, no arrests made.
Iran-linked hackers targeted water systems in New Jersey and Alabama, bringing confirmed attacks to at least 12 states.
Cloudflare tire la sonnette d'alarme face à des attaques DDoS record. En six mois, l'entreprise a repoussé 23,2 millions d'attaques DDoS et enregistré un bond spectaculaire de 519% des offensives les plus violentes, celles dépassant 1 Tbps.