What security innovations do NHIs herald

How Secure Are Your Non-Human Identities? Where machine identities outnumber human ones, how efficiently are you managing your Non-Human Identities (NHIs)? When organizations rapidly adopt cloud environments to enhance operational efficiency, the need for robust NHI management has never been…

How certain can we be of NHI reliability

How Does NHI Reliability Impact Your Security Strategy? Have you ever wondered how reliable Non-Human Identities (NHIs) truly are? NHIs, the machine identities that play a crucial role in cybersecurity, are integral for ensuring secure and seamless operations within your…

Russia-linked APT28 uses PRISMEX to infiltrate Ukraine and allied infrastructure with advanced tactics

APT28 targets Ukraine and allies with PRISMEX malware, using stealthy techniques for espionage and command-and-control. Russia-linked group APT28 (aka UAC-0001, aka Fancy Bear, Pawn Storm, Sofacy Group, Sednit, BlueDelta, and STRONTIUM) is running a spear-phishing campaign against Ukraine and its allies, deploying a new malware suite…

BlueHammer: Windows zero-day exploit leaked

A buggy but functional proof-of-concept (PoC) exploit for an unpatched Windows local privilege escalation vulnerability dubbed BlueHammer has been published on GitHub by someone who goes by the handle Chaotic Eclipse and Nightmare Eclipse. Several security researchers have fixed the…

Dear me, you already are

Someone sent me a photo last week. It was me, about fifteen years ago. And I looked good. Not “good for someone who has since surrendered to gravity” good. Actually good. Fit. Hair that was black rather than its current…

TeamPCP Supply Chain Campaign: Update 007 – Cisco Source Code Stolen via Trivy-Linked Breach, Google GTIG Tracks TeamPCP as UNC6780, and CISA KEV Deadline Arrives with No Standalone Advisory, (Wed, Apr 8th)

This is the seventh update to the TeamPCP supply chain campaign threat intelligence report, ”When the Security Scanner Became the Weapon” (v3.0, March 25, 2026). Update 006 covered developments through April 3, including the CERT-EU European Commission breach disclosure, ShinyHunters' confirmation of credential sharing,…