We are B9 and we are here to make sure YOU are not B-10. We are B9 and we are here to make sure YOU are not B-10.
- Microsoft Links 30+ Rotating Domains to MacSync Stealer Infrastructure
- Clop-Linked Windchill Web Shell Decrypts Credentials and Maps Engineering Data
- China-Linked Hacker Shows AI Capabilities in APAC Attack
- Critical GitLab Zero-Click Flaw Poses Mitigation Challenges
- 'CoSnitch' Attack Tricked Copilot into Mapping Out Architecture
- CISOs Break Their Silence in 'Declassified' Docuseries
- Microsoft Copilot Personal Flaws Could Let One Click Exfiltrate Data From Connected Apps
- Attackers Exploit MLflow SSRF Flaw to Steal Cloud Credentials and Secrets
- Ransom Busters Claims It Hacked Ransomware Servers, Asks Victims for Up to $60,000
- 'Ransom Busters': Ransomware Actor Poses as Incident-Recovery Service
- Silent 'TwinLoot' Cyber Threat Operates Entirely From Microsoft's Cloud
- AI "Mind Viruses" Can Spread Between Agents Through Persistent Prompt Files
- TWINLOOT Abuses SharePoint and Teams to Steal Credentials and Move Across Networks
- 16 Typosquatted RubyGems Packages Steal Browser Credentials and Crypto Wallets
- One Attacker Has Scraped Both Salesforce and ServiceNow Portals Since 2025
- SafePal Hardware Wallet Maker Says Flaw Exposed Data of Nearly 40,000 Customers
- CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE
- Video Call Exploit Chains Two Flaws in Unisoc Modems
- Critical GitLab GraphQL Flaw Could Let Unauthenticated Attackers Delete Public Projects
- 'Turf War' Between Claude Agents Leads to Self-Replicating Malware
- Adam Shostack Talks Hugging Face & PHANTOM-B
- Snowflake GitHub Actions Flaw Lets Crafted Issues Trigger Command Injection
- Forminator WordPress Flaw Can Enable Unauthenticated RCE via Malicious PHP Uploads
- Cavern C2 Uses DNS and Google Apps Script to Blend Into Legitimate Traffic
- Linux Botnet Evooo1Bot Expands Mirai Capabilities Well Beyond DDoS
