Threat actors exploited CVE-2026-7273 in ZyXEL GS1900 switches to steal credentials and configuration data from devices across 48 countries.
A coordinated effort led by Microsoft has disrupted EvilTokens, a phishing-as-a-service operation that used AI to compromise thousands of Microsoft accounts.
Z.ai has disabled a ZCode feature after it was discovered that the tool was silently uploading entire local code repositories to Alibaba Cloud servers.
Incomplete network segmentation is widening the corporate attack surface, as many OT and medical device segments are also shared with IT and IoT devices.
Cyera has raised an additional $400 million, bringing its total funding to over $2.7 billion and its valuation to more than $12 billion.