BMT Announcement

Multiple vulnerabilities have been discovered in SonicWall SonicOS. SonicOS is the operating system that powers SonicWall firewalls and network security appliances. Successful exploitation of the most severe of these vulnerabilities (CVE-2026-19868) could allow a remote unauthenticated attacker to perform unauthorized operations, gain elevated privileges, access sensitive information, or impact [...]

The cybercrime group Qilin has emerged as the world’s most active ransomware affiliate program, claiming at least 365 victim organizations in the past three months alone. But even top Russian hackers make operational security mistakes, and the administrator of Qilin has made a few key missteps over the last decade [...]

One reader sounds a warning about all our devices that are connected to the internet, following a series of cyber-attacks on supermarket fridgesWell done to Alex Pearce for unplugging his fridge from the internet (Hot fridges, a fake nuclear alert and a $6bn heist: are we in the foothills of [...]

Microsoft did another four-digit patch drop today, releasing updates to fix almost 1,100 security vulnerabilities in its Windows operating systems and supported software. This month’s Patch Tuesday addresses 63 critical flaws — including a zero-day in Microsoft Outlook — and comes amid important security updates from other software makers, including [...]

Microsoft Is Retiring SMS and Voice MFA: What You Need to Know If your business uses Microsoft 365 or Microsoft Entra ID, there’s an important authentication change coming that you should be planning for.  Microsoft is retiring the SMS and voice authentication services it currently provides for multi-factor authentication, [...]

Rise of the latest scam, device code phishing has spiked 1,500% in the first half of 2026 compared to the second half of 2025, with some tracking reports noting a 37-times surge over a brief tracking period. [dark reading]  By April 2026, Microsoft reported observing 10 to 15 new [...]

On Friday, the CISA sent out an announcement involving critical vulnerabilities in PHP that required immediate patching.  You might not run PHP yourself,  but that doesn’t mean you’re safe from PHP2Shell. Your SaaS provider might use PHP. Your hosting provider might manage PHP runtimes on your behalf. A third-party [...]

Expect to see quite a few websites serving error pages today: Nearly 70 percent of websites need to update their core software to fix a pair of vulnerabilities that allow an attacker to seize full control over affected servers. Experts say there are working exploits for the flaws, and [...]

U.S. federal investigators pursuing the ShinyHunters hacking group that recently stole highly sensitive data from the FBI have identified executives at two different ransomware negotiation firms who maintained unusually close relations with the extortion group, KrebsOnSecurity has learned. Sources close to the investigation say one of the executives in the [...]