Read next
Learn more
Aug 8, 2026The Kratos Phishing Kit Takedown: 200 Servers Gone, 1,800 Copies Still Out ThereGerman and US law enforcement dismantled Kratos, the AiTM phishing service behind roughly 15,000 Microsoft 365 campaigns a month. The infrastructure is offline, but the kit is not. Here is what to hunt for now.
Aug 7, 2026CISA KEV Adds Arista VeloCloud and FortiOS Flaws: Why CVSS Is the Wrong Sort OrderOn 27 July 2026 CISA added a CVSS 10.0 command injection in Arista VeloCloud Orchestrator and a medium-severity FortiOS patch bypass to KEV. The pairing shows why exposure and persistence beat severity when ordering a patch queue.
Aug 6, 2026Cl0p Is Exploiting PTC Windchill (CVE-2026-12569) to Steal Engineering DataA Cl0p affiliate is chaining a FlexPLM information disclosure with an unauthenticated RCE in PTC Windchill to plant JSP web shells and run double-extortion data theft. Here are the detection signals and the triage workflow.