Know what changed. Know what matters.

Senator Maggie Hassan’s report shows how data‑brokerage firms fuel scams and identity theft, costing consumers billions.

A new typosquatting attack named StubMaker targets RubyGems packages, stealing browser credentials and crypto‑wallet data from developers.

A critical flaw in GitLab’s GraphQL API could let attackers modify or delete public projects without authentication [thehackernews.com].

Free VPN extensions have been discovered that intercept browser traffic and route it through state‑controlled proxies, exposing users to surveillance.

Microsoft’s SharePoint authentication flaw has been actively exploited, a Windows zero‑day backdoor was deployed by Lazarus Group against defense firms worldwide, and almost 800 VPN Chrome extensions have been discovered funneling user traffic through hidden proxies.

A study found 737 free Chrome extensions redirect user traffic through Russian proxies, affecting about 75 000 installs.

A new Microsoft SharePoint flaw lets attackers bypass authentication by tweaking HTTP headers, risking broad corporate data exposure.

North Korean Lazarus Group exploited a patched Microsoft Windows flaw to install a backdoor targeting defense firms in France, Germany, Brazil, and India.

Threat actors are exploiting a newly patched VMware vCenter directory‑traversal flaw that lets them gain persistent remote control on affected systems.

Microsoft released a patch closing CVE‑2026‑68820, a Windows kernel driver flaw that attackers are using to elevate privileges and take full control over compromised systems.

Researchers discovered that Windows 11’s Plug‑and‑Play can be abused via USB auto‑install over Remote Desktop to grant full system takeover.

Microsoft disclosed that the financially motivated actor Storm‑1175 deployed a previously undocumented ransomware strain named StormEncryptor, written in C++ and appending a .encrypted extension.