Update Now: Critical Zimbra Classic Web Client Flaw Could Expose Mailboxes Pierluigi Paganini July 10, 2026 Zimbra addressed a critical stored XSS vulnerability in its Classic Web Client that lets…
Executive Summary The Gentlemen (aka Storm-2697) is a Ransomware-as-a-Service (RaaS) program active since at least July 2025. Public reporting indicates that the operators were likely active months earlier as an…
Welcome to this week’s edition of the Threat Source newsletter. Howdy friends, and hello from Cisco Live U.S., here in sunny (and very hot) Las Vegas! An interesting quirk of being sent…
Microsoft published new research on GigaWiper, a modular Golang backdoor for Windows that combines robust remote access with multiple ways to permanently destroy systems and data. GigaWiper is a Windows…
“Fix the roof while the sun is shining.” – proverb Cybersecurity has a familiar way of saying the storm will come: “a breach is a matter of when, not if.”…
The European Parliament has voted to bring back a rule giving big tech permission to scan users’ messages to hunt for child sexual abuse material (CSAM), a process that critics…
Enterprise infrastructure is increasingly under pressure as attackers and researchers alike expose weaknesses across the technology stack. This week, a confirmed university cyberattack, a critical Linux KVM virtualization flaw, vulnerabilities…
Ransomware Never Stopped: Over 9,000 Confirmed Attacks Since 2018 Pierluigi Paganini July 10, 2026 Ransomware remains above 1,400 attacks yearly since 2023. Qilin leads in 2026, while the U.S. remains…
Executive Summary Cloud logging services provide comprehensive visibility into actions performed within cloud resources, making them essential for security monitoring. However, this reliance also makes logging services a high-value target…
Welcome to this week’s Threat Source newsletter. There’s a fairly cliché phrase in cybersecurity that I’m sure our audience is familiar with: Attackers only need to be right once, whereas…