Dennis Fisher

New Shai Hulud NPM Worm Emerges

Researchers from Wiz are currently tracking more than 25,000 affected repositories across approximately 350 unique users.

NOV 17

Vulnerabilities

Fortinet CVE-2025-64446 Under Active Attack

That vulnerability (CVE-2025-64446) affects several versions of FortiWeb and CISA has added it to its Known Exploited Vulnerabilities catalog.

NOV 12

APT Targets Cisco and Citrix Zero Days

The chain of discovery began with Amazon’s security honeypot service, MadPot, which detected exploitation attempts for the Citrix Bleed Two vulnerability (CVE-2025-5777) before its public disclosure

NOV 6

Q&A: Sean Zadig of Yahoo on Employing AI in Security

There are plenty of challenges and pitfalls for security teams looking to deploy AI tools and Zadig said Yahoo is taking a measured, careful approach. This is a condensed and edited portion of our discussion.

Dennis Fisher · 4 min

OCT 30

With AI and Security, ‘Everyone is Still Learning’

For many organizations, the biggest potential risk that arises from the use of AI tools is the leakage or mishandling of sensitive data.

OCT 23

New Lazarus Group Campaign Targets EU Defense Companies

The suspected objective of the Lazarus group was the exfiltration of proprietary information and manufacturing expertise, particularly pertaining to UAV technology.

OCT 21

It’s All Just Electrons: The Enduring Legacy of Sneakers

“The world isn’t run by weapons anymore, or energy, or money. It’s run by little ones and zeroes, little bits of data. It’s all just electrons.”

OCT 17

Why WarGames is Still Predicting the Future 40 Years Later

WarGames may be 42 years old but its prescience about our current technocracy and race to take humans out of the loop is as clear as ever

OCT 15

F5: Attacker Accessed BIG-IP Source Code, Bug Data

The company discovered the intrusion in August but did not say when the attackers first gained access to F5’s systems or how long they had access.

OCT 8

Vulnerabilities

Data Connects Scanning Surges for Cisco, Fortinet, PAN Devices

Researchers say that all three campaigns are being driven at least in part by one threat actor.

SEP 30

VMware Patches Bug Exploited By State Actors

The vulnerability (CVE-2025-41244) is easily exploitable, although it requires existing privileges on the target product.

SEP 30

Microsoft Releases New Agentic AI Tools

The foundation of the new offerings is MIcrosoft Sentinel, the company’s security platform, that now includes the availability of the massive Sentinel data lake.

SEP 29

Akira Ransomware Actors Target SonicWall SSLVPN

This aggressive approach aligns with Akira’s historical tactics of exploiting VPN infrastructure as an initial access vector.

SEP 25

Cisco Warns of Attacks on Two ASA Flaws

Cisco’s Talos threat intelligence team said this campaign is the work of an actor it tracks as UAT4356, an APT team that has previously targeted ASA devices.

SEP 23

Three Takeaways From the EU Airport Outages

The incident is a pointed example of how an intrusion at a key point in the software supply chain can have a wide range of downstream effects.

SEP 19

Russian APT Groups Turla, Gamaredon Collaborate to Target High-Profile Ukrainian Entities

In a new report, ESET researchers have detailed several instances when the two groups’ tools have been found on the same compromised machines in Ukraine.

SEP 16

New Automated npm Attack Campaign Targets Dozens of Packages

The campaign does not appear to be connected to the previous npm phishing attacks, but it does seem to be related to a rash of GitHub and npm token and secret thefts from the end of August.

SEP 8

Attack Compromises Popular NPM Packages

The affected packages include Chalk and Debug, and one of the contributors to those packages said the compromise was the result of him clicking on a phishing email related to setting up 2FA on his account.

Dennis Fisher · 4 min

SEP 3

Cloudflare Details Salesloft Drift Breach

This incident is the latest to stem from an intrusion at Salesloft in which attackers used OAuth tokens to target Salesloft customers’ Salesforce integrations.