Guidance for customers on newly addressed vulnerabilities and recommended updates As the cybersecurity landscape continues to evolve, organizations across the industry are seeing changes in the pace, ...

The predicted wave of Iranian cyber retaliation never came

The purpose of SOS is to discuss state-sponsored operations and drive understanding of geopolitical risk and impact through study of the actors or systems that facilitate them.

Künstliche Intelligenz lud Schadsoftware auf eine Plattform mit Millionen Nutzern. Ein Cybersicherheitsforscher aus Österreich verhinderte, dass sie sich weiter verbreiten konnte.

The oligarch, Umar Kremlev, spent hundreds of thousands on expenses like renting out a private island. He appears to have met Trump Jr. only recently, but he attended the intimate wedding with a large...

Case studies from threat actors disrupted between December 2025 and August 2026 across seven areas of harm, from cyber operations to biological misuse.

Evaluating AI agents across real-world security challenges

Join the Battle for Cloud Security

One of the most influential disability rights activists in US history tells her personal story of fighting for the right to receive education

Malicious versions of the arrayref Rust crate (and others) executed a backdoor at compile time. The campaign's infrastructure overlaps with recent DPRK supply chain attacks, including Mastra and axios...

Will Delete Information Previously Reported by U.S. PersonsWASHINGTON––Today, the U.S. Department of the Treasury’s Financial Crimes Enforcement Network (FinCEN) is issuing a final rule that permanently removes the requirement for U.S. companies and U.S. persons to report beneficial ownership information to FinCEN under the Corporate Transparency Act.  The final rule is effective on its publication in the Federal Register. FinCEN today also announced that it will delete previously reported information by U.S. persons—now exempt from the reporting requirements—from the beneficial ownership information database. “Today’s action is a victory for common sense and American small businesses,” said Secretary of the Treasury Scott Bessent. “President Trump promised to cut red tape, and this final rule delivers. Treasury is eliminating a burdensome reporting requirement for millions of law-abiding business owners without compromising our national security.” The final rule:adopts the exemptions set out in the interim final rule issued in March 2025, making the rollback of beneficial ownership reporting by U.S. companies permanent;exempts U.S. persons who have obtained FinCEN IDs from any obligation to update or correct the information they originally provided to FinCEN to obtain their FinCEN IDs;eliminates the requirement for foreign companies to report U.S. person “company applicants” (i.e., the individuals who helped those foreign companies register to do business in the United States);exempts foreign pooled investment vehicles registered in the United States from reporting the beneficial ownership information of a U.S person in control of the investment vehicle; andconfirms that FinCEN will delete information about any individuals—company applicants, beneficial owners, or recipients of a FinCEN ID—that FinCEN reasonably believes is a U.S. person (e.g., the information is linked to a U.S. passport or U.S. driver’s license).Under the final rule, foreign entities that are reporting companies will still be required to report beneficial ownership information for foreign individuals. In addition to the final rule, FinCEN has issued Frequently Asked Questions, and will be updating guidance on FinCEN.gov to reflect the final rule. ###

Wiz Research is actively investigating an ongoing software supply chain attack affecting multiple keyv/cacheable npm packages.

Proofpoint is releasing this report in coordination with NSA and FBI’s JSAC reporting about TA488/Void Blizzard, which can be found here. This is part 1 of a 2-part blog series Proofpoint is

A cybersecurity startup dangling millions of dollars to acquire zero-day security vulnerabilities in popular software is run by a pair of far-right conspiracy theorists and convicted felons whose most...

Nation-state cyberattackers are increasingly using residential proxy networks to mask their traffic, turning everyday electronics into a massive global threat.

Threat actor, JINX-0164, uses LinkedIn social engineering, custom macOS malware, and CI/CD hijacking to target crypto organizations.

Russia and China consider expanding their digital cooperation per the joint statement following recent talks in Beijing.

GitHub is just the latest victim of TeamPCP, a gang that has carried out a spree of software supply chain attacks that has impacted hundreds of organizations.

The question of how states make operational decisions in cyber conflict is under-theorised. Much of existing scholarship has answered it within general frameworks of materialist and rationalist the...

Discover the latest on malicious versions of the pypi package durabletask, matching TeamPCP tactics.

Our official statement to the digital rights community about why RightsCon 2026 will not take place in Zambia

We conducted cyber evaluations of Anthropic’s Claude Mythos Preview and found continued improvement in capture-the-flag (CTF) challenges and significant improvement on multi-step cyber-attack simulati...

Wiz Research traces six waves of pull_request_target exploitation to one actor, starting three weeks before public disclosure. 500+ malicious PRs, 10% success.