IntroductionIn February 2022, BlackBasta emerged as a successor to Conti ransomware and quickly rose to prominence. BlackBasta was operational for three years until February 2025 when their internal ...

ThreatsDay Bulletin: active exploits, supply chain attacks, AI abuse, and stealth data risks observed this week.

A single unauthenticated connection gives attackers a full shell; credential theft observed in under three minutes on honeypot servers.

Choosing between SAML, OIDC, and OAuth 2.0? Explore 12 critical differences to help your B2B engineering team select the right authentication protocol today.

Unsafe defaults in MCP configurations open servers to possible remote code execution, according to security researchers who ...

Danquah, P. and Bekoe, S. (2026) Cyber Deception and Theft: A Critical Review. Journal of Information Security, 17, 149-166.

There’s a developer in Lagos, let’s call him Tobi, who used to spend the first three hours of every workday writing the same kind of code. CRUD functions, API boilerplate, unit test scaffolding.

This week in cybersecurity: 338 new CVEs published including 11 critical severity. 9 vulnerabilities added to CISA KEV catalog. Plus major developments in AI security, supply chain attacks, and ...