For anyone not paying attention, the number of vulnerabilities facing security teams today isn’t just growing — it’s exploding. The 2025 Verizon DBIR found that vulnerability exploitation was present in 20% of all breaches, a 34% increase over 2024.
Get the latest resources, news, and threat research delivered to your inbox.
July 8, 2025
A new report out today from endpoint security firm Morphisec Inc. reveals the resurgence of Pay2Key, a ransomware operation with ties to Iran’s Fox Kitten advanced persistent threat group, now rebranded as Pay2Key.I2P.
July 7, 2025
Ransomware attacks have not only increased in numbers, but they have also evolved beyond data encryption and ransoms. Today’s attackers are increasingly turning to double or even triple extortion, extracting sensitive information to increase their leverage.
June 25, 2025
Adversaries are now asymmetric and polymorphic in their attack capabilities. Asymmetric implies that adversaries are not evenly matched, and suggests agility and unconventional tactics.
June 11, 2025
The disclosure of CVE-2025-47176 in Outlook shows how low-privileged flaws can enable remote code execution, requiring patching, analysts warn.