Fake job applications pack malware that kills EDR before stealing data

Russian-speaking attackers lure HR staff into downloading ISO files that disable defenses A Russian-speaking cyber criminal is targeting corporate HR teams with fake CVs that quietly install malware ...
Security Boulevard

Zero Trust Architecture for Decentralized MCP Tool Discovery

So, everyone is talking about ai agents lately, but nobody’s really mentioning that we’re basically handing these bots the keys to the kingdom without checking the locks. It's kinda wild—we’re letting ...

Microsoft March 2026 Patch Tuesday fixes 2 zero-days, 79 flaws

Today is Microsoft's March 2026 Patch Tuesday with security updates for 79 flaws, including 2 publicly disclosed zero-day ...

AI can rewrite open source code—but can it rewrite the license, too?

Now, AI coding tools are raising new issues with how that “clean room” rewrite process plays out both legally, ethically, and practically. Dan Blanchard took over maintenance of the repository in 2012 ...

APT28 hackers deploy customized variant of Covenant open-source tool

The Russian state-sponsored APT28 threat group is using a custom variant of the open-source Covenant post-exploitation framework for long-term espionage operations.