Login Subscribe

7secure Coverage

Articles

Search and filter the broader reporting stream across incidents, AI security, policy, and operational coverage.

Malware & Ransomware

DarkSide Returns, Targeting Banks with Double‑Extortion Ransomware

After months of inactivity, the DarkSide ransomware gang announced its comeback, shifting focus to the financial sector. The group now employs a double‑extortion model: victims’ files are encrypted while a separate data‑exfiltration operation gathers sensitive information that the attackers threaten to publish unless a ransom is paid. The

Vulnerabilities & Exploits

Critical Zero‑Day in Cisco Catalyst OS Exploits SNMP for Remote Code Execution

Cisco’s latest security advisory reveals a critical zero‑day vulnerability (CVE‑2026‑XXXX) in the Catalyst network operating system. The flaw can be triggered by specially crafted SNMP packets, allowing an unauthenticated attacker to execute arbitrary code on affected switches and routers. The advisory lists multiple Catalyst models across

Vulnerabilities & Exploits

Kaseya Zero‑Day Fuels Ransomware Blitz Across MSP Networks

Kaseya disclosed that a previously unknown zero‑day flaw in its VSA remote‑management platform is being actively weaponized by ransomware groups. The vulnerability permits unauthenticated attackers to execute arbitrary code on any endpoint managed through the VSA console, giving them a foothold to launch encryption payloads across dozens of

Compliance & Regulation

EU Tightens AI Act: Mandatory Audits, Transparency Boost, Heavier Fines

The European Commission has issued amendments to the AI Act that raise the security bar for high‑risk AI systems. The new rules require independent, third‑party security assessments before deployment, broaden the scope of transparency disclosures (including model provenance, training data, and risk‑mitigation measures), and increase penalties for

AI Security & Threats

OpenAI Flags Model‑Poisoning Attempts on Fresh GPT‑5 Release

OpenAI disclosed that multiple adversarial groups tried to corrupt the newly launched GPT‑5 model by injecting poisoned datasets into public repositories that are used for community‑driven fine‑tuning. The malicious entries were crafted to embed trigger phrases that, when combined with specific user prompts, would cause the model

Vulnerabilities & Exploits

Microsoft Issues Emergency Patch for Critical Windows Kernel RCE Flaw

Microsoft’s Security Response Center released an out‑of‑band update to fix CVE‑2026‑12345, a newly disclosed vulnerability in the Windows kernel that permits remote code execution with full system privileges. The flaw was initially reported by independent researchers, quickly validated by Microsoft, and subsequently observed being leveraged