Threat Intelligence Center

Microsoft's March 2026 Patch Tuesday release addresses multiple security vulnerabilities across Windows operating systems, Microsoft Office, and cloud services. Organizations must evaluate the severity ratings, affected versions, and potential exploitation risks to establish effective patching strategies.

Dort represents a significant threat actor within the cybercriminal ecosystem, operating as the primary botmaster behind Kimwolf malware infrastructure. This analysis examines the available intelligence on Dort's operational history, technical capabilities, and attribution indicators.

While anticipated Iranian cyberattacks failed to execute recently, cybersecurity analysts emphasize that the threat environment remains critically elevated. Iranian threat actors continue developing capabilities and probing defenses across critical infrastructure and enterprise networks.

Throughout software history, certain bugs have persisted far longer than anyone expected, sometimes affecting systems for years or even decades before patches were deployed. These 14 cases reveal patterns in how vulnerabilities escape detection, why remediation gets delayed, and what organizations can learn about proactive security practices.

Security researchers have identified a sophisticated attack campaign leveraging OAuth redirection logic to deliver malware to government and public sector organizations. By manipulating the authentication flow through trusted OAuth providers, attackers bypass traditional security controls and establish persistence within high-value targets.

The 2026 Unit 42 Global Incident Response Report presents critical findings on the acceleration of modern cyber attacks, with incident response times now moving at 4x the speed of previous years. This comprehensive analysis examines global threat trends, attack methodologies, and the operational challenges security teams face in responding to increasingly rapid threats.