2026-11-12 Dark Reading [Virtual Event] What Every Enterprise Should Know About Securing Cloud Assets in the Age of AI
2026-10-12 CyberScoop IonQ to buy zero-trust security firm Elisity in deal valued at up to $1.3 billion
2026-10-12 Help Net Security Cyberattacks hit European grocers: French supermarket freezers hijacked, Dutch and Belgian stores disrupted
2026-10-12 Cybersecurity Dive CISA calls on Citrix NetScaler customers to patch as new flaws disclosed
2026-10-12 The Hacker News ⚡ Weekly Recap: Helpdesk 0-Days, Rogue Certs, ShinyHunters Arrest, AI-Fooling Malware and More
2026-10-12 Cybersecurity Dive GitLab fixes critical vulnerability that exposed software environments to sabotage
2026-10-12 The Record by Recorded Future Ukraine strikes third Yandex data center, disrupting digital services across Russia
2026-10-12 Infosecurity Magazine Major French Supermarket Chains Hit by Cyber-Attack, Food Stock Impacted
2026-10-12 The Hacker News Ledger Finds Unauthorized Hardware Implant in CryptoBilis-Sold Wallet Amid Fund Theft Reports
2026-10-12 Help Net Security Low-cost Android phones are arriving with malware that owners can’t uninstall
2026-10-12 The Hacker News Critical SonicWall SMA 1000 Flaw Targeted in 135 Exploitation Attempts After Patch
2026-10-12 Infosecurity Magazine Months-Old Palo Alto VPN Vulnerability Remains a Target for Ransomware Groups
2026-10-12 The Hacker News Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE
2026-10-12 SecurityWeek Let’s Encrypt Cuts Default Certificate Validity to 64 Days Ahead of 45-Day Switch
2026-10-12 The Hacker News CyberXero Uses Claude Code in Campaign That Stole Over 628,000 Ukrainian Records
2026-10-12 Help Net Security Let’s Encrypt TLS certificate lifetimes to drop from 90 to 64 days starting February 2027
2026-10-11 The Hacker News P7 DarkSword iOS Exploit Kit Adds Crypto Wallet Data Theft and Remote Commands
2026-10-10 The Hacker News The Third-Party Agent Problem: Why Security Built for AI You Chose Misses the Agents You Didn't
2026-10-10 SecurityWeek Insider Cyber Extortion Plot Against Industrial Firm Lands Engineer in Prison
2026-10-10 The Hacker News Anthropic Cuts Live Internet Access for Internal AI Tests After Claude Exploits Injection Flaws
2026-10-09 The Record by Recorded Future Japan confirms arrest of Russian Qilin operative, extradition to Germany
2026-10-09 Cloudflare Blog Introducing Clef-omni with full multimodality, plus a faster Clef and a cheaper Clef-flash
2026-10-09 watchTowr Labs Death By A Thousand PaperCuts (PaperCut Pre-Auth RCE Chain and Patch Bypasses WT-2026-0141-0144/CVE-2026-82077/CVE-2026-82078/CVE-2026-81578)
2026-10-09 Dark Reading Security Threats Don't Stop at the Office: Why Executives' Families Need Training, Too
2026-10-09 The Record by Recorded Future Leader of vast money mule operation that laundered cybercriminal proceeds pleads guilty
2026-10-09 The Record by Recorded Future Hundreds of thousands impacted by data breach at biosensor firm iRhythm
2026-10-09 The Record by Recorded Future FBI touts another ShinyHunters arrest in response to data breach
2026-10-09 The Record by Recorded Future Belarusian hacktivists admit to 2023 breach of Russian state healthcare network
2026-10-09 Cloudflare Blog Introducing on-demand CPU and memory profiling with flamegraphs for Workers and Durable Objects
2026-10-09 Help Net Security High-severity NVIDIA vulnerability lets unauthenticated attackers crash GPU monitoring
2026-10-09 SecurityWeek In Other News: AI Used in Korean Bank Breaches, Poem-Guided Botnet, Empire Admin Gets 40 Years
2026-10-09 Cybersecurity Dive As frontier models go rogue, colleges beef up AI cybersecurity education
2026-10-09 Malwarebytes Labs ASOS breach update: Hackers stole customer details and shopping searches
2026-10-09 Infosecurity Magazine UK and Allies Warn of Cyber Threat from China’s Integrity Technology Group
2026-10-09 Help Net Security Product showcase: SimpleLogin keeps your email address private with aliases
2026-10-09 SecurityWeek Anthropic Fast-Tracks AI Bug Reports to OSS Maintainers, Taps 11 Firms for OT Security
2026-10-09 Infosecurity Magazine Major AI Firms Pledge Data Protection Changes Following UK Privacy Watchdog Push
2026-10-09 Help Net Security Thousands of wind and solar park systems sit exposed on the internet across Europe
2026-10-09 Help Net Security PCI SSC calls for human approval of AI agent actions involving cardholder data
2026-10-09 Help Net Security Companies want autonomous IT operations but hesitate to let AI act alone
2026-10-08 Imperva Research CVE-2026-21589: Critical Pre-Authentication File Read Affects Atlassian Data Center Products
2026-10-08 CyberScoop Anthropic rolls out program for ‘long-term commitment’ to secure critical infrastructure, open source software
2026-10-08 Microsoft Security Blog Post-quantum authentication: Why organizations should start testing certificate ecosystems now
2026-10-08 The Record by Recorded Future Lawmakers warn Google could expose Spirit Airlines data in $10 million AI training deal
2026-10-08 CyberScoop Ransomware recovery CEO indicted after allegedly paying hackers and pocketing millions
2026-10-08 The Record by Recorded Future International coalition seizes tools used by cyber firm behind Flax Typhoon
2026-10-08 The Hacker News FBI Says China-Linked Hackers Ran Portal Giving Third Parties Access to Stolen Emails
2026-10-08 The Hacker News ThreatsDay: Ransomware Affiliate Betrayal, WhatsApp RAT, Exposed Hacker Tools and 12 More Stories
2026-10-08 CyberScoop OpenAI says Iran, Russia used AI journalists, think tanks to influence Western media
2026-10-08 The Record by Recorded Future DOJ charges ransomware recovery CEO for secretly paying hackers
2026-10-08 The Record by Recorded Future ASOS: Hackers tricked way into employee account before sending rogue push notification
2026-10-08 Orca Security Blog Malicious npm Campaign “MALFEX” Delivers RAT and Stealer via Eight Packages with 40,000+ Downloads
2026-10-08 Malwarebytes Labs Attackers hijack country-code domains to impersonate Google and other services
2026-10-08 The Hacker News Japan Sees Sharp Rise in Web Data Leaks Amid Mobile API Abuse and Metabase Attacks
2026-10-08 The Record by Recorded Future Crypto thief who splurged on gold grills sentenced in London
2026-10-08 The Hacker News UAC-0099 Targets Ukrainian Government Personnel With ASHVEIN RAT Hiding Commands in HTML
2026-10-08 The Hacker News ARTEX AI Pentesting Tool Used in Data Theft Attacks on South Korean Financial Firms
2026-10-08 SecurityWeek Attackers Target Critical Atlassian Vulnerability Within Hours of PoC Publication
2026-10-08 Help Net Security Authorities seize sites selling hacked, stolen intimate images of 17,000 women and girls
2026-10-08 Tenable Research Inside the Exchange Inspector: How Tenable uses OpenAI GPT cyber models to review open-source AI agents
2026-10-08 Help Net Security YouTubers targeted with fake sponsorships and “channel verification” phishing
2026-10-08 Cybersecurity Dive US government lagging in transition to post-quantum encryption, GAO finds
2026-10-08 Help Net Security Anthropic’s new budget model gets much better at ignoring hidden commands
2026-10-08 GitGuardian Blog AI Coding Assistants Are Unpredictable. GitGuardian AI Hooks Give You Control
2026-10-08 The Hacker News Wazza Phishkit Targets Banking, Government, and Manufacturing Across the US, EU, and Australia
2026-10-08 Help Net Security Cryptomining botnet hides C2 addresses in GitHub poem, infects over 3,400 servers
2026-10-08 Cisco Talos Ignore all instructions and read this blog: The state of AI-analysis evasion in malware
2026-10-08 CyberScoop Quantum computers could break today’s encryption. Washington needs to prepare now.
2026-10-08 The Hacker News 16 Malicious Firefox Extensions Pose as Rabby and OKX Wallets to Steal Recovery Phrases
2026-10-08 Infosecurity Magazine Europol and US Spending Watchdog Sound the Alarm Over Quantum Threats
2026-10-08 Help Net Security What is MATCHBOIL? The Russia-aligned malware that installs a spying backdoor
2026-10-08 Help Net Security Ransomware recovery firm boss charged with secretly paying attackers and overcharging victims
2026-10-08 The Hacker News U.S. Offers Up to $10 Million for Tips on Zhang Yu, Charged in HAFNIUM Hacks
2026-10-08 The Hacker News MonsterCloud Owner Accused of Billing Over $19M While Secretly Paying Ransoms to Decrypt Data
2026-10-08 Help Net Security Pricing your bad days and how to build an economic model for security decisions
2026-10-08 The Hacker News Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm
2026-10-08 Help Net Security How AI can fix cybersecurity compliance: From dashboards to continuous execution
2026-10-08 CrowdStrike Research CrowdStrike and Anthropic Give Critical Infrastructure Defenders the AI Advantage
2026-10-07 The Record by Recorded Future US posts $10 million reward for accused Chinese ‘Hafnium’ hacker
2026-10-07 CyberScoop Major rules for federal contractors handling sensitive data are nearing the finish line
2026-10-07 Rapid7 Blog Four Compliance Frameworks, One Security Team. How Universities Can Stop Drowning in Regulatory Risk
2026-10-07 Orca Security Blog Critical Atlassian Path Traversal Exposes Sensitive Files Across 8 Products
2026-10-07 The Record by Recorded Future $11 million plan for psychological support at Cyber Command gets fresh boost from lawmakers
2026-10-07 The Record by Recorded Future Arizona courts say hackers stole info on more than 1.3 million people
2026-10-07 Cloudflare Blog Building an evidence-grounded agentic security operations harness on Cloudflare
2026-10-07 Cybersecurity Dive AI doesn’t change singular importance of phishing-resistant authentication, Okta says
2026-10-07 The Record by Recorded Future Oklahoma judge’s Flock ruling shows the power of Supreme Court’s digital evidence decision
2026-10-07 CyberScoop PoeLLM malware has assembled a sweeping botnet, taking technical cues from a poem
2026-10-07 Cybersecurity Dive FBI warns that FortiBleed credential-harvesting attacks are locking out firewall users
2026-10-07 The Record by Recorded Future Cyber experts call on CISA to create mandatory federal OT rules
2026-10-07 Rapid7 Blog CVE-2026-21589: Critical unauthenticated arbitrary file access in Atlassian products
2026-10-07 Infosecurity Magazine Telegram Account Behind ASOS Rogue Notification Tied to Gaming Trading
2026-10-07 Malwarebytes Labs AI-powered phishkit arms criminals with account-hijacking tools in 10 minutes
2026-10-07 Infosecurity Magazine Half of Cybersecurity Pros Still Rely on Passwords Despite Security Concerns
2026-10-07 CrowdStrike Blog CrowdStrike Named a Leader in the 2026 IDC MarketScape for Worldwide Modern Endpoint Security for Enterprises Vendor Assessment
2026-10-06 CyberScoop Alert: FortiBleed remains active campaign, can lock out users or lead to ransomware attacks
2026-10-06 The Hacker News Fake ChatGPT, Gemini, and Claude Ad Portals Capture Credentials and MFA Codes
2026-10-06 The Hacker News Linux Backdoors Impersonate Email Security Tools to Evade Detection in Korea and Taiwan
2026-10-06 watchTowr Labs You Won’t Hear About These, Even In Myths (Atlassian Jira, Confluence (and more) Pre-Auth Arbitrary File Read CVE-2026-21589)
2026-10-06 Microsoft Security Blog CISO perspectives on managing vulnerability risks in the age of AI
2026-10-06 The Record by Recorded Future Alleged ATM malware creator appears in Nebraska court after arrest
2026-10-06 The Record by Recorded Future South Korean officials believe AI agents were used to hack several banks
2026-10-06 Cybersecurity Dive IBM’s AI-powered vulnerability clearinghouse finds hundreds of Java flaws
2026-10-06 Tenable Research How to mitigate the risk from AI-generated apps built by your 'citizen coder' employees
2026-10-06 The Record by Recorded Future Osaka Metropolitan University cancels classes after suspected ransomware attack
2026-10-06 The Record by Recorded Future ClickFix campaign in Ukraine compromises over 100 websites to spread Lunex malware
2026-10-06 Infosecurity Magazine Red Hat’s Lightwell Project Remediates 400 Open-Source Vulnerabilities
2026-10-06 The Hacker News LibreOffice and OpenOffice Flaws Let Malicious Spreadsheets Run Code Without Macro Warnings
2026-10-06 Infosecurity Magazine ASOS Customers Receive Bizarre “Hacked” Message Amid Suspected Snowflake Compromise
2026-10-06 The Hacker News Wikimedia Says OpenAI Agents Tried to Compromise Etherpad and Use Wiki Tools as Proxies
2026-10-06 The Hacker News Google Pauses OSS Product Bug Bounty Rewards After Surge in Invalid Automated Reports
2026-10-06 Infosecurity Magazine Ransomware Affiliate Double-Crosses RaaS Operator to Steal Victim Funds
2026-10-06 The Hacker News Critical Atlassian Flaw Lets Unauthenticated Attackers Read Known Files Across 8 Products
2026-10-06 The Hacker News FBI Removes Accenture Contractor After Patch Failure Led to ShinyHunters Breach
2026-10-06 The Hacker News Denmark Says Attackers Accessed CPR Data for 8.8 Million People via Company Account
2026-10-06 The Hacker News ClickFix Smuggles Payloads Through Browser Cache to Bypass Windows Run Limits
2026-10-06 CrowdStrike Blog Request, Aggregate, Bypass: How Attackers Can Evade LLM Safety Classifiers
2026-10-06 The Record by Recorded Future Shares in British clothing company ASOS dive after hackers apparently send push notification
2026-10-05 CyberScoop Citrix discloses third actively exploited NetScaler zero-day in less than a week
2026-10-05 The Record by Recorded Future Wikimedia Foundation: OpenAI agents tried to edit pages and compromise notes tool
2026-10-05 The Record by Recorded Future Alleged ShinyHunters member reportedly detained in Jordan, assisting law enforcement
2026-10-05 Orca Security Blog Citrix NetScaler Zero-Day Exploited in the Wild Crashes SAML Authentication Services
2026-10-05 The Record by Recorded Future US, Australia warn of latest Citrix vulnerability after NetScaler advisory
2026-10-05 The Record by Recorded Future Ukraine grocery chain ATB confirms cyberattack as hackers threaten to leak data
2026-10-05 The Hacker News Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users' Mailboxes
2026-10-05 The Record by Recorded Future University of Illinois Chicago affected by ransomware attack on medical school
2026-10-05 Malwarebytes Labs Google pauses open source bug bounty program after rise in AI submissions
2026-10-05 Help Net Security CISA flags new exploited NetScaler flaw as attackers crash appliances (CVE-2026-88779)
2026-10-05 The Hacker News ⚡ Weekly Recap: NetScaler and FortiMail 0-Days, AI Coding Leaks, Spectre v2 and Ransomware Arrests
2026-10-05 Varonis Blog Access Governance: Reducing Attacker Reach in the Age of AI-Accelerated Threats
2026-10-05 Infosecurity Magazine New Stealthy Linux Backdoors Target Telecoms, Masquerade as Email Traffic
2026-10-05 Help Net Security Fake brand discounts on social media prey on shoppers’ fear of missing out
2026-10-05 Help Net Security LTM launches BlueVerse AgenTraceIQ to monitor AI agents and reverse unintended actions
2026-10-05 Help Net Security RemoveMacAI turns off Apple Intelligence on macOS 27 and deletes its models
2026-10-05 Imperva Research Harvest Now, Decrypt Later: The Attack You Defend Against by Doing Nothing
2026-10-05 The Hacker News Realtek Jungle SDK Exploit Attempts Deliver Cling Botnet With STUN-Based C2
2026-10-05 The Hacker News Apple Plans Tighter macOS Full Disk Access Controls Over AI Agent Data Access
2026-10-05 Help Net Security Out-of-band Exchange Server update fixes high-severity mailbox access bug (CVE-2026-96940)
2026-10-05 Help Net Security Detained ShinyHunters hacker reportedly helping FBI track down fellow members
2026-10-05 Infosecurity Magazine Google Suspends Open-Source Bug Bounty Due to AI Vulnerability Reports
2026-10-05 Help Net Security MAKERphone 2: A DIY 4G phone with plug-in camera, speaker and prototyping board
2026-10-05 The Hacker News Attackers Target Rejetto HFS Flaw That Enables Admin Session Forgery and RCE
2026-10-05 The Hacker News New NetScaler Zero-Day Exploited in Targeted Attacks Can Knock SAML Deployments Offline
2026-10-05 SecurityWeek Exploitation of Citrix NetScaler Zero-Day Hits Appliances Patched Days Earlier
2026-10-05 CrowdStrike Blog New in Falcon Cloud Security: Third-Party App Insights and AI-Enhanced Remediation
2026-10-04 SecurityWeek Trump Names National Intelligence Director Jay Clayton to Lead a New Federal AI Task Force
2026-10-04 Help Net Security Week in review: Researcher breaks into Microsoft analytics service, NetScaler RCE 0-day exploited
2026-10-04 The Hacker News ShinyHunters Suspect Rey Reportedly Detained in Jordan, Helping FBI Identify Group Members
2026-10-04 The Hacker News China-Aligned TA419 Targets U.S. AI Policy Experts With Microsoft AitM Phishing
2026-10-03 The Hacker News Warlock Exploits SharePoint Flaws to Disable Security Tools and Deploy Ransomware
2026-10-03 SecurityWeek doxx.net Raises $38 Million to Prevent AI Agent-on-the-Internet Misadventures
2026-10-03 The Hacker News The State of Cybersecurity in 2026: Key Segments, Insights, and Innovations
2026-10-02 The Record by Recorded Future Judge dismisses spyware case brought by Salvadoran journalists targeted with Pegasus
2026-10-02 Dark Reading RemoteThreat Bets Security Teams Need to Test What Happens After Defenses Fail
2026-10-02 The Record by Recorded Future Bipartisan backlash to ALPRs grows as two high-profile bills are introduced
2026-10-02 The Hacker News GitLab Patches Critical 9.9 AI Gateway Flaw Allowing Command Execution on Self-Hosted Servers
2026-10-02 The Hacker News Antino Backdoor Uses Outlook and OneDrive for C2 in China-Nexus Espionage Campaign
2026-10-02 The Hacker News Dell CSM Flaws Enable Unauthenticated Admin Access and Root on Kubernetes Nodes
2026-10-02 Cybersecurity Dive Defending against AI-fueled cyberattacks requires focus on identity, data governance, Microsoft says
2026-10-02 SecurityWeek In Other News: $15K iCloud Spoofing Bugs, AI Policy Experts Phished, Adblocker Spies on AI Chats
2026-10-02 The Record by Recorded Future Mississippi mayor says ransomware incident led city to shut down systems
2026-10-02 The Record by Recorded Future 'Warlock' ransomware used in attacks on critical infrastructure in Portuguese, Spanish-speaking countries
2026-10-02 Cloudflare Blog Building for good: How civil society organizations are automating on Cloudflare
2026-10-02 Cloudflare Blog Protected Quick Tunnels: simple accountless authentication for your next dev project
2026-10-02 Cloudflare Blog Announcing Cloudflare OHTTP Gateway – expanding access to Cloudflare’s privacy-preserving infrastructure
2026-10-02 Cloudflare Blog Introducing Cloudflare Traces: follow requests through our entire platform
2026-10-02 Sonar Blog How one squad at Sonar reviews AI-generated code: A look at our agentic workflow
2026-10-02 The Hacker News OpenAI Parts Ways With Three Safety Researchers Over Sensitive Information Mishandling
2026-10-02 The Hacker News Why CISOs Struggle to Answer the Board's Three Hardest Questions, and How to Fix the Report
2026-10-02 Help Net Security Chinese spies impersonate White House, Anthropic figures to phish AI policy experts
2026-10-02 Infosecurity Magazine Two Zero-Days Exploited in Attack on Dutch Institute for Vulnerability Disclosure
2026-10-02 The Hacker News Android 17 Advanced Protection Locks Accessibility Services to Verified Accessibility Tools
2026-10-02 The Hacker News Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes
2026-10-02 Help Net Security Botnets, adversarial attacks and data poisoning top leaders’ AI threat list
2026-10-01 The Record by Recorded Future Iranian accused of hacking American universities extradited from Montenegro
2026-10-01 CyberScoop Authorities seize KillSec extortion group infrastructure, arrest 3 alleged members
2026-10-01 The Record by Recorded Future OpenAI software attempted to secretly scrape data from dozens of prominent websites
2026-10-01 CyberScoop National cyber director: Government-industry collaboration vital to managing AI risks, competition with nations
2026-10-01 The Record by Recorded Future Researchers find Chinese hacking campaigns targeting AI firms, Asian governments
2026-10-01 Malwarebytes Labs Fake xStocks, Pendle, and other sites bait crypto users with rewards votes
2026-10-01 The Record by Recorded Future Police disrupt KillSec ransomware, arrest suspected teenage leader
2026-10-01 Cloudflare Blog Introducing Clef: our open-source decision models, and new RL fine-tuning platform
2026-10-01 Cybersecurity Dive State-linked actor targets U.S. AI policy experts in credential phishing campaigns
2026-10-01 Malwarebytes Labs Shadow AI explained: The work shortcut that could leak your company’s secrets
2026-10-01 Infosecurity Magazine China-Linked Hackers Impersonate AI Experts to Target US Policy Insiders
2026-10-01 Help Net Security DeepKeep’s AI Lens flags coding agent data leaks and routes destructive commands for approval
2026-10-01 Help Net Security Exabeam brings AI-assisted security investigations to data that must stay on-premises
2026-10-01 Help Net Security RadarFirst helps teams investigate AI bias, data exposure and unintended actions
2026-10-01 Help Net Security Sophos uses agentic AI to show businesses which security fixes deserve funding
2026-10-01 Help Net Security AI agent used Zammad zero-days to breach Dutch vulnerability disclosure non-profit
2026-10-01 Help Net Security Legit Security extends automated fixes to vulnerable open-source dependencies
2026-10-01 Cloudflare Blog Introducing Cloudflare Basin: an open, serverless data platform, now generally available
2026-10-01 The Record by Recorded Future Cyberattack on major Polish invoicing platform exposes customer data
2026-10-01 Orca Security Blog Introducing The Builder Exchange: Inside Security Stories From the Companies Building Fastest With AI
2026-10-01 Malwarebytes Labs Pentagon breach exposes Social Security numbers and military records of millions
2026-10-01 ZDI (Zero Day Initiative) ZDI-26-751: Microsoft Windows dxgkrnl Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability
2026-09-30 The Record by Recorded Future US sanctions 10 over ATM malware scheme tied to Tren de Aragua
2026-09-30 The Record by Recorded Future Automakers routinely share personally identifiable connected-car data with third parties, report says
2026-09-30 The Record by Recorded Future After reports on suicide deaths, Pentagon puts Cyber Command on notice
2026-09-30 Microsoft Security Blog Secure what’s next: Your guide to Microsoft Security at Microsoft Ignite 2026
2026-09-30 The Record by Recorded Future Google: Vulnerability disclosures double to 10,000 per month as AI fuels exploitation
2026-09-30 Dark Reading As AI Reshapes the SOC Career Ladder, Satisfaction Rises for 91%, but Entry Gets Harder for Nearly Half
2026-09-30 The Hacker News Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets
2026-09-30 The Hacker News Attackers Abuse MSP360 to Deploy ScreenConnect in Dual-RMM Phishing Attacks
2026-09-30 Malwarebytes Labs Hackers steal protective order and foster care records from Arizona courts
2026-09-30 The Hacker News Cisco Warns of Attackers Exploiting Critical Authentication Bypass in SD-WAN Manager
2026-09-30 Cybersecurity Dive National cyber director defends private-sector hacking program, urges focus on security basics
2026-09-30 Rapid7 Blog Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504)
2026-09-30 Rapid7 Blog Higher education is under siege, and fragmented security is making it harder to respond
2026-09-30 The Record by Recorded Future Mobile malware warning from Ukrainian researchers includes iPhone exploit kit
2026-09-30 Microsoft Security Blog Unauthenticated command injection on internet-facing mail servers: tracking CVE-2026-73570
2026-09-30 Infosecurity Magazine Attackers Combine ChatGPT Feature Abuse With ClickFix to Deliver Trojan Malware
2026-09-30 The Hacker News AI Coding Agents Exposed 13,000 Internal Images, Including Billing Records, on GitHub
2026-09-30 The Hacker News US-Focused CSuite Phishing Steals Microsoft 365 Sessions and Deploys RMM Tools for Remote Access
2026-09-30 Cisco Talos China-nexus UAT-11587 targets government and policy organizations across Asia with Antino backdoor
2026-09-30 The Hacker News Attackers Exploit NetScaler Flaw for Root Access, Deploy WHIPSHOT and SLAPSHOT
2026-09-30 The Hacker News OpenSSL Fixes High-Severity DTLS Flaw That Can Leak Heap Memory Unencrypted
2026-09-30 The Hacker News Citrix NetScaler CVE-2026-88772 Exploit Details Show Pre-Auth Path to Shellcode Execution
2026-09-30 ZDI (Zero Day Initiative) ZDI-26-749: WatchGuard FireWare OS samld SAMLSession Deserialization of Untrusted Data Remote Code Execution Vulnerability
2026-09-30 ZDI (Zero Day Initiative) ZDI-26-750: WatchGuard FireWare OS spamd statushdlr Stack-based Buffer Overflow Remote Code Execution Vulnerability
2026-09-29 CyberScoop Attackers exploited Citrix NetScaler zero-day for at least three weeks undetected
2026-09-29 The Record by Recorded Future US Air Force members given over 6 years in prison for cyber theft of more than $2 million
2026-09-29 The Record by Recorded Future Controversial spyware firm Paragon to go public by end of year
2026-09-29 SecurityWeek OpenAI CEO Announces New AI Agent and Avoids Mention of Security Concerns at Developer Conference
2026-09-29 CyberScoop Russian hackers Star Blizzard expand targeting, change up tactics to reach Ukraine and beyond
2026-09-29 The Record by Recorded Future OpenAI apologizes for agents breaching Australian government websites without authorization
2026-09-29 CyberScoop US is looking to weave AI into critical infrastructure for cybersecurity, national cyber director says
2026-09-29 The Hacker News French Tax Data Theft Using Stolen Staff Passwords Went Undetected for Seven Weeks
2026-09-29 The Hacker News Russia's Star Blizzard Targets 100+ Organizations With Fake Event Invites to Deliver Backdoor
2026-09-29 Cybersecurity Dive Dotted Line: How construction is dealing with cybersecurity in the age of AI
2026-09-29 Help Net Security NetScaler zero-day exploitation escalates into mass attacks (CVE-2026-88771)
2026-09-29 Cybersecurity Dive GAO report spotlights industry’s concerns about overlapping cybersecurity regulations
2026-09-29 The Hacker News Kiteworks Fixes Critical Flaw Found During Nine-Hour Precautionary Shutdown
2026-09-29 CyberScoop Kiteworks lifts shutdown advisory after ‘credible threat intelligence’ from federal authorities
2026-09-29 watchTowr Labs Here We Go Again (Citrix NetScaler DTLS Preauth Memory Overflow CVE-2026-88772)
2026-09-29 The Hacker News 101 Malicious npm Packages Add Developers' WhatsApp Accounts to Groups Without Consent
2026-09-29 Infosecurity Magazine Microsoft Warns NeedyMantis Malware Enables Persistent Network Access
2026-09-29 Cloudflare Blog Is your domain using post-quantum encryption? Now you can see for yourself
2026-09-29 Cloudflare Blog Introducing Threat Signals: agentic skills for open-source threat intelligence, free for every Cloudflare account
2026-09-29 Cloudflare Blog Building a post-quantum certificate authority with Merkle Tree Certificates
2026-09-29 Cloudflare Blog Adaptive application security for the AI era: how Cloudflare connects code, traffic, and intelligence to stop attacks
2026-09-29 Sonar Blog SonarQube Server 2026.5 LTA: Ship AI code inside your perimeter with confidence
2026-09-29 The Record by Recorded Future Russian pizza chain with 1,500 locations confirms cyberattack following hacker claims
2026-09-29 The Record by Recorded Future Arizona Supreme Court says hackers stole residents’ personal data
2026-09-29 SecurityWeek Rig Security Emerges From Stealth With $12M to Tackle Agentic AI Identity Risks
2026-09-29 SecurityWeek OpenAI Calls Off GPT-6.1 Astra Launch, Details Safety Cases for Frontier Training
2026-09-29 Malwarebytes Labs Humans are reviewing Copilot users’ bizarre and abusive image-editing requests
2026-09-29 The Hacker News Dutch Police Arrest 24-Year-Old Amsterdam Man in ShinyHunters Investigation
2026-09-29 Detectify Blog Detectify Cyber Hygiene Index Report reveals that most critical vulnerabilities sit unfixed for months
2026-09-29 The Hacker News Official MCP Python SDK Flaw Can Let Malicious Servers Steal OAuth Credentials
2026-09-29 The Hacker News OpenAI Shelves GPT-6.1 Astra After Tests Find Deception and Unauthorized Actions
2026-09-29 CrowdStrike Blog Copy, Paste, Compromised: How ClickFix Attacks Work and How CrowdStrike Stops Them
2026-09-29 The Hacker News OpenAI Pauses Tool Use After Agent Bypasses Internet Controls to Reach External Chatbot
2026-09-29 CyberScoop Citrix patches actively exploited NetScaler zero-days after a weekend of unofficial warnings
2026-09-28 The Record by Recorded Future ShinyHunters exploiting workarounds for Oracle PeopleSoft bug, Mandiant warns
2026-09-28 The Hacker News Bitget Says Attacker Exploited Third-Party Security Product Flaw to Steal $388M
2026-09-28 The Hacker News RatHat Android Malware Console Uses Gemini to Identify Higher-Value Victims
2026-09-28 The Record by Recorded Future New Mexico jury finds Meta deceived consumers about data privacy practices
2026-09-28 Cybersecurity Dive Kiteworks lifts advisory after precautionary warning for customers to shut down systems
2026-09-28 Cybersecurity Dive Citrix urges immediate upgrades of NetScaler amid widespread exploitation attempts
2026-09-28 Cybersecurity Dive Niche AI tools pose major cybersecurity risk to infrastructure operators
2026-09-28 Palo Alto Unit 42 Threat Brief: NetScaler Zero Days CVE-2026-88771 and CVE-2026-88772 Exploited in the Wild
2026-09-28 Microsoft Security Blog NeedyMantis: Unpacking a post-compromise malware family used in targeted operations
2026-09-28 Cloudflare Blog How fast is the web? Explore billions of real-user measurements with BEACON
2026-09-28 The Hacker News ⚡ Weekly Recap: $387M Crypto Hack, Citrix Exploits, AI Agents Go Off-Script, and More Threats
2026-09-28 The Record by Recorded Future Cyberattack on Polish medical software provider exposes patient data
2026-09-28 Infosecurity Magazine Deepfakes Are Becoming a Costly Reality for Businesses, Report Warns
2026-09-28 Cloudflare Blog Supporting native Rust in Workers with the new Emscripten target for wasm-bindgen
2026-09-28 Cloudflare Blog Introducing Forge: the open source pipeline for generating SDKs, CLIs, docs, and more
2026-09-28 Cloudflare Blog Four months of VoidZero at Cloudflare: making the open-source JavaScript toolchain faster for all humans and agents
2026-09-28 Malwarebytes Labs OpenAI pauses work on top AI models after agent slips past internet controls
2026-09-28 The Record by Recorded Future Former US soldier gets nearly six-year sentence for hacking, extorting telecoms
2026-09-28 The Hacker News Webinar: How to Govern AI Agents, Reduce Excessive Access, and Control Shadow AI
2026-09-28 The Hacker News Carbonato Botnet Compromises Docker Hosts to Deploy Telegram-Controlled Hermes AI Agent
2026-09-28 watchTowr Labs Oh Look, The Foot Gun Went Off Again (Citrix NetScaler PreAuth Command Injection CVE-2026-88771)
2026-09-28 SecurityWeek New Mexico Jury Finds Facebook Liable for Deceiving Users About Privacy Protections
2026-09-28 Rapid7 Blog Zero-Day Exploitation of Citrix NetScaler ADC and Gateway: CVE-2026-88771 and CVE-2026-88772
2026-09-28 The Hacker News JADEPUFFER-Linked Attackers Used Compromised Service Principals to Delete Azure Resources
2026-09-28 Cybersecurity Dive Context matters when it comes to cybersecurity’s agentic operating model
2026-09-28 The Hacker News CISA Says Attackers Are Exploiting Two Critical Citrix NetScaler Flaws Globally
2026-09-28 CrowdStrike Blog A Win for Defenders: CrowdStrike and NVIDIA Extend Security Across the AI Stack
2026-09-27 Tenable Research Frequently asked questions about reported Citrix NetScaler zero-day vulnerabilities
2026-09-27 Help Net Security Week in review: Gyazo breach exposes 23.6M user data, TASK#STOMP steals documents
2026-09-27 The Hacker News Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation
2026-09-26 The Hacker News Lunex Stealer Abuses AMD Driver to Disable Security Monitoring and Steal Browser Credentials
2026-09-26 SecurityWeek China and US Agree to Establish AI Safety Channel and Continue Trade and Military Talks
2026-09-26 The Hacker News Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells
2026-09-26 SecurityWeek OpenAI Says Its Models Engaged With US Government Websites in New Model Misbehavior Disclosure
2026-09-26 The Hacker News Elementor CSRF Flaw Lets Attackers Take Over Sites After Admin Clicks Crafted Link
2026-09-26 The Hacker News Kiteworks Urges Customers to Shut Down Systems for 9 Hours Over Possible Cyber Attack
2026-09-25 CyberScoop Army soldier sentenced for spree of attacks on AT&T, Snowflake and other major companies
2026-09-25 The Record by Recorded Future Kiteworks urges customers to stop using platform after warning from federal intelligence agencies
2026-09-25 The Record by Recorded Future Labcorp to overhaul data security practices, pay $2.3 million fine for cybersecurity failings
2026-09-25 Microsoft Security Blog Storm-3168: Agentic-driven cloud attacks using compromised service principals
2026-09-25 Cybersecurity Dive Businesses expand AI’s cybersecurity uses as comfort with technology grows
2026-09-25 The Record by Recorded Future Crypto CEO accuses North Korea of stealing $387 million from Bitget platform
2026-09-25 SecurityWeek In Other News: Clop Leak Site Takeover, Docker Botnet Hunts AI Keys, Water Utility Exposure
2026-09-25 GitGuardian Blog AI Coding Agents Are Leaking Credentials: Cursor, Claude Code, Copilot, and MCP
2026-09-25 The Record by Recorded Future Cyberattack hits Welsh police force, may have affected staff data
2026-09-25 The Hacker News Compromised GitHub Actions Came Back Online and Resumed Executing Mini Shai-Hulud Malware
2026-09-25 Infosecurity Magazine Zero-Click Vulnerabilities in Salesforce Agentforce Expose Wider AI Agent Risk
2026-09-25 The Hacker News PamStealer macOS Malware Adds Live C2 Payload Decryption and Multi-Layer Persistence
2026-09-25 Sonar Blog From Opus 5 to Opus 5.5: better fixes at 58% less cost in the SonarQube Remediation Agent
2026-09-25 The Record by Recorded Future Doubts grow over claims OpenAI agent hacked Australian Medicare portal
2026-09-25 The Hacker News Bitget Says Suspected North Korean Hackers Stole $351.6M After Backend Compromise
2026-09-25 Infosecurity Magazine RemControl Banking Trojan Gives Attackers Remote Control of Android Devices
2026-09-25 SecurityWeek ‘SalesBleed’ Flaws in Salesforce Agentforce Enabled Zero-Click Data Exfiltration
2026-09-25 Infosecurity Magazine Researchers Identify AliExpress Phishing Domains Before Registration
2026-09-25 The Hacker News Cloudflare Fixes Flaw That Let One Container Read Another Customer's Leftover Disk Data
2026-09-24 CyberScoop House and Senate members propose legislation for CISA to step up cyber defenses for biotech
2026-09-24 The Record by Recorded Future Digital forensics firm with US federal contracts covered up ties to Russia, DOJ alleges
2026-09-24 The Record by Recorded Future Lawmakers introduce bill for voluntary telecom cyber rules after Salt Typhoon hacks
2026-09-24 The Record by Recorded Future Rydox cybercriminal marketplace operator pleads guilty following co-conspirator brothers’s deportation
2026-09-24 The Hacker News Unpatched OnePlus Flaws Let Installed Android Apps Gain Root Without Permissions
2026-09-24 The Hacker News ThreatsDay: AI Search Poisoning, AI Coding Tool Leaking Repos, One-Click Code Execution and 13 More Stories
2026-09-24 CyberScoop Phone-hacking company that won U.S. security agency contracts hid Russian ownership, DOJ alleges
2026-09-24 Microsoft Security Blog Beyond the ransomware: Tracking Storm-2570’s consistent tradecraft across deployments
2026-09-24 The Hacker News Placeholder third-party[.]com Referenced Across 1,700+ Repositories Now Serves Malicious Content
2026-09-24 Cybersecurity Dive Wiz uses AI to find vulnerabilities in railroads, hospitals and other critical infrastructure
2026-09-24 GitGuardian Blog How the GitGuardian Mixin Kit Extends Docker Sandboxes for Safer AI Coding
2026-09-24 Infosecurity Magazine Emerging Ransomware Gang Uses Backup Destruction Threats to Pressure Victims
2026-09-24 Cloudflare Blog How Cloudflare addressed a cross-tenant data exposure vulnerability in Containers
2026-09-24 The Hacker News Hacked Ukrainian Sites Serve Fake Cloudflare ClickFix Lures for Psychedelic Stealer
2026-09-24 CyberScoop Bipartisan Senate leaders introduce bill to bolster telecom cybersecurity in response to Salt Typhoon hacks
2026-09-24 Help Net Security Symphony Risk Intelligence uses AI agents to streamline financial crime investigations
2026-09-24 The Record by Recorded Future Kyiv internet providers report major outages after Russian attacks damage data centers
2026-09-24 Malwarebytes Labs OpenAI agent breached Australian government site, took months to report it
2026-09-24 The Record by Recorded Future Astrana latest healthcare tech firm to report data breach to SEC
2026-09-24 Bishop Fox Unified Code, Unified Risks: Uncovering Vulnerabilities in .NET MAUI Applications
2026-09-24 Help Net Security OpenAI agent hacking spree widens to Australia, targeting government website
2026-09-24 Help Net Security Gurucul connects AI activity to identity data for faster threat response
2026-09-24 The Hacker News Corp MDM Spyware Targets Logistics Firms, Steals New SMS and Redirects Calls
2026-09-24 Help Net Security LatticeFlow AI offers managed risk assessments for enterprise AI systems
2026-09-24 Detectify Blog Detectify positioned as a Major Player in the IDC MarketScape for Worldwide Dynamic Application Security Testing
2026-09-24 SecurityWeek OT Security Guidance: NIST Drafts Updated Guide, CISA/FBI Advise on ICS Integrators
2026-09-24 Infosecurity Magazine UK Government Shifts to Service-Led Cyber Governance After Stinging Audit
2026-09-24 The Hacker News Secrets Sprawl Is an Identity Problem That AI Just Made Impossible to Ignore
2026-09-24 Help Net Security New Android malware RemControl steals banking PINs and blocks removal attempts
2026-09-24 Infosecurity Magazine Over 75% of Organizations Experience Microsoft 365 Governance Issues
2026-09-24 The Hacker News 17,000 URLs Reveal How ClickFix Turns Trusted Websites Into Malware Traps: Report by CTM360
2026-09-24 Infosecurity Magazine Data Overtakes Skills as Top Threat Hunting Challenge, SANS Study Finds
2026-09-24 The Hacker News OpenAI Agent Bypassed Australian Medicare Portal Controls to Access Non-Public Files
2026-09-24 The Hacker News TeamFiltration Campaign Compromises Seven Microsoft 365 Accounts Using Default Passwords
2026-09-24 CrowdStrike Blog CrowdStrike Named a Leader in The Forrester Wave™: Proactive Security Platforms, Q3 2026
2026-09-23 watchTowr Labs Is This A Joke? In The Auth Header? (F5 BIG-IP UnAuth Heap-Overflow to RCE CVE-2026-94127)
2026-09-23 The Record by Recorded Future UK regulator to investigate Pornhub parent company for alleged age verification failings
2026-09-23 CyberScoop Watchdog finds most agencies failed to meet CISA cloud security orders, heightening risk of attack
2026-09-23 The Record by Recorded Future No evidence of successful foreign meddling in 2024 election, spy agencies found
2026-09-23 CyberScoop OpenAI, Ukraine partner on ‘Daybreak’ program to protect power grids and water systems
2026-09-23 The Record by Recorded Future Ryuk ransomware operator gets 2-year sentence after extorting victims for $1.2 million
2026-09-23 Cybersecurity Dive Businesses fear cyberattacks more than anything else, driven by AI and supply chain worries
2026-09-23 The Record by Recorded Future FBI investigating alleged ShinyHunters breach of its jobs site
2026-09-23 Cybersecurity Dive Industrial leaders face cyber resilience gap as attacks shake confidence
2026-09-23 The Record by Recorded Future Latvia arrests suspected hacker for electronics repair company breach
2026-09-23 Infosecurity Magazine EU Auditors Warn Information-Sharing Gaps Are Hindering Cyber Incident Response
2026-09-22 CyberScoop After water attacks, Capitol Hill offers its own proposal for an AI-cyber test program
2026-09-22 The Record by Recorded Future Canadian regulator opens probe of IDScan for allegedly violating data privacy laws
2026-09-22 CyberScoop Volexity spots another China-aligned threat group exploiting Chrome and Microsoft defects
2026-09-22 The Record by Recorded Future Two arrested in UK after Microsoft takedown of ‘Eviltokens’ AI-chatbot for cybercriminals
2026-09-22 CyberScoop Citing China, President Trump doubles down on hands-off approach to AI regulation
2026-09-22 CyberScoop Microsoft and partners disrupt EvilTokens, a comprehensive cybercrime service for financial fraud
2026-09-22 Varonis Blog Introducing Varonis Triage Agent: An Autonomous Incident Researcher to Amplify MDDR Service
2026-09-22 SecurityWeek Nightmare Eclipse Drops New Microsoft Defender Exploit After Revealing Identity
2026-09-22 The Record by Recorded Future AI is set to help cyber attackers much more than defenders, says UK official
2026-09-22 The Record by Recorded Future Russia's internet shutdowns disrupt warnings about incoming drone attacks
2026-09-22 Cloudflare Blog Introducing Worker Previews: Isolated preview environments for every change your agent makes
2026-09-22 Dark Reading More Than a Third of Industrial Orgs See Cybersecurity Risk as a Top Obstacle to Growth, Study Finds
2026-09-22 Infosecurity Magazine Network Segmentation Failures Are Expanding the Corporate Attack Surface
2026-09-22 Proofpoint Blog Proofpoint Breaks Down the Divide Between Data Security and AI Security with the Industry’s First Unified Agentic System
2026-09-22 Malwarebytes Labs Meta’s Muse AI assistant has a zero-day that can turn it into a Mac backdoor
2026-09-22 Infosecurity Magazine CISOs Must Update Incident Response Playbooks for Multimodal Deepfakes, Gartner Warns
2026-09-22 SecurityWeek Japan Dismantles First North Korean Laptop Farm as US and Allies Detail Wider Scheme
2026-09-22 SecLists / Daniel Miessler How to Think About the Difference Between Choice and Score in Jev
2026-09-22 ZDI (Zero Day Initiative) ZDI-26-719: Cisco ThousandEyes Virtual Appliance DHCP Client Command Injection Remote Code Execution Vulnerability
2026-09-21 The Record by Recorded Future EU data regulator fines Google more than $460 million for location data violations
2026-09-21 The Hacker News Fake LastPass Authenticator Installer Abuses Microsoft-Signed Driver to Kill Antivirus and EDR
2026-09-21 The Hacker News Contagious Interview Campaign Compromises 30,000 Devices, Steals $10.71M in Crypto
2026-09-21 Cybersecurity Dive China-nexus actor steals thousands of documents in monthslong exploitation campaign
2026-09-21 The Record by Recorded Future Belgian table tennis, gymnastics federations hit by cyberattacks
2026-09-21 The Hacker News ⚡ Weekly Recap: Cisco 0-Day, AI Agent RCE, ClickFix Attacks, ClickFix Surge, and Browser Hijacks
2026-09-21 The Hacker News TASK#STOMP PowerShell Backdoor Steals Documents, Wi-Fi Passwords, and Clipboard Data
2026-09-21 The Record by Recorded Future Cyberattack hits University of Munich, potentially exposing student financial data
2026-09-21 Help Net Security The TASK#STOMP Windows backdoor takes Wi-Fi passwords, screenshots, and business files
2026-09-21 The Record by Recorded Future ShinyHunters cybercrime gang takes over Cl0p ransomware site, demands extortion payment
2026-09-21 Sonar Blog How SonarQube Hunter Agent adds a new layer of assurance for regulated companies
2026-09-21 Varonis Blog Varonis Named a Pace Setter in the September 2026 Gartner® Emerging Market Quadrant for AI Application Security
2026-09-21 The Record by Recorded Future LinkedIn wins court order blocking mass scraping of user data
2026-09-21 Malwarebytes Labs ShinyHunters hacks rival extortion gang and takes over its dark web site
2026-09-21 Kaspersky Securelist Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO
2026-09-21 Palo Alto Unit 42 From Exposure to Lockdown: How AWS Neutralizes Compromised IAM Credentials through Managed Policies
2026-09-21 The Hacker News ClickFix Lures Deploy ChainScript RAT Using Polygon to Rotate C2 Infrastructure
2026-09-21 The Hacker News Jade Sleet Linked to Indian IT Provider Breach With FLATROOF and ROOFDECK Backdoors
2026-09-21 Help Net Security Product showcase: Helmit alerts parents when online conversations show signs of trouble
2026-09-20 Help Net Security Week in review: Cisco patches exploited email gateway 0-day, Revolut breach
2026-09-19 The Hacker News Claude Opus 5 Helped Researchers Take Over OpenAI Staff Accounts via Chained Flaws
2026-09-19 The Hacker News Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild
2026-09-19 The Hacker News Google Gemini Broke Into Real Company Systems After Security Test Domain Mix-Up
2026-09-19 The Hacker News CrowdSec Says TanStack npm Attack Led to Copy of 170 Private GitHub Repositories
2026-09-18 The Hacker News Public Exploits Released for Four Linux Kernel Flaws That Enable Local Root
2026-09-18 Sentinel Labs Don’t Call Us, We’ll Call Your APIs | TraderTraitor Backdoors Resurface on Victim With No Crypto Ties
2026-09-18 The Hacker News New WordPress Click2Shell Flaw Forces Theme Installs, Can Chain to Code Execution
2026-09-18 CyberScoop International security agencies warn about North Korean hackers exploiting job seekers to steal crypto, data
2026-09-18 The Hacker News Transparent Tribe Deploys New Rust Backdoor Using Private GitHub Repositories for C2
2026-09-18 Cybersecurity Dive CISA ends weekly vulnerability roundups as part of shift to prioritization approach
2026-09-18 The Record by Recorded Future Nations take action on North Korean IT workers after UN report
2026-09-18 SecurityWeek In Other News: Ransomware Developer Sentenced, Plugin4Shell AI Attack, Critical SAP Flaw
2026-09-18 Infosecurity Magazine New Settra Ransomware Variant Deployed in Attacks on Retail and Manufacturing
2026-09-18 The Record by Recorded Future Hacking group ‘NightEagle’ targeting China’s high-tech sector expands operations to Russia
2026-09-18 The Hacker News Microsoft Patches CVSS 10.0 Azure AI Foundry Flaw Enabling Unauthorized Privilege Escalation
2026-09-18 The Hacker News An Abandoned CDN Domain Was Re-Registered. Thousands of Sites Still Call It.
2026-09-18 The Hacker News Plugin4Shell Lets Repository Owners Swap Pinned Plugin Code Across Four AI Coding Agents
2026-09-18 The Hacker News WeaselBiscuit Stealer Spreads via 13 npm Packages to Harvest Chrome Extension Storage
2026-09-18 Palo Alto Unit 42 A Vault with a Heap-View: The Uncomfortable Space Between AgentCore Harness and Identity
2026-09-18 The Hacker News Claimed Bug Bounty Hunter Likely Used LLM to Build PhantomRaven npm Stealer
2026-09-18 Help Net Security Zero-click RCE vulnerability hit four major AI coding agents, two remain unpatched
2026-09-18 Help Net Security Android apps can now check security patches down to individual device components
2026-09-18 Help Net Security 98% of fraudulent hires have company credentials by the time they’re caught
2026-09-18 ZDI (Zero Day Initiative) ZDI-26-715: Linux Mint Xreader PDF File Parsing Type Confusion Remote Code Execution Vulnerability
2026-09-18 ZDI (Zero Day Initiative) ZDI-26-716: Cisco Identity Services Engine createDBLink Command Injection Remote Code Execution Vulnerability
2026-09-18 ZDI (Zero Day Initiative) ZDI-26-717: Cisco Identity Services Engine AlarmMessageDiskQueue Deserialization of Untrusted Data Remote Code Execution Vulnerability
2026-09-18 ZDI (Zero Day Initiative) ZDI-26-718: Cisco Identity Services Engine MnTRESTLivelogService XML External Entity Processing Information Disclosure Vulnerability
2026-09-18 The Record by Recorded Future North Korean hackers infect thousands of devices across 100 countries as part of ‘WaterPlum’ campaign
2026-09-17 The Record by Recorded Future European Commission set to push social media restrictions, safety requirements into law
2026-09-17 Microsoft Security Blog From guidance to action: Security fundamentals that materially reduce risk
2026-09-17 The Record by Recorded Future China’s FamousSparrow hackers target Latin America with new backdoor
2026-09-17 Microsoft Security Blog Improving email security outcomes with real-world Microsoft Defender insights
2026-09-17 Cybersecurity Dive FBI, Coast Guard probe suspected cyberattacks on ships entering US waters
2026-09-17 The Record by Recorded Future Hackers claim breach of Russian election systems days before parliamentary vote
2026-09-17 Cybersecurity Dive Manufacturers make patching progress, but identity management still major weakness
2026-09-17 The Record by Recorded Future Congress eyes new support for Cyber Command after recent suicide deaths
2026-09-17 Help Net Security Iranian strikes on AWS facilities left customer data beyond recovery in Bahrain, UAE
2026-09-17 Kaspersky Securelist The Odyssey and trojans again: MovieReaper attacks users in multiple countries via compromised torrents
2026-09-17 Infosecurity Magazine New Chinese-Made ‘RatHat’ Android Malware Leverages AI to Steal Financial Data
2026-09-17 Help Net Security CISA wants critical infrastructure orgs and smaller security teams to start using cyber decoys
2026-09-17 The Hacker News Critical Unbound DNSSEC Validator Flaw Could Allow RCE via a Malicious DNS Zone
2026-09-17 The Record by Recorded Future Israeli contractor BlackCore trained Angolan officials in online influence operations
2026-09-17 Help Net Security Google’s new agent security system detects tool misuse, loops and rogue behavior
2026-09-17 The Hacker News Can You Prove a New CVE Is Exploitable Before Attackers Do? Learn How in This Webinar
2026-09-17 Help Net Security Unauthenticated attackers are bypassing Cisco ISE’s management interface (CVE-2026-76460)
2026-09-17 The Hacker News China-Aligned FamousSparrow Deploys SparroWocky Backdoor Across Latin America
2026-09-17 Cisco Talos Ransomware incidents in Japan in the first half of 2026: Investigation of The Gentlemen’s infrastructure and evidence of Qilin's AI use
2026-09-17 CyberScoop America’s cyber strategy overlooks the infrastructure that actually keeps the military moving
2026-09-17 The Hacker News OpenAI Reveals Six Model Incidents Involving Hidden Failures and Unauthorized Uploads
2026-09-17 The Hacker News BIND 9 Update Fixes 14 Flaws, Including an Unauthenticated Crash Over DNS-over-HTTPS
2026-09-17 The Hacker News Gyazo Breach Exposes 23.62 Million User Records and 490 Million Image Metadata Records
2026-09-17 The Hacker News Cisco Warns of New Zero-Day ISE Auth Bypass (CVSS 10.0) Exploited in Active Attacks
2026-09-17 The Hacker News U.S. Seizes NightmareStresser Domains Linked to Hundreds of Thousands of DDoS Attacks
2026-09-17 ZDI (Zero Day Initiative) ZDI-26-714: Samsung rlottie Stack-based Buffer Overflow Remote Code Execution Vulnerability
2026-09-17 CrowdStrike Research CrowdStrike Named a Leader in The Forrester Wave™: External Threat Intelligence Service Providers, Q3 2026
2026-09-17 Cobalt Blog From Internet Exposure to Operational Disruption: A Red Team View of Connected Infrastructure
2026-09-16 The Record by Recorded Future Key lawmaker suggests action on AI safety legislation will wait until 2027
2026-09-16 Cloudflare Blog When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
2026-09-16 Cobalt Blog How Cobalt Brings Real-Time Exploit and Threat Intelligence to Vulnerability Findings
2026-09-16 The Record by Recorded Future Coast Guard, FBI boarded tanker after attack by ‘foreign cyber actors’
2026-09-16 The Record by Recorded Future House passes bill to equip local law enforcement with scam-fighting tools
2026-09-16 The Record by Recorded Future International Meteor Organization says cyberattack dealt ‘critical blow’ to website
2026-09-16 Cybersecurity Dive CISA looks to recruit general infrastructure security experts rather than sector-focused advisers
2026-09-16 Infosecurity Magazine PHP Webshell Campaign Targets WordPress Through Critical WooCommerce Plugin Bug
2026-09-16 CyberScoop Coast Guard, FBI board US-bound foreign ships in order to probe for cyberattacks
2026-09-16 The Record by Recorded Future Three Ukrainians to face charges for alleged hack of 610,000 Roblox accounts
2026-09-16 JFrog Security Research JFrog Artifactory Supports LuaRocks Hosting for NGINX, OpenResty and Kong
2026-09-16 Infosecurity Magazine Major Cyber Vendors Turn to New UK Testing Program as MITRE Evaluations Face Changes
2026-09-15 SecurityWeek Microsoft Commits to Sweeping AI Privacy Rules for Students. Will Other Tech Giants Follow?
2026-09-15 The Record by Recorded Future Norway announces investigations into telecom Telenor’s work with Myanmar junta
2026-09-15 CyberScoop What’s next for CISA’s CDM program that gives cybersecurity tools to federal agencies
2026-09-15 The Hacker News KREMLIN Banking Malware Hijacks Chrome and Edge to Steal Credentials and Session Tokens
2026-09-15 The Hacker News Iranian Hackers Use Telegram-Controlled Malware to Spy on Dissidents and Journalists
2026-09-15 The Record by Recorded Future Iranian cyber spies used fake MRI scan results to hack ‘enemy of regime’
2026-09-15 The Record by Recorded Future Zelensky appoints former police chief to lead Ukraine’s cyber coordination center
2026-09-15 Rhino Security Labs Multiple Vulnerabilities in Frappe LMS Leading to Remote Code Execution
2026-09-15 The Record by Recorded Future Electric and gas utility CenterPoint Energy warns of data breach after dark web post
2026-09-15 Tenable Research Australia is replacing the Essential Eight with a new cyber framework. Here’s how exposure management can help you get ahead of it.
2026-09-15 Cloudflare Blog Have it both ways: stay discoverable in search while disallowing AI training
2026-09-15 The Record by Recorded Future China spy chief points at US AI models in cyber threat warning
2026-09-15 Rapid7 Blog CVE-2026-76461: Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
2026-09-15 The Hacker News Attack Chains, Not Just Attack Surfaces: Why Testing Individual Techniques Misses the Point
2026-09-15 The Hacker News Mass-Scanning Campaign Exploits Vite Flaw to Extract Cloud Credentials From Exposed Dev Servers
2026-09-15 SecurityWeek Apple Patches 200 Vulnerabilities With New iOS 27, macOS Golden Gate 27 Releases
2026-09-15 SecurityWeek Microsoft AI Code of Conduct Sets Cyberattack Boundaries, Chain of Command, Safety Constraints
2026-09-15 The Hacker News LiteSpeed Enterprise Flaw Could Let One Hosting Account Gain Root Access on a Shared Server
2026-09-15 The Hacker News Cisco Secure Email Gateway Flaw Exploited in the Wild, Enables Root Command Execution
2026-09-15 The Hacker News China-Linked Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy GRIMWEDGE
2026-09-14 The Record by Recorded Future Members of ‘Black Axe’ cybercriminal group extradited from South Africa
2026-09-14 CyberScoop Five alleged leaders of Black Axe’s operations in South Africa extradited to US
2026-09-14 The Hacker News 3BB Attacker Used MeshCentral Backdoor for Root Access, Targeted Subscriber Credentials
2026-09-14 The Hacker News Telegram Desktop Flaw Lets Hidden JavaScript Exfiltrate Messages From HTML Exports
2026-09-14 The Hacker News Red Heron Exploits Gitea RCE to Compromise 13 Organizations Across Six Countries
2026-09-14 The Record by Recorded Future Pro-Ukraine Hacking Cat group deploying new malware against Russian targets
2026-09-14 The Record by Recorded Future Hundreds of fake government websites target users in Central Asia
2026-09-14 The Hacker News WordPress Adds Automated Plugin Reviews to Block High-Risk Updates Before Distribution
2026-09-14 Rapid7 Blog Rapid7 Named Among Notable Vendors in Forrester MDR Landscape: Why the Future is Exposure-informed, Preemptive MDR
2026-09-14 Cybersecurity Dive Malicious actors already using critical GitLab flaw, CISA and others warn
2026-09-14 Orca Security Blog Breaking: GitLab Critical Path Traversal Flaw Exploited in the Wild — Patch Immediately
2026-09-14 The Hacker News ⚡ Weekly Recap: Rogue AI Agents, WeChat Worm, PaperCut Attacks, AI Espionage, and Rootkits
2026-09-14 Malwarebytes Labs Google’s new search redirects make links harder to check before you click
2026-09-14 Sonar Blog Your AI agent doesn't know your codebase's context or constraints, and that's costing you
2026-09-14 Infosecurity Magazine Defense Cyber Spending Set to Surge Amid Rising Attacks on Military Systems
2026-09-14 The Record by Recorded Future Revolut handed customer data to fraudsters using government email account
2026-09-14 SecurityWeek Chinese Hackers Exploit Critical Tencent Software Flaw for One-Click Code Execution
2026-09-14 Palo Alto Unit 42 Unmasking Cloud Identities: From Behavioral Clustering to Automated Detection
2026-09-14 SecurityWeek ConnectWise Patches ScreenConnect Vulnerability Exploited in Worm-Like Attacks
2026-09-14 The Hacker News Malicious Twitch Browser Extension Leaks OAuth Tokens From Nearly 31,000 Users
2026-09-13 The Record by Recorded Future Thorough reorganization at NSA will create five 'mission centers,' including cyber and AI
2026-09-13 SecurityWeek Anthropic CEO Dario Amodei Says AI Industry Needs to Give Safety Measures Time to Catch Up
2026-09-13 The Hacker News Attackers Use Passkey Phishing to Hijack Microsoft Cloud Accounts and Exfiltrate Data
2026-09-13 Help Net Security Week in review: Linux rootkit deployed on F5 BIG-IP APM devices, Cisco FMC bugs exploited
2026-09-12 The Hacker News CISA Adds 5 Actively Exploited Artifactory, ScreenConnect, and RouterOS Flaws to KEV
2026-09-12 The Hacker News OpenAI Agents Linked to RubyGems Campaign That Gained RCE on RubyDoc Servers
2026-09-12 SecurityWeek Users in Houthi-Held Yemen Tried to Develop Advanced Weapons With AI, Anthropic Says
2026-09-12 CyberScoop Researchers say OpenAI agents were behind May hacking campaign targeting RubyGems
2026-09-11 The Record by Recorded Future Florida says motor vehicle data breach tied to credentials stolen from officer’s personal device
2026-09-11 The Hacker News Anthropic Says Seven China-Based AI Labs Ran Industrial-Scale Claude Distillation Attacks
2026-09-11 Cybersecurity Dive State authorities warn they lack resources to address cyber threat to critical sectors
2026-09-11 Malwarebytes Labs Crypto customers targeted by scammers after email marketing provider breach
2026-09-11 The Hacker News Claude Used to Automate Exploitation and Data Theft Across Multiple Victims
2026-09-11 SecurityWeek In Other News: InjectEave Attack, SIM Swapper Sentenced, Glasswing Findings Review
2026-09-11 The Hacker News Russian State-Sponsored Hackers Use Claude to Rebuild Malware After Detection
2026-09-11 Rapid7 Blog The Fraud Ecosystem: A Transition From Known Marketplaces to a Fragmented Environment
2026-09-11 Bishop Fox CVE-2026-82329: Unauthenticated Administrative Access in JFrog Artifactory via an Empty Cluster Join Key
2026-09-11 The Record by Recorded Future Anthropic caught Russia-linked spies using Claude in hacking operations
2026-09-11 The Record by Recorded Future Ukrainian hacker gets four years in US prison over Conti ransomware attacks
2026-09-11 Cybersecurity Dive Accountability, oversight and AI: Inside Microsoft’s security transformation
2026-09-11 Infosecurity Magazine Most Organizations Skip Permissions Reviews Before Deploying AI Tools
2026-09-11 Help Net Security IDScan confirms breach after 153 million driver’s licenses leak on dark web
2026-09-11 The Hacker News Attackers Chain JFrog Artifactory Flaws to Gain Admin Control and Plant Backdoors
2026-09-11 The Hacker News China-Linked UNC3569 Exploited Sogou Input Method Flaw to Deploy GRAYRABBIT Backdoor
2026-09-11 The Hacker News PaperCut Replaces Emergency Patches With Fixes for Two Actively Exploited Flaws
2026-09-11 The Hacker News Cisco FMC Flaws Exploited to Steal Credentials and Deploy Qilin Ransomware
2026-09-11 Help Net Security Getting a stranger’s phone kicked off the cellular network costs a few dollars
2026-09-10 The Record by Recorded Future Treasury urges banks to file cyber scam reports, noting nearly $13 billion in losses since 2023
2026-09-10 The Record by Recorded Future IDScan confirms breach after hackers offer 153 million driver’s license scans for sale
2026-09-10 The Record by Recorded Future Cyber Command turns to veteran of intelligence agencies for top AI role
2026-09-10 The Hacker News ThreatsDay: 200 Android Flaws, Browser-Built Phishing, 119K Scam Shops + 23 More Stories
2026-09-10 Imperva Research Imperva Customers Protected Against StyleSmuggler (CVE-2026-75650) in Adobe Commerce and Magento Open Source
2026-09-10 Microsoft Security Blog Protecting organizations from AI-assisted executive impersonation and invoice fraud
2026-09-10 The Hacker News Google Play Early Access Abused to Push Thousands of Deceptive Android Apps
2026-09-10 Cybersecurity Dive White House sees water cybersecurity partnership in Texas as national blueprint
2026-09-10 CyberScoop Governments ‘buying time’ in race between innovation, security, national cyber director says
2026-09-10 The Record by Recorded Future Russian e-commerce giant Wildberries says DDoS attack delayed payments to sellers
2026-09-10 Help Net Security Attackers call employees’ personal phones to break into Microsoft 365 accounts
2026-09-10 Proofpoint Blog Proofpoint Expands AI-Powered Investigations to Microsoft 365 and Deepens Insider Risk Visibility into AI Activity
2026-09-10 Tenable Research The agentic harness for Tenable Hexa AI: How Tenable prevents AI agents from going off the rails
2026-09-10 Infosecurity Magazine FBI Publishes First-Ever Cyber Strategy, With Focus on Disrupting Threat Actors
2026-09-10 The Hacker News Check Point Discloses Two 9.8-Rated VPN Certificate Flaws Enabling Unauthenticated RCE
2026-09-10 The Hacker News Gigabud Creates Android Work Profiles to Hide From Banking App Malware Checks
2026-09-10 Help Net Security Cisco FMC bugs exploited by nation-state and ransomware actors (CVE-2026-20079, CVE-2026-20316)
2026-09-10 Malwarebytes Labs Update Chrome now to protect against an actively exploited vulnerability
2026-09-10 The Hacker News CISA Flags Exploited Cisco, Citrix, Fortinet Flaws, Sets Sept. 12 Federal Patch Deadline
2026-09-10 Palo Alto Unit 42 The Machine With Many Faces: Post-Exploitation Identity Misuse in SPIFFE/SPIRE
2026-09-10 The Hacker News Nearly 1 in 10 Exposed LiteLLM Gateways Accepted the Example "sk-1234" Admin Key
2026-09-10 Help Net Security Product showcase: GitGuardian Honeytoken catches credential theft as it happens
2026-09-10 Help Net Security Cybercriminals are building phishing pages that exist only inside victims’ browsers
2026-09-09 The Record by Recorded Future CISA head says agency must change quickly to prevent the 'worst that could happen'
2026-09-09 The Record by Recorded Future US disrupts Xinbi Guarantee marketplace fueling the cyber scam economy
2026-09-09 The Record by Recorded Future Grindr settles privacy lawsuit tied to disclosure of users’ HIV statuses for $35 million
2026-09-09 Microsoft Security Blog Passkey-themed social engineering leads to identity and cloud compromise
2026-09-09 The Record by Recorded Future Electronic health record company says customer data stolen in breach
2026-09-09 SecurityWeek AI Is Giving Lesser-Resourced Attackers Nation-State-Level Reach, Google Warns
2026-09-09 The Record by Recorded Future Multiple Chinese hacking groups seen using identical Chrome zero-day exploit
2026-09-09 Cisco Talos Active exploitation of Cisco Secure Firewall Management Center vulnerabilities
2026-09-09 CyberScoop FBI cyber chief worries private sector not sharing enough cyber threat information
2026-09-09 SecurityWeek Fortinet Patches Critical Vulnerabilities in FortiMonitorOnSight, Chrome Extension
2026-09-09 Help Net Security Orchid Security targets AI agent risk with drift detection and kill switches
2026-09-09 Tenable Research Introducing the CyberAgents Exchange AI Inspector: Rigorous review for community-built AI
2026-09-09 Cloudflare Blog How we rebuilt Cloudflare Workers’ module registry for Node.js compatibility
2026-09-09 CyberScoop FBI officials say AI is bolstering adversaries, emphasizing need to focus on cyber basics, patching
2026-09-09 Help Net Security $245 million in stolen crypto funded racketeering crew’s lavish lifestyle
2026-09-09 Help Net Security Hackers deploy Linux rootkit on F5 BIG-IP APM devices, hiding web shell in memory
2026-09-09 Palo Alto Unit 42 Untracked Nightmares: The Threats Hiding Behind Commodity Infrastructure
2026-09-09 Help Net Security Chinese AI firms are siphoning capabilities from American models, CISA warns
2026-09-09 Help Net Security Securin Platform helps security teams prove when attack paths are closed
2026-09-09 Infosecurity Magazine Microsoft Shatters Patch Tuesday Record With 974 CVE Fixes in September 2026
2026-09-09 Help Net Security September 2026 Patch Tuesday: Record patch count, 2 zero-days, and a SigRed successor
2026-09-09 Help Net Security Google fixes yet another actively exploited Chrome zero-day (CVE-2026-87491)
2026-09-09 Proofpoint Blog Proofpoint 2026 Voice of the CISO Report Finds Cyber Resilience Improving, While AI Expands the CISO Mandate
2026-09-08 The Record by Recorded Future Microsoft posts nearly 1,000 bugs for Patch Tuesday as CISA warns two being exploited
2026-09-08 Cisco Talos Microsoft Patch Tuesday for September 2026 — Snort rules and prominent vulnerabilities
2026-09-08 The Record by Recorded Future Scammer behind $245 million crypto heist pleads guilty to RICO charges
2026-09-08 CyberScoop Russian national extradited to US for alleged involvement in bank-account takeover scheme
2026-09-08 CyberScoop CIA’s Michael Ellis says cyber intelligence is changing how the agency operates
2026-09-08 The Record by Recorded Future CIA official touts agency’s Cyber Mission Center in capture of Venezuela’s Maduro
2026-09-08 The Record by Recorded Future Russian suspect in bank account takeovers is extradited to US
2026-09-08 The Record by Recorded Future Italian tech collective Autistici/Inventati shuts down after US terrorist designation
2026-09-08 Tenable Research Microsoft’s September 2026 Patch Tuesday addresses 964 CVEs (CVE-2026-81963, CVE-2026-85880)
2026-09-08 Tenable Research Claude Mythos 5 is coming to Tenable One, powering the new “Adversary View”
2026-09-08 Infosecurity Magazine France Establishes New Government-Focused Cyber Incident Response Unit
2026-09-08 Cybersecurity Dive Don’t let AI distract from cybersecurity basics, officials and executives warn
2026-09-08 Tenable Research StyleSmuggler (CVE-2026-75650): Frequently asked questions about Adobe Commerce and Magento zero-day
2026-09-08 Cloudflare Blog Automatic Key Exchange: faster, post-quantum secure origin handshakes for 45 billion daily connections (and counting)
2026-09-08 Cisco Talos ClearFake WebDAV infection chain delivers Amatera stealer, ZigCryptoStealer, and NetSupport Manager
2026-09-08 Proofpoint Blog Proofpoint Strengthens Executive Leadership Team with Appointment of Chief Legal Officer and Chief People Officer
2026-09-08 Google Project Zero Testing race conditions with memory access tracing and stack-based delay injection
2026-09-08 ZDI (Zero Day Initiative) ZDI-26-616: Koha Eval Code Injection Remote Code Execution Vulnerability
2026-09-08 ZDI (Zero Day Initiative) ZDI-26-617: Microsoft Windows MIDI Service Incorrect Permission Assignment Local Privilege Escalation Vulnerability
2026-09-08 ZDI (Zero Day Initiative) ZDI-26-618: Microsoft Windows UMPDDrvStretchBlt Improper Object Management Local Privilege Escalation Vulnerability
2026-09-08 ZDI (Zero Day Initiative) ZDI-26-619: Microsoft Windows UMPDDrvStretchBltROP Improper Object Management Local Privilege Escalation Vulnerability
2026-09-08 ZDI (Zero Day Initiative) ZDI-26-620: Microsoft Windows UMPDDrvPlgBlt Improper Object Management Local Privilege Escalation Vulnerability
2026-09-08 ZDI (Zero Day Initiative) ZDI-26-621: Microsoft Windows UMPDDrvRealizeBrush Improper Object Management Local Privilege Escalation Vulnerability
2026-09-08 ZDI (Zero Day Initiative) ZDI-26-622: Microsoft Windows IKEv2 AES-GCM Decryption Integer Underflow Remote Code Execution Vulnerability
2026-09-07 The Hacker News PEEP Turns Chrome and Edge Into Post-Compromise Backdoors for Host Command Execution
2026-09-07 The Hacker News Fake IT Calls Target Executives in Microsoft 365 Data Theft and Extortion Attacks
2026-09-07 The Hacker News ⚡ Weekly Recap: Chrome 0-Day, Router Hijacks, Coder Supply Chain Attack and More
2026-09-07 Help Net Security Hackers exploit RouterOS flaws to hijack MikroTik devices without authentication
2026-09-07 Infosecurity Magazine N-able Releases Hotfix for Critical Remote Code Execution Vulnerability
2026-09-07 Infosecurity Magazine Rhysida Publishes Berlin Government Data After €2m Extortion Demand Refused
2026-09-07 Help Net Security N-able patches critical N-central zero-day exploited in the wild (CVE-2026-86218)
2026-09-07 The Record by Recorded Future Berlin investigates new data leak after hackers publish stolen login credentials
2026-09-07 The Hacker News Rogue ScreenConnect Clients Spread Four-Stage VBScript Chain to Newly Connected Hosts
2026-09-07 The Hacker News Telerik UI Padding-Oracle Bug Chained to Unauthenticated RCE — Public Exploit Released
2026-09-07 The Hacker News N-able Issues Fourth N-central Hotfix in Five Weeks for Unauthenticated RCE Flaw
2026-09-07 The Hacker News JSCeal Malware Can Bypass Google Authentication Using Stolen Session Cookies
2026-09-06 The Hacker News Attackers Hijack MikroTik Routers Through Internet-Exposed SSH Without Authentication
2026-09-06 The Hacker News Four REVSTEALER-Linked Modules Disable Windows Update and Defender to Run a Crypto Miner
2026-09-06 Help Net Security Week in review: Claude accounts compromised through infostealer, Patch Tuesday forecast
2026-09-05 The Hacker News Unpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online Stores
2026-09-05 The Hacker News Attackers Breached JetBrains Cadence via Unpatched TeamCity, Extracting AWS Credentials
2026-09-05 The Hacker News Critical VMware Workstation and Fusion Flaw Lets VM Admins Execute Host Code
2026-09-05 The Hacker News Trezor Says ShipMonk Breach Exposed 67,000 U.S. Customers' Data It Said Was Deleted
2026-09-05 The Hacker News Thousands of OpenAI Agents Quietly Turned an Abandoned Wiki Into Their Coordination Channel
2026-09-05 The Hacker News Attackers Exploit PaperCut Flaws to Steal Credentials From Schools and Universities
2026-09-04 CyberScoop European parliament members call for slowdown of Serbia’s EU entry over spyware use
2026-09-04 SecurityWeek In Other News: Microsoft’s Cloud Patches, Hacked Dropbox Accounts, Guardio’s $1.1B Valuation
2026-09-04 SecurityWeek OpenAI Pledges $1 Billion to Bring Frontier AI to Critical Infrastructure Defenders
2026-09-04 The Hacker News Phishing Campaign Sends Millions of Emails Using Invisible Unicode to Evade Filters
2026-09-04 The Hacker News PostgreSQL Fixes 12-Year-Old Logical Decoding Flaw Enabling Replication-Role Code Execution
2026-09-04 The Hacker News New Ted Backdoor Hides Inside Victims' Own HAProxy Builds to Intercept Web Traffic
2026-09-04 The Record by Recorded Future UK account-hack losses surge as new reporting system exposes hidden cases
2026-09-04 Cybersecurity Dive OpenAI pledges $1B to provide resources, training for frontline cyber defenders
2026-09-04 The Record by Recorded Future Russian data centers face new security requirements amid Ukraine's drone threats
2026-09-04 Sonar Blog Four new languages arrive in SonarQube Cloud: MuleSoft DataWeave, Gosu, Groovy, and PowerShell
2026-09-04 Rapid7 Blog DPRK APTs: Ted backdoor and curlRAT target South Korean media and automotive sectors
2026-09-04 Infosecurity Magazine OpenAI Pledges $1bn to Bring its AI Cybersecurity Tools to Essential Services
2026-09-04 The Hacker News Over 440,000 Exploit Attempts Target Super Forms and Elementor Pro RCE Flaws
2026-09-04 The Hacker News Plex Urges Immediate Updates After Patching Multiple Undisclosed Security Flaws
2026-09-04 The Hacker News GPT-6 Astra Scores 100% on ExploitBench as OpenAI Blocks PoC Exploit Requests
2026-09-04 Help Net Security OpenAI is putting $1 billion behind Daybreak for defenders working without enterprise budgets
2026-09-04 The Record by Recorded Future US offers $10 million for info on Iranian allegedly behind cyberattacks on critical infrastructure
2026-09-03 Cloudflare Blog Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak models
2026-09-03 The Record by Recorded Future Large group of Serbian opposition, activist figures targeted with spyware
2026-09-03 The Hacker News ThreatsDay: CEO Phishing Kits, 5K Dropbox Account Hacks, OAuth Traps + 17 More Stories
2026-09-03 Orca Security Blog Orca Security and ServiceNow Keep Your CMDB Accurate at the Speed of Cloud
2026-09-03 Microsoft Security Blog ASCII smuggling crosses over from AI prompt injection to phishing evasion
2026-09-03 The Hacker News Critical Cisco Nexus 9000 Flaw Lets Unauthenticated Remote Attackers Run Code as Root
2026-09-03 SecurityWeek Manchester Airports Group Data on 8.8 Million People Leaked After Ransom Refusal
2026-09-03 The Hacker News BraZetsu Malware Turns Compromised Windows Hosts Into Criminal Marketplace Inventory
2026-09-03 Infosecurity Magazine Pegasus Zero-Click Exploit Infects Serbian Student Activist's iPhone
2026-09-03 The Hacker News Thomson Reuters Court Software Breach May Have Exposed SSNs and Sealed Data
2026-09-03 Help Net Security Thomson Reuters reveals breach that exposed U.S. and Canadian court records
2026-09-03 The Record by Recorded Future US and Canadian court data exposed in Thomson Reuters breach
2026-09-03 Infosecurity Magazine US and Canadian Court Records Breached Following Thomson Reuters Incident
2026-09-03 Proofpoint Blog Proofpoint Brings OpenAI GPT Cyber Models into Security Operations to Help Defenders Investigate Threats Faster
2026-09-03 The Hacker News Attackers Turn Trusted Node.js Runtime Into Malware Delivery Tool in Targeted Attacks
2026-09-03 The Hacker News Shai-Hulud's Reach Just Grew to 469 Credential Locations. Here's What That Means
2026-09-03 SecurityWeek Cisco Warns of Unpatched Secure Email Flaws, Patches Critical Switch Vulnerabilities
2026-09-03 Palo Alto Unit 42 Attackers Expose Ongoing AI Tool Use Targeting Organizations in Latin America
2026-09-03 Help Net Security Researchers built a $7 gadget for anyone paranoid about hidden cameras in hotel rooms
2026-09-03 The Hacker News Pegasus Zero-Click Spyware Exploit Infects Serbian Student Movement Member's iPhone
2026-09-03 The Hacker News Researcher Releases FalconFlank PoC Showing Privilege Escalation in CrowdStrike Falcon
2026-09-03 Help Net Security Your threat feed is someone else’s database: What ingesting malware intel at scale takes
2026-09-03 The Hacker News CISA Adds Seven Exploited Flaws as Attackers Deploy Reverse Shells and Crypto Miners
2026-09-03 Help Net Security Windows memory integrity switches on automatically for eligible devices in October 2026
2026-09-02 CyberScoop Jail time for Maine child in 764 marks turning point in federal law enforcement
2026-09-02 The Record by Recorded Future Russian national facing 20 years for malware campaign that infected 80,000 freelancers
2026-09-02 The Record by Recorded Future Health data of more than 9.5 million people leaked from Aesto record system
2026-09-02 Rapid7 Blog Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
2026-09-02 Orca Security Blog When to Use Orca’s Threat Investigator Agent vs. Build Your Own on the Orca MCP Server
2026-09-02 The Record by Recorded Future New pro-Ukraine hacker group targets Russian companies with custom ransomware
2026-09-02 GitGuardian Blog OWASP Top 10 CI/CD Security Risks Explained: Why Credential Hygiene Decides the Outcome
2026-09-02 JFrog Security Research Extending the Single Source of Truth to the Agentic Software Supply Chain
2026-09-02 Orca Security Blog Bring Orca Security Context Into the AWS Console with the Orca Browser Extension
2026-09-02 Help Net Security Nearly 22,000 Microsoft Exchange servers remain exposed to critical security flaw (CVE-2026-62911)
2026-09-02 The Record by Recorded Future Hackers expose donor data from Russian fundraisers for Ukrainians, political prisoners
2026-09-02 The Record by Recorded Future Sality, one of the longest-running botnets, finally gets disrupted
2026-09-02 JFrog Security Research Every Release Needs a Chain of Custody. AI Agents Just Made That Harder.
2026-09-02 JFrog Security Research The Evolution of JFrog AI Catalog: Your AI Control Plane for Agentic Development
2026-09-02 JFrog Security Research DevGovOps: How the AI Era Dictates That Governance Lives inside the Pipeline
2026-09-02 JFrog Security Research Every New Compliance Framework Restarts the Same Fire Drill. It Doesn’t Have To.
2026-09-02 SecurityWeek Anthropic Details Response to Security Incidents, Unveils Enterprise Safeguards
2026-09-02 Help Net Security Attackers are going after prominent individuals through OAuth phishing, FBI warns
2026-09-02 Help Net Security A battery storage cyberattack would look exactly like a badly tuned controller
2026-09-02 Infosecurity Magazine FulcrumSec Claims Responsibility for Manchester Airport Group Breach
2026-09-02 Help Net Security Edge Case launches Guardian, an AI platform for tracking risk across autonomous systems
2026-09-02 CrowdStrike Research CrowdStrike Extends Endpoint Security to Stop Software Supply Chain Attacks
2026-09-01 The Record by Recorded Future China's 'Fire Ant' campaign used compromised Cisco routers as platform for more attacks
2026-09-01 CyberScoop Tina Peters, through attorney, backs off formal role in Shasta County elections
2026-09-01 The Hacker News Attackers Exploit Critical JFrog Artifactory Flaw to Mint Admin Tokens Days After Disclosure
2026-09-01 The Hacker News Breeze Comet Executes Hundreds of Fraudulent Transactions via Brazilian Payment Systems
2026-09-01 The Record by Recorded Future Healthcare facilities operator Nutex says patient, employee data stolen in August incident
2026-09-01 The Hacker News 13 Malicious Packagist Packages Target Unpatched iPhones to Steal Crypto Wallet Seeds
2026-09-01 Help Net Security Vishing campaign abuses Microsoft Teams to give attackers a foothold in company networks
2026-09-01 CyberScoop Whistleblower says USPS deploying new, ‘untested’ IT systems governing mail-in ballots
2026-09-01 The Hacker News Iranian Hackers Pose as Recruiters to Deliver Cross-Platform RATs Through Coding Tests
2026-09-01 Varonis Blog Varonis Achieves Snowflake Premier Partner Tier and Is Now Available on Snowflake Marketplace
2026-09-01 Infosecurity Magazine White House Launches Pilot Program in Texas to Protect Water Infrastructure
2026-09-01 SecurityWeek Experiment: Porting a PLC Exploit With AI Takes Hours and Hundreds of Dollars
2026-09-01 The Record by Recorded Future Iranian cyber spies target aviation, fintech developers with new malware
2026-09-01 The Record by Recorded Future Cyber risk from frontier AI poses ‘most immediate concern’ to global financial system, watchdog warns
2026-09-01 The Hacker News Russia-Aligned UAC-0099 Plants Nuclear Weapon Prompt in Malware to Disrupt AI Analysis
2026-09-01 The Hacker News Attackers Exploit Critical Langflow and Rails Flaws in Credential-Probing and C2 Activity
2026-09-01 Kaspersky Securelist Mirage Kitten targeting aviation and FinTech sectors across the Middle East and Africa with a new malware set
2026-09-01 Help Net Security Askeal, the AI cybersecurity assistant that gives verifiable, expert-backed answers
2026-09-01 CrowdStrike Research CrowdStrike Falcon Guardian Defines the Next Generation of AI Security
2026-08-31 The Record by Recorded Future Fraudsters steal $6 million from Tectonic crypto platform after inflating token price
2026-08-31 CyberScoop ‘Watershed 250’ test program in Texas looks to private sector for water cybersecurity help
2026-08-31 Cybersecurity Dive PaperCut issues emergency patches as threat actors target chained vulnerabilities
2026-08-31 Malwarebytes Labs McKesson confirms cyber incident after ShinyHunters claims patient-data theft
2026-08-31 The Record by Recorded Future Berlin says it won’t pay ransom after hackers steal government data
2026-08-31 The Hacker News ⚡ Weekly Recap: Chinese Spy Proxy, AI Agents Go Off-Task, Router Backdoors and More
2026-08-31 Cloudflare Blog Introducing Adaptive Intelligence: Undermining the economics of every bot attack
2026-08-31 The Record by Recorded Future Pharmaceutical giant McKesson warns of 'service degradation' following cyberattack
2026-08-31 The Record by Recorded Future Slovenian casinos reopen after cyberattack knocked gaming systems offline
2026-08-31 SecurityWeek What the Hugging Face Incident Teaches Security Leaders About AI Agent Access
2026-08-31 The Hacker News ValleyRAT Backdoor Hides in Signed Adware That Users Add to Antivirus Exclusions
2026-08-31 The Hacker News Securing Claude Code: The New Compliance API, Local Visibility, and Identity Governance
2026-08-31 Palo Alto Unit 42 Spring Ring: An Inside Look at Voice Phishing Campaigns in Microsoft Teams
2026-08-31 The Hacker News China-Linked Fire Ant Hijacks Cisco Routers to Steal Credentials and Blind Security Logs
2026-08-31 The Hacker News DoJ Corrects China Hacking Claim, Says U.S. Agencies Were Targets, Not Victims
2026-08-31 ZDI (Zero Day Initiative) ZDI-26-611: (0Day) pdfforge PDF Architect App Object Out-Of-Bounds Read Remote Code Execution Vulnerability
2026-08-31 ZDI (Zero Day Initiative) ZDI-26-612: (0Day) pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
2026-08-31 ZDI (Zero Day Initiative) ZDI-26-613: (0Day) pdfforge PDF Architect PDF File Parsing Memory Corruption Remote Code Execution Vulnerability
2026-08-31 ZDI (Zero Day Initiative) ZDI-26-614: (0Day) pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
2026-08-31 ZDI (Zero Day Initiative) ZDI-26-615: (0Day) pdfforge PDF Architect activation-service Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
2026-08-30 SecLists / Daniel Miessler The Link Between Your Workplace Situation and Your Mental Health
2026-08-30 Help Net Security Week in review: Compromised Zimbra servers, previously patched Citrix NetScaler flaw exploited
2026-08-30 The Hacker News TerminalFix Uses Fake Cloudflare CAPTCHAs to Deploy Reverse-Tunnel Backdoor
2026-08-29 The Hacker News Five Critical WordPress Plugin and Theme Flaws Enable Site Takeover or RCE
2026-08-29 Mend (WhiteSource) Blog Mini Shai-Hulud hits openapi-react-query-codegen: 10 malicious npm versions
2026-08-29 Microsoft Security Blog TerminalFix campaign deploys a reverse tunnel through multistage intrusion
2026-08-28 CyberScoop ATF confirms cyberattack hit system containing info on its investigation targets
2026-08-28 The Record by Recorded Future PaperCut warns of hackers using printer management software flaw in attacks
2026-08-28 Tenable Research Why a cryptographic inventory is key for addressing the quantum computing threat
2026-08-28 JFrog Security Research Introducing JFrog Preview: Getting New Capabilities Into Your Hands, Faster
2026-08-28 Cloudflare Blog BotBase for Operators: A clearer path to joining Cloudflare's directory of bots and agents
2026-08-28 Cybersecurity Dive CISA identifies security hurdles that led to very different results in two red-team engagements
2026-08-28 Malwarebytes Labs The AI agent swarm that attacked Hugging Face is a warning for the future
2026-08-28 Infosecurity Magazine Window to Tackle Surge in AI-Enabled Cyber Attacks Narrowing, Tech Giants Warn
2026-08-28 Help Net Security Android 17 adds new protections against sneaky Wi-Fi tracking and web snooping
2026-08-27 The Record by Recorded Future White House bans foreign-made equipment for power generation over cyber backdoor concerns
2026-08-27 Cisco Talos “Sorry, I can’t help with that”: How your guardrails might become the attacker’s best friend
2026-08-27 Orca Security Blog Zero Breach vs. Zero Impact: Key Takeaways From Cloud Security LIVE 2026
2026-08-27 CyberScoop Former sexual abuse victims say Grok used their images, videos to train deepfake capabilities
2026-08-27 The Record by Recorded Future Finland appeals court revives case against Eagle S Officers over cable breaks
2026-08-27 GitGuardian Blog AI Agent Threat Response: Why Pre-Runtime Controls Matter More Than Runtime Detection
2026-08-27 The Record by Recorded Future Chinese and Russian spies stepping up cyberattacks, German companies report
2026-08-27 CyberScoop Two alleged TeamPCP members arrested and charged after months of software supply-chain chaos
2026-08-27 Tenable Research How to build an exposure management program the business trusts: Lessons from Tenable’s CSO
2026-08-27 Orca Security Blog The ECB Wants Your AI Cyber Action Plan by 31 October. Here’s How to Build One.
2026-08-27 Rapid7 Blog Identity-as-a-Service: Uncovering Dark Web Marketplaces Trading Executive SSNs
2026-08-27 The Record by Recorded Future Cyberattack on Manchester Airports Group exposes data of 8.7 million customers
2026-08-27 The Record by Recorded Future Australia charges two men for TeamPCP supply-chain hacking spree
2026-08-27 Sonar Blog SonarQube Hunter Agent is now GA: Catch broken access control and business logic flaws
2026-08-27 Cybersecurity Dive Federal authorities disrupt China-backed hacking operation targeting US critical infrastructure
2026-08-27 Malwarebytes Labs Fake Apple Pay charge brings the classic tech support scam to your phone
2026-08-27 Infosecurity Magazine Chinese Hacker Group QTFY Uses Custom-Built Platforms to Target US Infrastructure, FBI Warns
2026-08-27 SecurityWeek OpenAI Agents Coordinated via Makeshift Message Board Ahead of Hugging Face Hack
2026-08-27 SecurityWeek Okta Shares Surge on Strong Earnings, Growing Demand for AI Identity Security
2026-08-27 SecurityWeek CISO Conversations: Chris Wheeler – Trust Is the Job, From the Navy to the C-Suite
2026-08-27 ImmuniWeb Blog A man arrested for allegedly impersonating an NSA officer and chief justice
2026-08-27 Infosecurity Magazine CISA Warns of Six Exploited Flaws in Microsoft, Linux, Red Hat and Citrix Products
2026-08-27 SecurityWeek US Disrupts Chinese Hacking Platform Used in Military and Critical Infrastructure Attacks
2026-08-27 SecurityWeek Pro-Russian Hackers Claim Responsibility for Major Cyberattack on Norway’s Public Digital Services
2026-08-27 JFrog Security Research Securing the Australian Government Software Supply Chain: JFrog Completes Protected Level IRAP Assessment
2026-08-26 CyberScoop Cyber threats nudge Trump to sign executive order on foreign equipment in U.S. energy infrastructure
2026-08-26 The Record by Recorded Future Exclusive: NSA to host a hacker reunion in bid to rebuild secretive unit
2026-08-26 CyberScoop Officials disrupt Chinese espionage operation that hit multiple federal agencies
2026-08-26 The Record by Recorded Future Medical device firm Boston Scientific says cyberattack has disrupted shipment processes
2026-08-26 The Record by Recorded Future Meta pledges to overhaul kids’ safety protections, pay $17 billion to settle social media case
2026-08-26 Microsoft Security Blog When AI infrastructure becomes the target: Securing gateways and control points
2026-08-26 The Record by Recorded Future US takes down alleged Chinese hacking tools used against Federal Reserve, DOJ and Senate
2026-08-26 The Record by Recorded Future Iran-linked hackers expand infrastructure across Europe and Middle East, report says
2026-08-26 Cybersecurity Dive Boston Scientific says cyberattack disrupted order processing, shipping
2026-08-26 CyberScoop Election official says Tina Peters would be consultant, won’t have access to election systems
2026-08-26 Tenable Research Edge infrastructure under siege: what two independent datasets reveal about who's exploiting your perimeter
2026-08-26 Bishop Fox A GUID is Not a Credential: Unauthenticated RCE in Veeam Service Provider Console
2026-08-26 SentinelOne Labs Edge Infrastructure Under Siege: What Two Independent Datasets Reveal About Who’s Exploiting Your Perimeter
2026-08-26 Help Net Security AnonyMousKIT phishing-as-a-service uses AI voice calls to steal iPhone passcodes
2026-08-26 Cybersecurity Dive Treasury to help financial firms transition to quantum-resistant encryption
2026-08-26 Cisco Talos Choose your fighter: Balancing competing requirements to select models for your AI SOC
2026-08-26 Help Net Security Linux Foundation takes on TRACE, a hardware-backed runtime evidence specification for AI agents
2026-08-26 Help Net Security Production data in testing is still common, and Tricentis’ CISO wants it gone
2026-08-26 Help Net Security AI vulnerability discovery scores the highest impact of 20 emerging risks
2026-08-25 CyberScoop The GTA VI leaks are breaking the internet. Security researchers have seen this before.
2026-08-25 The Record by Recorded Future Employee benefits platform Paylogix says hackers stole financial and health data
2026-08-25 CyberScoop Arrested man allegedly impersonated NSA elite hacking unit, Supreme Court chief justice
2026-08-25 CyberScoop Water sector passes, government sector fails attempts to spot and halt simulated CISA attack
2026-08-25 SecurityWeek Linux Foundation to Govern TRACE, an Open Standard for AI Runtime Attestation
2026-08-25 Microsoft Security Blog The patch window is collapsing: Why security needs a new control plane
2026-08-25 SentinelOne Labs The Path to the Autonomous SOC: The Early Returns of AI & What It Means for Cybersecurity
2026-08-25 CyberScoop Interpol targets Black Axe’s illicit financial web in latest international sting
2026-08-25 Help Net Security INTERPOL crackdown on West African crime rings uncovers troubling new trend
2026-08-25 The Record by Recorded Future Ukraine to give Britain access to battlefield data to train AI
2026-08-25 Help Net Security Citrix UniconOS dual boot turns Windows endpoints into their own recovery device
2026-08-25 SecurityWeek Hands-On Cyber-Physical Systems Training Returns to ICS Cybersecurity Conference
2026-08-25 The Record by Recorded Future UK government seeks powers to secretly block risky tech suppliers
2026-08-25 Infosecurity Magazine Australia Warns of Active Exploitation of Critical TeamCity Server Flaw
2026-08-25 Infosecurity Magazine Fake Minecraft Clients Deliver WeedHack Malware Despite Infrastructure Takedown
2026-08-25 Malwarebytes Labs GTA 6 leak hunt could expose data belonging to thousands of Discord users
2026-08-25 Palo Alto Unit 42 The State of AI-Enabled Malware August 2026: From Brand Abuse to Agentic Execution
2026-08-25 Help Net Security ShinyHunters taunts ReliaQuest after its own employee falls for social engineering attack
2026-08-25 SecurityWeek Taiwan Charges 9 Over Illegal AI Server Exports to China, Including Nvidia and Super Micro Staff
2026-08-25 Help Net Security TruffleHog AWS Analyze reduces remediation time on leaked AWS credentials
2026-08-24 The Record by Recorded Future US sanctions Iranian cyber actors as UK discloses power plant attack
2026-08-24 The Record by Recorded Future New Zealand to pursue social media ban for children under 16
2026-08-24 The Record by Recorded Future Indian man who fled US arrested on charges he helped scammers siphon $7.5 million from the elderly
2026-08-24 The Hacker News Shipping More AI Code Than You Can Secure? Watch How to Control Remediation Debt
2026-08-24 Cybersecurity Dive UK power facility disabled for days after suspected state-linked cyberattack
2026-08-24 Malwarebytes Labs Fake Microsoft security scans trick victims into uninstalling their antivirus
2026-08-24 The Hacker News ⚡ Weekly Recap: AI-Powered PLC Attacks, GitLab Attacks, Stripe Key Leaks and More
2026-08-24 Sonar Blog Bring your own hook: a 5-line PostToolUse template calling sonar analyze agentic
2026-08-24 SecurityWeek Uber Fined Nearly $1 Billion by Dutch Regulators Over Automated Suspensions of Driver Accounts
2026-08-24 The Hacker News WordlistLoader Delivers Amatera via ClickFix, SynkLoader Phishes Windows Passwords
2026-08-24 The Hacker News Critical Keycloak Password Reset Flaw Could Let Unauthenticated Attackers Take Over Any Account
2026-08-24 The Hacker News Operation QUICSILVER Targets Myanmar Government and IT with QUICAgent Backdoor
2026-08-24 Help Net Security Android car head units infected with proxy botnet malware through built-in software updaters
2026-08-24 SecurityWeek TikTok Reaches $400 Million Settlement With US Justice Department Over Children’s Privacy
2026-08-24 Imperva Research Bring Your Own CA: Introducing the Thales Imperva SSL Integration Center, Featuring DigiCert Trust Lifecycle Manager
2026-08-24 Cybersecurity Dive Salesforce gave every org the same free scanner. Attackers already know what it misses.
2026-08-24 The Hacker News UAT-10147 Uses AI to Scale Server Attacks, Deploys SPECTRE With EDR Bypass and Linux Rootkit
2026-08-24 JFrog Security Research Fly Graduates: Agentic Repository Experience Lands in the JFrog Platform
2026-08-24 SecurityWeek Anthropic Expands Mythos 5 Access to More Defenders, Unveils $35M Open Source Fund
2026-08-24 Help Net Security Product showcase: AI Paper Trail shows the privacy cost of talking to AI
2026-08-23 Help Net Security Week in review: Records allegedly stolen from Azure tenants, Medusa ransomware hits 500+ orgs
2026-08-21 Palo Alto Unit 42 Connecting the Dots: Securing the Overlooked Corners of the Software Development Lifecycle (SDLC) Supply Chain
2026-08-21 The Record by Recorded Future Lawmakers call for investigation into impact of CISA staffing cuts
2026-08-21 CyberScoop Apollo discloses data breach from ongoing wave of attacks hitting financial sector
2026-08-21 The Hacker News 14 Trojanized npm Packages Drop RedC2 4.0 Linux Backdoor With AI-Assisted C2
2026-08-21 JFrog Security Research Propagating User Identity From AI Agents to Your Tools: Amazon Bedrock AgentCore Gateway and JFrog Artifactory
2026-08-21 The Record by Recorded Future U.S. Bank says breach claims related to fourth-party incident
2026-08-21 The Hacker News Microsoft Defender's Own Driver Can Be Weaponized to Delete Security Software at Boot
2026-08-21 The Hacker News Android Car Malware Spreads Through Built-In Updaters for Ad Fraud, Proxy Botnet
2026-08-21 SecurityWeek In Other News: Zombie Card Attack, T-Mobile Cut Cable to Stop Hackers, GitHub Denies AI Caused Bug
2026-08-21 The Record by Recorded Future Canada’s Hospital for Sick Children attacked by cybercriminals again as employee data stolen
2026-08-21 Cybersecurity Dive Microsoft confirms maximum severity flaw in Entra ID targeted for exploitation
2026-08-21 Cybersecurity Dive Defense contractors’ CMMC confidence lags, even as self-assessments improve
2026-08-21 The Record by Recorded Future Russian network monitoring firm confirms cyberattack claimed by pro-Ukraine hackers
2026-08-21 Help Net Security Critical Microsoft Entra ID vulnerability exploited in the wild (CVE-2026-69836)
2026-08-21 Malwarebytes Labs Medical records, SSNs, and bank details exposed in CareCloud data breach
2026-08-21 The Hacker News Cisco Patches Nine Crosswork and Secure Workload Flaws, Five Scoring CVSS 10.0
2026-08-21 Help Net Security Citrix urges customers to fix critical NetScaler authentication bypass (CVE-2026-19490)
2026-08-21 The Hacker News GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of Disclosure
2026-08-21 The Hacker News Microsoft Patches Severe Entra ID Flaw (CVSS 10.0) Allowing Remote Code Execution
2026-08-20 The Record by Recorded Future China’s ‘SilkParasite’ espionage operation targeting Central Asia with AI-assisted malware
2026-08-20 CyberScoop Early 764 member sentenced to 77 years, longest prison term to date for a nihilistic violent extremist
2026-08-20 The Record by Recorded Future Senators press TikTok over withholding of safety features for some users
2026-08-20 SecurityWeek AI-Assisted Tool Helped Secure Satellite Communication System After 2022 Russian Hacking
2026-08-20 SecurityWeek OpenAI Overhauls Model Security With Sandboxing, 30-Minute Alerts, and Training Pauses
2026-08-20 Cisco Talos UAT-10147 deploys SPECTRE: A cross-platform implant with Linux rootkit and BYOVD capabilities
2026-08-20 Cisco Talos UAT-10147: Chinese-speaking adversary integrates agentic AI into post-compromise operations
2026-08-20 SecurityWeek Exploitation Expected for Critical Authentication Bypass Patched in Citrix NetScaler
2026-08-19 The Hacker News Cloudflare Workers Spectre Attack Leaks JWT From Co-Located Worker at 12 Bits/Second
2026-08-19 CyberScoop AI-fueled attacks pose ‘active threat’ to water, other sectors, U.S. agencies warn
2026-08-19 The Record by Recorded Future Electronic health record company CareCloud says 3.7 million people affected by breach
2026-08-19 The Hacker News OpenAI Pauses Frontier RL Training as It Tightens Defenses Against Unsafe AI Behavior
2026-08-19 The Record by Recorded Future NSA, FBI warns of hackers using AI-generated tools in attacks on critical infrastructure technology
2026-08-19 Microsoft Security Blog Microsoft named a Leader in the Frost Radar™: Cloud Workload Protection Platforms, 2026
2026-08-19 The Record by Recorded Future Latvian officials resign after cyberattack exposes data on 1.2 million people
2026-08-19 The Hacker News SilkParasite Espionage Campaign Targets Central Asian Governments with Five New RATs
2026-08-19 The Record by Recorded Future US charges Iranians for sprawling hacking campaign on government agencies, universities
2026-08-19 The Hacker News Hackers Compromised 14,500+ Dahua Devices Using Credential Attacks, Auth Bypasses, and P2P
2026-08-19 The Hacker News StopAndProtect Uses Nearly 2,000 Hacked WordPress Sites to Spread Malware and Steal Data
2026-08-19 The Hacker News Critical macOS, SharePoint, vCenter, and Microsoft IKE Flaws Under Active Exploitation
2026-08-19 SecurityWeek CISA Urges Immediate Patching of Exploited Microsoft, VMware, Apple Vulnerabilities
2026-08-19 Help Net Security Brinqa acquires PlexTrac to bring validated remediation to exposure management
2026-08-19 Help Net Security Google’s AI security agents found 100+ critical software vulnerabilities in just two days
2026-08-19 The Hacker News Clop-Linked Windchill Web Shell Decrypts Credentials and Maps Engineering Data
2026-08-19 Help Net Security ChatGPT’s new feature could give infostealers a map of your Mac activity
2026-08-18 CyberScoop Eight years later, federal authorities re-up charges against alleged Iranian hackers at Mabna Institute
2026-08-18 The Record by Recorded Future More than 200 victims of Medusa ransomware identified over the last year, CISA says
2026-08-18 The Hacker News Microsoft Copilot Personal Flaws Could Let One Click Exfiltrate Data From Connected Apps
2026-08-18 CyberScoop Medusa ransomware tallies hundreds of new victims, says updated advisory on group’s tactics
2026-08-18 The Hacker News Ransom Busters Claims It Hacked Ransomware Servers, Asks Victims for Up to $60,000
2026-08-18 The Record by Recorded Future Berlin cuts two state ministries off government network after security breach
2026-08-18 The Record by Recorded Future University of Texas forced to take systems offline in San Antonio after cyberattack
2026-08-18 The Record by Recorded Future Hackers target Ukrainian agency managing assets seized from sanctioned Russians
2026-08-18 SecurityWeek CISO Conversations: Nico Waisman – From Self-Taught Hacker to AI-Driven Offensive Security at XBOW
2026-08-18 The Hacker News AI "Mind Viruses" Can Spread Between Agents Through Persistent Prompt Files
2026-08-18 The Hacker News TWINLOOT Abuses SharePoint and Teams to Steal Credentials and Move Across Networks
2026-08-18 The Hacker News One Attacker Has Scraped Both Salesforce and ServiceNow Portals Since 2025
2026-08-18 The Hacker News 16 Typosquatted RubyGems Packages Steal Browser Credentials and Crypto Wallets
2026-08-18 SecurityWeek 300,000 WordPress Sites Potentially Exposed to Hacking Due to Form Plugin Flaw
2026-08-18 The Hacker News SafePal Hardware Wallet Maker Says Flaw Exposed Data of Nearly 40,000 Customers
2026-08-18 SecurityWeek Dozens of WebKit Vulnerabilities Patched With Fresh macOS, iOS Security Updates
2026-08-17 The Hacker News Critical GitLab GraphQL Flaw Could Let Unauthenticated Attackers Delete Public Projects
2026-08-17 The Record by Recorded Future Nearly 750k had financial info, SSNs leaked in South Carolina loan company breach
2026-08-17 The Hacker News Snowflake GitHub Actions Flaw Lets Crafted Issues Trigger Command Injection
2026-08-17 The Hacker News Forminator WordPress Flaw Can Enable Unauthenticated RCE via Malicious PHP Uploads
2026-08-17 The Hacker News Cavern C2 Uses DNS and Google Apps Script to Blend Into Legitimate Traffic
2026-08-17 The Record by Recorded Future SafePal latest crypto hardware wallet maker affected by breach, with nearly 40,000 impacted
2026-08-17 The Record by Recorded Future Irregular faces criticism over ‘spin’ in AI hacking postmortem
2026-08-17 The Record by Recorded Future Poland probes MyDr healthcare software breach potentially affecting 19 million people
2026-08-17 Help Net Security France’s tax authority admits hackers made off with data on 678,000 individuals
2026-08-17 The Hacker News ⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Browser Hijacks and More
2026-08-17 The Record by Recorded Future Ukraine says cyberattack hit Russian e-commerce giant Wildberries amid drone strikes
2026-08-17 Help Net Security Attackers exploit patched macOS Screen Sharing flaw to deploy cryptominer
2026-08-17 SecurityWeek Conflicting Test Goals Pushed Claude Agents to Deploy Self-Replicating Malware
2026-08-17 The Hacker News Unisoc VoLTE Video Call Exploit Chain Can Give Attackers Full Android Kernel Access
2026-08-17 The Hacker News Evooo1Bot Linux Botnet Exploits Known Flaws to Turn Edge Devices Into SOCKS5 Proxies
2026-08-17 Help Net Security Police bust cybercrime ring accused of stealing €30 million in four-day spree
2026-08-17 The Hacker News Suspected China-Nexus Actor Exploits VMware vCenter Flaw, Deploys Babuk-Derived Ransomware
2026-08-17 Help Net Security Windows 11’s strongest security defenses can be bypassed without a screwdriver
2026-08-17 Help Net Security Product showcase: ScamNet looks for warning signs in suspicious calls and shady links
2026-08-16 Help Net Security Week in review: Salesforce and ServiceNow portals exposed for 17 months, exploited Metabase 0-day
2026-08-14 The Record by Recorded Future Investigation of banking hack leads to arrests in Germany, Brazil
2026-08-14 Dark Reading Scottish Govt Suffers Potentially Widening Data Breach at Prosecutor's Office
2026-08-14 GitGuardian Blog BSides Las Vegas 2026: Following the Trust Relationships Attackers Are Targeting
2026-08-14 The Record by Recorded Future France investigates tax authority breach after hacker claims 600,000 victims
2026-08-14 SecurityWeek In Other News: Rapid7 Layoffs, Hacking a Boeing 737, Refrigeration System Vulnerabilities
2026-08-14 Help Net Security New Android malware relays bank cards to fraudsters while victims still hold them
2026-08-14 Kaspersky Securelist APT group HoneyMyte upgrades CoolClient: the backdoor gets a kernel-level Windows rootkit
2026-08-14 Help Net Security AWS Certificate Manager sets 2027 end date for email-validated certificate renewals
2026-08-13 CyberScoop A bold new strategy or a dangerous precedent? Experts are divided on Trump’s memo.
2026-08-13 CyberScoop Tech contractor for Brightly Software sentenced to 2 years in prison for insider attack
2026-08-13 Cloudflare Blog Total eclipse of the Internet: traffic impacts in Iceland, Spain, and Portugal
2026-08-13 The Record by Recorded Future Flock tightens privacy controls amid scandals over officer abuse
2026-08-13 The Record by Recorded Future New Mirai variant adds stealth capabilities to notorious botnet code
2026-08-13 Help Net Security White House authorizes private US companies to hack foreign criminal networks
2026-08-13 The Record by Recorded Future Brazil orders Discord to suspend livestreaming after teen suicide
2026-08-13 Help Net Security Attackers exploit critical SharePoint flaw after PoC goes public (CVE-2026-55040)
2026-08-13 The Record by Recorded Future Germany moves to give spy agencies hacking and sabotage powers
2026-08-13 Help Net Security Searchlight Cyber combines exposure and threat intelligence in new PTEM platform
2026-08-13 SecurityWeek White House Mobilizes Security Firms for Operations Against Foreign Cybercrime Gangs
2026-08-13 Help Net Security Cisco fixes vulnerability exploited to DoS its firewalls (CVE-2026-20349)
2026-08-13 The Hacker News Attackers Exploit SharePoint Authentication Bypass After Public PoC Release
2026-08-12 Orca Security Blog Zoom Zero-Click RCE Flaws Allow Any Meeting Attendee to Compromise All Participants
2026-08-12 The Hacker News Lazarus Exploits Windows Zero-Day to Gain SYSTEM Access and Deploy Backdoor
2026-08-12 The Record by Recorded Future FBI: Hackers using social engineering to breach accounts and steal explicit content
2026-08-12 CyberScoop Researchers observe first ‘near-autonomous’ AI attack on government target in Taiwan
2026-08-12 The Hacker News 737 Chrome VPN Extensions Caught Routing Traffic Through Proxies. Check If You Have One
2026-08-12 Dark Reading Ransomware Hits Colombian Justice Ministry Days Before Presidential Transition
2026-08-12 Help Net Security A stranger has been reading Salesforce and ServiceNow portals worldwide for 17 months
2026-08-12 Help Net Security Signal’s new security feature checks if your encrypted chats were tampered with
2026-08-12 Help Net Security ScienceLogic delivers secure AI deployment and smarter IT operations with Skylar AI 2.5
2026-08-12 Help Net Security Deloitte strengthens AI governance to support trusted enterprise adoption
2026-08-12 The Record by Recorded Future Three intrusions at UK criminal records office went undetected for two years
2026-08-12 SecurityWeek Stealthy ‘City-Forum’ Attacks Target Salesforce and ServiceNow With Custom Toolset
2026-08-12 The Record by Recorded Future Microsoft’s massive Patch Tuesday releases continue as AI reshapes bug discovery
2026-08-12 The Record by Recorded Future CISA gives federal agencies two weeks to patch Microsoft bug exploited in DPRK campaign
2026-08-12 The Hacker News OpenAI, Anthropic, Google API Flaw Let Weaker AI Models Decode Stronger Models' Reasoning
2026-08-12 Help Net Security Microsoft patches 400+ vulnerabilities, one zero-day under attack (CVE-2026-68820)
2026-08-12 The Hacker News Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote Access
2026-08-12 Help Net Security Chrome’s anti-abuse protections block 7 billion unwanted Android notifications daily
2026-08-12 The Hacker News Malicious LiteLLM Releases Tied to Trivy Hack May Have Exposed 2,100+ Organizations
2026-08-12 SecurityWeek ICS Patch Tuesday: Vulnerabilities Fixed by Siemens, Schneider, Phoenix Contact
2026-08-12 The Hacker News SAP Commerce Cloud Flaw Could Let Unauthenticated Attackers Execute Arbitrary Code
2026-08-12 The Hacker News ShieldBreak Zero-Day PoC Claims Microsoft Defender Patch Bypass With SYSTEM Access
2026-08-12 ZDI (Zero Day Initiative) ZDI-26-557: (Pwn2Own) Amazon Smart Plug Insecure Fallback Information Disclosure Vulnerability
2026-08-12 ZDI (Zero Day Initiative) ZDI-26-558: (Pwn2Own) Amazon Smart Plug OTA Update Process Improper Certificate Validation Vulnerability
2026-08-12 ZDI (Zero Day Initiative) ZDI-26-559: (Pwn2Own) Amazon Smart Plug OTA Update Process Out-Of-Bounds Write Remote Code Execution Vulnerability
2026-08-12 ZDI (Zero Day Initiative) ZDI-26-560: (Pwn2Own) Home Assistant Green go2rtc Command Injection Remote Code Execution Vulnerability
2026-08-12 ZDI (Zero Day Initiative) ZDI-26-561: (Pwn2Own) Home Assistant Green go2rtc Command Injection Remote Code Execution Vulnerability
2026-08-12 ZDI (Zero Day Initiative) ZDI-26-562: (Pwn2Own) Home Assistant Green mDNS Server-Side Request Forgery Vulnerability
2026-08-12 ZDI (Zero Day Initiative) ZDI-26-563: (Pwn2Own) Home Assistant Green Simple Service Discovery Protocol Server-Side Request Forgery Vulnerability
2026-08-11 Cisco Talos Microsoft Patch Tuesday for August 2026 — Snort rules and prominent vulnerabilities
2026-08-11 The Record by Recorded Future Ransomware group hijacks hospital system’s Facebook page amid ongoing cyberattack fallout
2026-08-11 CyberScoop Delta investigates in-flight Wi-Fi spoofing on post-DEF CON flight from Las Vegas
2026-08-11 The Record by Recorded Future Cyberattack on logistics giant Ceva hits retailers and Steam customers across Europe
2026-08-11 The Record by Recorded Future Local governments in four states dealing with cyberattacks that have shut down services
2026-08-11 Cloudflare Blog Cloudflare DDoS Threat Report H1 2026: 1 Tbps attacks soar as DNS floods and geopolitical tensions drive a new wave
2026-08-11 The Record by Recorded Future Kids’ online safety bill faces dim prospects of passage this session despite progress
2026-08-11 Kaspersky Securelist Head Mare APT is exploiting vulnerabilities in an unpatched TrueConf server to deliver PhantomCore and PhantomGraph to video conference participants
2026-08-11 Kaspersky Securelist Project CAV3RN continues: Google Apps Script as C2 relay and DNS-based C2 channel selection
2026-08-10 Palo Alto Unit 42 The Permanent Threat: Analyzing Aeternum’s Blockchain-Based C2 Operations and Communications
2026-08-10 The Record by Recorded Future FBI, South Korea warn of Gunra ransomware gang targeting critical infrastructure
2026-08-10 CyberScoop U.S., South Korean government agencies caution to be on lookout for Gunra ransomware gang
2026-08-10 The Hacker News Shipping 10–50× More Code? Watch This Webinar on Securing AI-Speed Development
2026-08-10 The Hacker News China-Linked Hackers Deploy New StormEncryptor Ransomware, Likely via N-central Flaw
2026-08-10 Microsoft Security Blog Microsoft named a Leader in the 2026 IDC MarketScape for MDR/MXDR for the Enterprise
2026-08-10 The Record by Recorded Future Poland uncovers second heat plant cyberattack that went hidden for months
2026-08-10 The Record by Recorded Future Senate Democrats introduce bill to distribute $300 million annually to shore up water system cybersecurity
2026-08-10 The Record by Recorded Future Russian military hackers pose as recruiters to target Ukrainian IT workers
2026-08-10 The Hacker News ⚡ Weekly Recap: AI Goes Rogue, Metabase 0-Day, MCP Supply-Chain Attacks, and Router Backdoors
2026-08-10 Microsoft Security Blog DeadLock ransomware: Breaking down a Rust-based encryptor with decentralized recovery infrastructure
2026-08-10 Help Net Security Cyberattack on Steam hardware shipper leaks names, addresses, and order data
2026-08-10 The Record by Recorded Future British ‘Com’ member who abused more than 100 girls worldwide jailed for two years
2026-08-10 The Hacker News Kimsuky Builds Offline AI Stack to Boost Phishing and Automate Malware Development
2026-08-10 Help Net Security Microsoft Entra ID is removing an extra MFA hurdle for Windows Hello and macOS PSSO users
2026-08-10 Cloudflare Blog Serving the most critical missions: Cloudflare for Government achieves FedRAMP Class D (High) Certified status
2026-08-10 The Hacker News New Passkey Attacks Can Recover Synced Private Keys or Bypass Phishing-Resistant MFA
2026-08-10 Help Net Security N-able ships second N-central hotfix as attackers keep exploiting CVE-2026-18577
2026-08-10 The Hacker News TrueConf Server Flaws Exploited to Replace Client Installers with PhantomCore
2026-08-10 Help Net Security Anthropic to put AI in charge of reviewing Claude Code actions by default
2026-08-10 The Hacker News Solidity Pro VS Code Extensions Steal Crypto Wallets, API Keys, and Credentials
2026-08-10 The Hacker News OpenAI's Next AI Model Astra Shows Cyber Performance Strong Enough to Trigger Pause
2026-08-10 Help Net Security Chainloop: Open-source evidence store and policy engine for the software supply chain
2026-08-10 Help Net Security Product showcase: Enpass Password Manager breaks away from the proprietary cloud model
2026-08-09 Help Net Security Week in review: Cisco fixes IMC bug, Patch Tuesday forecast, Black Hat USA 2026
2026-08-08 SecurityWeek Critical One-Click Vulnerability in Atlassian’s Rovo AI Exposed Enterprise Data
2026-08-08 The Hacker News Atlassian Rovo Can Be Tricked Into Sending Jira and Confluence Data to Attackers
2026-08-08 The Hacker News Metabase Zero-Day Exploited in Wild Allows Admin Access Without Authentication
2026-08-08 The Hacker News N-able Issues N-central Hotfix 2 as Attackers Reach Managed Systems and Persist
2026-08-08 The Hacker News Progress Kemp LoadMaster Flaw Hits CISA KEV After 792 Reported Exploit Attempts
2026-08-07 The Record by Recorded Future Water utilities group partners with DEF CON offshoot for Water Watch Center
2026-08-07 The Record by Recorded Future New Mexico judge orders Meta to pay $567 million in kids online safety case
2026-08-07 The Record by Recorded Future Military device manufacturer discloses cyber incident to SEC
2026-08-07 The Record by Recorded Future Irregular, firm behind AI hacking incidents, won't say if there were more
2026-08-07 SecurityWeek In Other News: AI Slop Limits Apple Bounties, North Carolina Port Attacks, Hackers Target Wall Street
2026-08-07 CyberScoop Coast Guard says it is monitoring cyberattack that disrupted North Carolina’s ports
2026-08-07 Cloudflare Blog Announcing Cloudflare Ambassadors, Community Engineers, and another $1M in open-source funding
2026-08-07 Cloudflare Blog Introducing Radar Researcher: An AI tool for exploring Internet data in plain language
2026-08-07 Help Net Security 200 accounts compromised in Swiss government’s Microsoft SharePoint breach
2026-08-07 Help Net Security OpenAI drops ChatGPT text chat limits for free users, adds new safeguards for teens
2026-08-07 Help Net Security August 2026 Patch Tuesday forecast: How do we deal with the patch apocalypse?
2026-08-07 Help Net Security What the first year of EU AI Act transparency enforcement could look like
2026-08-06 CyberScoop Capitol Hill wants to know if executive branch, foreign allies coordinated enough to combat scams
2026-08-06 CyberScoop Despite federal warnings, thousands of U.S. industrial controllers used in water systems remain exposed online
2026-08-06 Dark Reading From Bobmojis to Bobbleheads: How the Democratic Party Built a Security-First Culture
2026-08-06 The Record by Recorded Future Cyberattack on North Carolina Ports ‘contained’ as Coast Guard, state officials investigate
2026-08-06 The Record by Recorded Future Belarusian cybercriminal behind Ransom Cartel gets 16-year prison sentence
2026-08-06 Cloudflare Blog Introducing Kitesurf: The agent-first browser that runs in V8 isolates on Cloudflare Workers
2026-08-06 Cloudflare Blog Building an open Agentic Internet: readable, discoverable, callable, and payable
2026-08-06 Cloudflare Blog From ranking to recommended: get your site ready to thrive in the age of AI agents
2026-08-06 SecurityWeek Zero-Click AI Browser Hacking: Claude and ChatGPT Atlas Hijacked via Emails, X Posts
2026-08-06 SecurityWeek Podcast: Compliance Won’t Save You: The Future of Cyber Risk with Edna Conway
2026-08-06 Help Net Security Discounted Claude access bought on the gray market may expose every prompt you send
2026-08-06 Help Net Security Critical Cisco IMC bug gives attackers root, PoC is out (CVE-2026-20200)
2026-08-06 The Record by Recorded Future Republic of Georgia alleges foreign disinfo campaign sought to scare off Russian tourists
2026-08-06 The Record by Recorded Future State Department says Trump raised cyber scam compound issue with Xi
2026-08-05 Cloudflare Blog Cloudflare is the only vendor named a Visionary in 2026 SASE and SSE reports
2026-08-05 The Record by Recorded Future Chinese telcos maintain deep US presence despite Salt Typhoon links, House committee says
2026-08-05 The Record by Recorded Future Canadian man pleads guilty to Snowflake hacks that led to 165 breaches
2026-08-05 Microsoft Security Blog Microsoft named a Leader in the KuppingerCole Leadership Compass for Cloud Native Application Protection Platforms (CNAPP)
2026-08-05 The Record by Recorded Future Dutch retailer De Bijenkorf warns customer data may be exposed after cyber incident
2026-08-05 The Record by Recorded Future Cyberattacks on water systems expand to 12 states as South Dakota, Georgia announce incidents
2026-08-05 SecurityWeek The Fourth Battlefield: The Growing Role of Cyber Operations in Global Conflict
2026-08-05 The Record by Recorded Future Anthropic AI agent faked identities, phished real developers in UK government hacking test
2026-08-05 Detectify Blog Operationalizing Secure by Design: a CISO’s guide to closing the gap between policy and reality
2026-08-05 ZDI (Zero Day Initiative) ZDI-26-524: (0Day) PAX Technology Q80 XCB Daemon Missing Authentication Vulnerability
2026-08-05 ZDI (Zero Day Initiative) ZDI-26-525: (0Day) PAX Technology Q80 AIP File Parsing Link Following Remote Code Execution Vulnerability
2026-08-05 ZDI (Zero Day Initiative) ZDI-26-526: (0Day) PAX Technology Q80 Application Installer Signature Verification Bypass Remote Code Execution Vulnerability
2026-08-05 CyberScoop National cyber director lays out White House plans to secure AI without writing new rules
2026-08-05 GitGuardian Blog Securing Agentic AI Workflows in n8n: From Leaked API Keys to Encryption Key Compromise
2026-08-04 The Record by Recorded Future OpenAI: Cambodian scam centers used ChatGPT to lure Indian nationals, conduct investment fraud
2026-08-04 Microsoft Security Blog Advance Zero Trust for AI: New tools and guidance to secure AI agents and DevSecOps
2026-08-04 CyberScoop Dem senators criticize Trump administration decisionmaking on AI security risks
2026-08-04 The Record by Recorded Future Britain’s next war won’t be an away game: Q&A with former head of Defence Intelligence
2026-08-04 The Record by Recorded Future Polish convenience store chain Żabka hacked through third-party account
2026-08-04 CyberScoop Lawmakers spring to save ID theft services for OPM breach victims, with expiration looming
2026-08-04 GitGuardian Blog Credential Harvesting Explained: How Attackers Collect Secrets From Developer Machines
2026-08-04 The Record by Recorded Future Russian businesses erase Durov-linked products after 'terrorist' designation
2026-08-04 The Hacker News Keyv-Linked npm Worm Poisons Hundreds of Packages, Plants Claude Code and VS Code Hooks
2026-08-04 The Hacker News Fake Adobe and Zoom Updates Install ScreenConnect for Persistent Remote Access
2026-08-04 Palo Alto Unit 42 The Frontier AI Vulnerability Burst: Industrializing Autonomous Zero-Day Discovery in Open-Source Software
2026-08-04 The Record by Recorded Future Apple launches new legal challenge against UK over iCloud access
2026-08-04 Cloudflare Blog How we built a software factory to drive Astro’s GitHub issue count to zero
2026-08-04 Cloudflare Blog Announcing Cloudflare Wallets: the programmable wallet for the agentic Internet
2026-08-04 The Hacker News When Vibe Hacking Turns AI into the Junior Hacker Every Adversary Always Wanted
2026-08-04 The Hacker News Google Deletes 3 ADK AI Workflows After Malicious GitHub Issue Could Trigger Privileged Agent
2026-08-04 SecurityWeek Gemini Agent-to-Agent Attack Method Exposed Secrets, Enabled Pull Request Tampering
2026-08-04 Proofpoint Blog Proofpoint Joins Google Unified Security Recommended Program to Help Organizations Defend Against Today’s Most Sophisticated Threats
2026-08-04 Help Net Security Russian hackers abuse hotel Wi-Fi networks to steal Microsoft 365 credentials and deploy malware
2026-08-04 The Hacker News New cPanel Critical Flaw Could Let Hosting Customers Run SQL as Database Root
2026-08-04 Help Net Security Indusface SwyftComply AI enables autonomous virtual patching for AI-discovered flaws
2026-08-04 Cisco Talos “Keep going, bro. You’ve got this!” A data-driven look at how adversaries are weaponizing AI
2026-08-04 Help Net Security Joinable Labs unveils Joinable Security for threat intelligence and AI-driven response
2026-08-04 Help Net Security Securonix enhances Unified Defense SIEM with AI agent detection and lower data costs
2026-08-04 Proofpoint Blog Proofpoint Launches OEM Program to Help Security Providers Embed Trusted Threat Intelligence and Detection Capabilities
2026-08-04 The Hacker News DOUBLECUP Uses ClickFix and Cached PNGs to Deliver CountLoader and DeviceManager RAT
2026-08-04 The Hacker News CISA Adds Exploited N-able N-central Flaw to KEV After Customer Compromises
2026-08-03 CyberScoop Public interest coalition urges Congress to investigate OpenAI, Hugging Face hack
2026-08-03 The Record by Recorded Future Bitcoin hardware wallet maker destroys some inventory after more than $88 million stolen
2026-08-03 The Hacker News 18 Malicious npm Packages Deliver Cross-Platform RAT to Alibaba Tool Users
2026-08-03 The Record by Recorded Future Hackers steal 31,000 records identifying people behind Liechtenstein companies, foundations
2026-08-03 The Hacker News Google Password Manager Attacks Could Let Malware Hijack Passkey-Protected Accounts
2026-08-03 The Hacker News INC Ransomware Emerges as Dominant Actor Exploiting SonicWall SMA 1000 Flaws
2026-08-03 SecurityWeek Cyberattack Hits Liechtenstein’s Register of People Behind Companies and Foundations
2026-08-03 Help Net Security Attackers exploit N-able N-central flaw to reach managed endpoints (CVE-2026-18577)
2026-08-03 The Hacker News ⚡ Weekly Recap: Rogue AI Models, $88M Bitcoin Theft, Water-System Attacks and Dangling DNS Hijacks
2026-08-03 Help Net Security Chinese hacker used DeepSeek to launch autonomous cyberattacks on vulnerable servers
2026-08-03 Cloudflare Blog Your agent needs a computer, not a container — introducing @cloudflare/computer
2026-08-03 Cloudflare Blog Introducing the Billable Usage API: programmatic cost visibility for Cloudflare
2026-08-03 Cloudflare Blog Cloudflare Workers and Containers now support inbound TCP connections and gRPC
2026-08-03 The Record by Recorded Future Biotech giant Amgen says patient data stolen from third-party cloud systems
2026-08-03 The Record by Recorded Future Russian hackers hijack hotel Wi-Fi networks to spy on travelers, Microsoft says
2026-08-03 Help Net Security Simbian adds AI threat hunting agent to expand autonomous SecOps platform
2026-08-03 The Hacker News Chinese Threat Actor Uses Leaked DarkSword Kit to Deploy GHOSTBLADE on iOS
2026-08-03 The Hacker News PNLD Breach Exposes U.K. Police and Government Contact Details on Dark Web
2026-08-03 The Hacker News Thermo Fisher Patches Flaw That Could Make DNA File Tampering Nearly Undetectable
2026-08-03 The Hacker News N-able Says Attackers Take Over N-central Servers After Initial Fix Proves Incomplete
2026-08-03 The Hacker News Hugging Face Diffusers Flaws Could Let Model Repositories Execute Arbitrary Code
2026-08-02 Help Net Security Week in review: Claude breached three companies during tests, AD CS domain-takeover PoC released
2026-08-01 The Hacker News Coldcard Hardware Wallet Flaw Linked to $70 Million Bitcoin Theft in 41 Minutes
2026-08-01 SecurityWeek Balance Theory Raises $19 Million to Help Enterprises Manage Cybersecurity Investments
2026-08-01 The Hacker News Hackers Poison Adform Script to Swap Crypto Wallet Addresses Across Customer Sites
2026-08-01 The Hacker News Adobe Campaign Classic CVSS 10.0 Flaw Could Run Code Without User Interaction
2026-07-31 Microsoft Security Blog CaptiveCrunch: Midnight Blizzard targets travelers worldwide for malware delivery and credential theft
2026-07-31 CyberScoop Trump blames Minnesota for cyberattacks on water sector, drawing pushback from cyber world
2026-07-31 The Hacker News Suspected Chinese-Speaking Hackers Target Central Asian Governments With OctLurk and SilkLurk
2026-07-31 The Record by Recorded Future CISA warns of spike in attacks on water systems as Minnesota incidents probed
2026-07-31 The Record by Recorded Future Cyber Command plans Silicon Valley office to drive innovation
2026-07-31 The Hacker News HollowFrame Loader Deploys Matryoshka Backdoor in Spear-Phishing Attack on Law Firm
2026-07-31 SecurityWeek In Other News: OpenAI Open Source Tool, AWS Links Hacks to North Korea, Mythos Crypto Research
2026-07-31 SecurityWeek Cyberattacks on Minnesota Water Systems Investigated as Officials Warn About Iranian Hackers
2026-07-31 The Hacker News Cheap Android TV Boxes Pose as Phones and Turn Owners’ Broadband Into Proxies
2026-07-31 The Hacker News Three Recent Chrome Releases Fix 1,442 Flaws, More Than Prior 23 Updates Combined
2026-07-31 The Record by Recorded Future Anthropic says its AI hacked real-world companies in three incidents
2026-07-31 The Hacker News Researchers Report 84 Flaws in 4G and 5G Cores, Including a Session Hijacking Flaw
2026-07-31 The Hacker News Chinese Hacker Commands DeepSeek via Telegram to Launch Autonomous Attacks
2026-07-31 SecurityWeek EU to Crack Down on AI Deepfakes, Illicit Imagery and Hacking With New Team in Brussels
2026-07-31 SecurityWeek Prompted by OpenAI Disclosure, Anthropic Finds Its Own Models Hacked 3 Organizations
2026-07-31 The Hacker News Anthropic Says Claude Mistook the Open Internet for a CTF and Breached Three Organizations
2026-07-31 The Record by Recorded Future Finland to disconnect fiber-optic link to Russia as lease expires
2026-07-30 CyberScoop CISA issues recommendations to federal agencies on open-source software security
2026-07-30 GitGuardian Blog What Was on This Machine? Answering the Blast Radius Question After a Laptop Compromise
2026-07-30 CyberScoop We know how to protect our troops from telecom attacks. We’re just not doing it.
2026-07-30 CyberScoop Ghanaian national sentenced to 7 years in prison for stealing $10M from romance scam victims
2026-07-30 The Record by Recorded Future North Korea’s Lazarus Group sharing tools with ransomware hackers, South Korean agencies warn
2026-07-30 The Record by Recorded Future North Korean hackers behind major open-source supply chain attacks, Amazon says
2026-07-30 The Record by Recorded Future Cyber extortionists steal data from UK Department for Education
2026-07-30 Kaspersky Securelist OctLurk and SilkLurk: newly identified tailored backdoors in cyber-espionage campaign in Central Asia
2026-07-30 Palo Alto Unit 42 Chinese-Speaking Threat Actor Harnesses AI Models for Autonomous Cyberattacks
2026-07-29 Dark Reading Who's Liable When AI Agents Escape? Hugging Face Breach Raises Hard Questions
2026-07-29 The Record by Recorded Future OpenAI says rogue agent behind Hugging Face hack broke into additional services
2026-07-29 GitGuardian Blog An AI Agent Breached Hugging Face. The Attack Playbook Was Older Than the Attacker
2026-07-29 The Record by Recorded Future Laundry Bear’s webmail hackers had more in store after February, report says
2026-07-29 The Record by Recorded Future Russia accuses Telegram founder of aiding terrorism, seeks international arrest
2026-07-29 The Record by Recorded Future Cyberattack hits Angola’s largest telco hours before landmark stock debut
2026-07-29 The Record by Recorded Future FTC sues Hims & Hers for allegedly sharing patient information with third-party platforms
2026-07-28 CyberScoop Here’s what Anthropic found when it turned Mythos loose on encryption algorithms
2026-07-28 CyberScoop AI-assisted security tools are finding more bugs, but the threat level has not changed
2026-07-28 The Record by Recorded Future India’s Bank of Baroda confirms cyber incident after hackers claim data theft
2026-07-28 Cloudflare Blog Natural disasters and government interference: examining Q2 2026’s major Internet disruption events
2026-07-28 Cisco Talos IR Trends Q2 2026: Phishing and weaponized remote management tools drive attack chains
2026-07-27 The Record by Recorded Future Outdated VPNs should be purged from federal agencies, senator says
2026-07-27 The Hacker News NVIDIA Forms 37-Member Open Secure AI Alliance and Open-Sources NOOA Framework
2026-07-27 The Record by Recorded Future Health system in South Carolina, Georgia closes offices after malware affects networks
2026-07-27 The Hacker News Dysphoria IoT Botnet Adds Blockchain C2 and Victim Relays After JackSkid Disruption
2026-07-27 The Record by Recorded Future Telegram phishing campaign targeted exiled Belarusian activist, Russians and Kazakhstanis
2026-07-27 The Hacker News Public Exploit Released for Patched vBulletin Pre-Auth Code Execution Flaw
2026-07-27 The Hacker News ⚡ Weekly Recap: Rogue AI Agents, Check Point Exploit, Slopsquatting, ClickFix Lures and More
2026-07-27 The Hacker News n8n Sandbox Escape Lets Workflow Editors Run OS Commands as the n8n Process
2026-07-27 The Hacker News Operation BlueDash Deploys Level RMM and ScreenConnect via Fake Teams Update
2026-07-27 The Record by Recorded Future Hackers used autonomous AI agent to spy on Thailand's finance ministry
2026-07-27 The Hacker News Cruciferra Crypter Uses BYOVD and Process Ghosting to Hide Windows Malware
2026-07-27 SecurityWeek Anthropic’s Opus 5 Nears Mythos 5 on Finding Bugs, but Falls Short on Exploits
2026-07-27 The Hacker News TELESHIM Abuses Telegram for C2 in Attacks Against Middle East Governments
2026-07-26 Help Net Security Week in review: ServiceNow pre-auth RCE exploited in the wild, Hugging Face breached
2026-07-25 The Hacker News Malvertising Sends Malware in Pieces, Then Makes the Browser Build the Executable
2026-07-25 The Hacker News Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patched Available
2026-07-25 The Hacker News Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git
2026-07-25 The Hacker News CTM360 Research Reveals How Insurance Phishing Has Evolved Into Real-Time Account Hijacking
2026-07-25 The Hacker News Cl0p Affiliates Target Internet-Exposed PTC Windchill and FlexPLM with Unauthenticated RCE
2026-07-25 The Hacker News DevMan RaaS Portal Centralizes Payload Builds, Victim Management, and Affiliate Payouts
2026-07-24 The Record by Recorded Future Andy Burnham signals continuity on UK cyber policy, reappoints minister despite scrapping ministry
2026-07-24 The Record by Recorded Future 'Wrench' attacks against crypto holders appear to be on the rise
2026-07-24 The Hacker News BlueNoroff Zoom Phishing Kit Profiles Crypto Wallets Before Malware Delivery
2026-07-24 SecurityWeek In Other News: Dolphin X AI-Powered Malware, Car Anti-Theft Device Hack, 400 Linux Kernel Flaws
2026-07-24 The Hacker News Certighost Exploit Lets Low-Privileged Active Directory Users Impersonate a Domain Controller
2026-07-24 Help Net Security Meta tackles AI-generated accounts with a free Facebook verification badge
2026-07-24 The Hacker News ChatGPT AgentForger Flaw Could Deploy Rogue Workspace Agents via a Phishing Link
2026-07-24 The Hacker News Bing Images Flaws Let Crafted SVGs Run Commands as SYSTEM on Microsoft's Servers
2026-07-24 The Hacker News Seeing AI Agents Is Not Enough. Security Teams Must Enforce What They Can Do
2026-07-24 The Hacker News Hacker Runs Hermes AI Agent Unattended for Post-Exploitation at Thai Finance Ministry
2026-07-24 The Hacker News Golden Chickens Resurfaces With Four New Malware Families and Modular Implants
2026-07-24 The Hacker News NodeBB Patches Eight AI-Found Flaws Exposing Admin Access and Private Chats
2026-07-24 The Hacker News Kimi K3 Agents Found Redis Zero-Days and Built RCE Exploit, Researchers Say
2026-07-23 The Hacker News Russian Espionage Group Exploited Zimbra Zero-Day to Steal Mail and 2FA Codes
2026-07-23 CyberScoop Russian espionage group using novel Zimbra exploit to steal sensitive data from Western countries
2026-07-23 The Record by Recorded Future International alert spotlights Russia-linked attacks on Zimbra webmail
2026-07-23 The Record by Recorded Future State Department imposes visa restrictions on foreign cyber scammers
2026-07-23 The Hacker News ThreatsDay: Android Spyware, PLC Attacks, AI Image Prompt Injection + 12 More Stories
2026-07-23 GitGuardian Blog Why identity-local signals and topology signals are two layers of the same blast radius
2026-07-23 SecurityWeek Abstract Raises $25 Million to Expand Composable Security Operations Platform
2026-07-23 The Record by Recorded Future Major Australian energy supplier confirms customer data compromised
2026-07-23 Help Net Security How attackers hosted a fake Claude download page on the claude.ai domain
2026-07-23 The Hacker News Chaos Ransomware Uses msaRAT to Route C2 Traffic Through Headless Chrome and Edge
2026-07-23 The Hacker News China-Nexus JadeProx Uses New TriBack Loader in Government and Healthcare Attacks
2026-07-23 The Hacker News Attackers Weaponize GitHub Actions Runners to Target cPanel and WHM Servers
2026-07-23 SecurityWeek Upbound Group Says Data Breach Led to $13 Million in Fraudulent Contract Losses
2026-07-23 Help Net Security Attackers exploit critical Check Point flaw to take over firewall management (CVE-2026-16232)
2026-07-23 Help Net Security Chaos ransomware msaRAT hides its C2 channel inside a legitimate browser process
2026-07-23 Cisco Talos Chaos ransomware's msaRAT: Living off the browser to build a covert C2 channel
2026-07-23 Help Net Security Swiss rail manufacturer Stadler refuses to pay $12.3 million ransom after cyberattack
2026-07-23 The Hacker News Nine-Year-Old RefluXFS Linux Flaw Gives Local Users Root on Default RHEL Installs
2026-07-23 Help Net Security Axonius expands Asset Cloud with Cyber Assets and Exposures enhancements
2026-07-23 The Hacker News Check Point Patches Exploited SmartConsole Flaw Allowing Full Admin Access
2026-07-23 SecurityWeek US Warns of Iranian Hackers Targeting Siemens, Schneider, and Rockwell ICS Devices
2026-07-23 ZDI (Zero Day Initiative) ZDI-26-447: Heimdall Data Database Proxy generateFileContent CRLF Injection Remote Code Execution Vulnerability
2026-07-23 ZDI (Zero Day Initiative) ZDI-26-448: Bitdefender Total Security Shredder Link Following Local Privilege Escalation Vulnerability
2026-07-23 ZDI (Zero Day Initiative) ZDI-26-449: AzeoTech DAQFactory CTL File Parsing Type Confusion Remote Code Execution Vulnerability
2026-07-23 ZDI (Zero Day Initiative) ZDI-26-450: AzeoTech DAQFactory CTL File Parsing Use-After-Free Remote Code Execution Vulnerability
2026-07-23 ZDI (Zero Day Initiative) ZDI-26-451: Docker Desktop for macOS Inference Server Permissive Allow List Sandbox Escape Vulnerability
2026-07-23 ZDI (Zero Day Initiative) ZDI-26-452: Dify AI Workflow oauth_redirect_url Open Redirect Vulnerability
2026-07-22 The Record by Recorded Future Extension of CISA 2015 info-sharing protections passes as part of House’s defense bill
2026-07-22 The Hacker News Ubuntu snap-confine Flaw Could Give Local Users Root on Default Desktop Installs
2026-07-22 The Record by Recorded Future French Parliament greenlights social media ban for under-15s
2026-07-22 Sentinel Labs Sol Searching | Can Frontier Models Tackle Autonomous Long-Horizon Malware Analysis?
2026-07-22 The Record by Recorded Future New Kimsuky campaign compromised South Korean software vendors
2026-07-22 Microsoft Security Blog Real world incident response: Microsoft and AXA XL strengthen cyber resilience
2026-07-22 The Record by Recorded Future Japanese food logistics giant recovers as extortion group claims cyberattack
2026-07-22 Black Hills InfoSec The Life of a SOC Analyst: Responsibilities, Challenges, and Strategies for Success
2026-07-22 The Hacker News Hackers Exploit Windmill Flaw to Read Arbitrary Server Files Without Authentication
2026-07-22 The Hacker News OpenAI Says Its AI Models Escaped Sandbox, Targeted Hugging Face to Cheat Benchmark
2026-07-22 The Hacker News Police Dismantle Kratos Phishing Kit Built to Steal Microsoft 365 Sessions and Bypass MFA
2026-07-22 Proofpoint Blog Proofpoint Research Finds 65% of Organizations Affected by Ransomware Say AI Made Attacks More Effective
2026-07-22 The Hacker News Trojanized Newtonsoft.Json Fork Hides Game-Rigging Code in a Working Library
2026-07-22 The Hacker News Microsoft Azure DevOps MCP Flaw Lets Hidden PR Comments Hijack AI Review Agents
2026-07-21 SecurityWeek Trump Orders Defense Contractors to Map Software, Suppliers Across Critical Supply Chains
2026-07-21 The Record by Recorded Future Spain fines 23andMe nearly $3 million for cybersecurity failings enabling 2023 hack
2026-07-21 CyberScoop House intel bill includes provisions on state and local threat intelligence, election security, AI
2026-07-21 The Record by Recorded Future Taiwan to slow mobile data during national resilience drills
2026-07-21 Kaspersky Securelist A new extortion cocktail: office printers, small ransoms, and BitLocker
2026-07-21 SecurityWeek SecurityWeek Launches Critical Impact Awards to Recognize Excellence in Industrial Cybersecurity
2026-07-21 The Record by Recorded Future Kenya probes hack of president's website after bitcoin ransom demand
2026-07-21 Kaspersky Securelist New Project CAV3RN module abuses Outlook calendar events for C2 and DNS AAAA records for configuration recovery
2026-07-21 ZDI (Zero Day Initiative) ZDI-26-445: Microsoft Windows WMI Providers Incorrect Authorization Local Privilege Escalation Vulnerability
2026-07-21 ZDI (Zero Day Initiative) ZDI-26-446: Microsoft Windows WMI Providers Incorrect Authorization Local Privilege Escalation Vulnerability
2026-07-20 The Record by Recorded Future Flock Safety kills acoustic system designed to detect 'human distress'
2026-07-20 The Hacker News FakeGit Campaign Uses 7,600 GitHub Repositories to Spread SmartLoader Malware
2026-07-20 The Record by Recorded Future India says allegedly leaked nuclear plant files pose no safety risk
2026-07-20 The Hacker News Exposed Server Reveals AI-Assisted Phishing Toolkit Behind WebDAV Malware Campaign
2026-07-20 Help Net Security HOLLOWGRAPH malware turns Microsoft 365 calendars into an espionage channel
2026-07-20 The Record by Recorded Future More than 1,000 domains illegally streaming World Cup games seized, DOJ says
2026-07-20 The Record by Recorded Future Hackers were inside South Korea's diplomat training system for 9 months
2026-07-20 SecurityWeek Neo Emerges From Stealth With $100M to Control and Secure Enterprise AI Software
2026-07-20 The Record by Recorded Future Romania races to restore land registry after cyberattack disrupts property market
2026-07-20 The Hacker News HollowGraph Malware Hides C2 and Stolen Files in Microsoft 365 Events Dated 2050
2026-07-20 SecurityWeek SonicWall Zero-Days Exploited to Deliver Custom Malware for Weeks Before Patch
2026-07-20 The Hacker News ⚡ Weekly Recap: WordPress RCE, SonicWall 0-Days, AI Service Attacks, SharePoint 0-Day and More
2026-07-20 Help Net Security Italy fines WINDTRE €1.7 million over security flaws behind two data breaches
2026-07-20 The Hacker News Russian Intelligence Hacks IP Cameras to Spy on Military Logistics Across NATO States and Ukraine
2026-07-20 The Hacker News New 7-Zip Vulnerability Could Let Crafted XZ Archives Run Code During Extraction
2026-07-20 The Hacker News Russian-Speaking Hacker Uses Google Gemini CLI to Control Botnet of Eight Dental Clinic PCs
2026-07-20 Cybersecurity Dive The secret problem in AI infrastructure: Why MCP security starts with secrets
2026-07-20 Cybersecurity Dive How agentic endpoint security shuts down IDE-based supply chain attacks
2026-07-20 Help Net Security More alerts are making your team slower, and an outcome-based SOC fixes that
2026-07-20 The Hacker News World's Largest AI Model Repository Hugging Face Breached by Autonomous AI Agent
2026-07-20 The Hacker News SleeperGem Uses Three Malicious RubyGems Packages to Target Developer Machines
2026-07-19 The Hacker News Critical NGINX Vulnerability Can Crash Workers and May Allow Remote Code Execution
2026-07-19 Help Net Security Week in review: High severity WordPress vulnerabilities, fake OAuth IDs bypass sign-in logs
2026-07-17 Cloudflare Blog Cloudflare WAF protects WordPress applications from two high-severity vulnerabilities
2026-07-17 Microsoft Security Blog Microsoft at Black Hat USA 2026: Defending trust in the age of AI and supply chain attacks
2026-07-17 CyberScoop State officials, election experts pan Trump speech: ‘This is what desperation looks like’
2026-07-17 SecurityWeek In Other News: Iran Tracks US Military Phones, CrashStealer macOS Malware, CVD Blueprint
2026-07-17 The Record by Recorded Future Dairy company Fairlife suspends production in US after cyber incident
2026-07-17 The Record by Recorded Future Zelensky appoints Ukraine's acting security service chief as acting defense minister
2026-07-17 Help Net Security Claude can now sign into websites with 1Password without exposing your credentials
2026-07-16 Microsoft Security Blog ACR Stealer: Two observed intrusion chains amid increased threat activity
2026-07-16 Palo Alto Unit 42 AI, Automation and Attacks: Unpacking the Unit 42 2026 Global Incident Response Report
2026-07-16 The Record by Recorded Future Senator calls on Rubio, Blanche to push back against Canadian surveillance legislation
2026-07-16 CyberScoop Russian trio indicted for allegedly running bulletproof hosting providers that spurred cybercrime
2026-07-16 The Record by Recorded Future UK investigates TikTok for alleged age-verification lapses, exposing kids to online harms
2026-07-16 The Record by Recorded Future Ukrainians rally against dismissal of tech-minded defense minister Fedorov
2026-07-16 Kaspersky Securelist HelloNet campaign — new malicious modules launched through the ViPNet update system
2026-07-16 SecurityWeek ‘ClickLock Stealer’ Bypasses macOS Security With Social Engineering, Process Killing
2026-07-16 Kaspersky Securelist GoSerpent: a persistent threat evolves with sophisticated data collection and exfiltration
2026-07-16 The Record by Recorded Future Scattered Spider hackers sentenced to 5.5 years over £29 million Transport for London hack
2026-07-16 Cisco Talos UAT-11795 deploys novel Starland RAT and bespoke WLDR C2 implant in financially motivated campaign
2026-07-16 GitGuardian Blog The Perimeter Moved to the Laptop: From Network, to Identity, to the Developer Endpoint
2026-07-15 Orca Security Blog Best DSPM Tools in 2026: The Data Security Posture Management Buyer’s Guide
2026-07-15 The Record by Recorded Future Trump administration unveils AI-supported clearinghouse for cyber vulnerabilities
2026-07-15 CyberScoop Dems press DNI nominee Jay Clayton on election security questions, but leave dismayed
2026-07-15 The Record by Recorded Future Trump’s DNI pick grilled about election security, voter fraud
2026-07-15 The Record by Recorded Future 23andMe reaches $18 million settlement with states for massive breach
2026-07-15 Microsoft Security Blog Turning threat intelligence into decisive action with Defender Experts
2026-07-15 The Hacker News OkoBot Malware Framework Injects Seed Phrase Phishing Into Ledger and Trezor Apps
2026-07-15 Help Net Security LabubaRAT malware infiltrates Windows systems while posing as NVIDIA software
2026-07-15 The Record by Recorded Future Dutch police dismantle global crypto investment scam, arrest alleged mastermind
2026-07-15 Help Net Security Threat actor impersonated hundreds of brands on GitHub to push infostealer malware
2026-07-15 Help Net Security Xint Pulse offers on-demand black-box penetration testing for web applications
2026-07-15 Help Net Security F5 Insight for ADSP enhances BIG-IP operations with guided updates and AI audit trails
2026-07-15 The Hacker News Firefox, Chrome, Adobe, and VMware Updates Fix Multiple Critical Security Flaws
2026-07-15 The Record by Recorded Future LAPD sidelines relationship with license-plate reader company Flock Safety
2026-07-15 Help Net Security LatticeFlow AI connects governance frameworks with continuous AI risk monitoring
2026-07-15 Help Net Security Nudge Security automates detection of risky OAuth grants and browser extensions
2026-07-15 Help Net Security Binary Defense’s NightBeacon CMD helps enterprise SOC teams automate threat investigations
2026-07-15 The Hacker News Researcher Drops New Windows Zero-Day PoC Hours After Microsoft Patch Tuesday
2026-07-15 The Hacker News Cursor Flaw Lets Malicious Cloned Repositories Trigger Windows Code Execution
2026-07-15 SecurityWeek White House Launches AI-Driven ‘Gold Eagle’ Vulnerability Coordination Initiative
2026-07-15 Kaspersky Securelist OkoBot: new sophisticated malware framework targets cryptocurrency users
2026-07-15 The Hacker News Two SonicWall SMA 1000 Zero-Days Exploited, One Could Enable Admin Commands
2026-07-15 Dark Reading Cribl Adds Agentic Detection Engineering & Boosts SecOps With CardinalOps Deal
2026-07-14 Cisco Talos Microsoft Patch Tuesday for July 2026 — Snort rules and prominent vulnerabilities
2026-07-14 CyberScoop Microsoft discloses ‘the mother of all’ vulnerability loads, tripling June’s previous record
2026-07-14 The Record by Recorded Future US unseals indictment against alleged operators of Russian bulletproof hosting service
2026-07-14 The Record by Recorded Future Finland issues wanted notice for hacker behind massive psychotherapy data breach
2026-07-14 GitGuardian Blog Identity Infrastructure: Why Credentials Are the Layer Directories Don't Secure
2026-07-14 The Record by Recorded Future NATO logistics, Ukrainian troops are top subjects of Russian camera hacks, advisory says
2026-07-14 Cloudflare Blog A broken DNSSEC rollover took down .AL. Now 1.1.1.1 tells you when validation is bypassed
2026-07-13 Microsoft Security Blog Defending SaaS-based applications against ShinyHunters OAuth abuse
2026-07-13 CyberScoop States are building their own election defense networks as federal support evaporates
2026-07-13 The Record by Recorded Future VPN service favored by ransomware groups is sanctioned by US
2026-07-13 The Record by Recorded Future Russian celebrity journalist Ksenia Sobchak says hackers accessed Telegram channels via email breach
2026-07-13 Microsoft Security Blog Microsoft Entra ID security updates: Passkeys are the default authentication method in Entra ID
2026-07-13 CyberScoop Europe strikes out against Russia’s Turla over espionage, ‘destructive attacks’
2026-07-13 CyberScoop Officials once again warn defenders that Russian hackers are targeting network devices
2026-07-13 Help Net Security EU and UK blacklist Russia’s cyber operators over efforts to destabilize Europe
2026-07-13 SecurityWeek Hacker Conversations: Jesse McGraw (GhostExodus), From Blackhat Hacker to Redemption
2026-07-13 Help Net Security Tidal Cyber connects assets, vulnerabilities, and threats through Threat-Led Defense
2026-07-13 Help Net Security Cloudflare Precursor uses continuous behavioral analysis to stop advanced bots
2026-07-13 Help Net Security Lumen expands managed detection and response with Cortex XSIAM integration
2026-07-13 Cloudflare Blog Introducing Precursor: detecting agentic behavior with continuous client-side signals
2026-07-13 Help Net Security Ransomware negotiator who betrayed clients sentenced to 70 months in prison
2026-07-13 Help Net Security Security threat prompts Progress to disable ShareFile accounts, tell customers to shut down servers
2026-07-13 SecurityWeek EU Targets Russian Intelligence Officers Accused of Running a Yearslong Cyber Spying Campaign
2026-07-13 Cybersecurity Dive Copy-paste might be the riskiest thing your enterprise employees do all day
2026-07-13 SecurityWeek Progress Prompts ShareFile Storage Zone Controller Shutdown Amid Security Concerns
2026-07-12 GitGuardian Blog What CISA Got Right After Its GitHub Leak: Lessons Every Organization Should Copy
2026-07-12 Help Net Security Week in review: Accenture data breach, great open-source cybersecurity tools
2026-07-11 The Hacker News Compromised jscrambler 8.14.0 npm Release Drops Rust Infostealer During Install
2026-07-11 The Hacker News Hackers Weaponize Balochistan Police Portal in Multi-Group Espionage Campaigns
2026-07-11 The Hacker News Critical Zimbra Flaw Could Let Crafted Emails Run Malicious Code in User Sessions
2026-07-10 The Record by Recorded Future Ryuk operator pleads guilty; Blackcat/AlphV conspirator gets nearly 6-year sentence
2026-07-10 The Record by Recorded Future License plate cameras may be next target after Supreme Court reins in location tracking
2026-07-10 Microsoft Security Blog Securing our future: July 2026 progress report on Microsoft’s Secure Future Initiative
2026-07-10 SecurityWeek In Other News: DHS Database Hacked, Adobe Boosts Patch Cadence, Canada Disrupts Ransomware Ops
2026-07-10 The Record by Recorded Future China, India ran separate spying campaigns against same Pakistani police force
2026-07-10 MDSec Research Dell BIOS Passwords: Weak XOR Encryption Allows Recovery from SPI Flash (CVE-2026-40639)
2026-07-10 CyberScoop Former DigitalMint ransomware negotiator who duped clients sentenced to 70 months in jail
2026-07-09 GitGuardian Blog GitGuardian Power for Amazon Kiro: Secrets Detection Built Into the Agent
2026-07-09 Microsoft Security Blog GigaWiper: Anatomy of a destructive backdoor assembled from multiple malware
2026-07-09 The Record by Recorded Future Latvian forestry company still restoring systems weeks after ransomware attack
2026-07-09 The Record by Recorded Future NSA revives 'Tailored Access Operations' name for elite hacking unit
2026-07-09 The Record by Recorded Future EU takes member states to court over unimplemented cybersecurity law
2026-07-09 Sentinel Labs One Target, Two Flags | Rival Espionage Actors Converge On Pakistani Law Enforcement
2026-07-09 SecurityWeek 15-Year-Old Linux Vulnerability ‘GhostLock’ Earns Researchers $92k From Google
2026-07-09 SecurityWeek AI Coding Tools Tricked Into Hacking Developer Machine via Decades-Old Technique
2026-07-08 The Record by Recorded Future Greek victims file lawsuit against Intellexa over Predator spyware
2026-07-08 The Record by Recorded Future Cash App owner to pay $45 million to settle allegations of lax security
2026-07-08 CyberScoop French nonprofit starts global intelligence and research hub for AI cyber threats
2026-07-08 Microsoft Security Blog Protecting Microsoft at AI speed: How SFI proactively hardens our cloud
2026-07-08 The Record by Recorded Future Taiwan charges two businessmen over alleged role in Chinese espionage campaign
2026-07-08 The Record by Recorded Future Former UK privacy chief preparing legal action against woman who reported him, minister says
2026-07-08 The Record by Recorded Future Spain arrests alleged supporter of pro-Russian hacktivist groups after FBI tip
2026-07-08 SecurityWeek CISA Urges Immediate Patching of Exploited ColdFusion, Langflow, Joomla Flaws
2026-07-08 ZDI (Zero Day Initiative) ZDI-26-398: (0Day) (Pwn2Own) Lorex 2K Indoor Wi-Fi Security Camera CDeviceOperator Format String Remote Code Execution Vulnerability
2026-07-08 ZDI (Zero Day Initiative) ZDI-26-399: (0Day) (Pwn2Own) Lorex 2K Indoor Wi-Fi Security Camera Device Management Server Improper Certificate Validation Vulnerability
2026-07-08 ZDI (Zero Day Initiative) ZDI-26-400: (0Day) AnyDesk Screen Recording Link Following Denial-of-Service Vulnerability
2026-07-08 ZDI (Zero Day Initiative) ZDI-26-401: (0Day) AnyDesk Support Information Link Following Denial-of-Service Vulnerability
2026-07-08 ZDI (Zero Day Initiative) ZDI-26-402: (0Day) Glarysoft Glary Utilities Link Following Local Privilege Escalation Vulnerability
2026-07-08 ZDI (Zero Day Initiative) ZDI-26-403: (0Day) Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability
2026-07-07 Palo Alto Unit 42 Vidar Stealer Unmasked: Code Signing Abuse, Go Loaders and File Inflation
2026-07-07 The Hacker News Rogue Agent Flaw Could Have Let Attackers Hijack Google Dialogflow CX Chatbots
2026-07-07 The Record by Recorded Future Supreme Court allows Texas app law requiring age verification to take effect
2026-07-07 The Record by Recorded Future Britain plans to build autonomous AI 'Cyber Shield' to defend nation
2026-07-07 The Record by Recorded Future Major Japanese telco says cyberattack exposed 12 million emails
2026-07-07 The Hacker News Public GitHub Issue Could Trick GitHub Agentic Workflows Into Leaking Private Repo Data
2026-07-07 The Hacker News Court Filing Reveals Windows Device ID Helped FBI Trace Alleged Scattered Spider Hacker
2026-07-07 The Hacker News Writer AI Flaw Could Let Agent Previews Leak Session Tokens Across Tenants
2026-07-07 SecurityWeek CISA Reportedly Using Anthropic’s Mythos to Scan Government Software for Flaws
2026-07-07 The Record by Recorded Future UK cyber pledge draws only a handful of top firms despite ministerial appeal
2026-07-07 SecurityWeek CISO Conversations: Tarah Wheeler, Cybersecurity Leader, Thought Leader and Original Thinker
2026-07-07 The Hacker News What Changes When Your Software Supply Chain Includes AI Writing Your Code?
2026-07-07 The Hacker News Suspected China-Aligned Hackers Exploit Roundcube Flaws Against Universities
2026-07-07 CyberScoop Suspected Chinese espionage group used a Roundcube exploit chain to burrow into universities
2026-07-06 The Record by Recorded Future Canadian spy agency reports hacking three criminal groups in 2025
2026-07-06 The Record by Recorded Future Attackers vote themselves $20 million in BONK cryptocurrency
2026-07-06 The Hacker News Iran-Linked Hackers Use New Cavern C2 Framework to Target Israeli Organizations
2026-07-06 The Record by Recorded Future Major medical device manufacturer notifies nearly 4 million of breach
2026-07-06 The Hacker News 16-Year-Old Linux KVM Flaw Lets Guest VMs Escape to Host on Intel and AMD x86 Systems
2026-07-06 The Record by Recorded Future Japanese teen arrested over cyberattack that disrupted anime streaming service
2026-07-06 The Hacker News Threat Actors Probe Gitea Docker Flaw CVE-2026-20896 13 Days After Disclosure
2026-07-06 Microsoft Security Blog 5 insights from Frost & Sullivan’s 2025 Frost Radar™ for Cloud Security Posture Management
2026-07-06 Help Net Security Criminal IP integrates threat intelligence with OpenCTI for automated indicator enrichment
2026-07-06 The Record by Recorded Future Ukrainian media outlets now among 'priority targets' for Russian hackers
2026-07-06 Help Net Security LTM’s BlueVerse RightLogic combines AI risk assessment with cyber remediation planning
2026-07-06 Help Net Security OpenSSH 10.4 arrives with security fixes and a post-quantum signature option
2026-07-06 The Hacker News ⚡ Weekly Recap: Proxy Botnets, Browser Ransomware, AI Agent Tricks, Fake PoC Malware and More
2026-07-06 SecurityWeek Proof-of-Concept Exploit Released for Linux ‘Bad Epoll’ Root Access Vulnerability
2026-07-06 The Hacker News How to Evaluate an AI SOC Platform in 2026: 6 Capabilities That Separate Leaders from Bolt-On AI solutions
2026-07-06 PT SWARM (Positive Technologies) Hack the Elephant One Bite at a Time: NUL byte SQL Injection in pdo_firebird and NULL Pointer Dereference in PDO via pdo_pgsql
2026-07-06 The Hacker News Suspected China-Nexus Hackers Use Fake Indian Tax Filing Utility to Deploy DcRAT
2026-07-06 Kaspersky Securelist When checking the URL isn’t enough: a Device Code Phishing attack via a Microsoft website
2026-07-06 The Hacker News New TrojPix Attack Leaks Data From Air-Gapped Systems via Video Cable Emissions
2026-07-06 The Hacker News Opera GX Flaw Let Malicious Sites Auto-Install Mods to Steal Data From Visited Pages
2026-07-06 The Hacker News SkillCloak Lets Malicious AI Agent Skills Evade Static Scanners with Self-Extracting Packing
2026-07-06 Help Net Security Product showcase: Is that text a scam? Malwarebytes Mobile Security can help you find out
2026-07-05 Help Net Security New ClamAV security patch closes seven scanner bugs dating back two decades
2026-07-05 Help Net Security Week in review: SimpleHelp vulnerability exploited, Oracle EBS Payments flaw under attack
2026-07-04 The Hacker News U.S. Government Entity Paid Kairos $1 Million in Data-Theft Extortion Case
2026-07-04 The Hacker News North Korean Hackers Publish 108 Malicious Packages and Extensions in PolinRider Campaign
2026-07-03 The Hacker News Unpatched Flaws Disclosed in Filesystem Bundled Into Millions of Embedded Devices
2026-07-03 The Hacker News New "Bad Epoll" Linux Kernel Flaw Lets Unprivileged Users Gain Root, Hits Android
2026-07-03 The Hacker News North Korea-Linked npm Packages Mimic Rollup Polyfills to Steal Developer Secrets
2026-07-03 SecurityWeek In Other News: Canadian Hacker Jailed, Open Source Zero-Days, Two Sentenced for ATM Jackpotting
2026-07-03 The Hacker News Armored Likho Targets Government Agencies, Power Sector with BusySnake Stealer
2026-07-03 Kaspersky Securelist Armored Likho digging a snake pit: inside the covert BusySnake Stealer campaign
2026-07-03 SecurityWeek Google, FBI Disrupt NetNut Residential Proxy Network Powered by Millions of Devices
2026-07-03 The Hacker News PamStealer Uses Fake Maccy Sites and PAM Checks to Steal Mac Login Passwords
2026-07-03 SecurityWeek Critical Cursor AI Code Editor Flaws Could Lead to OS-Level Remote Code Execution
2026-07-03 The Record by Recorded Future Spyware found on phone of European Parliament member probing it
2026-07-02 The Record by Recorded Future Launch of UK's National Cyber Action Plan delayed amid Labour leadership crisis
2026-07-02 The Hacker News Google Disrupts NetNut Residential Proxy Network Spanning 2 Million Home Devices
2026-07-02 The Hacker News Ransomware Groups Turn to Citrix Bleed 2, BYOVD, and Supply Chain Credentials
2026-07-02 The Record by Recorded Future Supreme Court decision threatens EU-US data transfer agreement
2026-07-02 watchTowr Labs It’s 37oC, And All We Can Think About Is ColdFusion (Adobe ColdFusion Security Bulletin APSB26-68 CVE Bonanza)
2026-07-02 The Hacker News ThreatsDay: AI Compute Hijacking, Apple Email Flaw, BlueHammer Ransomware + 14 Stories
2026-07-02 The Hacker News ToddyCat-Linked Umbrij Malware Abuses OAuth to Access Gmail via Google API
2026-07-02 Sentinel Labs Context Engineering | Compaction & Agent Memory for Automated Malware Analysis
2026-07-02 Help Net Security New iboss platform gives organizations instant visibility into AI tools and usage
2026-07-02 SecurityWeek Trump Administration Lifts Restrictions on Anthropic’s Claude Models After Cybersecurity Alarm
2026-07-02 Kaspersky Securelist Missed incidents, persistent threats, and response gaps: Insights from compromise assessment projects
2026-07-02 The Hacker News New ChocoPoC RAT Targets Vulnerability Researchers via Fake PoC Exploit Repos
2026-07-01 SecurityWeek Microsoft Adds New Teams Controls to Block Unauthorized AI Bots From Meetings
2026-07-01 Microsoft Security Blog Microsoft named a leader in the Frost Radar for cloud and application runtime security
2026-07-01 Black Hills InfoSec Finding and Addressing Vulnerable and Outdated Web Application Components
2026-07-01 The Record by Recorded Future US lifts export controls on Anthropic’s frontier cybersecurity AI models
2026-07-01 The Record by Recorded Future Japanese insurer, brewer, manufacturer and telecom disclose cyber breaches
2026-07-01 Cloudflare Blog Content Independence Day, one year on: building the business model for the agentic Internet
2026-07-01 Cloudflare Blog Announcing the Monetization Gateway: charge for any resource behind Cloudflare via x402
2026-07-01 Kaspersky Securelist The SOC Files: ScreenConnect masked as freeware. An inside look at a large-scale campaign
2026-07-01 Palo Alto Unit 42 Phantom Squatting: AI-Hallucinated Domains as a Software Supply Chain Vector
2026-06-30 watchTowr Labs CitrixBleed To Infinity And Beyond (Citrix NetScaler Pre-Auth Memory Overread CVE-2026-8451)
2026-06-30 The Record by Recorded Future House passes kids’ online safety bill, but Senate approval unlikely
2026-06-30 Help Net Security Aikido Security acquires Root to expand backported fixes for open source vulnerabilities
2026-06-30 The Record by Recorded Future An intelligence budget 'super user' job is now in the hands of Russ Vought
2026-06-30 Help Net Security Digi International’s DANI automates network diagnostics and device management
2026-06-30 Help Net Security SimpleHelp vulnerability exploited to deliver mighty Djinn Stealer (CVE-2026-48558)
2026-06-30 Help Net Security OpenClaw for iOS: The viral open-source AI agent comes to iPhone and iPad
2026-06-29 CyberScoop Warner bill would create federally vetted list for secure, trustworthy AI agents
2026-06-29 watchTowr Labs Enterprise Tech In, Shell Out (Progress Kemp LoadMaster Uninitialized Heap to Pre-Auth RCE CVE-2026-8037)
2026-06-29 The Record by Recorded Future Justices rule that cellphone location histories are protected by the Fourth Amendment
2026-06-29 The Hacker News Malicious Perplexity Chrome Extension Intercepted Searches and Address Bar Input
2026-06-29 The Record by Recorded Future US racks up about 400 wins over illegal World Cup streaming sites
2026-06-29 Microsoft Security Blog Chromium extension uses AI‑related branding to redirect browser search
2026-06-29 The Record by Recorded Future US posts $10 million reward over Russian cyber campaign targeting Signal, WhatsApp
2026-06-29 The Hacker News Mustang Panda Uses Zoho WorkDrive as Command Channel in Indian Government Attacks
2026-06-29 The Hacker News ⚡ Weekly Recap: Linux Kernel Flaws, AI Malware Tricks, Turla Backdoor, Infostealers and More
2026-06-29 SecurityWeek Researchers Demo New Claude Code Attack Using Harmless-Looking Repositories to Hijack Developer Machines
2026-06-29 The Record by Recorded Future Ukraine to use seized crypto from cybercrime group to buy war bonds
2026-06-29 Help Net Security PrivacyHawk Enterprise helps organizations find shadow IT and minimize third-party cyber risk
2026-06-29 The Hacker News 236,000 DCloud Uni-App Sites Used in Crypto Scams, Phishing, and Wallet Drainers
2026-06-29 The Hacker News Gamaredon Expands Ukraine Attacks with New Malware and Cloud Service Abuse
2026-06-29 SecurityWeek OpenAI and Anthropic Limit New AI Models to Trump-Approved Customers During Cybersecurity Review
2026-06-29 SecurityWeek US Offers $10 Million Bounty for Russian State Hackers as Messaging App Attacks Evolve
2026-06-29 Cybersecurity Dive From mythos to reality: Why the 2026 state of pentesting report proves the need for programmatic defenses
2026-06-29 The Hacker News Microsoft Removes 119 Edge Extensions That Hid Malware in Images and Fonts
2026-06-29 The Hacker News Public PoC Released for Critical libssh2 CVE-2026-55200 Client-Side SSH Flaw
2026-06-29 The Hacker News Hijacked npm and Go Packages Use VS Code Tasks to Deploy Python Infostealer
2026-06-29 Help Net Security Companies keep bolting AI onto their products, and the security bill is coming due
2026-06-28 Help Net Security Week in review: Fortibleed campaign’s impact on orgs, Cisco Unified CM flaw exploited
2026-06-27 The Hacker News Ukraine Says Russian Intelligence Used Fake Support Texts to Steal Messaging Credentials
2026-06-27 The Hacker News OpenAI Previews GPT-5.6 Sol With Restricted Access and Stronger Cyber Safeguards
2026-06-26 The Record by Recorded Future Russia accuses Apple of ‘political censorship’ after VK apps removed from App Store
2026-06-26 The Record by Recorded Future Turla group adds more malware to Russia’s espionage efforts against Ukraine
2026-06-26 The Record by Recorded Future Russia used social engineering to breach prominent messaging accounts, Ukraine says
2026-06-26 The Record by Recorded Future FCC votes to toughen rules in bid to better protect undersea cables
2026-06-25 Palo Alto Unit 42 CL-STA-1062 Targets Southeast Asian Governments and Critical Infrastructure
2026-06-25 The Record by Recorded Future DHS chief says president has met with potential CISA nominee; agency plans to hire 600
2026-06-25 Microsoft Security Blog Microsoft a Leader in The Forrester Wave™ for Endpoint Management Platforms
2026-06-25 CyberScoop Russia uses Cellebrite to break into human rights activist’s phone, even after cancellation of contract
2026-06-25 The Record by Recorded Future Another Russian dairy company reportedly disrupted by cyberattack
2026-06-25 The Hacker News Chrome Ad Blocker with 10M+ Installs Found with Dormant Script Injection Capability
2026-06-25 The Hacker News ThreatsDay Bulletin: Smart TV Proxyware, 24-Year curl Bug, AI Crime Forums + 13 More Stories
2026-06-25 The Record by Recorded Future Ukraine's state postal operator reports app disruption after cyberattack
2026-06-25 The Record by Recorded Future Russia used Cellebrite phone-hacking tool to crack down on dissident after firm cut off country
2026-06-25 Detectify Blog Real-world attack surface monitoring at massive scale: how the UK Government protects over half a million public sector domains
2026-06-25 SecurityWeek Lantronix Serial-to-IP Converter Flaw Exploited in Attacks After OT Threat Warning
2026-06-25 Kaspersky Securelist Inside the 2026 SMB threat landscape: From phishing and scams to fake AI tools
2026-06-25 The Hacker News New Gaslight macOS Malware Uses Prompt Injection to Disrupt AI-Assisted Analysis
2026-06-25 SecurityWeek SecurityWeek ICS Cybersecurity Conference Heads to Nashville for Special 25-Year Anniversary Edition
2026-06-25 The Hacker News New Mistic Backdoor Linked to KongTuke in ClickFix and ModeloRAT Campaigns
2026-06-25 The Hacker News Cisco Catalyst SD-WAN Zero-Day CVE-2026-20245 Exploited to Gain Root Access
2026-06-24 The Record by Recorded Future Three ‘cybercrime as a service’ operations undercut by Microsoft, law enforcement
2026-06-24 CyberScoop Malicious hackers exploit Cisco zero-day for highest access level at communications service provider
2026-06-24 Microsoft Security Blog CNAPP evolution: How Microsoft aligns with leading cloud risk management platforms
2026-06-24 The Hacker News Amadey and StealC Malware Network Disrupted, 27M Stolen Credentials Recovered
2026-06-24 The Record by Recorded Future German rail services resume after wireless communications outage
2026-06-24 GitGuardian Blog Identiverse 2026: The Challenges Of Solving Identity For AI Agents At Scale
2026-06-24 Black Hills InfoSec Insufficient Egress Filtering: How Weak Outbound Controls Enable Attacks
2026-06-24 The Hacker News Cordyceps CI/CD Flaws Expose 300+ GitHub Repositories to Supply-Chain Attacks
2026-06-24 Kaspersky Securelist StrikeShark: investigating a new campaign delivering Cobalt Strike through SharkLoader
2026-06-23 Sentinel Labs macOS.Gaslight | Rust Backdoor Turns Prompt Injection on the Analyst, Not the Sandbox
2026-06-23 Dark Reading 'Cordyceps': Mushrooming Malicious Pull Requests Threaten Developer Workflows
2026-06-23 The Record by Recorded Future Five Eyes agencies sound alarm about AI’s threat to cybersecurity
2026-06-23 CyberScoop Justice Department seizes infrastructure used by cyber scam and criminal marketplace
2026-06-23 Cloudflare Blog The post-quantum EO is an important milestone. Now it’s time to get to work
2026-06-23 The Hacker News FortiBleed Targeted FortiGate Firewalls in 110 Million-Credential Harvesting Operation
2026-06-23 The Record by Recorded Future Feds seize alleged cyber-scam infrastructure connected to Southeast Asian company
2026-06-23 The Record by Recorded Future Trump directs federal agencies to protect US data from quantum threats
2026-06-23 The Record by Recorded Future Compromise kids online safety bill unveiled by House leaders, with key omission
2026-06-23 The Hacker News Fake AI Agent Skill Passed Security Scans and Reportedly Reached 26,000 Agents
2026-06-23 The Hacker News GitHub Updates actions/checkout to Block Common Pwn Request Attack Patterns
2026-06-23 The Record by Recorded Future Two Scattered Spider members plead guilty over cyberattack that crippled London transit
2026-06-23 SecurityWeek Eight-Year-Old Samsung KNOX Flaw Exposed Millions of Galaxy Devices to Kernel Attacks
2026-06-23 Dark Reading FortiBleed Attackers Turn Firewalls Into Credential Stealers as Heists Persist
2026-06-23 SecurityWeek FFmpeg PixelSmash Flaw Allows RCE on Video Players, Media Servers, NAS Appliances
2026-06-23 The Hacker News WhatsApp VBScript Campaign Uses Fake Documents to Install ManageEngine RMM Tool
2026-06-23 The Hacker News OpenAI Expands Daybreak With GPT-5.5-Cyber to Help Defenders Patch Security Flaws
2026-06-22 Palo Alto Unit 42 The Global Namespace Risk: Universal Bucket Hijacking Technique for Cloud Data Exfiltration
2026-06-22 The Hacker News Researchers Detail DifyTap Flaws in Dify That Could Expose AI Chats Across Tenants
2026-06-22 Microsoft Security Blog One intrusion, two cyberattackers: Uncovering parallel threat activity
2026-06-22 CyberScoop Intel agencies: Frontier AI models will reshape cybersecurity faster than expected
2026-06-22 The Record by Recorded Future Suspected cyberattack triggers false emergency alerts across parts of Brazil
2026-06-22 The Hacker News Google Sets Sept. 30 Deadline for Android Developer Verification in Four Countries
2026-06-22 SecurityWeek Attackers Exploit Gravity SMTP Plugin Flaw to Harvest Valuable WordPress Data
2026-06-22 The Hacker News ⚡ Weekly Recap: Browser Bugs, EDR Killers, TV Botnet, OpenBSD Flaw, Android Trojan, and More
2026-06-22 Proofpoint Blog Proofpoint Joins the OpenAI Daybreak Cyber Partner Program to Advance Responsible AI-Powered Cyber Defense
2026-06-22 Kaspersky Securelist A VBScript campaign distributed through WhatsApp deploying RMM software
2026-06-22 The Hacker News Canada’s Spy Agency Used First-of-Its-Kind Warrant to Clean Botnet-Infected Devices
2026-06-22 Cybersecurity Dive Infrastructure downtime has a $50k-per-hour price tag. It’s time to turn hours into minutes.
2026-06-22 Cybersecurity Dive 3 ways AI is transforming security operations - and where it delivers real impact
2026-06-22 Cybersecurity Dive AI is transforming enterprise data risk. Here’s how security leaders are responding.
2026-06-22 Help Net Security 23 ClawHub plugins squatting official scopes expose AI registry security gaps
2026-06-22 The Hacker News AryStinger Malware Infects 4,300 Legacy Routers to Build Reconnaissance Proxy Network
2026-06-22 The Hacker News INTERPOL Warns Phishing, Ransomware, and AI Scams Are Rising Across Asia-Pacific
2026-06-22 Help Net Security Product showcase: Avira Security for iOS blends security, privacy, and device optimization
2026-06-22 GitGuardian Blog BSides San Antonio 2026: Following Trust Across Applications, Cloud, and Compliance
2026-06-21 Help Net Security Week in review: 74k Fortinet firewall credentials stolen, Splunk Enterprise RCE under active attack
2026-06-20 SecurityWeek French President Urges US to Share Cutting-Edge AI and Democracies to Cooperate on Regulation
2026-06-19 The Hacker News Unpatchable 'usbliter8' Exploit Breaks Apple A12 and A13 SecureROM Boot Chain
2026-06-19 The Hacker News The Gentlemen RaaS Uses GentleKiller EDR Framework Targeting 400 Security Processes
2026-06-19 SecurityWeek In Other News: Apple Patches Beats Eavesdropping Flaw, DOT Closes Delta CrowdStrike Probe, AWS Continuum
2026-06-19 The Hacker News Operation Endgame Disrupts SocGholish Servers, Cleans 14,971 WordPress Sites
2026-06-19 The Record by Recorded Future Police raid malware network tied to Russia's Evil Corp hacker group
2026-06-19 Help Net Security Cybercriminals abused GitHub, YouTube and VirusTotal to push crypto-stealing malware
2026-06-19 The Hacker News From Assistive to Agentic: The AI Shift That's Redefining Threat Management
2026-06-19 The Record by Recorded Future UK's information commissioner resigns over ‘inappropriate humour’
2026-06-19 Help Net Security Unauthenticated RCE in Splunk Enterprise under active attack (CVE-2026-20253)
2026-06-19 Help Net Security Accenture to buy Dragos, runZero, and NetRise in $4.2 billion cybersecurity deal
2026-06-19 The Hacker News Salesforce Disables Klue App Integration After OAuth Token Abuse Exposes Customer Data
2026-06-19 The Hacker News Apple Patches Beats Studio Buds Flaw Letting Nearby Attackers Spy via Microphone
2026-06-19 Help Net Security Your browser tab could become encrypted storage for someone else’s files
2026-06-19 Microsoft Security Blog AutoJack: How a single page can RCE the host running your AI agent
2026-06-18 Microsoft Security Blog New Forrester study shows customers who unified with Microsoft Security benefited from 124% ROI
2026-06-18 The Record by Recorded Future Bulgaria allowed surveillance tech firm to sell products to repressive regimes, report says
2026-06-18 The Hacker News F5 Patches Two Critical NGINX Open Source Flaws Enabling Remote Code Execution
2026-06-18 The Hacker News ThreatsDay Bulletin: Claude Chat Abuse, NastyC2 npm Packages, Device-Code Phishing + 25 More Stories
2026-06-18 CyberScoop Accenture shells out $4.18B on three companies in big industrial cybersecurity push
2026-06-18 The Hacker News Microsoft Details Windows Clipper Malware Campaign Using USB LNK Worm and Tor-Based C2
2026-06-18 The Record by Recorded Future Australian sugar producer works to restore operations as ransomware group claims attack
2026-06-18 The Hacker News INC Ransomware Emerges as Major RaaS Threat in 2026 with 830+ Victims Since 2023
2026-06-18 The Hacker News DragonForce Hackers Abuse Microsoft Teams Relays to Hide Backdoor.Turn C2 Traffic
2026-06-18 Cisco Talos Scripting the disassembler: Local agentic reverse engineering through vbdec’s live COM object model
2026-06-18 Microsoft Security Blog From package to postinstall payload: Inside the Mastra npm supply chain compromise
2026-06-17 Microsoft Security Blog Crypto Clipper uses Tor and worm-like propagation for persistence and control
2026-06-17 Cloudflare Blog Bringing more agent harnesses and frameworks to Cloudflare, starting with Flue
2026-06-17 The Hacker News Crypto Clipper Campaign Abuses Fake Reviews, AI Narrators, and VirusTotal Comments
2026-06-17 The Record by Recorded Future Hostile states behind three-quarters of attacks on Britain's critical infrastructure, cyber chief warns
2026-06-17 The Hacker News Microsoft Confirms RoguePlanet Defender Zero-Day, Says Patch is in Development
2026-06-17 The Record by Recorded Future EU grants Ukraine access to cybersecurity reserve for major attacks
2026-06-17 The Hacker News Junior Hacker Used Tailscale and OpenSSH to Keep Access After His C2 Went Offline
2026-06-17 CyberScoop Attackers hit pair of critical Fortinet vulnerabilities the vendor disclosed in April
2026-06-17 The Hacker News Adversarial Exposure Validation Turns Security Visibility into Confident Prioritization
2026-06-17 Help Net Security WitnessAI Agentic Control secures AI agents, tools, and MCP server access
2026-06-17 The Hacker News Malicious JetBrains Plugins Steal AI API Keys as Chrome Extensions Capture Chatbot Chats
2026-06-17 Help Net Security Tigera introduces unified control plane for Kubernetes-based AI agent security
2026-06-17 Help Net Security Rokarolla Android trojan targets banking and crypto users, enables device takeover
2026-06-17 Black Hills InfoSec Everyone’s Selling AI That Kills Pentesting. We Built One That Doesn’t.
2026-06-17 Help Net Security Flip expands platform with digital identity, no-code apps, and AI automation
2026-06-17 Help Net Security Corelight enhances Open NDR to detect AI-driven threats and unknown assets
2026-06-17 Help Net Security ArmorCode helps product manufacturers prepare for EU Cyber Resilience Act requirements
2026-06-17 Help Net Security Legit Security brings agentic AI to AppSec remediation and risk reduction
2026-06-17 Help Net Security Tenable One adds continuous security control validation to improve exposure prioritization
2026-06-17 The Record by Recorded Future Warner warns of CISA cuts, staffing gaps in letter to acting chief
2026-06-17 The Hacker News CISA Warns of Actively Exploited Joomla JCE Flaw Allowing PHP Code Execution
2026-06-16 The Hacker News Google Vertex AI SDK Flaw Let Attackers Hijack Model Uploads via Bucket Squatting
2026-06-16 The Hacker News ClickFix Campaigns Expand Malware Delivery With New Loaders and Fake Update Lures
2026-06-16 The Record by Recorded Future India temporarily blocks Telegram over medical exam cheating fears
2026-06-16 Help Net Security Cybercriminals mask malicious communications through Microsoft Teams relays
2026-06-16 Help Net Security SimpleHelp RMM flaw could give attackers full access to managed endpoints (CVE-2026-48558)
2026-06-16 The Hacker News New Rokarolla Android Malware Steals PINs, SMS Codes, and Crypto Wallet Funds
2026-06-16 Help Net Security AppViewX extends machine identity security to AI agents and post-quantum environments
2026-06-16 Help Net Security Teleport adds LLM Proxy and Delegated Identity to secure AI agent actions and access
2026-06-16 Help Net Security Radware AI Xploit Shield delivers virtual patching for newly identified application and API flaws
2026-06-16 The Hacker News Survey: 94% of Incidents Involve Anonymized Infrastructure. Teams Are Still Reactive
2026-06-16 The Hacker News Attackers Exploit Three Fortinet FortiSandbox Flaws, One Patched Last Week
2026-06-16 Help Net Security Cisco discloses second exploited SD-WAN vulnerability in two weeks (CVE-2026-20262)
2026-06-16 Palo Alto Unit 42 Pickle in the Middle – Hijacking Vertex AI Model Uploads for Cross-Tenant RCE
2026-06-16 The Hacker News China-Linked SprySOCKS Backdoor Expands to Windows with Driver-Based Stealth
2026-06-16 Kaspersky Securelist Dozens of malicious wallpapers found on Steam Workshop: gamers’ accounts at risk
2026-06-16 The Hacker News Cisco Releases Security Updates for Actively Exploited SD-WAN Manager Flaw
2026-06-16 The Hacker News CISA Flags LiteSpeed cPanel Plugin Flaw Exploited for Root Privilege Escalation
2026-06-15 CyberScoop Google exposes China espionage group that’s been lurking in networks undetected since 2023
2026-06-15 The Record by Recorded Future Maine closes data breach portal to the public after fake reports
2026-06-15 Microsoft Security Blog Microsoft Defender email security benchmarking: Key insights from one year of data
2026-06-15 SecurityWeek Ransomware Attack Shuts Down Mills of Australia’s Second-Largest Sugar Producer
2026-06-15 The Record by Recorded Future Cyberattack on Russian tech firm Astral disrupts business, government services for week
2026-06-15 GitGuardian Blog Gitguardian Agent Skills: Secret Detection and Remediation For AI-Assisted Development
2026-06-15 The Record by Recorded Future Finland brings charges against cargo ship officers for cutting submarine cables
2026-06-15 The Record by Recorded Future Anthropic says US government forced it to disable cybersecurity AI models
2026-06-14 Help Net Security Week in review: Exploited Check Point VPN zero-day, Oracle PeopleSoft servers under attack
2026-06-13 CyberScoop Anthropic disables new models after government calls them a national security concern
2026-06-13 The Hacker News Critical Splunk Enterprise Flaw Lets Attackers Run Code Without Authentication
2026-06-13 SecurityWeek Anthropic Says It Has Taken Its Latest AI Models Offline to Comply With New Export Controls
2026-06-13 The Hacker News U.S. Orders Anthropic to Suspend Fable 5 and Mythos 5 Access for Foreign Nationals
2026-06-12 CyberScoop FBI takes down massive China-based cybercrime network that caused $1.9B in losses
2026-06-12 watchTowr Labs Why Use App-Level Auth When Every Database Has Auth? (Splunk Enterprise CVE-2026-20253 Pre-Auth RCE)
2026-06-12 The Hacker News Over 400 Arch Linux AUR Packages Hijacked to Deploy Infostealer and eBPF Rootkit
2026-06-12 The Hacker News Google Sues Chinese Smishing Network Accused of Using Gemini AI in Phishing
2026-06-12 The Hacker News China-Linked Hackers Backdoored Linux Login Software to Hide for Nearly a Decade
2026-06-12 The Record by Recorded Future Bankruptcy admin approves settlement fund of $47 million for 23andMe data breach victims
2026-06-12 The Record by Recorded Future Major US surveillance program poised to lapse after legislative deadlock
2026-06-12 SecurityWeek In Other News: Google Security Layoffs, AudiA6 Takedown, $400 Million Coupang Fine
2026-06-12 CyberScoop ShinyHunters is actively extorting universities after exploiting an unpatched Oracle flaw
2026-06-12 The Record by Recorded Future South Korea hits Coupang with record $409 million fine over data breach
2026-06-12 Cloudflare Blog Scaling Security Insights: how we achieved a 10x increase in global scanning capacity
2026-06-12 The Hacker News LangGraph Flaw Chain Exposes Self-Hosted AI Agents to Remote Code Execution
2026-06-12 The Hacker News INTERPOL Operation Takes Down Sniper Dz Phishing Platform, Arrests Administrator
2026-06-12 The Hacker News Europol Disrupts AudiA6 Crypto Laundering Service Used by Ransomware Gangs
2026-06-12 watchTowr Labs Marking Your Own Homework (Check Point Remote Access VPN IKEv1 Authentication Bypass CVE-2026-50751)
2026-06-11 The Hacker News ShinyHunters Exploits Oracle PeopleSoft Zero-Day (CVE-2026-35273) to Breach Universities
2026-06-11 The Hacker News New GreatXML Exploit Bypasses Windows BitLocker via Recovery Partition XML Files
2026-06-11 The Record by Recorded Future British high school sends students home following cyberattack
2026-06-11 The Record by Recorded Future Hacker linked to Void Blizzard faces charges over cyberespionage campaign
2026-06-11 Help Net Security Proxmox releases Mail Gateway 9.1 with quarantine and backup encryption changes
2026-06-11 The Record by Recorded Future University of Nottingham confirms cyber incident as Shiny Hunters group claims data theft
2026-06-11 Help Net Security Fake Spotify Premium tutorials on TikTok and Instagram Reels spread malware
2026-06-11 The Hacker News ThreatsDay Bulletin: Worm Code Leaked, AI Agent Phished, Claude Code Patch + 28 New Stories
2026-06-11 Help Net Security Oracle PeopleSoft servers under attack, Oracle pushes out-of-band security alert
2026-06-11 The Hacker News AI Broke Vulnerability Management. That's Why CISOs Are Moving Budget to BAS.
2026-06-11 Help Net Security FBI seizes 13 websites linked to alleged Chinese intelligence-gathering effort
2026-06-11 Help Net Security 9 out of 10 people can no longer distinguish real from AI-generated content
2026-06-11 Help Net Security Check Point expands MSP platform with with AI governance and unified security bundles
2026-06-11 Help Net Security IDnow launches Trust Platform to help regulated firms move from KYC to continuous trust
2026-06-11 The Hacker News GitHub to Disable npm Install Scripts by Default to Stop Supply Chain Attacks
2026-06-10 CyberScoop OpenAI: ‘Likely’ Chinese influence operation tried to use ChatGPT to stir debate on data centers
2026-06-10 The Record by Recorded Future CISA to require federal agencies to patch some cyber vulnerabilities within 3 days
2026-06-10 The Hacker News China-Linked JDY Botnet Expands to 1,500+ Devices for Cyber Reconnaissance
2026-06-10 CyberScoop CISA directive orders agencies to prioritize vulnerability patching in a new way
2026-06-10 The Record by Recorded Future Cyberattack shuts down major Australian sugar mills, disrupting harvest
2026-06-10 The Hacker News Ivanti, Fortinet, and SAP Release Patches for Multiple Critical Vulnerabilities
2026-06-10 The Hacker News CISA Adds Cisco, Chrome, and Arista Flaws to KEV Catalog Amid Active Exploitation
2026-06-10 GitGuardian Blog You Can't Secure What You Can't See: Making Non-Human Identities Governable
2026-06-10 Help Net Security AISLE Snapshot keeps source code under enterprise control during vulnerability scanning
2026-06-10 Help Net Security Drata brings visibility, control and auditability to enterprise AI agents
2026-06-10 Help Net Security New Intel 471 assessment helps organizations measure CTI program maturity
2026-06-10 Help Net Security Critical Ivanti Sentry flaw allows root-level remote code execution (CVE-2026-10520)
2026-06-10 The Record by Recorded Future Microsoft ships largest Patch Tuesday on record, with one bug under active attack
2026-06-10 Help Net Security New Browser-in-the-Browser phishing uses fake login popups to steal Microsoft 365 credentials
2026-06-10 The Hacker News Your Automated Pentest Looks Clean. See What It Missed in This Expert Webinar
2026-06-10 The Hacker News Microsoft Patches Record 206 Flaws, Including Three Zero-Days and Critical RCE Bugs
2026-06-10 Help Net Security Rubrik launches Autonomous Business Recovery to rebuild cloud applications after cyberattacks
2026-06-10 The Hacker News Anthropic Releases Claude Fable 5, Its Most Powerful AI Yet, With Cyber Safeguards
2026-06-10 The Hacker News ServiceNow Flaw Exploited to Gain Unauthorized Access to Customer Instances
2026-06-10 The Hacker News Microsoft Defender RoguePlanet Zero-Day Grants SYSTEM Access on Updated Windows
2026-06-10 The Hacker News Six Proto6 Vulnerabilities in protobuf.js Expose Node.js Apps to RCE and DoS
2026-06-10 ZDI (Zero Day Initiative) ZDI-26-355: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability
2026-06-10 watchTowr Labs More Evidence That Words Don't Mean What We Thought They Meant (Ivanti Sentry Pre-Auth OS Command Injection CVE-2026-10520)
2026-06-09 Palo Alto Unit 42 Blinding the Watchmen: Abusing Cloud Logging Services for Defense Evasion and Visibility
2026-06-09 Cisco Talos Microsoft Patch Tuesday for June 2026 — Snort rules and prominent vulnerabilities
2026-06-09 The Record by Recorded Future CISA to transform how it assesses cyber vulnerabilities and risks, Andersen says
2026-06-09 The Hacker News Microsoft Restores Some GitHub Repos, Keeps Others Offline as Miasma Probe Continues
2026-06-09 CyberScoop CISA is rethinking how it prioritizes risks and vulnerabilities for feds, private sector
2026-06-09 Help Net Security Elastic brings AI-driven incident investigation to Kubernetes and observability tools
2026-06-09 The Record by Recorded Future Hackers pose as women seeking romance to spy on Russian soldiers
2026-06-09 The Hacker News WinRAR Flaw Exploited by Russia-Aligned Groups to Deploy Stealers in Ukraine
2026-06-09 The Hacker News Researchers Build Self-Replicating AI Worm That Operates Entirely on Local, Open-Weight Models
2026-06-09 Help Net Security Apple Intelligence can now replace weak passwords without user intervention
2026-06-09 The Hacker News New FROST Attack Lets Websites Track What Sites and Apps You Open via SSD Timing
2026-06-09 The Hacker News Hades PyPI Attack: 19 Packages Poisoned to Auto-Run Bun Credential Stealer
2026-06-09 The Hacker News LiteLLM Flaw CVE-2026-42271 Exploited in the Wild, Chains to Unauthenticated RCE
2026-06-09 Help Net Security The architecture of subtraction: Why it’s time to erase the roads, not just map the traffic
2026-06-09 Cloudflare Blog Defend against frontier cyber models: Cloudflare's architecture as customer zero
2026-06-08 The Record by Recorded Future UK gives big tech 3 months to create device controls to block nude images of kids
2026-06-08 The Hacker News One-Character Linux Kernel Flaw Enables Local Root Access, Exploits Now Public
2026-06-08 CyberScoop Meta accuses NSO Group of defying spyware injunction, files contempt of court complaint
2026-06-08 The Record by Recorded Future Armenia’s pro-Europe party wins election despite Russia-linked disinformation
2026-06-08 The Hacker News Meta Blocks NSO Group's New WhatsApp Phishing Attack, Files Contempt Order
2026-06-08 The Record by Recorded Future WhatsApp says NSO targeted users with spearfishing attacks in violation of court order
2026-06-08 Help Net Security Microsoft changes how Defender for Endpoint EDR updates are delivered on Windows
2026-06-08 Microsoft Security Blog AI brands as bait: How threat actors are using the AI hype in social engineering
2026-06-08 The Hacker News Critical Check Point VPN Flaw Exploited to Bypass Passwords in IKEv1 Setups
2026-06-08 The Record by Recorded Future Russia upgrades rules for its digital spy system to better track citizens online
2026-06-08 Help Net Security Hackers used Meta’s AI support system to hijack over 20,000 Instagram accounts
2026-06-08 The Hacker News AI Phishing Is Crushing SOCs with Alert Volume: How to Reduce Tier 1 Overload
2026-06-08 The Hacker News ⚡ Weekly Recap: Instagram Account Hacks, Android Zero-Day, GitHub Worm and More
2026-06-08 Help Net Security Qilin ransomware affiliate exploited Check Point VPN zero-day (CVE-2026-50751)
2026-06-08 Help Net Security RidgeBot 7.0 automates Active Directory attack simulations for security validation
2026-06-08 Help Net Security ConnectSecure’s Patch 360 gives MSPs control over patch testing and deployment
2026-06-08 Help Net Security CISA: Patch actively exploited SolarWinds Serv-U DoS vulnerability (CVE-2026-28318)
2026-06-08 SecurityWeek Anthropic Urges Industry Coordination to Allow for a ‘Pause’ in AI Development if Risks Grow
2026-06-08 The Hacker News UNC3753 Used Vishing and Physical Intrusions in U.S. Data Theft Extortion Campaign
2026-06-08 The Hacker News VS Code Adds 2-Hour Extension Auto-Update Delay to Limit Supply Chain Attacks
2026-06-06 The Hacker News New ChatGPT Lockdown Mode Limits Tools That Could Enable Data Exfiltration
2026-06-06 The Hacker News Miasma Worm Hits 73 Microsoft GitHub Repositories in Major Supply Chain Attack
2026-06-06 The Hacker News Cisco Catalyst SD-WAN Manager CVE-2026-20245 Flaw Actively Exploited – No Patch Available
2026-06-05 Microsoft Security Blog Securing CI/CD in an agentic world: Claude Code Github action case
2026-06-05 SecurityWeek OWASP Incubator Project Helps Developers Find and Fix Vulnerable Dependencies in Seconds
2026-06-05 The Hacker News Android Spyware Asin Targets Arabic Users via Fake News, PDF and War Map Apps
2026-06-05 CyberScoop Nightmare Eclipse incident shows the researcher-vendor fights may never fully go away
2026-06-05 GitGuardian Blog Designing Identity for the Agentic Enterprise: The Okta AI Identity Summit
2026-06-05 The Record by Recorded Future EU unveils tech sovereignty package to cut reliance on US, Chinese suppliers
2026-06-05 SecurityWeek In Other News: Anthropic Maps AI Threats, Unpatched Comodo Flaw, Palantir Chief Eyed for CISA
2026-06-05 The Hacker News New Threat Cluster OP-512 Targets Microsoft IIS Servers with Custom Web Shell Framework
2026-06-05 Help Net Security Attackers obtained encrypted password vaults from some Dashlane user accounts
2026-06-05 The Hacker News Only 10% of SOCs Say They’re Getting Excellent Value From AI. Here’s What the Second Wave Has to Deliver
2026-06-05 PT SWARM (Positive Technologies) The Click that shouldn’t have worked: RCE via clickjacking in Internet Explorer
2026-06-05 SecurityWeek Industry Reactions to New Trump AI Cybersecurity Executive Order: Feedback Friday
2026-06-05 SecurityWeek Five Eyes: Chinese Spies Target Government, Military Staff With Fake Job Opportunities
2026-06-05 The Hacker News Hackers Exploit Critical Everest Forms Pro WordPress Plugin Flaw to Take Over Sites
2026-06-05 The Hacker News FIFA World Cup 2026 Scams Are Already Live: Fake Sites, Banking Malware, and Stolen Logins
2026-06-05 The Hacker News PCPJack Hijacks 230 AWS, Google Cloud, and Azure Servers for Covert SMTP Relay Network
2026-06-05 Help Net Security Thieves can pull off keyless car theft in under a minute and here’s how to stop them
2026-06-04 The Record by Recorded Future FTC considers setting aside or modifying $150 million privacy penalty against X
2026-06-04 Microsoft Security Blog Updating the taxonomy of failure modes in agentic AI systems: What a year of red teaming taught us
2026-06-04 The Record by Recorded Future Russia seeks to label two anti-Kremlin hacker groups as ‘extremist’
2026-06-04 The Record by Recorded Future Supreme Court rules FCC fines punishing telecom giants for sharing location data were legal
2026-06-04 The Hacker News Claude Code GitHub Action Flaw Let One Malicious Issue Hijack Repositories
2026-06-04 The Hacker News Agentic AI Is Transforming Defense, But Only Secure IT Infrastructure Will Maximize It
2026-06-04 SecurityWeek Offroad Emerges From Stealth With $7 Million to Tackle Enterprise Identity Risk
2026-06-04 The Record by Recorded Future CISA directive for AI executive order to be released this week, Andersen says
2026-06-04 SecurityWeek Webinar Today: Third-Party Risk in Practice – Where Programs Break Down and How to Respond
2026-06-04 Dark Reading Bugcrowd Launches EU Data Residency Option For Evolving Data Sovereignty Needs
2026-06-04 The Hacker News ThreatsDay Bulletin: AI Agents Gone Wrong, Sketchy C2 Tools, ClickFix Tricks, JS Backdoors & 20+ New Stories
2026-06-04 The Hacker News China-Linked TA4922 Expands Phishing Attacks to U.K., Germany, Italy, and South Africa
2026-06-04 The Hacker News FlutterShell Backdoor Spreads to macOS via Malicious Google and YouTube Ads
2026-06-04 The Hacker News Fake Sites Mimicking Open-Source Tools Rank High on Google to Deliver Malware via TDS
2026-06-04 The Hacker News Hackers Spied on a Stock Exchange Executive's Outlook Mailbox for Five Months
2026-06-04 Help Net Security The modern-day business can learn a lot about risk from this year’s mega events
2026-06-04 The Hacker News DoJ Disrupts Southeast Asia Crypto Fraud Networks, Freezes $3.8 Million in Assets
2026-06-04 Help Net Security From critical to controlled: Cutting vulnerabilities in a live manufacturing environment
2026-06-04 Help Net Security Attackers already know the secrets are on your developers’ machines. Do you?
2026-06-04 ZDI (Zero Day Initiative) ZDI-26-328: ASUS Business Manager Service Client-Side Authentication Local Privilege Escalation Vulnerability
2026-06-04 ZDI (Zero Day Initiative) ZDI-26-329: (Pwn2Own) Microsoft Edge Origin Validation Error Security Bypass Vulnerability
2026-06-04 ZDI (Zero Day Initiative) ZDI-26-330: (Pwn2Own) Microsoft Edge Navigation Handling Universal Cross-Site Scripting Vulnerability
2026-06-04 ZDI (Zero Day Initiative) ZDI-26-331: (Pwn2Own) Microsoft Edge Feedback Log File Handling Directory Traversal Remote Code Execution Vulnerability
2026-06-04 Help Net Security Product showcase: Trend Micro Mobile Security detects scams in messages, QR codes, and websites
2026-06-03 GitGuardian Blog Four Credential-Harvesting Campaigns Hit Open Source Ecosystems in Two Weeks
2026-06-03 The Hacker News Beyond the Zero-Day: See Your Network Like an Attacker | Webinar with HD Moore
2026-06-03 The Hacker News Microsoft 365 Android Apps Let Any App Steal Account Tokens via Leftover Debug Flag
2026-06-03 The Hacker News Shrinking the IAM Attack Surface through Identity Visibility and Intelligence Platforms (IVIP)
2026-06-03 The Hacker News Unpatched Windows Search URI Vulnerability Lets Attackers Steal NTLMv2 Hashes
2026-06-03 The Record by Recorded Future New cyber force would cost up to $11 billion to start, commission says
2026-06-03 SecurityWeek Microsoft Tries to Calm Legal Threat Fears After Zero-Day Disclosure Backlash
2026-06-03 The Hacker News New HTTP/2 Bomb Vulnerability Allows Remote DoS on NGINX, Apache, IIS, Envoy & Cloudflare
2026-06-03 The Hacker News Weedhack Attacks Minecraft Users, CountLoader Hits 86K, Miners Spread via Pirated Content
2026-06-03 Microsoft Security Blog Preinstall to persistence: Inside the Red Hat npm Miasma credential-stealing campaign
2026-06-02 SecurityWeek Trump Signs Executive Order That Invites Vetting of Top AI Models for National Security Risks
2026-06-02 The Hacker News Gamaredon Exploits WinRAR to Deliver GammaWorm and GammaSteel Against Ukraine
2026-06-02 The Hacker News Oracle WebLogic CVE-2024-21182 Added to KEV Catalog After Active Exploitation
2026-06-02 Microsoft Security Blog Microsoft Build 2026: Securing code, agents, and models across the development lifecycle
2026-06-02 SecurityWeek Two New Reports Offer Competing Explanations for Cybersecurity’s Growing Crisis
2026-06-02 SecurityWeek Exclusive: How One Line of Code Put Billions of Microsoft Android App Downloads at Risk
2026-06-02 Help Net Security Noma brings visibility and access governance to AI agents and MCP servers
2026-06-02 Help Net Security Tuskira Quell identifies, mitigates, and validates zero-day risk before breach
2026-06-02 The Record by Recorded Future Red Hat removes tainted packages after software pipeline compromise
2026-06-02 Sentinel Labs LABScon25 Replay | Gamaredon x Turla: Unveiling a 2025 Espionage Alliance Targeting Ukraine
2026-06-02 Kaspersky Securelist Wardriving assessment across Mexico: Preparing for the 2026 World Cup
2026-06-02 The Hacker News AI-Driven Exploitation is Destroying Vulnerability Management. Here’s How to Handle It.
2026-06-02 Palo Alto Unit 42 Operation FlutterBridge: macOS Malvertising Campaign Spreads New FlutterShell Backdoor
2026-06-02 The Hacker News Pakistan-Linked SideCopy Targets Afghanistan Finance Ministry with Xeno RAT
2026-06-02 The Hacker News Dashlane Discloses Brute-Force Attack, Encrypted Vaults of Fewer Than 20 Users Downloaded
2026-06-01 CyberScoop Attackers are exploiting Palo Alto Networks defect that initially flew under the radar
2026-06-01 The Record by Recorded Future Inspector general finds NIST mistakes have made vulnerability database ineffective
2026-06-01 CyberScoop Tina Peters, convicted in election-security breach, emerges defiant and vows legal fight
2026-06-01 CyberScoop USPS moving forward with mail-in ballot changes as courts weigh Trump’s election order
2026-06-01 The Hacker News Miasma Supply Chain Attack Compromises Red Hat npm Packages with Credential-Stealing Worm
2026-06-01 Help Net Security OpenAI requires stronger authentication for users of its most powerful AI models
2026-06-01 Help Net Security NetQuest expands NetworkLens to detect threats hidden in network management traffic
2026-06-01 Help Net Security Windows Netlogon RCE exploited, domain controllers at risk (CVE-2026-41089)
2026-06-01 The Hacker News ⚡ Weekly Recap: New Linux Flaw, PAN-OS Exploit, AI-Powered Attacks, OAuth Phishing and More
2026-06-01 Help Net Security Secure Code Warrior connects developer training to AI usage and code risks
2026-06-01 Help Net Security Insight bundles exposure management, patch operations, and XDR into one service
2026-06-01 Help Net Security Cato cuts vulnerability protection time to 45 minutes with agentic threat research
2026-06-01 The Record by Recorded Future Microsoft says it will not pursue security researchers after zero-day backlash
2026-06-01 The Hacker News China-Aligned Groups Ramp Up Attacks: Dragon Weave Hits Czech Republic & Taiwan
2026-06-01 SecurityWeek As the Pentagon Pushes for Battlefield AI, Some Military Leaders Urge Caution
2026-06-01 The Hacker News OpenAI Codex Authentication Tokens Stolen in codexui-android npm Supply Chain Attack
2026-06-01 Cybersecurity Dive How Canva scaled to 260+M users while elevating security and productivity
2026-05-31 Help Net Security Week in review: Infostealer dropped via FortiClient EMS flaw, exploited Trend Micro Apex One flaw
2026-05-30 SecurityWeek Russian Spies Are Aggressively Seeking Western Technology as Sanctions Bite, Officials Say
2026-05-30 The Hacker News PAN-OS GlobalProtect Authentication Bypass (CVE-2026-0257) Under Active Exploitation
2026-05-30 Microsoft Security Blog Malicious npm packages abuse dependency confusion to profile developer environments
2026-05-29 CyberScoop Tennessee man linked to 764 accused of series of crimes against children dating back to 2022
2026-05-29 The Hacker News ChatGPhish Vulnerability Turns ChatGPT Web Summaries Into a Phishing Surface
2026-05-29 SecurityWeek In Other News: Trump Mobile Data Breach, FIFA World Cup Phishing, CISA Responds to Supply Chain Attacks
2026-05-29 Microsoft Security Blog Microsoft is named a Leader in the 2026 Gartner® Magic Quadrant™ for Endpoint Protection
2026-05-29 The Hacker News Attackers Use LLM Agent for Post-Exploitation After Marimo CVE-2026-39987 Exploit
2026-05-29 The Record by Recorded Future Microsoft calls zero-day releases ‘never justifiable’ as researcher threatens to drop more
2026-05-29 Help Net Security New infostealer reaches enterprise devices through FortiClient EMS vulnerability
2026-05-29 SecurityWeek California Sues 23andMe, Alleging It Failed to Protect User Data in 2023 Breach
2026-05-29 The Hacker News What 2,000 Exposed Vibe-Coded Apps Reveal About the Limits of Most Security Stacks
2026-05-29 Help Net Security Microsoft 365 Copilot redesign brings context and actions into one workspace
2026-05-29 The Hacker News Malicious Sicoob NuGet Steals Banking Credentials as npm Packages Target Cloud Secrets
2026-05-29 Help Net Security Anthropic launches Claude Opus 4.8, prepares Mythos-class models for all customers
2026-05-29 Help Net Security Claroty targets cyber-physical system risks with AI-powered security agent
2026-05-29 Help Net Security Humanix expands detection to identify live violations of security procedures
2026-05-29 Kaspersky Securelist What’s in the container? Analyzing vulnerabilities, risks and protection with Kaspersky Container Security and the KIRA AI assistant
2026-05-29 The Hacker News Kimsuky Deploys HTTPSpy, Expands Arsenal with HelloDoor and VS Code Tunnels
2026-05-28 CyberScoop Google security engineer accused of turning confidential search trends into $1.2M win on Polymarket
2026-05-28 The Hacker News Critical Gogs RCE Vulnerability Lets Any Authenticated User Execute Arbitrary Code
2026-05-28 The Hacker News Threat Actors Exploit Critical FortiClient EMS Flaw to Deploy Credential Stealer
2026-05-28 Microsoft Security Blog The Gentlemen ransomware: Dissecting a self-propagating Go encryptor
2026-05-28 The Record by Recorded Future Cruise giant Carnival confirms data breach affecting nearly 6 million people
2026-05-28 GitGuardian Blog Initial Access Changed, The Attack Path Did Not: Findings From The Verizon 2026 DBIR
2026-05-28 The Hacker News Microsoft Slams Public Zero-Day Disclosures Amid GitHub Researcher Account Removal
2026-05-28 The Record by Recorded Future Canadian man gets 33 years for using social media to coerce US children into sending sexual content
2026-05-28 The Hacker News ThreatsDay Bulletin: Claude Security Plugin, Azure Priv-Esc, Kali365 MFA Bypass, FIFA Scams +15 More
2026-05-28 The Record by Recorded Future Chinese-speaking fraud gang could be stealing millions from 2026 World Cup fans
2026-05-28 The Record by Recorded Future Russia conducting daily attacks on UK 'from seabed to cyberspace,' spy chief warns
2026-05-28 The Hacker News New AI Usage Report: Enterprise AI Risk Is Heavily Concentrated Among a Small Group of AI "Power users"
2026-05-28 Cisco Talos DICOM, Pydicom, GDCM, and Orthanc: A technical tour of what really happens in the heap
2026-05-28 The Hacker News JINX-0164 Targets Cryptocurrency Firms with Fake Recruiter Lures and macOS Malware
2026-05-28 Kaspersky Securelist Pirates in the crosshairs: how one cybercrime gang has been infecting book, movie, and TV show fans for years
2026-05-28 ZDI (Zero Day Initiative) ZDI-26-320: TrendAI Vision One Security Agent Origin Validation Error Local Privilege Escalation Vulnerability
2026-05-28 ZDI (Zero Day Initiative) ZDI-26-321: TrendAI Vision One Security Agent Origin Validation Error Local Privilege Escalation Vulnerability
2026-05-28 ZDI (Zero Day Initiative) ZDI-26-322: TrendAI Vision One Security Agent Origin Validation Error Local Privilege Escalation Vulnerability
2026-05-28 ZDI (Zero Day Initiative) ZDI-26-323: TrendAI Vision One Security Agent Origin Validation Error Local Privilege Escalation Vulnerability
2026-05-28 ZDI (Zero Day Initiative) ZDI-26-324: TrendAI Vision One Security Agent Origin Validation Error Local Privilege Escalation Vulnerability
2026-05-28 ZDI (Zero Day Initiative) ZDI-26-325: TrendAI Vision One Security Agent Origin Validation Error Local Privilege Escalation Vulnerability
2026-05-28 ZDI (Zero Day Initiative) ZDI-26-326: TrendAI Vision One Security Agent Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability
2026-05-27 CyberScoop OpenAI heralds cybersecurity, election interference safeguard plans for 2026 midterms
2026-05-27 CyberScoop FBI warns US-based law firms to be on the lookout for cybercrime group that steals data in person
2026-05-27 CyberScoop UK spy chief labels AI ‘unstoppable force’ with offensive, defensive ramifications for cyberspace
2026-05-27 The Record by Recorded Future Romanian national sentenced to more than 4 years for hacking Oregon government systems
2026-05-27 The Hacker News Grandoreiro Malware and BTMOB RAT Campaigns Target Windows and Android Users
2026-05-27 The Hacker News Malicious npm Package Stole Files From Claude AI User Directory via GitHub
2026-05-27 The Record by Recorded Future Rudd orders Cyber Command reviews as Pentagon presses reform agenda
2026-05-27 The Record by Recorded Future FBI warns extortion hackers are visiting US law firms to steal data
2026-05-27 The Record by Recorded Future Dutch police arrest man over cyber breach at Ajax football club
2026-05-27 The Record by Recorded Future Iranian intelligence service behind hack of LA transit system, researchers say
2026-05-27 Dark Reading Cybersecurity Evolution: How We Went From Perimeter Defense to AI-Native Security
2026-05-27 The Hacker News GlassWorm Malware Takedown Disrupts Developer Supply Chain Attack Infrastructure
2026-05-27 The Hacker News Gitea Vulnerability Exposes Private Container Images without Authentication
2026-05-27 Proofpoint Blog Proofpoint Introduces Active Exploits Protection to Help Organizations Prioritize Vulnerability Patching for Real-World Attacks in the AI Era
2026-05-26 Microsoft Security Blog From poisoned search results to GPU mining: A cryptojacking campaign abusing ScreenConnect and Microsoft .NET utilities
2026-05-26 The Hacker News MuddyWater Uses DLL Side-Loading in Espionage Campaign Targeting 9 Countries
2026-05-26 The Record by Recorded Future Lithuania investigates theft of 600,000 state registry records by foreign actor
2026-05-26 Help Net Security Detectify brings AppSec automation to AI agents with MCP Server and continuous testing
2026-05-26 Help Net Security Actively exploited Trend Micro Apex One flaw gets CISA warning (CVE-2026-34926)
2026-05-26 Help Net Security Conifers rolls out AI-powered SOC for unified security operations and automated response
2026-05-26 Detectify Blog Introducing the Detectify MCP Server to connect security intelligence into your AI workflows
2026-05-26 The Hacker News Microsoft Patches SharePoint RCE Flaw CVE-2026-45659 Across Server Versions
2026-05-26 Help Net Security Personal information of 185,000 people exposed after cyberattack on 7-Eleven
2026-05-26 SecurityWeek Anthropic Expands Claude’s Enterprise Security Governance With 28 New Integrations
2026-05-26 Help Net Security Tamnoon introduces skill-based AI orchestration for autonomous cloud defense
2026-05-26 SecurityWeek Watch on Demand: Threat Detection & Incident Response Summit – All Sessions Available
2026-05-26 SecurityWeek Open Source DockSec Uses AI to Cut Through Vulnerability Noise in Docker Images
2026-05-26 SecurityWeek Lithuania Suspects Foreign Involvement in Data Leak of Over 600,000 National Register Entries
2026-05-26 SecurityWeek Admins of Bulletproof Hosting Service Used by Russian Hackers Arrested in Netherlands
2026-05-26 The Hacker News CERT-In Recommends 12-Hour Patching for Internet-Facing Flaws Amid AI-Assisted Attacks
2026-05-26 The Hacker News Iranian Hackers Deploy MiniFast and MiniJunk V2 via Phishing and SEO Poisoning
2026-05-26 Help Net Security Product showcase: F-Secure Internet Security blocks phishing sites, fake stores, and SMS scams
2026-05-25 The Hacker News ⚡ Weekly Recap: Linux Flaws, Defender 0-Days, Router Botnets, and Supply Chain Chaos
2026-05-25 The Hacker News Ghost CMS CVE-2026-26980 Exploited to Hijack 700+ Sites for ClickFix Attacks
2026-05-25 SecurityWeek Anthropic: Mythos Detected 23,000 Potential Vulnerabilities Across 1,000 OSS Projects
2026-05-25 The Hacker News Lazarus Deploys RemotePE Memory-Only RAT Against Financial and Crypto Firms
2026-05-25 The Hacker News TrapDoor Supply Chain Attack Spreads Credential-Stealing Malware via npm, PyPI, and CratesIO
2026-05-25 Help Net Security Lessons for organizations from the Verizon 2026 Data Breach Investigations Report
2026-05-24 Help Net Security Week in review: GitHub breached via poisoned VS Code extension, critical NGINX flaw exploited
2026-05-23 The Hacker News npm Adds 2FA-Gated Publishing and Package Install Controls Against Supply Chain Attacks
2026-05-23 The Hacker News Packagist Supply Chain Attack Infects 8 Packages Using GitHub-Hosted Linux Malware
2026-05-23 SecurityWeek ‘Underminr’ Vulnerability Lets Attackers Hide Malicious Connections Behind Trusted Domains
2026-05-23 The Hacker News Laravel-Lang PHP Packages Compromised to Deliver Cross-Platform Credential Stealer
2026-05-23 The Record by Recorded Future CISA to allow researchers to report vulnerabilities to exploited bugs catalog
2026-05-22 The Record by Recorded Future FBI warns of Kali365 phishing-as-a-service after April Microsoft 365 attacks
2026-05-22 The Record by Recorded Future Meta settles school district lawsuit claiming addictive design harmed students' mental health
2026-05-22 Microsoft Security Blog Microsoft recognized as a Leader in The Forrester Wave™ for Workforce Identity Security Platforms
2026-05-22 Microsoft Security Blog From edge appliance to enterprise compromise: Multi-stage Linux intrusion via F5 and Confluence
2026-05-22 Dark Reading Akamai Joins Growing Chorus of Vendors Betting Big on Secure Enterprise Browsers
2026-05-22 The Record by Recorded Future Why the Supreme Court's Chatrie case could change the meaning of privacy in America
2026-05-22 The Record by Recorded Future Canadian man arrested, charged for running KimWolf DDos botnet
2026-05-22 SecurityWeek In Other News: Industrial Router Exploitation, CISA KEV Nomination Form, Gas Station Hacking
2026-05-22 Help Net Security Deleted Google API keys keep working for up to 23 minutes, researchers warn
2026-05-22 Help Net Security GitLab 19.0 adds AI workflows, secrets management, and self-hosted model support
2026-05-22 Help Net Security Keepnet contributes voice and SMS phishing data to the 2026 Verizon DBIR
2026-05-22 Help Net Security CISA’s new KEV nomination form opens reporting to vendors and researchers
2026-05-22 Kaspersky Securelist Cloud Atlas activity in the second half of 2025 and early 2026: new tools and a new payload
2026-05-21 CyberScoop Alleged leader of Kimwolf, a sweeping botnet for cybercriminals, arrested in Canada
2026-05-21 The Record by Recorded Future Tech giants promise British regulator they will tweak platforms to protect kids online
2026-05-21 The Record by Recorded Future Two Americans plead guilty to assisting India-based tech support scam centers
2026-05-21 CyberScoop CISA chief frets about open-source vulnerabilities, delayed security improvements
2026-05-21 Proofpoint Blog Proofpoint Integrates with the Claude Compliance API to Extend Data Security and Governance to Claude
2026-05-21 The Record by Recorded Future UK plans for cybercrime law reform would protect almost no one, experts warn
2026-05-21 The Hacker News Showboat Linux Malware Hits Middle East Telecom with SOCKS5 Proxy Backdoor
2026-05-21 Help Net Security GitHub, Grafana Labs breaches traced back to TanStack supply chain compromise
2026-05-21 The Hacker News ThreatsDay Bulletin: Linux Rootkits, Router 0-Day, AI Intrusions, Scam Kits and 25 New Stories
2026-05-21 SecurityWeek Apple Rejected 2 Million App Store Submissions in 2025 for Security and Fraud Prevention
2026-05-21 Help Net Security Microsoft Defender vulnerabilities exploited in the wild (CVE-2026-41091, CVE-2026-45498)
2026-05-21 CyberScoop The readiness paradox: Why a false sense of cyber confidence is becoming a liability
2026-05-21 SecurityWeek Supply Chain Security Crisis: Too Many Vulnerabilities, Too Little Visibility
2026-05-21 The Hacker News 9-Year-Old Linux Kernel Flaw Enables Root Command Execution on Major Distros
2026-05-21 ZDI (Zero Day Initiative) ZDI-26-318: Progress Software Kemp LoadMaster ssodomain_killsession Command Injection Remote Code Execution Vulnerability
2026-05-21 ZDI (Zero Day Initiative) ZDI-26-319: Progress Software Kemp LoadMaster addcountry Command Injection Remote Code Execution Vulnerability
2026-05-21 The Hacker News GitHub Internal Repositories Breached via Malicious Nx Console VS Code Extension
2026-05-20 Microsoft Security Blog Mini Shai Hulud: Compromised @antv npm packages enable CI/CD credential theft
2026-05-20 The Hacker News Microsoft Open-Sources RAMPART and Clarity to Secure AI Agents During Development
2026-05-20 The Record by Recorded Future Ukraine probes teen suspect in cyber theft scheme targeting California online shoppers
2026-05-20 The Record by Recorded Future Discord migrates all users to end-to-end encryption by default
2026-05-20 CyberScoop GitHub says internal repositories were impacted in poisoned VS Code extension attack
2026-05-20 Help Net Security Webworm APT targets European government organizations with new backdoors
2026-05-20 Help Net Security Verizon DBIR: Vulnerability exploitation is the dominant initial access vector
2026-05-20 Help Net Security NanoCo lands $12 million seed funding, launches enterprise assistant built on NanoClaw
2026-05-20 Black Hills InfoSec Same Problem, Different Angles: When Red Team and Blue Team Actually Talk to Each Other
2026-05-20 SecurityWeek 1Password Teams With OpenAI to Stop AI Coding Agents From Leaking Credentials
2026-05-20 The Record by Recorded Future Texas, Florida top list of states reporting millions of dollars lost through crypto ATMs
2026-05-20 The Hacker News Webworm Deploys EchoCreep and GraphWorm Backdoors Using Discord and MS Graph API
2026-05-20 The Hacker News GitHub Breached — Employee Device Hack Led to Exfiltration of 3,800+ Internal Repos
2026-05-20 Help Net Security TeamPCP breached GitHub’s internal codebase via poisoned VS Code extension
2026-05-20 Help Net Security Encryption Consulting launches CertSecure Manager v3.3 with zero-touch certificate renewals
2026-05-20 Kaspersky Securelist How an image could compromise your Mac: understanding an ExifTool vulnerability (CVE-2026-3102)
2026-05-20 The Hacker News Microsoft Releases Mitigation for YellowKey BitLocker Bypass CVE-2026-45585 Exploit
2026-05-19 CyberScoop Attackers hit vulnerabilities hard last year, making exploits the top entry point for breaches
2026-05-19 The Record by Recorded Future Huawei zero-day attack behind last year’s crash of Luxembourg's entire telecoms network
2026-05-19 The Record by Recorded Future UK regulator to require tech firms to tackle deepfakes, non-consensual intimate images
2026-05-19 The Hacker News Trapdoor Android Ad Fraud Scheme Hit 659 Million Daily Bid Requests Using 455 Apps
2026-05-19 The Record by Recorded Future Microsoft disrupts Fox Tempest malware-signing-as-a-service platform tied to ransomware gangs
2026-05-19 CyberScoop Microsoft disrupts cybercrime service that abused software verification systems en masse
2026-05-19 The Hacker News DirtyDecrypt PoC Released for Linux Kernel CVE-2026-31635 LPE Vulnerability
2026-05-19 Dark Reading Looking Back, Looking Forward: Digesting a Dynamic Bouillabaisse of Cyber Evolution
2026-05-19 Help Net Security New macOS infostealer impersonates Apple, Microsoft, and Google in a single attack chain
2026-05-19 The Hacker News Drupal to Release Urgent Core Security Updates on May 20, Sites Told to Prepare
2026-05-19 Cisco Talos From PDB strings to MaaS: Tracking a commodity BadIIS ecosystem used by Chinese-speaking threat
2026-05-19 The Hacker News SEPPMail Secure E-Mail Gateway Vulnerabilities Enable RCE and Mail Traffic Access
2026-05-19 The Hacker News Compromised Nx Console 18.95.0 Targeted VS Code Developers with Credential Stealer
2026-05-19 Help Net Security Babel Street targets AI-driven threats with new agentic investigation capabilities
2026-05-19 Help Net Security iProov brings identity verification to video meetings to reduce fraud risks
2026-05-19 The Hacker News Popular GitHub Action Tags Redirected to Imposter Commit to Steal CI/CD Credentials
2026-05-19 The Hacker News Mini Shai-Hulud Pushes Malicious AntV npm Packages via Compromised Maintainer Account
2026-05-18 Microsoft Security Blog How Storm-2949 turned a compromised identity into a cloud-wide breach
2026-05-18 The Record by Recorded Future More than 200 arrested in cyber raids aimed at Middle East scam networks
2026-05-18 CyberScoop Interpol leads cybercrime crackdown across 13 countries in Middle East, North Africa
2026-05-18 The Hacker News INTERPOL Operation Ramz Disrupts MENA Cybercrime Networks with 201 Arrests
2026-05-18 The Record by Recorded Future Experts warn of privacy risks as AI firms looks to connect to financial accounts
2026-05-18 GitGuardian Blog San Francisco Secure Software and AppSec Summit 2026: The Next AppSec Operating Model
2026-05-18 The Hacker News ⚡ Weekly Recap: Exchange 0-Day, npm Worm, Fake AI Repo, Cisco Exploit and More
2026-05-18 The Hacker News Ivanti, Fortinet, SAP, VMware, n8n Patch RCE, SQL Injection, Privilege Escalation Flaws
2026-05-18 The Hacker News MiniPlasma Windows 0-Day Enables SYSTEM Privilege Escalation on Fully Patched Systems
2026-05-18 The Hacker News Four Malicious npm Packages Deliver Infostealers and Phantom Bot DDoS Malware
2026-05-17 The Hacker News NGINX CVE-2026-42945 Exploited in the Wild, Causing Worker Crashes and Possible RCE
2026-05-17 Help Net Security Week in review: Cisco patches SD-WAN 0-day, unpatched Microsoft Exchange Server flaw exploited
2026-05-17 The Hacker News Grafana GitHub Token Breach Led to Codebase Download and Extortion Attempt
2026-05-16 The Hacker News Funnel Builder Flaw Under Active Exploitation Enables WooCommerce Checkout Skimming
2026-05-15 SecurityWeek In Other News: Big Tech vs Canada Encryption Bill, Cisco’s Free AI Security Spec, Audi App Flaws
2026-05-15 The Hacker News Four OpenClaw Flaws Enable Data Theft, Privilege Escalation, and Persistence
2026-05-15 The Record by Recorded Future CISA orders all federal agencies to patch exploited bug in Cisco SD-WAN systems by Sunday
2026-05-15 The Hacker News What 45 Days of Watching Your Own Tools Will Tell You About Your Real Attack Surface
2026-05-15 The Hacker News TanStack Supply Chain Attack Hits Two OpenAI Employee Devices, Forces macOS Updates
2026-05-15 Palo Alto Unit 42 Gremlin Stealer's Evolved Tactics: Hiding in Plain Sight With Resource Files
2026-05-15 PT SWARM (Positive Technologies) Hack the Elephant One Bite at a Time: JPEG-Related Memory-Safety Bugs in PHP
2026-05-15 The Hacker News On-Prem Microsoft Exchange Server CVE-2026-42897 Exploited via Crafted Email
2026-05-14 The Record by Recorded Future OpenAI asks macOS users to update after TanStack npm supply chain attack
2026-05-14 CyberScoop White House cyber official: identity security matters more than ever in the age of AI
2026-05-14 The Record by Recorded Future ODNI taps officials to coordinate response to foreign election threats
2026-05-14 The Hacker News Cisco Catalyst SD-WAN Controller Auth Bypass Actively Exploited to Gain Admin Access
2026-05-14 The Hacker News ThreatsDay Bulletin: PAN-OS RCE, Mythos cURL Bug, AI Tokenizer Attacks, and 10+ Stories
2026-05-14 CyberScoop Major tech manufacturer Foxconn confirms cyberattack hit North American factories
2026-05-14 The Hacker News Ghostwriter Targets Ukrainian Government With Geofenced PDF Phishing, Cobalt Strike
2026-05-14 Cloudflare Blog Our billing pipeline was suddenly slow. The culprit was a hidden bottleneck in ClickHouse
2026-05-14 The Hacker News Windows Zero-Days Expose BitLocker Bypasses And CTFMON Privilege Escalation
2026-05-14 The Hacker News New Fragnesia Linux Kernel LPE Grants Root Access via Page Cache Corruption
2026-05-13 CyberScoop Closed briefing sets stage for House hearing on Anthropic’s Mythos and cyber risks
2026-05-13 The Record by Recorded Future Alleged Dream Market admin arrested in Germany after US indictment
2026-05-13 Dark Reading Dark Reading Celebrates 20 Years as a Leading Authority on Cybersecurity, Highlighting the People, Events, Ideas, and Technologies Shaping the Modern Risk Landscape
2026-05-13 The Record by Recorded Future European Commission head pushes creation of new law delaying teens’ social media access
2026-05-13 Cloudflare Blog Browser Run: now running on Cloudflare Containers, it’s faster and more scalable
2026-05-13 The Record by Recorded Future UK moves to shield security researchers in cybercrime law overhaul
2026-05-13 The Record by Recorded Future Microsoft on pace to break annual vulnerability record as AI-driven patch wave takes hold
2026-05-13 Help Net Security KDE gets over €1 million investment to strengthen security and core infrastructure
2026-05-13 Help Net Security Microsoft’s agentic security system found four critical Windows RCE flaws
2026-05-13 The Hacker News Microsoft Patches 138 Vulnerabilities, Including DNS and Netlogon RCE Flaws
2026-05-13 The Hacker News GemStuffer Abuses 150+ RubyGems to Exfiltrate Scraped U.K. Council Portal Data
2026-05-13 Help Net Security Versa CSPM brings continuous visibility to cloud risk and compliance exposure
2026-05-13 Google Project Zero A 0-click exploit chain for the Pixel 10: When a Door Closes, a Window Opens
2026-05-13 Help Net Security NetSPI AI-powered Continuous Pentesting identifies high-impact vulnerabilities
2026-05-12 Microsoft Security Blog Defense at AI speed: Microsoft’s new multi-model agentic security system finds 16 new vulnerabilities
2026-05-12 CyberScoop ‘Mini Shai-Hulud’ malware compromises hundreds of open-source packages in sprawling supply-chain attack
2026-05-12 CyberScoop Microsoft addresses 137 vulnerabilities in May’s Patch Tuesday, including 13 rated critical
2026-05-12 Cisco Talos Microsoft Patch Tuesday for May 2026 — Snort rules and prominent vulnerabilities
2026-05-12 The Record by Recorded Future Foxconn confirms cyberattack impacting North American factories
2026-05-12 The Record by Recorded Future Congressman launches inquiry into how food retailers use surveillance pricing
2026-05-12 The Record by Recorded Future West Pharmaceutical warns of ransomware attack impacting business operations
2026-05-12 Cybersecurity Dive Guardrail Technologies launches Traffic Light for Code & AI™; first security technology to verify & secure AI code and the people creating it
2026-05-12 CyberScoop Google and Amnesty International teamed up to make it harder for spyware vendors to hide
2026-05-12 The Record by Recorded Future European countries are exporting surveillance tech to countries with poor human rights records, report says
2026-05-12 The Hacker News New Exim BDAT Vulnerability Exposes GnuTLS Builds to Potential Code Execution
2026-05-12 GitGuardian Blog AI Agents Security for Developers: Don't Let Your Agents Become a Liability
2026-05-12 The Hacker News RubyGems Suspends New Signups After Hundreds of Malicious Packages Are Uploaded
2026-05-12 SecurityWeek Deal Reached With Hackers to Delete Data Stolen From the Canvas Educational Platform
2026-05-12 The Record by Recorded Future Instructure pays ransom after Canvas incident as Congress announces investigation
2026-05-12 The Hacker News New TrickMo Variant Uses TON C2 and SOCKS5 to Create Android Network Pivots
2026-05-12 The Hacker News Webinar: What the Riskiest SOC Alerts Go Unanswered - and How Radiant Security Can Help
2026-05-12 The Hacker News Mini Shai-Hulud Worm Compromises TanStack, Mistral AI, Guardrails AI & More Packages
2026-05-12 Trail of Bits Blog Go fuzzing was missing half the toolkit. We forked the toolchain to fix it.
2026-05-12 The Hacker News Instructure Reaches Ransom Agreement with ShinyHunters to Stop 3.65TB Canvas Leak
2026-05-12 The Hacker News OpenAI Launches Daybreak for AI-Powered Vulnerability Detection and Patch Validation
2026-05-12 The Hacker News iOS 26.5 Brings Default End-to-End Encrypted RCS Messaging Between iPhone and Android
2026-05-11 The Record by Recorded Future Texas sues Netflix over alleged data practices that create ‘surveillance machinery’ without user consent
2026-05-11 The Hacker News TeamPCP Compromises Checkmarx Jenkins AST Plugin Weeks After KICS Supply Chain Attack
2026-05-11 The Hacker News cPanel CVE-2026-41940 Under Active Exploitation to Deploy Filemanager Backdoor
2026-05-11 SecurityWeek Frame Security Emerges From Stealth With $50M for Awareness and Training Platform
2026-05-11 GitGuardian Blog GitGuardian Now Flags Admin and Overprivileged Identities Across AWS, Entra, and Okta
2026-05-11 The Record by Recorded Future FCC pushes ban on security updates for foreign-made routers, drones to 2029
2026-05-11 The Hacker News Hackers Used AI to Develop First Known Zero-Day 2FA Bypass for Mass Exploitation
2026-05-11 The Record by Recorded Future UK water company allowed hackers to lurk undetected for nearly two years, regulator finds
2026-05-11 The Hacker News ⚡ Weekly Recap: Linux Rootkit, macOS Crypto Stealer, WebSocket Skimmers and More
2026-05-11 The Record by Recorded Future Dirty Frag: Linux kernel hit by second major security flaw in two weeks
2026-05-11 Cybersecurity Dive Identity is the new perimeter as rapid NHI proliferation threatens visibility and control
2026-05-11 The Hacker News Fake OpenAI Privacy Filter Repo Hits #1 on Hugging Face, Draws 244K Downloads
2026-05-10 Help Net Security Week in review: cPanel vulnerability actively exploited, DigiCert breach, LinkedIn job scams
2026-05-08 The Record by Recorded Future GM to pay over $12 million in California privacy settlement involving driver data
2026-05-08 The Record by Recorded Future Virginia man found guilty of deleting 96 government databases
2026-05-08 The Hacker News TCLBANKER Banking Trojan Targets Financial Platforms via WhatsApp and Outlook Worms
2026-05-08 CyberScoop Sen. Schumer seeks DHS plan on AI cyber coordination with state, local governments
2026-05-08 Microsoft Security Blog Active attack: Dirty Frag Linux vulnerability expands post-compromise risk
2026-05-08 The Record by Recorded Future Multiple universities forced to reschedule final exams after Canvas cyber incident
2026-05-08 The Hacker News Fake Call History Apps Stole Payments From Users After 7.3 Million Play Store Downloads
2026-05-08 SecurityWeek In Other News: Train Hacker Arrested, PamDOORa Linux Backdoor, New CISA Director Frontrunner
2026-05-08 The Record by Recorded Future Pro-Ukraine BO Team and Head Mare hackers appear to team up in attacks against Russia
2026-05-08 CyberScoop Flaw in Claude’s Chrome extension allowed ‘any’ other plugin to hijack victims’ AI
2026-05-08 The Hacker News Quasar Linux RAT Steals Developer Credentials for Software Supply Chain Compromise
2026-05-08 The Hacker News One Missed Threat Per Week: What 25M Alerts Reveal About Low-Severity Risk
2026-05-08 The Hacker News Linux Kernel Dirty Frag LPE Exploit Enables Root Access Across Major Distributions
2026-05-07 The Record by Recorded Future Iranian government hackers using Chaos ransomware as cover, researchers say
2026-05-07 Microsoft Security Blog When prompts become shells: RCE vulnerabilities in AI agent frameworks
2026-05-07 SecurityWeek Worries About AI’s Risks to Humanity Loom Over the Trial Pitting Musk Against OpenAI’s Leaders
2026-05-07 The Hacker News Ivanti EPMM CVE-2026-6973 RCE Under Active Exploitation Grants Admin-Level Access
2026-05-07 The Hacker News PCPJack Credential Stealer Exploits 5 CVEs to Spread Worm-Like Across Cloud Systems
2026-05-07 SecurityWeek Palo Alto Zero-Day Exploited in Campaign Bearing Hallmarks of Chinese State Hacking
2026-05-07 The Record by Recorded Future North Carolina man pleads guilty to doxxing Supreme Court justices
2026-05-07 The Hacker News One Click, Total Shutdown: The "Patient Zero" Webinar on Killing Stealth Breaches
2026-05-07 The Record by Recorded Future Polish intelligence warns hackers attacked water treatment control systems
2026-05-07 The Hacker News ThreatsDay Bulletin: Edge Plaintext Passwords, ICS 0-Days, Patch-or-Die Alerts and 25+ New Stories
2026-05-07 The Hacker News PyPI Packages Deliver ZiChatBot Malware via Zulip APIs on Windows and Linux
2026-05-07 The Hacker News vm2 Node.js Library Vulnerabilities Enable Sandbox Escape and Arbitrary Code Execution
2026-05-07 The Record by Recorded Future European leaders unveil tentative deal for AI Act simplification, including a ban on nudification tools
2026-05-07 The Record by Recorded Future North Korean hackers targeted ethnic Koreans in China with Android ‘BirdCall’ malware
2026-05-07 Palo Alto Unit 42 Threat Brief: Exploitation of PAN-OS Captive Portal Zero-Day for Unauthenticated Remote Code Execution
2026-05-06 CyberScoop A DOD contractor’s API flaw exposed military course data and service member records
2026-05-06 The Record by Recorded Future Palo Alto warns of critical software bug used in firewall attacks
2026-05-06 The Hacker News Mirai-Based xlabs_v1 Botnet Exploits ADB to Hijack IoT Devices for DDoS Attacks
2026-05-06 The Record by Recorded Future New CISA initiative aims for critical infrastructure to operate offline during cyberattacks
2026-05-06 Microsoft Security Blog Microsoft named an overall leader in KuppingerCole Analyst’s 2026 Emerging AI Security Operations Center (SOC) report
2026-05-06 Sentinel Labs LABScon25 Replay | Please Connect to the Foreign Entity to Enhance Your User Experience
2026-05-06 The Hacker News MuddyWater Uses Microsoft Teams to Steal Credentials in False Flag Ransomware Attack
2026-05-06 The Record by Recorded Future Hackers compromise Daemon Tools in global supply-chain attack, researchers say
2026-05-06 The Hacker News The Hacker News Launches 'Cybersecurity Stars Awards 2026' — Submissions Now Open
2026-05-06 The Hacker News Your AI Agents Are Already Inside the Perimeter. Do You Know What They're Doing?
2026-05-06 SecurityWeek CISA Launches ‘CI Fortify’ to Prepare Critical Infrastructure for Geopolitical Cyber Conflict
2026-05-06 The Hacker News Google's Android Apps Get Public Verification to Stop Supply Chain Attacks
2026-05-06 Proofpoint Blog Proofpoint Establishes Innovation Precedent for Source-Agnostic Modern Enterprise Investigations
2026-05-06 The Hacker News Palo Alto PAN-OS Flaw Under Active Exploitation Enables Remote Code Execution
2026-05-05 Palo Alto Unit 42 Copy Fail: What You Need to Know About the Most Severe Linux Threat in Years
2026-05-05 CyberScoop CISA wants critical infrastructure to operate ‘weeks to months’ in isolation during conflict
2026-05-05 The Record by Recorded Future FTC bans data broker Kochava from selling sensitive location info
2026-05-05 The Hacker News Critical Apache HTTP/2 Flaw (CVE-2026-23918) Enables DoS and Potential RCE
2026-05-05 The Hacker News DAEMON Tools Supply Chain Attack Compromises Official Installers with Malware
2026-05-05 SecurityWeek Microsoft Warns of Sophisticated Phishing Campaign Targeting US Organizations
2026-05-05 The Hacker News China-Linked UAT-8302 Targets Governments Using Shared APT Malware Across Regions
2026-05-05 The Record by Recorded Future Australia launches cyber review board modeled on version disbanded in US
2026-05-05 The Hacker News The Back Door Attackers Know About — and Most Security Teams Still Haven’t Closed
2026-05-05 The Hacker News We Scanned 1 Million Exposed AI Services. Here's How Bad the Security Actually Is
2026-05-05 The Hacker News ScarCruft Hacks Gaming Platform to Deploy BirdCall Malware on Android and Windows
2026-05-05 The Hacker News Microsoft Details Phishing Campaign Targeting 35,000 Users Across 26 Countries
2026-05-05 The Record by Recorded Future German officials advance legislation that would expand law enforcement use of surveillance technology
2026-05-04 The Hacker News Phishing Campaign Hits 80+ Orgs Using SimpleHelp and ScreenConnect RMM Tools
2026-05-04 The Record by Recorded Future Forbes preliminarily agrees to pay $10 million to settle California wiretapping lawsuit
2026-05-04 The Hacker News Progress Patches Critical MOVEit Automation Bug Enabling Authentication Bypass
2026-05-04 CyberScoop A college student is suing a dating app that allegedly used her TikTok videos to target men in her dormitory
2026-05-04 The Record by Recorded Future Ransomware group claims breach of pro-Orbán Hungarian media firm
2026-05-04 Microsoft Security Blog Breaking the code: Multi-stage ‘code of conduct’ phishing campaign leads to AiTM token compromise
2026-05-04 The Hacker News ⚡ Weekly Recap: AI-Powered Phishing, Android Spying Tool, Linux Exploit, GitHub RCE & More
2026-05-04 The Hacker News Silver Fox Deploys ABCDoor Malware via Tax-Themed Phishing in India and Russia
2026-05-04 Kaspersky Securelist “Legitimate” phishing: how attackers weaponize Amazon SES to bypass email security
2026-05-04 The Hacker News Critical cPanel Vulnerability Weaponized to Target Government and MSP Networks
2026-05-03 SecurityWeek US Military Reaches Deals With 7 Tech Companies to Use Their AI on Classified Systems
2026-05-03 Help Net Security Week in review: High-severity LPE vulnerability in the Linux kernel, cPanel 0-day exploited for months
2026-05-02 Microsoft Security Blog CVE-2026-31431: Copy Fail vulnerability enables Linux root privilege escalation across cloud environments
2026-05-01 Cloudflare Blog Code Orange: Fail Small is complete. The result is a stronger Cloudflare network
2026-05-01 The Record by Recorded Future Senate Judiciary advances bill that would bar minors from interacting with AI companions
2026-05-01 SecurityWeek In Other News: Scattered Spider Hacker Arrested, SOC Effectiveness Metrics, NSA Tool Vulnerability
2026-05-01 Microsoft Security Blog Microsoft Agent 365, now generally available, expands capabilities and integrations
2026-05-01 SecurityWeek Google Adjusts Bug Bounties: Chrome Payouts Drop as Android Rewards Rise Amid AI Surge
2026-05-01 The Hacker News Cybercrime Groups Using Vishing and SSO Abuse in Rapid SaaS Extortion Attacks
2026-05-01 The Record by Recorded Future Cyber incident responders who carried out ransomware attacks given 4-year sentences
2026-05-01 The Hacker News China-Linked Hackers Target Asian Governments, NATO State, Journalists, and Activists
2026-05-01 The Record by Recorded Future British cyber agency warns of looming ‘patch wave’ as AI speeds flaw discovery
2026-05-01 The Record by Recorded Future Cyber spies target Russian aviation firms to steal satellite and GPS data
2026-05-01 Dark Reading 20 Years in Cyber: Dark Reading Marks Milestone With Month of Special Coverage
2026-05-01 The Hacker News Two Cybersecurity Professionals Get 4-Year Sentences in BlackCat Ransomware Attacks
2026-05-01 The Hacker News Poisoned Ruby Gems and Go Modules Exploit CI Pipelines for Credential Theft
2026-05-01 Help Net Security Open-source privacy proxy masks PII before prompts reach external AI services
2026-05-01 ZDI (Zero Day Initiative) ZDI-26-307: FlowiseAI Flowise Airtable_Agent Code Injection Remote Code Execution Vulnerability
2026-04-30 CyberScoop Former incident responders sentenced to 4 years in prison for committing ransomware attacks
2026-04-30 CyberScoop FCC tightens KYC rules for telecoms, closes loophole for banned foreign services
2026-04-30 The Record by Recorded Future Zambia cancels global digital freedoms conference days before start
2026-04-30 The Record by Recorded Future Trump’s cyber ambassador nominee advances to full Senate vote
2026-04-30 The Hacker News PyTorch Lightning and Intercom-client Hit in Supply Chain Attacks to Steal Credentials
2026-04-30 The Record by Recorded Future France investigates 15-year-old over alleged hack of national ID agency
2026-04-30 The Hacker News ThreatsDay Bulletin: SMS Blaster Busts, OpenEMR Flaws, 600K Roblox Hacks and 25 More Stories
2026-04-30 The Hacker News New Python Backdoor Uses Tunneling Service to Steal Browser and Cloud Credentials
2026-04-30 CyberScoop Everyone’s building AI agents. Almost nobody’s ready for what they do to identity.
2026-04-30 The Hacker News New Linux 'Copy Fail' Vulnerability Enables Root Access on Major Distributions
2026-04-30 The Hacker News Google Fixes CVSS 10 Gemini CLI CI RCE and Cursor Flaws Enable Code Execution
2026-04-30 Kaspersky Securelist Silver Fox uses the new ABCDoor backdoor to target organizations in Russia and India
2026-04-29 The Record by Recorded Future House approves spy program on second attempt, Senate fate murky
2026-04-29 watchTowr Labs The Internet Is Falling Down, Falling Down, Falling Down (cPanel & WHM Authentication Bypass CVE-2026-41940)
2026-04-29 The Hacker News SAP-Related npm Packages Compromised in Credential-Stealing Supply Chain Attack
2026-04-29 The Record by Recorded Future European Commission accuses Meta of breaching child safety rules
2026-04-29 The Hacker News New Wave of DPRK Attacks Uses AI-Inserted npm Malware, Fake Firms, and RATs
2026-04-29 The Record by Recorded Future Swiss police arrest 10 suspected members of Nigeria-linked crime group Black Axe
2026-04-29 The Hacker News Webinar: How to Automate Exposure Validation to Match the Speed of AI Attacks
2026-04-29 The Hacker News What to Look for in an Exposure Management Platform (And What Most of Them Get Wrong)
2026-04-29 The Hacker News Critical cPanel Authentication Vulnerability Identified — Update Your Server Immediately
2026-04-29 The Hacker News LiteLLM CVE-2026-42208 SQL Injection Exploited within 36 Hours of Disclosure
2026-04-28 CyberScoop Spy agency officials say job loss anxiety, moving fast ‘safely’ among top challenges in AI workforce overhaul
2026-04-28 The Hacker News Researchers Discover Critical GitHub CVE-2026-3854 RCE Flaw Exploitable via Single Git Push
2026-04-28 The Hacker News Brazilian LofyGang Resurfaces After Three Years With Minecraft LofyStealer Campaign
2026-04-28 The Record by Recorded Future Cyber Command, NSA chief warns foreign adversaries likely to target midterms
2026-04-28 The Record by Recorded Future Ukrainian police detain hackers suspected of stealing thousands of Roblox accounts for resale
2026-04-28 The Hacker News VECT 2.0 Ransomware Irreversibly Destroys Files Over 131KB on Windows, Linux, ESXi
2026-04-28 Cloudflare Blog Shutdowns, power outages, and conflict: a review of Q1 2026 Internet disruptions
2026-04-28 GitGuardian Blog The Bot Left a Fingerprint: Detecting and Attributing LLM-Generated Passwords
2026-04-28 The Hacker News Critical Unpatched Flaw Leaves Hugging Face LeRobot Open to Unauthenticated RCE
2026-04-28 Proofpoint Blog Proofpoint Research Reveals Half of Global Organizations Experienced AI Incidents Despite Having AI Security Controls in Place
2026-04-28 The Hacker News Chinese Silk Typhoon Hacker Extradited to U.S. Over COVID Research Cyberattacks
2026-04-28 The Hacker News Microsoft Patches Entra ID Role Flaw That Enabled Service Principal Takeover
2026-04-28 ZDI (Zero Day Initiative) ZDI-26-306: Oracle VirtualBox SoundBlaster 16 Race Condition Local Privilege Escalation Vulnerability
2026-04-28 The Record by Recorded Future China-linked hackers led phishing campaigns targeting journalists and activists, researchers say
2026-04-27 CyberScoop Supreme Court justices skeptically question both sides in geofence surveillance case
2026-04-27 The Record by Recorded Future Supreme Court signals location data searches should require a warrant
2026-04-27 The Record by Recorded Future Tennessee becomes second state to ban cryptocurrency ATMs over scam concerns
2026-04-27 CyberScoop Senators seek answers about hackers obtaining sensitive student data from ostensibly anonymous tip line
2026-04-27 The Record by Recorded Future Disinformation campaign targeted Tibetan parliament-in-exile elections
2026-04-27 The Hacker News Checkmarx Confirms GitHub Repository Data Posted on Dark Web After March 23 Attack
2026-04-27 CyberScoop BlackFile actively extorting data-theft victims in retail and hospitality sector
2026-04-27 The Hacker News ⚡ Weekly Recap: Fast16 Malware, XChat Launch, Federal Backdoor, AI Employee Tracking & More
2026-04-27 SecurityWeek Malicious AI Prompt Injection Attacks Increasing, but Sophistication Still Low: Google
2026-04-27 The Hacker News Mythos Changed the Math on Vulnerability Discovery. Most Teams Aren't Ready for the Remediation Side
2026-04-27 The Hacker News Researchers Uncover 73 Fake VS Code Extensions Delivering GlassWorm v2 Malware
2026-04-27 SecurityWeek US Launches Sweeping Crackdown on Southeast Asia Cyberscams and Sanctions Cambodian Senator
2026-04-27 Cybersecurity Dive When security becomes the attack surface: Why endpoint protection must evolve
2026-04-27 The Hacker News Fake CAPTCHA IRSF Scam and 120 Keitaro Campaigns Drive Global SMS, Crypto Fraud
2026-04-27 ZDI (Zero Day Initiative) ZDI-26-300: Flowise AccountService resetPassword Authentication Bypass Vulnerability
2026-04-27 ZDI (Zero Day Initiative) ZDI-26-301: Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability
2026-04-27 ZDI (Zero Day Initiative) ZDI-26-302: Foxit PDF Reader AcroForm Signature Use-After-Free Remote Code Execution Vulnerability
2026-04-27 ZDI (Zero Day Initiative) ZDI-26-303: Foxit PDF Reader AcroForm Signature Use-After-Free Information Disclosure Vulnerability
2026-04-27 ZDI (Zero Day Initiative) ZDI-26-304: Foxit PDF Reader AcroForm Annotation Use-After-Free Remote Code Execution Vulnerability
2026-04-25 SecurityWeek China-Linked APT GopherWhisper Abuses Legitimate Services in Government Attacks
2026-04-25 The Hacker News Researchers Uncover Pre-Stuxnet ‘fast16’ Malware Targeting Engineering Software
2026-04-24 The Record by Recorded Future Iran’s cyber threat may be less ‘shock and awe’ than ‘low and slow,’ officials say
2026-04-24 The Record by Recorded Future Pentagon grapples with securing AI as it moves toward autonomous warfare
2026-04-24 The Hacker News FIRESTARTER Backdoor Hit Federal Cisco Firepower Device, Survives Security Patches
2026-04-24 The Record by Recorded Future Norway's prime minister proposes ban on social media access for young teens
2026-04-24 SecurityWeek In Other News: Unauthorized Mythos Access, Plankey CISA Nomination Ends, New Display Security Device
2026-04-24 The Hacker News NASA Employees Duped in Chinese Phishing Scheme Targeting U.S. Defense Software
2026-04-24 The Record by Recorded Future Toronto police arrest three in Canada’s first mobile SMS blaster case
2026-04-24 SecurityWeek Locked Shields 2026: 41 Nations Strengthen Cyber Resilience in World’s Biggest Exercise
2026-04-24 The Hacker News Bridging the AI Agent Authority Gap: Continuous Observability as the Decision Engine
2026-04-24 SecurityWeek Trump Administration Vows Crackdown on Chinese Companies ‘Exploiting’ AI Models Made in US
2026-04-23 Sentinel Labs fast16 | Mystery ShadowBrokers Reference Reveals High-Precision Software Sabotage 5 Years Before Stuxnet
2026-04-23 CyberScoop US, UK agencies warn hackers were hiding on Cisco firewalls long after patches were applied
2026-04-23 The Record by Recorded Future US sanctions Cambodian senator for millions earned through scam compounds
2026-04-23 CyberScoop Surveillance campaigns use commercial surveillance tools to exploit long-known telecom vulnerabilities
2026-04-23 The Record by Recorded Future CISA: US agency breached through Cisco vulnerability, FIRESTARTER backdoor allowed access through March
2026-04-23 The Record by Recorded Future Surveillance companies exploiting telecom system to spy on targets’ locations, research shows
2026-04-23 The Hacker News UNC6692 Impersonates IT Helpdesk via Microsoft Teams to Deploy SNOW Malware
2026-04-23 CyberScoop A dozen allied agencies say China is building covert hacker networks out of everyday routers
2026-04-23 The Record by Recorded Future China-linked hackers targeted Mongolian government using Slack, Discord for covert communications
2026-04-23 The Hacker News ThreatsDay Bulletin: $290M DeFi Hack, macOS LotL Abuse, ProxySmart SIM Farms +25 New Stories
2026-04-23 SecurityWeek Chinese Cybersecurity Firm’s AI Hacking Claims Draw Comparisons to Claude Mythos
2026-04-23 The Hacker News [Webinar] Mythos Reality Check: Beating Automated Exploitation at AI Speed
2026-04-23 SecurityWeek The Behavioral Shift: Why Trusted Relationships Are the Newest Attack Surface
2026-04-23 Palo Alto Unit 42 Can AI Attack the Cloud? Lessons From Building an Autonomous Cloud Offensive Multi-Agent System
2026-04-23 GitGuardian Blog No Off Season: Three Supply Chain Campaigns Hit npm, PyPI, and Docker Hub in 48 Hours
2026-04-23 The Hacker News China-Linked GopherWhisper Infects 12 Mongolian Government Systems with Go Backdoors
2026-04-23 ZDI (Zero Day Initiative) ZDI-26-296: Delta Electronics ASDA-Soft PAR File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
2026-04-23 ZDI (Zero Day Initiative) ZDI-26-297: Siemens SINEC NMS Improper Authentication Privilege Escalation Vulnerability
2026-04-23 ZDI (Zero Day Initiative) ZDI-26-298: Siemens SINEC NMS Authentication Bypass Vulnerability
2026-04-23 ZDI (Zero Day Initiative) ZDI-26-299: Docker Desktop Enhanced Container Isolation Exposed Dangerous Function Local Privilege Escalation Vulnerability
2026-04-22 The Record by Recorded Future North Korean hackers siphon more than $12 million from crypto users in sprawling campaign
2026-04-22 The Record by Recorded Future Hackers deployed wiper malware in destructive attacks on Venezuela’s energy sector
2026-04-22 The Hacker News Malicious KICS Docker Images and VS Code Extensions Hit Checkmarx Supply Chain
2026-04-22 The Hacker News Self-Propagating Supply Chain Worm Hijacks npm Packages to Steal Developer Tokens
2026-04-22 The Record by Recorded Future French police arrest suspected hacker behind dozens of data breaches
2026-04-22 The Hacker News Harvester Deploys Linux GoGra Backdoor in South Asia Using Microsoft Graph API
2026-04-22 The Record by Recorded Future China’s cyber capabilities now equal to the US, warns Dutch intelligence
2026-04-22 SecurityWeek Most Serious Cyberattacks Against the UK Now From Russia, Iran and China, Cyber Chief Says
2026-04-22 The Record by Recorded Future UK cyber agency handling four major incidents a week as nation-state attacks surge
2026-04-22 SecurityWeek Are SBOMs Failing? Supply Chain Attacks Rise as Security Teams Struggle With SBOM Data
2026-04-22 The Hacker News Lotus Wiper Malware Targets Venezuelan Energy Systems in Destructive Attack
2026-04-22 Cisco Talos IR Trends Q1 2026: Phishing reemerges as top initial access vector, as attacks targeting public administration persist
2026-04-22 Palo Alto Unit 42 When Wi-Fi Encryption Fails: Protecting Your Enterprise from AirSnitch Attacks
2026-04-22 The Hacker News Microsoft Patches Critical ASP.NET Core CVE-2026-40372 Privilege Escalation Bug
2026-04-22 The Hacker News Mustang Panda’s New LOTUSLITE Variant Targets India Banks, South Korea Policy Circles
2026-04-22 The Hacker News Cohere AI Terrarium Sandbox Flaw Enables Root Code Execution, Container Escape
2026-04-21 CyberScoop Scottish man pleads guilty to attack spree that created Scattered Spider’s notoriety
2026-04-21 CyberScoop Lawmakers ponder terrorism designations, homicide charges over hospital ransomware attacks
2026-04-21 The Hacker News SystemBC C2 Server Reveals 1,570+ Victims in The Gentlemen Ransomware Operation
2026-04-21 The Record by Recorded Future UK regulator to probe Telegram, teen chat sites for potential child safety violations
2026-04-21 Microsoft Security Blog Detection strategies across cloud and identities against infiltrating IT workers
2026-04-21 The Hacker News 22 BRIDGE:BREAK Flaws Expose Thousands of Lantronix and Silex Serial-to-IP Converters
2026-04-21 The Record by Recorded Future EU targets two Russian propaganda networks with new sanctions
2026-04-21 The Record by Recorded Future Cloud platform Vercel says company breached through third-party AI tool
2026-04-21 The Hacker News NGate Campaign Targets Brazil, Trojanizes HandyPay to Steal NFC Data and PINs
2026-04-21 Cisco Talos [Podcast] It's not you, it's your printer: State-sponsored and phishing threats in 2025
2026-04-21 The Hacker News No Exploit Needed: How Attackers Walk Through the Front Door via Identity-Based Attacks
2026-04-21 SecurityWeek Data Breaches at Healthcare Organizations in Illinois and Texas Affect 600,000
2026-04-21 The Hacker News Google Patches Antigravity IDE Flaw Enabling Prompt Injection Code Execution
2026-04-21 ZDI (Zero Day Initiative) ZDI-26-245: (0Day) aws-mcp-server AWS CLI Command Injection Remote Code Execution Vulnerability
2026-04-21 ZDI (Zero Day Initiative) ZDI-26-293: (0Day) Microsoft Office URI Handler NTLM Response Information Disclosure Vulnerability
2026-04-21 ZDI (Zero Day Initiative) ZDI-26-294: (0Day) Microsoft Windows library-ms NTLM Response Information Disclosure Vulnerability
2026-04-21 ZDI (Zero Day Initiative) ZDI-26-295: (0Day) PublicCMS getXml Server-Side Request Forgery Information Disclosure Vulnerability
2026-04-20 CyberScoop Vuln in Google’s Antigravity AI agent manager could escape sandbox, give attackers remote code execution
2026-04-20 The Hacker News SGLang CVE-2026-5760 (CVSS 9.8) Enables RCE via Malicious GGUF Model Files
2026-04-20 The Record by Recorded Future Italian regulator fines national postal service orgs $15 million for data privacy violations
2026-04-20 The Record by Recorded Future Crypto infrastructure company blames $290 million theft on North Korean hackers
2026-04-20 The Record by Recorded Future Elon Musk fails to appear for questioning by French police over sexualized AI images on X
2026-04-20 The Record by Recorded Future Cyberattack at French identity document agency may have exposed personal data
2026-04-20 The Hacker News ⚡ Weekly Recap: Vercel Hack, Push Fraud, QEMU Abused, New Android RATs Emerge & More
2026-04-20 Cloudflare Blog Building the agentic cloud: everything we launched during Agents Week 2026
2026-04-20 The Hacker News Anthropic MCP Design Vulnerability Enables RCE, Threatening AI Supply Chain
2026-04-20 SecurityWeek Senate Extends Surveillance Powers Until April 30 After Chaotic Votes in House
2026-04-20 GitGuardian Blog Vercel April 2026 Incident: Non-Sensitive Environment Variables Need Investigation Too
2026-04-20 Kaspersky Securelist FakeWallet crypto stealer spreading through iOS apps in the App Store
2026-04-20 The Hacker News Researchers Detect ZionSiphon Malware Targeting Israeli Water, Desalination OT Systems
2026-04-20 The Hacker News Vercel Breach Tied to Context AI Hack Exposes Limited Customer Credentials
2026-04-19 Help Net Security Week in review: Acrobat Reader flaw exploited, Claude Mythos offensive capabilities and limits
2026-04-18 Microsoft Security Blog Cross‑tenant helpdesk impersonation to data exfiltration: A human-operated intrusion playbook
2026-04-18 The Hacker News [Webinar] Eliminate Ghost Identities Before They Expose Your Enterprise Data
2026-04-18 The Hacker News $13.74M Hack Shuts Down Sanctioned Grinex Exchange After Intelligence Claims
2026-04-18 The Hacker News Mirai Variant Nexcorium Exploits CVE-2024-3721 to Hijack TBK DVRs for DDoS Botnet
2026-04-17 SecurityWeek White House Chief of Staff to Meet With Anthropic CEO Over Its New AI Technology
2026-04-17 The Record by Recorded Future Ransomware attack continues to disrupt healthcare in London nearly two years later
2026-04-17 Microsoft Security Blog Containing a domain compromise: How predictive shielding shut down lateral movement
2026-04-17 The Record by Recorded Future Ukraine confirms suspected APT28 campaign targeting prosecutors, anti-corruption agencies
2026-04-17 The Hacker News Three Microsoft Defender Zero-Days Actively Exploited; Two Still Unpatched
2026-04-17 The Record by Recorded Future In defeat for Trump, House extends electronic spying program for just 10 days
2026-04-17 SecurityWeek In Other News: Satellite Cybersecurity Act, $90K Chrome Flaw, Teen Hacker Arrested
2026-04-17 The Hacker News Google Blocks 8.3B Policy-Violating Ads in 2025, Launches Android 17 Privacy Overhaul
2026-04-17 SecurityWeek Lawmakers Gathered Quietly to Talk About AI. Angst and Fears of ‘Destruction’ Followed
2026-04-17 The Hacker News Operation PowerOFF Seizes 53 DDoS Domains, Exposes 3 Million Criminal Accounts
2026-04-16 The Record by Recorded Future New Jersey men given lengthy sentences for running North Korean laptop farms
2026-04-16 Microsoft Security Blog Building your cryptographic inventory: A customer strategy for cryptographic posture management
2026-04-16 The Record by Recorded Future Cargo thieving hackers running sophisticated remote access campaigns, researchers find
2026-04-16 The Record by Recorded Future Ukrainian emergency services and hospitals hit by espionage campaign using new AgingFly malware
2026-04-16 Detectify Blog Shadow AI and the evolution of Shadow IT Security – What to do when your code moves faster than your security
2026-04-16 The Record by Recorded Future Big tech fails to opt-out users requesting not to be tracked much of the time, new research says
2026-04-15 PT SWARM (Positive Technologies) Slowburn: Looking through AMD Platform Configuration Blobs infrastructure
2026-04-15 Detectify Blog Introducing PCI ASV Scanning: Continuous attack surface compliance in partnership with Clone Systems
2026-04-14 Cisco Talos Microsoft Patch Tuesday for April 2026 - Snort Rule and Prominent Vulnerabilities
2026-04-14 The Record by Recorded Future New ‘JanaWare’ ransomware targeting Turkish citizens as cybercriminal ecosystem fragments
2026-04-14 The Record by Recorded Future Virginia enacts ban on precise geolocation data sales as momentum for similar prohibitions builds
2026-04-14 The Record by Recorded Future Russia appears to block social media platform Bluesky amid wider internet restrictions
2026-04-14 Proofpoint Blog FIFA World Cup 2026: More than One-Third of Official Partners Expose the Public to the Risk of Email Fraud
2026-04-13 The Record by Recorded Future Majority of Australian youth still use social media despite ban, researchers find
2026-04-13 The Record by Recorded Future Hackers claim breach of Rockstar Games via cloud analytics platform
2026-04-13 Cloudflare Blog Durable Objects in Dynamic Workers: Give each AI-generated app its own database
2026-04-12 Help Net Security The fully free Linux OS Trisquel gets a major update with version 12.0 Ecne
2026-04-12 The Hacker News CPUID Breach Distributes STX RAT via Trojanized CPU-Z and HWMonitor Downloads
2026-04-11 The Hacker News Citizen Lab: Law Enforcement Used Webloc to Track 500 Million Devices via Ad Data
2026-04-10 CyberScoop Commerce setting up new AI export regime to push adoption of ‘American AI’ abroad
2026-04-09 Cisco Talos From the field to the report and back again: How incident responders can use the Year in Review
2026-04-09 Kaspersky Securelist The long road to your crypto: ClipBanker and its marathon infection chain
2026-04-08 CyberScoop Hack-for-hire spyware campaign targets journalists in Middle East, North Africa
2026-04-08 Cisco Talos New Lua-based malware “LucidRook” observed in targeted attacks against Taiwanese organizations
2026-04-07 Trail of Bits Blog What we learned about TEE security from auditing WhatsApp's Private Inference
2026-04-06 CyberScoop Fortinet customers confront actively exploited zero-day, with a full patch still pending
2026-04-05 The Hacker News $285 Million Drift Hack Traced to Six-Month DPRK Social Engineering Operation
2026-04-05 Help Net Security Week in review: Axios npm supply chain compromise, critical FortiClient EMS bugs exploited
2026-04-05 The Hacker News 36 Malicious npm Packages Exploited Redis, PostgreSQL to Deploy Persistent Implants
2026-04-04 Help Net Security FortiClient EMS zero-day exploited, emergency hotfixes available (CVE-2026-35616)
2026-04-03 Palo Alto Unit 42 When an Attacker Meets a Group of Agents: Navigating Amazon Bedrock's Multi-Agent Applications
2026-04-03 CyberScoop Wyden warns Social Security chief: Trump’s voter database is ‘blatant voter suppression’
2026-04-02 The Record by Recorded Future Drift crypto platform confirms $280 million stolen in hack as researchers point finger at North Korea
2026-04-02 The Record by Recorded Future French Senate passes bill that would ban children under 15 from social media
2026-04-02 Microsoft Security Blog Threat actor abuse of AI accelerates from tool to cyberattack surface
2026-04-02 watchTowr Labs You’re Not Supposed To ShareFile With Everyone (Progress ShareFile Pre-Auth RCE Chain CVE-2026-2699 & CVE-2026-2701)
2026-04-02 ZDI (Zero Day Initiative) ZDI-26-251: Foxit PDF Reader Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
2026-04-02 ZDI (Zero Day Initiative) ZDI-26-252: Mozilla Firefox IonMonkey Switch Statement Optimization Type Confusion Remote Code Execution Vulnerability
2026-04-02 ZDI (Zero Day Initiative) ZDI-26-253: Microsoft Visual Studio Code mcp.json Command Injection Remote Code Execution Vulnerability
2026-04-01 Cloudflare Blog Introducing EmDash — the spiritual successor to WordPress that solves plugin security
2026-04-01 Kaspersky Securelist A laughing RAT: CrystalX combines spyware, stealer, and prankware features
2026-04-01 CyberScoop White House executive order purports to limit mail-in voting, mandate federal voter lists
2026-03-31 Palo Alto Unit 42 Weaponizing the Protectors: TeamPCP’s Multi-Stage Supply Chain Attack on Security Infrastructure
2026-03-31 Microsoft Security Blog The threat to critical infrastructure has changed. Has your readiness?
2026-03-31 Cloudflare Blog Introducing Programmable Flow Protection: custom DDoS mitigation logic for Magic Transit customers
2026-03-31 ZDI (Zero Day Initiative) ZDI-26-250: Linux Kernel Analog Device Driver Improper Validation of Array Index Local Privilege Escalation Vulnerability
2026-03-30 Troy Hunt HIBP Mega Update: Passkeys, k-Anonymity Searches, Massive Speed Enhancements and a Bulk Domain Verification API
2026-03-30 CyberScoop Researchers say credential-stealing campaign used AI to build evasion ‘at every stage’
2026-03-30 The Record by Recorded Future Italian regulator fines financial giant $36 million for data protection failures
2026-03-30 Microsoft Security Blog Addressing the OWASP Top 10 Risks in Agentic AI with Microsoft Copilot Studio
2026-03-30 The Record by Recorded Future European Commission downplays ShinyHunters cyberattack impact
2026-03-30 The Record by Recorded Future Russian court sentences notorious card fraud ringleader ‘Flint’ and 25 associates
2026-03-30 The Record by Recorded Future Healthcare software firm CareCloud informs SEC of potential patient data leak
2026-03-30 The Record by Recorded Future State Department reissues $10 million reward for info on Iranian hackers
2026-03-29 Help Net Security Week in review: NIST updates DNS security guidance, compromised LiteLLM PyPI packages
2026-03-28 watchTowr Labs The Sequels Are Never As Good, But We're Still In Pain (Citrix NetScaler CVE-2026-3055 Memory Overread)
2026-03-27 Microsoft Security Blog How Microsoft Defender protects high-value assets in real-world attack scenarios
2026-03-26 Palo Alto Unit 42 Converging Interests: Analysis of Threat Clusters Targeting a Southeast Asian Government
2026-03-26 Palo Alto Unit 42 Threat Brief: March 2026 Escalation of Cyber Risk Related to Iran (Updated March 26)
2026-03-25 Microsoft Security Blog Identity security is the new pressure point for modern cyberattacks