Cyber
Malicious Arch Linux Packages Target AUR Users With Fake Tools
Threat actors uploaded malicious packages to the Arch User Repository, impersonating popular helper tools yay and paru.
Category
Cyber
Defense, threats, security strategy and auditing.
232 articles
Cyber
Israeli firm is sending spyware through online ads, researchers say
Security researchers found that an Israeli ad tech firm worked with spyware companies to infect user devices simply by displaying online ads.
Cyber
Governments are abusing online ads for zero-click spyware attacks
Citizen Lab discovered evidence that numerous devices at Al Jazeera were hacked after exposure to malicious online advertisements.
Cyber
Palo Alto Networks Patches Critical PAN-OS RCE Flaw Exploited in the Wild
Palo Alto Networks has rushed out security updates to address a high-severity PAN-OS zero-day RCE vulnerability that is actively being exploited against firewalls.
Cyber
Microsoft and Japan dismantle cybercrime network behind over a billion scam messages
Microsoft and Japan's National Police Agency have teamed up to dismantle a massive cybercrime marketplace responsible for over a billion phishing messages.
Cyber
Global Takedown Disrupts Network Behind 1 Billion Phishing Messages
Law enforcement agencies worldwide have dismantled a massive cybercriminal ecosystem targeting over 75,000 organizations across 150 countries.
Cyber
Microsoft: Recent Windows updates may trigger Remote Desktop failures
Microsoft has confirmed that non-admin users may experience Remote Desktop connection failures after recent Windows updates if the Administrator protection security feature is enabled.
Cyber
US Justice Department Warns of North Korean Infiltration in American Companies
Authorities say sanctioned North Korean hackers are using US citizens as intermediaries to link breached firms with Pyongyang.
Cyber
Ghostscript flaw lets hackers hijack servers via PDF uploads
A critical heap buffer overflow vulnerability in Ghostscript allows remote code execution and server hijacking via specially crafted PDF files.
Cyber
Microsoft October Patch Tuesday addresses record-breaking 1,411 flaws and three zero-days
Microsoft's October Patch Tuesday features a record 1,411 security fixes, including one actively exploited and two publicly disclosed zero-day flaws.
Cyber
Ivanti warns of actively exploited Connect Secure zero-day vulnerability
Ivanti has urged customers to immediately patch a zero-day vulnerability in its Connect Secure remote access gateway that is being actively exploited.
Cyber
The MFA Gaps Attackers Are Still Exploiting
Cybercriminals continue to bypass multi-factor authentication by targeting systems that still rely on passwords alone, such as VPNs, RDP and Windows endpoints.
Cyber
SAP warns of maximum severity OAuth2 SSRF security flaw
In its October 2026 security updates, SAP patched 20 vulnerabilities, including a maximum‑severity OAuth2 SSRF flaw in the Cloud SDK for Python.
Cyber
Apple Launches Home Collection Smart Home Starter Kit with LG and Schneider Electric
Apple has teamed up with LG Electronics and Schneider Electric to introduce the Apple Home Collection, a set of easy‑to‑install smart home devices.
Cyber
Norway Fines Microsoft Ad Firm Xandr $9.6 Million Over Grindr Data Sharing
Norway's Data Protection Authority has fined Microsoft-owned advertising company Xandr $9.6 million for unlawfully processing and sharing sensitive user data from Grindr.
Cyber
Yandex confirms service outage after drone attacks hit data centers
Yandex cloud services experienced major disruptions and user file access loss following drone attacks that damaged three data centers.
Cyber
Cyberattack shuts down refrigerators at French supermarkets
Attackers remotely defrosted refrigeration units at multiple French supermarket chains overnight in a targeted cyberattack.
Cyber
Retail giant Ahold Delhaize takes systems offline after cyberattack
Global food retail giant Ahold Delhaize confirmed it took several systems offline following a cybersecurity incident affecting its network.
Cyber
GitLab warns of max severity code execution vulnerability
GitLab has urged users to immediately patch a maximum-severity vulnerability in the CI/CD Regular Expression Compiler allowing remote code execution.
Cyber
Cybersecurity Executive Arrested in Connection with ShinyHunters Case
Canadian cybersecurity executive Edward Dubrovsky has been arrested in Pennsylvania over alleged extortion activities.
Cyber
FBI Arrests Another Suspected ShinyHunters Hacker After Agency Breach
The FBI has apprehended another suspected member of the ShinyHunters extortion group linked to the recent breach of bureau systems.
Cyber
Maximum Severity SonicWall SMA1000 Flaw Actively Exploited in Attacks
Attackers are actively exploiting a maximum-severity flaw in SonicWall SMA1000 appliances just three days after the vendor released patches.
Cyber
Citrix warns admins to patch new NetScaler RCE flaw immediately
Citrix urges IT administrators to immediately patch critical RCE vulnerabilities affecting NetScaler ADC and Gateway appliances.
Cyber
Researchers uncover new DarkSword spyware variant affecting unpatched iPhones
iVerify has released a new report detailing P7 DarkSword, a spyware variant targeting unpatched iPhones.
Cyber
FBI Disrupts Chinese Hacking Tools Targeting Critical Infrastructure
The FBI has seized seven domains used by Chinese state-sponsored hackers known as Flax Typhoon to operate infrastructure-targeting tools.
Cyber
Low-cost Android phones found shipping with built-in proxy malware
A malicious campaign dubbed Midnight Mimosa embeds malware into the firmware of budget Android devices, turning them into proxies.
Cyber
FakeGit malware campaign returns with 17,610 malicious GitHub repos
Over 17,000 fake GitHub repositories have been deployed to distribute the SmartLoader malware and StealC infostealer.
Cyber
Cisco warns of critical flaws allowing Nexus switch takeover
Cisco has released security advisories addressing five critical vulnerabilities in its NX-OS data center network operating system that could allow attackers to execute arbitrary code.
Cyber
Hackers hijack Google domains after breaching ccTLD registries
Attackers obtained unauthorized HTTPS certificates for several Google domains and hijacked ccTLD registries for Ghana, American Samoa, and Sierra Leone.
Cyber
Ransomware's new target: Is your backup infrastructure ready?
Ransomware groups are increasingly targeting backup infrastructure to eliminate recovery options and force victims to pay. Kaseya outlines key protection strategies.
Cyber
Hackers Exploit Critical Atlassian Flaw Following Public PoC Release
A critical unauthenticated vulnerability (CVE-2026-21589) affecting Jira, Confluence, and Bitbucket is being actively exploited in attacks.
Cyber
Hackers exploit 32 zero-days on the first day of Pwn2Own Ireland
On the first day of the Pwn2Own Ireland 2026 competition, security researchers hacked the Samsung Galaxy S26 twice and earned $388,500 after exploiting 32 zero-days.
Cyber
ASOS confirms data breach following in-app notification hack
UK fashion retailer ASOS confirmed a security breach after unauthorized push notifications claiming data theft were sent through its mobile app.
Cyber
Engineer sentenced for locking over 3,000 devices on employer network
A former core infrastructure engineer at a New Jersey industrial company was sentenced to 32 months in prison for a ransomware-style network attack.
Cyber
Rejetto HFS Servers Actively Scanned for Critical RCE Flaw
According to BleepingComputer, hackers are actively scanning the web for the CVE-2026-61500 vulnerability in Rejetto HFS, which leads to account takeover and RCE.
Cyber
Dell warns users of critical security flaw in System Update tool
Dell has urged customers to immediately patch a critical vulnerability found in the System Update command-line interface deployment tool.
Cyber
Hackers steal 8 million citizens’ records from Danish government database
A major cyberattack on a Danish government database has compromised the names, addresses, and state ID numbers of 8 million people.
Cyber
Citrix Patches NetScaler Zero-Day Vulnerability Exploited in Attacks
Citrix has issued emergency updates to fix a NetScaler denial-of-service vulnerability exploited in zero-day attacks.
Cyber
Suspected ShinyHunters Hacker Detained in Jordan, Aiding FBI
An alleged ShinyHunters hacker operating under the alias 'Rey' has been arrested in Jordan and is reportedly helping the FBI locate associates.
Cyber
Warlock ransomware targets water and telecom operators via SharePoint flaws
A China-linked threat group has breached multiple critical sectors including water utilities and telecom providers using SharePoint exploits.
Cyber
Medical software giant Epic pauses product development to fix security bugs
The creator of the MyChart system is shifting its focus to fixing security vulnerabilities that pose risks to patient data.
Cyber
Microsoft’s official X account hijacked in crypto pump-and-dump scheme
On Thursday, unknown attackers hijacked the official Microsoft account on X, which has over 13 million followers, to promote a crypto token.
Cyber
Fortinet warns of critical FortiMail flaw exploited in zero-day attacks
Cybersecurity firm Fortinet has issued an urgent warning regarding a critical vulnerability in FortiMail actively targeted in zero-day attacks.
Cyber
GrayKey maker can reportedly bypass the iPhone's Inactivity Reboot security feature
Magnet Forensics has reportedly found a way to bypass the iPhone security feature that automatically reboots devices after 72 hours of inactivity.
Cyber
Police dismantle KillSec ransomware gang allegedly led by 16-year-old
An international law enforcement operation named Operation KillSwitch successfully seized the KillSec ransomware gang's servers and data leak site.
Cyber
Hackers Steal Pentagon Personnel Records of Over 3 Million People in Major Cyber Breach
The Pentagon is notifying millions of service members after hackers breached its HR management system in October 2025, stealing records of over 3 million people.
Cyber
Russian state hackers use new RedFlick technique to push malware
The Russian state-sponsored group Star Blizzard has adopted a new malware installation tactic called RedFlick to deploy its CosmicPulse backdoor.
Cyber
Hackers Steal Millions of U.S. Military Personnel Records in Months-Long Breach
The Department of Defense notified millions of current and former U.S. military personnel about a major data breach.
Cyber
Over 543,000 valid credentials exposed in public GitHub repositories
According to BleepingComputer, more than 543,000 credentials exposed in public GitHub repositories remained valid in July despite platform security measures.
Cyber
CISA warns of critical pre-auth RCE flaw in MikroTik RouterOS
The U.S. Cybersecurity and Infrastructure Security Agency has issued a warning regarding a critical remote code execution vulnerability in MikroTik RouterOS.
Cyber
Security Researcher Claims Potential Access to 17TB of Microsoft Records
A security researcher revealed a vulnerability that could have allowed unauthorized access to a massive database belonging to Microsoft.
Cyber
TeamViewer urges users to patch severe flaws as soon as possible
Remote access software provider TeamViewer has issued an urgent warning to customers to patch high-severity vulnerabilities affecting its applications.
Cyber
Suspected ShinyHunters leader arrested in the Netherlands
Dutch police have arrested a 24-year-old Amsterdam man linked to the ShinyHunters hacking group, which claimed responsibility for high-profile attacks on major organizations.
Cyber
Signal adds encrypted local backup support to iOS and desktop apps
Secure messaging app Signal has released version 8.30, completing the rollout of its secure backups feature across all supported operating systems.
Cyber
Hackers exploit Citrix NetScaler zero-day to deploy web shells
Cybersecurity firms report that attackers are exploiting a Citrix NetScaler zero-day vulnerability to deploy custom web shells and malware.
Cyber
Former US Air Force Members Sentenced to Prison Over BEC Attacks
Two former US Air Force members received lengthy federal prison sentences for their roles in a multi-year business email compromise and phishing scheme.
Cyber
New Spectre v2 Attack Variant Leaks Linux Root Password Hash in Minutes
A newly devised Branch Target Reuse attack can extract Linux root password hashes on Intel computers within minutes.
Cyber
Kiteworks patches critical flaw and brings customer systems back online
American tech company Kiteworks has lifted its precautionary shutdown advisory after successfully patching a critical security vulnerability.
Cyber
Misconfigured Supabase apps expose data in over 16,000 databases
Researchers discovered more than 16,000 misconfigured Supabase databases leaking readable tables with personally identifiable information and passwords.
Cyber
CISA orders feds to patch exploited Citrix flaws by Wednesday
The cybersecurity agency has given U.S. government agencies a strict deadline to secure systems against active exploits.
Cyber
Citrix admins warned to shut down NetScalers over two exploited zero-days
Security agencies and researchers are privately warning organizations about two actively exploited Citrix NetScaler zero-days ahead of patches expected next week.
Cyber
Cloudflare fixes Containers cross-tenant flaw exposing customer data
Cloudflare has resolved a vulnerability in its Containers and Sandboxes that allowed certain paid account holders to access residual data from other customers.
Cyber
ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks
The notorious extortion gang ShinyHunters is bypassing security defenses to exploit a vulnerability in Oracle PeopleSoft servers.
Cyber
Kiteworks Urges 6-Hour Server Shutdown Over Cyberattack Threat
Secure file-sharing company Kiteworks is urging customers worldwide to temporarily shut down their servers for six hours following intelligence on potential imminent cyberattacks.
Cyber
ShinyHunters hacks Clop ransomware leak site using Grav CMS flaw
The notorious Clop ransomware gang has migrated its data leak site to a new Tor address after hackers compromised their previous server via a Grav CMS vulnerability.
Cyber
Elementor WordPress Flaw Lets Attackers Create Admin Accounts
A newly disclosed CSRF vulnerability in the popular Elementor plugin could allow unauthenticated attackers to create admin accounts on WordPress sites.
Cyber
Rydox marketplace admin pleads guilty, faces 22 years in prison
A Kosovar national has pleaded guilty to operating Rydox, a large illegal online marketplace that sold stolen personal information and cybercrime tools.
Cyber
Hackers actively exploit critical Roundcube flaw in code injection attacks
According to the Canadian Centre for Cyber Security, a high‑severity Roundcube webmail vulnerability patched in May is now being used in active code‑injection attacks.
Cyber
CISA Warns Ransomware Gangs Are Exploiting Critical TeamCity Flaw
The US Cybersecurity Agency has warned federal agencies that ransomware groups are now exploiting a critical JetBrains TeamCity vulnerability.
Cyber
Dev docs placeholder domain weaponized in recent ClickFix attacks
The third-party.com domain, frequently seen in developer documentation, is now serving fake Cloudflare pages to trick Windows users into running PowerShell commands.
Cyber
New RemControl Android banking malware targets users in Europe and Canada
A new malware-as-a-service platform named RemControl is actively targeting Android users through deceptive malvertising campaigns.
Cyber
InfraTrust report warns network management systems under attack
Attackers are increasingly targeting management systems used to control enterprise infrastructure.
Cyber
How One Kubernetes YAML Can Hand Over a GCP Organization
A Kubernetes user with limited permissions can potentially gain control of an entire Google Cloud organization by exploiting Google Kubernetes Config Connector.
Cyber
Arista Patches Actively Exploited VeloCloud Orchestrator Zero-Day Vulnerability
Arista Networks has released urgent security patches to address a zero-day flaw actively targeted in attacks against VeloCloud Orchestrator On-Prem deployments.
Cyber
Microsoft warns September Windows updates may break Always On VPN connections
Microsoft has warned that the September security updates can disrupt Always On VPN connections on certain Windows 11 systems.
Cyber
F5 Patches Critical BIG-IP APM Zero-Day Flaw Exploited in RCE Attacks
F5 has released urgent security updates to address a critical BIG-IP APM zero-day vulnerability actively exploited in remote code execution attacks.
Cyber
Rogue external MFA providers can steal passwords during logins
Security researchers discovered an attack where hackers with privileged access can register rogue external MFA providers to steal passwords during legitimate logins.
Cyber
Chinese hackers exploit WordPress, Zyxel flaws to steal govt data
A threat actor is targeting government and enterprise networks by exploiting known vulnerabilities in ZyXEL switches and WordPress.
Cyber
Hackers claim to have breached the FBI and accessed employee data
A group of hackers has claimed responsibility for a major breach involving data on all FBI employees.
Cyber
ShinyHunters claims FBI hack and data theft via PeopleSoft zero-day breach
The ShinyHunters extortion gang claims it breached FBI systems using a new Oracle PeopleSoft zero-day vulnerability, stealing sensitive employee data.
Cyber
Hacking Group ShinyHunters Claims Breach of FBI and Theft of Agent Data
The infamous ShinyHunters group claims to have breached the FBI database, compromising sensitive personal information of agents and applicants.
Cyber
Google fined $460 million for misusing user location history and web activity
Irish data privacy regulator found Google guilty of improperly using users' location history and web activity data.
Cyber
New Windows Defender Zero-Day Exploit Blocks Antivirus Updates
Security researcher Abdelhamid Naceri has released a new Microsoft Defender zero-day exploit that successfully blocks antivirus updates.
Cyber
Google fined €403M over processing of location data
Ireland's Data Protection Commission has slapped Google with a massive fine for violations regarding the processing of user location data.
Cyber
BigCommerce alerts merchants of data breach linked to Ribon apps
E-commerce platform BigCommerce has warned multiple merchants about data security incidents stemming from compromised third-party Ribon applications.
Cyber
CISA Warns of Active Exploitation of Three Linux Kernel Flaws
The U.S. Cybersecurity and Infrastructure Security Agency is warning that hackers are actively exploiting three Linux kernel vulnerabilities, including one critical flaw.
Cyber
Google fined €403 million over location data privacy violations
Ireland's Data Protection Commission has penalized Google with a substantial fine for multiple GDPR breaches.
Cyber
How iOS 27's New Impersonation Risk Detection Aims to Stop Scammers
Apple's iOS 27 introduces a new anti-scam feature called Impersonation Risk Detection, allowing apps to check device context for fraudulent activity.
Cyber
ShinyHunters hacks Clop leak site and threatens extortion gang
The ShinyHunters extortion gang breached Clop ransomware's leak site, stealing server data and private keys.
Cyber
FBI and Coast Guard board hacked oil tankers heading to US coast
Federal authorities are investigating the compromise of tanker networks that interfered with navigation and propulsion.
Cyber
Fake LastPass Authenticator on GitHub Pushes Rapuncel Infostealer
A malicious campaign leverages SEO-optimized GitHub repositories to impersonate popular software and distribute a new infostealer dubbed Rapuncel.
Cyber
Critical Check Point Flaw Allows Remote Code Execution with Root Privileges
Check Point Software has released security updates to address a critical vulnerability that lets attackers execute code with root privileges on management systems.
Cyber
Apple pushes UK court to lift secrecy around encryption backdoor order
Apple is challenging the UK government's refusal to publicly confirm an order requiring access to encrypted user data.
Cyber
Brevo Supply-Chain Attack Injected ClickFix Scripts on Customer Sites
Brevo confirmed a security breach where attackers stole a Cloudflare API key to inject malicious ClickFix scripts into its websites and embedded customer JavaScript files.
Cyber
CrowdSec Source Code Leak Sparks Discussion Online
Popular cybersecurity platform CrowdSec has experienced a source code leak, drawing significant attention from the tech community.
Cyber
US takes down NightmareStresser DDoS-for-hire platform
The U.S. Federal Bureau of Investigation (FBI) has seized the domains used by NightmareStresser, a major global DDoS-for-hire platform.
Cyber
Signal will finally let you register without a phone number, for a price
Popular secure messenger Signal is introducing a way to sign up without a phone number, alongside two-factor authentication support for numberless accounts.
Cyber
Cisco warns of max severity ISE zero-day actively exploited in attacks
Cisco has released security updates to address a maximum-severity Identity Services Engine vulnerability that attackers are actively exploiting in the wild.
Cyber
Google's September Pixel update fixes a critical security vulnerability
Google has acknowledged a security flaw in its Pixel devices that may have already been exploited by hackers in the wild.
Cyber
Malware bypasses browser checks to force install Chrome and Edge extensions
Active since mid-2025, a banking malware operation is using the KREMLIN toolkit to install malicious browser extensions that steal sensitive data.
Cyber
Hackers publish thousands of drivers’ data after breaching Florida motor vehicle database
The ShinyHunters gang leaked the files online after saying the Florida state agency did not pay their ransom demand.
Cyber
Google says some Pixel phone owners were hacked in zero-day attacks
Google has revealed that a modem bug affecting Pixel phones may have been exploited in limited, targeted attacks.
Cyber
iOS 27 adds scam-prevention feature to iPhone, here’s how to enable it
Apple has introduced an Impersonation Risk Detection feature in iOS 27 to help protect users against scams, though it is disabled by default.
Cyber
Critical ScreenConnect flaw now actively exploited in attacks
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) reports that a critical ConnectWise ScreenConnect vulnerability is actively being exploited in the wild.
Cyber
Acronis warns of actively exploited flaw in cPanel backup plugin
Acronis has disclosed a high-severity Linux local privilege escalation vulnerability in its backup plugin for cPanel, WHM, and Plesk that is actively being exploited.
Cyber
We gained admin access to Baseten's production GitHub in 25 minutes
Security researchers managed to gain administrative access to Baseten's production GitHub environment in just 25 minutes.
Cyber
Hackers Target WordPress Sites via WooCommerce Plugin
Cybercriminals are actively exploiting a critical vulnerability in a popular WordPress plugin to upload PHP backdoors to target sites.
Cyber
CISA: Critical VMware RCE flaw now exploited by ransomware gangs
The U.S. CISA has warned that ransomware gangs have joined ongoing attacks exploiting a critical VMware vCenter vulnerability.
Cyber
Cisco patches Secure Email Gateway zero-day exploited in attacks
Cisco urged customers to patch a critical Secure Email Gateway zero-day security flaw actively exploited in attacks.
Cyber
Apple releases macOS updates fixing over 200 vulnerabilities
Apple has rolled out macOS 27 Golden Gate alongside security updates for Tahoe and Sequoia, fixing more than 200 vulnerabilities.
Cyber
Apple details every security fix included in iOS 27 and iPadOS 27
Apple has officially released the complete security breakdown and vulnerability fixes included in the newly launched iOS 27 and iPadOS 27 updates.
Cyber
Hackers Target Exposed Vite Dev Servers to Steal AWS, Azure Secrets
A mass-scanning campaign targeting internet-exposed Vite development servers is attempting to steal cloud credentials from AWS and Azure deployments.
Cyber
Hackers hijack HBO Max Reddit account to push malware in ClickFix ads
The official HBO Max Reddit account was compromised to push malicious ads executing ClickFix attacks that target Windows and macOS devices.
Cyber
Twitch Extension with 30K Installs Exposes Users' OAuth Tokens
A browser extension named JeetBot, available in official stores, was found silently exfiltrating Twitch OAuth session tokens to a commercial bot service.
Cyber
Homebrew 7.0.0 Released with Built-in GUI and Enhanced Security Controls
The popular Homebrew package manager has launched version 7.0.0 featuring the native BrewUI graphical interface and a vulnerability scanner.
Cyber
ClickFix attacks are tricking Mac and Windows users into hacking themselves
A rising security threat known as ClickFix is deceiving computer users into executing harmful code via fake online advertisements.
Cyber
New Android malware encrypts files, steals data, and harasses victims
A newly discovered Android threat named Mantax Otax combines ransomware and spyware features to compromise mobile devices.
Cyber
Surfshark discloses unauthorized access to internal test servers and proxy infrastructure
Popular VPN provider Surfshark revealed that hackers accessed one of its internal test servers following a configuration error.
Cyber
Cisco FMC Flaws Exploited by Ransomware Gang and State-Sponsored Hackers
Cisco Talos reveals that two recently patched Secure Firewall Management Center vulnerabilities have been actively exploited by three threat clusters.
Cyber
IDScan confirms breach tied to 153 million stolen driver’s licenses
Identity verification company IDScan has confirmed that hackers accessed data stored in its cloud platform following massive leak reports.
Cyber
Top 4 Cyber Threats: What a Quarter of Alert Investigations Revealed
Prophet Security breaks down the main attack patterns targeting user identity between May and July 2026.
Cyber
New 'BlueMoon' kit exploited Windows and Chrome zero-day flaws
Multiple cyber-espionage groups deployed an exploit kit dubbed BlueMoon that leveraged zero-day vulnerabilities in Microsoft Windows and Google Chrome.
Cyber
ID Verification Giant IDScan Confirms Massive Data Breach Affecting Millions
IDScan has confirmed a major data breach involving the theft of over 150 million driver's licenses and other government-issued identity documents.
Cyber
Trezor warns users of email provider breach and ongoing phishing attacks
Trezor has alerted its customers that threat actors who breached its third-party email provider are targeting them with phishing campaigns.
Cyber
AdaptHealth Confirms 4.1 Million People Exposed in July Cyberattack
Healthcare company AdaptHealth has confirmed that the data of 4.1 million people was exposed during a July cyberattack attributed to ShinyHunters.
Cyber
Cisco confirms CVE-2026-20079 Secure FMC flaw is actively exploited
Cisco has confirmed that a maximum-severity authentication bypass vulnerability in its Secure FMC software is being actively leveraged in attacks.
Cyber
Veradigm Warns of Patient Data Breach Following Ransomware Gang Attack
Healthcare technology company Veradigm disclosed a data breach affecting patient personal information following a cybersecurity incident at a third-party vendor.
Cyber
MFA's Weakest Link: Account Recovery Becomes the New Attack Path
While MFA makes account takeover harder, attackers are increasingly targeting password resets and recovery processes.
Cyber
New Microsoft Defender 'ShieldCrash' Zero-Day Grants SYSTEM Access
An anonymous security researcher known as Nightmare Eclipse has released a new Microsoft Defender zero-day exploit named ShieldCrash following the September 2026 Patch Tuesday updates.
Cyber
Hackers Breach F5 BIG-IP APM Devices to Deploy Linux Rootkit
A sophisticated Linux rootkit targeting F5 BIG-IP APM environments can intercept PHP file loading and inject fileless web shells directly into memory.
Cyber
The EU CRA's Real Question: What Shipped, and When Did You Know?
The EU Cyber Resilience Act vulnerability reporting requirements take effect, giving software vendors as little as 24 hours to report active flaws.
Cyber
SAP warns of maximum severity OVERPASS kernel vulnerability
SAP has addressed 20 vulnerabilities across multiple products in its September security updates, including a maximum-severity memory corruption flaw in the SAP Kernel code.
Cyber
220 million traveler records exposed in Vietnam-linked APIS leak
An exposed Advance Passenger Information System database has leaked over 200 million records containing sensitive passenger and crew details.
Cyber
BigBear phishing service bypassed MFA at 258 organizations
A phishing-as-a-service framework called BigBear 2.0 has been used to bypass multi-factor authentication at 258 organizations and steal over 5,000 Microsoft 365 credentials.
Cyber
Hackers exploit new MikroTik RouterOS flaws to hijack routers
Cybercriminals are exploiting a chain of two recently disclosed vulnerabilities in MikroTik routers with exposed SSH services.
Cyber
ConnectWise warns of new ScreenConnect flaw without patch
ConnectWise has shared temporary mitigation measures for a new ScreenConnect vulnerability ahead of an official patch expected later this week.
Cyber
Attackers conceal phishing lures using invisible Unicode characters
Threat actors have adopted the ASCII smuggling technique in phishing campaigns to evade email security filters.
Cyber
Hackers Use Blockchain to Deliver ClickFix Payloads via Thousands of Compromised Sites
A massive cybercriminal operation has compromised over 5,400 small-business websites to distribute ClickFix payloads stored within BNB Smart Chain smart contracts.
Cyber
Actively exploited sandbox RCE vulnerability found in all Chromium versions
A critical remote code execution flaw bypassing the sandbox has been discovered across all versions of Chromium and is actively exploited in the wild.
Cyber
IDScan Sued Following Alleged Data Breach Affecting 153 Million Drivers
Identity verification company IDScan is facing multiple lawsuits after hackers allegedly breached its systems and offered to sell over 153 million driver's licenses.
Cyber
Critical Citrix NetScaler Vulnerability Exploited in Cyber Attacks
A critical vulnerability in Citrix NetScaler has become a target for cyber attackers.
Cyber
Apple plans to launch home security and monitoring service
Apple is set to introduce a new home security and monitoring service in 2027.
Cyber
CrowdStrike 'FalconFlank' zero-day vulnerability: SYSTEM privilege escalation
An anonymous security researcher has unveiled the 'FalconFlank' zero-day exploit, allowing privilege escalation on Windows systems.
Cyber
US military disables ad tracking on troops’ devices after reports of targeted attacks
A senator’s letter confirmed that the military turned off advertising tracking on service members’ devices to stop adversaries from using location data to target troops.
Cyber
Google warns of new Chrome zero-day flaw exploited in attacks
Google has released a Chrome update to fix an actively exploited high‑severity zero‑day vulnerability in the V8 engine and eleven other flaws.
Cyber
Hackers Had a Live Feed of Every ID Verification Company Scanned for over a Year
Reports reveal that hackers maintained unauthorized live access to data streams from ID verification companies for over a year.
Cyber
Coder's registry infrastructure compromised to push malicious modules
Attackers compromised Coder's Cloudflare infrastructure to distribute malicious Terraform modules designed to steal credentials.
Cyber
HPE patches critical ArubaOS-CX remote code execution flaw
Hewlett Packard Enterprise has released patches addressing a critical remote code execution vulnerability in the ArubaOS-CX network operating system.
Cyber
Your Employee’s Password Appeared in an Infostealer Log. Now What?
Infostealers can expose authenticated sessions and bypass MFA. Experts explain how defenders can prioritize compromised identities and prevent account takeovers.
Cyber
Plex urges users to patch security vulnerabilities immediately
Plex has issued an urgent call for users to update desktop clients and media servers to address multiple security flaws.
Cyber
It sure looks like hackers breached a major ID card verification service
An identity theft search site claimed to have more than 150 million driver's license photos stolen from an ID verification service, before shutting down.
Cyber
Hackers exploit critical JFrog Artifactory flaw to forge admin tokens
A critical authentication bypass vulnerability in JFrog Artifactory is being actively exploited in attacks to forge administrative access tokens.
Cyber
Ransomware protection for MSPs: A 6-point checklist for faster recovery
Ransomware resilience requires more than backups or endpoint detection alone. Acronis outlines six capabilities MSPs should test across client environments to ensure faster operational recovery.
Cyber
CrowdStrike and Federal Authorities Dismantle Russian Malware That Secretly Stole Crypto for 8 Years
Cybersecurity leader CrowdStrike and federal law enforcement have successfully dismantled a sophisticated malware network that secretly stole cryptocurrency for eight years.
Cyber
Dropbox accounts breached through Lenovo email verification flaw
Dropbox is warning some users that an unauthorized party accessed their accounts by exploiting a flaw in Lenovo's email verification process to register fraudulent Lenovo IDs.
Cyber
FBI investigates as hackers sell digital scans of 153M drivers licenses
The FBI has launched an investigation after digital scans of over 153 million driver's licenses appeared for sale on the dark web.
Cyber
Microsoft is enabling a Windows 11 security feature that can hurt gaming performance
Microsoft is preparing to roll out its memory integrity security feature in Windows 11 to more devices next month. While designed to stop malicious code, the kernel-level protection can negatively impact PC gaming performance.
Cyber
SonicWall Warns of Actively Exploited SMA1000 Zero-Day Flaws
Threat actors are actively exploiting two new zero-day vulnerabilities in SonicWall SMA1000 series devices to execute remote code.
Cyber
FBI Probes Dark Web Service Selling 153M+ Driver Licenses
The FBI is investigating a dark web service offering over 153 million driver license scans stolen from a verification company.
Cyber
Hackers Abuse Faronics Deploy Admin Tool to Install ScreenConnect
Threat actors are weaponizing the legitimate Faronics Deploy endpoint-management platform to deploy ScreenConnect and gain remote access.
Cyber
Hackers Push Malicious Virtualizor Update in BGP Hijacking Attack
Cybercriminals hijacked BGP routing for Virtualizor VPS management software to redirect update requests and push malicious code.
Cyber
Dropbox security breach seemingly caused by authentication failure
Cloud storage giant Dropbox is notifying multiple users about unauthorized access to their accounts following a security breach.
Cyber
Nearly 22,000 Microsoft Exchange servers vulnerable to hijack attacks
Thousands of internet-exposed Microsoft Exchange servers remain unpatched against a severe authentication bypass vulnerability.
Cyber
Recently patched PaperCut zero-days actively used in data theft attacks
Two security flaws in PaperCut NG and MF software, recently patched after zero-day exploitation, are now driving data theft attacks.
Cyber
Microsoft Warns of TerminalFix Attacks Deploying Reverse Tunnels
A new ClickFix variant named TerminalFix uses fake Cloudflare CAPTCHA prompts to trick Windows users into executing malicious PowerShell commands.
Cyber
METR and Redwood Release Detailed Postmortem on HuggingFace Hack
Research organizations METR and Redwood have published an in-depth postmortem analysis regarding the recent security breach at HuggingFace.
Cyber
Omarchy Vulnerability: Any User Process Can Escalate to Root
A critical security flaw in Omarchy allows standard user processes to easily escalate privileges to root access.
Cyber
European Commission Revives Push for Encryption Backdoors in ProtectEU Strategy
The European Commission's renewed push for encryption backdoors under the ProtectEU strategy has sparked intense debate within the tech community.
Cyber
Manchester Airports hit by cyberattack with 86 GB of data stolen
FulcrumSec claims responsibility for stealing 86 GB of data from Manchester Airports Group, with BleepingComputer validating traveller records.
Cyber
Chrome Web Store Extensions Caught Stealing Crypto and Browser Data
Multiple extensions for Google Chrome and Microsoft Edge were found delivering a malware framework designed to steal cryptocurrency, sensitive data, and browsing history.
Cyber
Sleepwalker: Passive Backdoor with Its Own Command Language
Security researchers have highlighted Sleepwalker, a stealthy passive backdoor featuring its own dedicated command language.
Cyber
McKesson discloses security breach as ShinyHunters claims massive patient data theft
Healthcare distributor McKesson reports a cyber incident involving unauthorized access and potential data theft by the ShinyHunters group.
Cyber
Sesame: A Local-First, Open-Source Password Manager Announced
Hacker News recently highlighted Sesame, a new privacy-focused, open-source password manager designed for local control.
Cyber
PaperCut releases second emergency patch for exploited flaws
PaperCut has released a second emergency security update for actively exploited vulnerabilities in its print management software after researchers bypassed initial fixes.
Cyber
PaperCut warns of NG and MF zero-day flaw
PaperCut is warning that hackers are actively exploiting a critical vulnerability in its print management software.
Cyber
Android 17 adds ECH support to make web browsing harder to track
Google is introducing new network security protections in Android 17 to strengthen connection privacy and combat user tracking.
Cyber
Google Workspace Security Webinar: Breach Vectors and Defense Strategies
A comprehensive webinar explores how Google Workspace breaches happen and highlights essential security controls.
Cyber
Carhartt data breach exposes information of 12.9 million accounts
Clothing retail giant Carhartt has suffered a massive data breach affecting nearly 13 million accounts, with the ShinyHunters extortion group leaking the stolen data online.
Cyber
CISA orders federal agencies to patch critical Citrix NetScaler flaw
The US cybersecurity agency has instructed federal civilian agencies to fix an actively exploited remote code execution vulnerability in Citrix devices by Saturday.
Cyber
New GPUThor attack defeats NVIDIA ECC protection for root access
A newly disclosed Rowhammer attack dubbed GPUThor bypasses error-correcting code (ECC) protections on NVIDIA GPUs to achieve root-level privilege escalation.
Cyber
Medical device maker Boston Scientific suffers cyberattack
Boston Scientific reports a global disruption to its operations following a cyberattack on its systems.
Cyber
US Seizes Domains of Chinese Botnet Used to Hack NASA and Justice Department
The FBI has seized domains associated with a botnet that allowed Chinese-backed hackers to breach several U.S. government departments.
Cyber
FBI disrupts proxy network enabling Chinese espionage operations
The FBI has dismantled a technical infrastructure providing reconnaissance and proxy management for Chinese cyber espionage.
Cyber
Snowflake ends password authentication for service accounts – the hard part begins
Snowflake is retiring password‑based auth for legacy service accounts, pushing organisations toward passwordless methods. Token Security warns that the real challenge lies in discovering who uses each account, what it’s used for, and how much access it truly needs.
Cyber
Ubiquiti patches three max severity security vulnerabilities
Network equipment manufacturer Ubiquiti has released security patches for three new maximum-severity vulnerabilities that threat actors can exploit remotely without privileges.
Cyber
From Fake Workers to Account Recovery: The Growing Identity Verification Risk
Attackers are increasingly targeting identity‑establishment and recovery processes instead of the login itself, creating new avenues for social engineering.
Cyber
WhatsApp rolls out stronger two-step verification and multiple passkeys support
The popular messaging app is introducing new account security features, including multiple passkey support and enhanced two-step verification options.
Cyber
ReliaQuest Confirms Failed Data-Theft Attack
Cybersecurity firm ReliaQuest has confirmed thwarting a social engineering attack targeting one of its employees.
Cyber
CISA Orders Urgent Patching of Actively Exploited Zimbra Flaw
The Cybersecurity and Infrastructure Security Agency (CISA) has ordered U.S. government agencies to patch an actively exploited vulnerability in Zimbra Collaboration Suite within three days.
Cyber
ToxicPanda Android malware uses VPN permissions to block Google Play
The ToxicPanda Android malware has evolved with new malicious functionality, expanding its targeting to 349 applications and adding support for 167 remote commands.
Cyber
Securing Windows Named Pipes: Mitigating Interprocess Communication Risks
Windows named pipes provide fast interprocess communication, but weak access controls can expose privileged services to untrusted processes.
Cyber
TikTok reaches $400M settlement over children’s privacy lawsuit
Two years after the U.S. Department of Justice alleged that TikTok violated the Children’s Online Privacy Protection Act, it has reached a settlement.
Cyber
New SynkLoader Malware Discovered in Microsoft Teams Phishing Campaign
A previously unknown malware family named SynkLoader is being distributed through Microsoft Teams phishing attacks to steal credentials using a fake lock screen.
Cyber
Hundreds of leaked AWS keys give full control over corporate accounts
New findings reveal that thousands of Amazon Web Services access keys left publicly exposed remain active and valid.
Cyber
Hackers abuse FTP server banners to deliver new Windows malware
Threat actors are abusing FTP banners to hide commands that deliver two previously undocumented remote access trojans named E4del and PINHOLE.
Cyber
Microsoft warns of max severity Entra ID flaw exploited in attacks
Microsoft has patched a maximum-severity vulnerability in the Entra ID identity and access management platform.
Cyber
Hackers Poison Rust Crate arrayref to Push Infostealer Malware
Attackers compromised the maintainer account of the popular Rust arrayref crate, injecting malware that executes on developers' systems during compilation.
Cyber
How to compromise your system with a job interview
Recent security insights highlight a growing trend where cybercriminals target tech professionals through fake job interviews and malicious test tasks.
Cyber
Critical Elementor Pro bug exposes WordPress sites to RCE attacks
A critical vulnerability in the Elementor Pro WordPress plugin could allow attackers to upload executable files for remote code execution on the server.
Cyber
Citrix urges admins to patch new NetScaler flaws immediately
Citrix has warned customers to swiftly secure their systems against two vulnerabilities impacting NetScaler products.
Cyber
New Manic Android malware can exfiltrate data through nearby devices
A new Android malware named Manic targeting users in multiple European countries has a fallback data exfiltration mechanism that uses nearby infected devices.
Cyber
Critical Zimbra RCE Flaw Actively Exploited in Recent Attacks
CERT Polska has issued a warning as attackers begin actively exploiting a critical remote code execution vulnerability in the Zimbra Collaboration Suite.
Cyber
Sakura Internet Hack Exposes Data of Up to 1.36 Million Accounts
Japanese cloud and data center provider Sakura Internet disclosed a cyberattack that compromised its sales management system containing customer contract and membership data.
Cyber
Rogue ransomware affiliate poses as data recovery firm to scam victims
A suspected ransomware affiliate is pretending to be a data recovery service called "Ransom Busters" to extract payments from victims.
Cyber
Police officer used Flock cameras to track estranged wife 717 times
A law enforcement officer in the US abused government automated license plate recognition cameras to stalk his former spouse hundreds of times.
Cyber
Hackers compromise 14,500 Dahua web cameras in 35-day campaign
A large-scale cyberattack campaign dubbed CameraSwarm has compromised more than 14,500 Dahua IP cameras, mostly located in Ukraine and Russia.
Cyber
US Charges Iranian Hackers Over $3.4 Billion Intellectual Property Theft
American authorities have charged 17 Iranian nationals linked to the Mabna Institute hacking-for-hire group over massive data theft operations.
Cyber
Password Spraying Attacks Surge 155x Amid MFA Gaps
Huntress observed a massive 155x increase in password spraying attacks driven by legacy auth and MFA vulnerabilities.
Cyber
Critical RCE flaw in Windows IKE Extension now actively exploited
CISA has warned that hackers are actively exploiting a critical remote code execution flaw in the Windows Internet Key Exchange service.
Cyber
CISA: Medusa Ransomware Hits Over 500 Critical Infrastructure Organizations
The FBI and CISA report that the Medusa ransomware gang has breached more than 500 critical infrastructure organizations in the US since June 2021.
Cyber
Comcast turns your Xfinity WiFi into a home motion detector
Comcast is promoting WiFi-based motion detection as part of its Xfinity Shield platform, allowing routers to detect people moving around the house without physical sensors.
Cyber
Apple releases Safari 26.6.1 addressing WebKit security flaws on macOS Sonoma and Sequoia
Apple has detailed the security content of the new Safari 26.6.1 update, bringing crucial WebKit patches to macOS Sonoma and Sequoia users.
Cyber
Clop gang creates custom web shell for Windchill data theft attacks
Cybercriminals have developed a custom Java web shell targeting PTC Windchill and FlexPLM servers to decrypt credentials and steal sensitive data.
Cyber
Bluesky suffers recent outage due to another DDoS attack
The social networking site Bluesky was hit by another large-scale DDoS attack this year, causing temporary service disruptions.
Cyber
Your Controls Block Known Attacks. What About the Behavior?
Picus Security's Blue Report 2026 highlights how prevention rates vary by technique and why behavioral testing is essential to uncover hidden security gaps.
Cyber
CISA: Windows Task Host flaw now exploited by ransomware gangs
The U.S. CISA confirms that ransomware gangs are actively exploiting a high-severity Windows Task Host vulnerability.
Cyber
Microsoft starts removing WMIC tool used by cybercriminals
Microsoft has officially begun removing the legacy WMIC command-line tool starting with Windows 11 version 24H2 and recent beta builds.
Cyber
Unprecedented Number of Apple Users Received Recent Spyware Alert
Cybersecurity experts who investigate spyware attacks say the number of people who received a recent threat notification from Apple is unusually high.
Cyber
Hacker claims 3.6 million Azure account records stolen from major companies
A threat actor is selling employee databases allegedly stolen from the Microsoft Azure infrastructure of multiple Fortune 500 companies.
Cyber
Pokémon Center Data Breach Exposes Customer Info and Cancels Orders
Pokémon Center is notifying customers in the UK and Germany after a third-party data breach at logistics provider CEVA Logistics.
Cyber
Apple Releases iOS 26.6.1 with Fixes for 20+ Security Issues on iPhone
Apple has officially released iOS 26.6.1 for iPhone, bringing crucial patches for more than 20 security vulnerabilities.
Cyber
Certighost and the Privilege Hiding in Your Certificate Authority
CVE-2026-54121 allows a standard domain user to escalate an Enterprise CA into a Domain Controller.
Cyber
Serious Mac screen sharing vulnerability is being actively exploited
Apple recently patched a serious screen sharing flaw in macOS, and security experts warn that the vulnerability is now being actively exploited.
Cyber
Philips and GE Investigating Clop Ransomware Data Theft Claims
Tech giants General Electric (GE) and Philips have confirmed they are actively investigating claims made by the Clop ransomware gang regarding a data breach.
Cyber
Microsoft working on Defender patch for ShieldBreak zero-day
Microsoft is actively developing a security patch to address the ShieldBreak zero-day vulnerability tracked as CVE-2026-69414.
Cyber
Android 17 QPR 2 Beta 3 takes cell network security to the next level
Google is adding a security log, cipher encryption details, and more notification alerts to protect against cellular attacks.
Cyber
SafePal data breach impacts nearly 40,000 customers as stolen info goes on sale
Popular crypto hardware wallet provider SafePal has confirmed a security breach affecting 39,798 customers after an order data flaw was exploited.
Cyber
Large-Scale DDoS Attacks Disrupt Threema Secure Messaging Service
Threema secure messaging service faced multiple DDoS attacks earlier this week, causing communication disruptions.
Cyber
New AmnesiaStealer macOS Malware Hijacks Browser Sessions via Remote Control
A new information-stealing malware called AmnesiaStealer targets macOS users via ClickFix attacks, featuring remote browser control.
Cyber
Protecting against phishing in 2026: a practical guide
Social engineering attacks are becoming more sophisticated. Companies must combine staff training with technical controls.
Cyber
What is Zero Trust and when should you adopt it?
The “never trust, always verify” principle is becoming the new standard for enterprise networks.
Cyber
A ransomware recovery plan every company should know
Preventing every attack is difficult, but good backups and a response plan can dramatically reduce damage.