Archive
Fake AI Apps Show Why Developers Must Treat Signed Software as Untrusted by Default
10h ago
Attackers Hide Malware Behind Signed ChatGPT and Claude Binaries
10h ago
Fashion retailer Resolve says hackers stole payment card information
10h ago
Shufti ties AI agent actions to verified owners and permissions
10h ago
Chainalysis Confirms Intrusion Into Internal Tools and Exposure of Customer Identity Data
10h ago
CISA Adds Two Known Exploited Vulnerabilities to Catalog
Yesterday
Ransomware Defenses for AI Systems Are Overdue, and RAID-AI Is a Start
Yesterday
Official Claude Code Extension on Cursor Marketplace Trojanized with Persistent SSH Backdoor
Yesterday
New Framework Puts Ransomware Resilience for AI Systems in Focus
Yesterday
Syrian Electronic Army hacker gets prison time for attacks on Western targets
Yesterday
Assad regime hacker who caused $136 billion market drop sentenced to 42 months
Yesterday
Hitachi Energy TRO600 series products
2 days ago
Binance Hit by Record-Breaking $6.3bn Hack in Largest Cryptocurrency Heist in History
2 days ago
Banks Must Stop Trusting the SMS Code Their Customers Are Being Trained to Give Away
2 days ago
Hitachi Energy CoreTec Product
2 days ago
MR ROBOT Malware-as-a-Service Targets Indian Bank Customers
2 days ago
Smart TVs can harbor unpatched security flaws and track what you watch
2 days ago
Binance Suffers Security Breach Affecting $6.3 Billion in Assets, Nearly $3 Billion Frozen
2 days ago
Stop Letting Malware Bill Victims for Its Own AI Work
3 days ago
NIK C2 Malware Can Use Victims’ OpenAI Keys for AI Queries
3 days ago
Insurance industry fears potential impacts from PHP2Shell
3 days ago
GM settles with 36 states for selling driver data, agrees to $220 million fine and reforms
3 days ago
Researcher Reveals How Logic Bugs Alone Cracked Microsoft Edge in $175,000 Pwn2Own Win
3 days ago
PHP2Shell: Two Unpatched Critical PHP RCE Flaws (CVSS 9.2) Trigger Emergency Security Alert
Oct 21, 2026
Tech Giants Block eMudhra Certificates Tied to 8 Compromised Keys
Oct 21, 2026
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Oct 21, 2026
Hackers Use New ROMULUS ClickFix Platform to Deliver LegionLoader and Other Malware
Oct 20, 2026
Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site
Oct 20, 2026
Researchers Infiltrate Microsoft Tech Support Scam Operation
Oct 20, 2026
Watering Hole Attacks Push ScanBox Keylogger
Oct 20, 2026
ConnectWise Suspends Cloud Backup After Attackers Compromise Microsoft 365 Tenants
Oct 19, 2026
When Your Ransomware Negotiator Works for the Other Side
Oct 19, 2026
MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon
Oct 18, 2026
Enterprise AI Enters Risk Management Phase as Security Concerns Rise
Oct 18, 2026
Researchers Demonstrate OpenBSD Root Exploit Chaining 37-Year-Old Shared-Memory Bug
Oct 17, 2026
Fake Claude, ChatGPT Attacks Surge, Putting Developers at Risk
Oct 17, 2026
ThreatsDay: Adobe RCE, DNS Wallet Theft, NVIDIA Container Escape, Self-Healing Backdoor + 23 More
Oct 16, 2026
F-Secure Launches Victim-First Scam Encyclopedia Covering 50+ Types of Consumer Fraud
Oct 16, 2026
Cisco Warns of Active Attacks Exploiting New Critical Secure Email Gateway Vulnerability
Oct 15, 2026
U.K. Sanctions Cryptomus for RU Money Laundering
Oct 15, 2026
Microsoft Patches Record 1,413 Flaws, Including Exploited Windows Shell Bug
Oct 14, 2026
Microsoft Patches More Than 1,400 Security Flaws
Oct 14, 2026
Ransomware Gangs Embrace Physical Threats, Family Stalking?
Oct 14, 2026
⚡ Weekly Recap: Helpdesk 0-Days, Rogue Certs, ShinyHunters Arrest, AI-Fooling Malware and More
Oct 13, 2026
Data Broker Radaris Loses Domains in Privacy Fight
Oct 13, 2026
Maximum-Severity SSRF Flaw in SonicWall SMA Devices Under Attack
Oct 13, 2026
The Third-Party Agent Problem: Why Security Built for AI You Chose Misses the Agents You Didn't
Oct 12, 2026
P7 DarkSword iOS Exploit Kit Adds Crypto Wallet Data Theft and Remote Commands
Oct 11, 2026
FBI Arrests Executive at Ransomware Negotiation Firm
Oct 11, 2026
AI Scramble Drives Cybersecurity M&A Boom
Oct 11, 2026
Credential-Stealing GitHub Actions Workflows Planted in Tens of Thousands of Repositories
Oct 10, 2026
FBI Arrests Founder of Ransomware Negotiation Firm
Oct 10, 2026
ASOS Breach Reveals the Risks in Customer-Facing SaaS
Oct 10, 2026
FBI Says China-Linked Hackers Ran Portal Giving Third Parties Access to Stolen Emails
Oct 9, 2026
Attackers Hijack .gh, .sl, and .as Registries to Obtain Certificates for Google Domains
Oct 8, 2026
ShinyHunters Extorted Boeing Spin-off Prior to Arrests
Oct 8, 2026
Australian Gov't Weighs Mandatory AI Incident Reporting
Oct 8, 2026
Fake ChatGPT, Gemini, and Claude Ad Portals Capture Credentials and MFA Codes
Oct 7, 2026
Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users' Mailboxes
Oct 6, 2026
Who’s Tracking You? Use This New Service to Find Out
Oct 6, 2026
ClingSTUN Turns Vulnerable IoT Devices Into Proxy Nodes
Oct 6, 2026
ShinyHunters Suspect Rey Reportedly Detained in Jordan, Helping FBI Identify Group Members
Oct 5, 2026
Two Alleged ‘TeamPCP’ Hackers Arrested in Australia
Oct 5, 2026
MI5 Says China’s MSS Funded Research Involving 100+ U.K.-Linked Academics
Oct 4, 2026
FBI Probes Service Selling 153M+ Drivers Licenses
Oct 4, 2026
RemoteThreat Bets Security Teams Need to Test What Happens After Defenses Fail
Oct 4, 2026
GitLab Patches Critical 9.9 AI Gateway Flaw Allowing Command Execution on Self-Hosted Servers
Oct 3, 2026
Microsoft Plugs Nearly 1,000 Security Holes
Oct 3, 2026
Kiteworks & Citrix Incidents Show Challenges of Zero-Day Response
Oct 3, 2026
OpenAI Parts Ways With Three Safety Researchers Over Sensitive Information Mishandling
Oct 2, 2026
Police Arrest 16-Year-Old Suspected of Running KillSec, Seize Ransomware Leak Site and Servers
Oct 2, 2026
One Packet Can Crash OT Servers in Industrial Sectors
Oct 2, 2026
Citrix NetScaler Post-Exploitation Payload Creates Superuser, Maps Web Shell to CSS-Like URLs
Oct 1, 2026
Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets
Oct 1, 2026
Attackers Abuse MSP360 to Deploy ScreenConnect in Dual-RMM Phishing Attacks
Oct 1, 2026
Attackers Exploit NetScaler Flaw for Root Access, Deploy WHIPSHOT and SLAPSHOT
Oct 1, 2026
OpenSSL Fixes High-Severity DTLS Flaw That Can Leak Heap Memory Unencrypted
Oct 1, 2026
Malicious Custom GPTs Turn ChatGPT Into RAT Delivery Lure
Oct 1, 2026
Trump, Tech Giants Strike Voluntary AI Safety Accord
Oct 1, 2026
As AI Reshapes the SOC Career Ladder, Satisfaction Rises for 91%, but Entry Gets Harder for Nearly Half
Oct 1, 2026
Cisco Warns of Attackers Exploiting Critical Authentication Bypass in SD-WAN Manager
Sep 30, 2026
Attackers Abuse ChatGPT Custom GPTs to Deliver RAT via ClickFix Lures
Sep 30, 2026
Know Your Enemy: Browser-Based Attack Techniques in 2026
Sep 30, 2026
AI Coding Agents Exposed 13,000 Internal Images, Including Billing Records, on GitHub
Sep 30, 2026
US-Focused CSuite Phishing Steals Microsoft 365 Sessions and Deploys RMM Tools for Remote Access
Sep 30, 2026
Russia's Star Blizzard Ditches ClickFix to Widen Phishing Net
Sep 30, 2026
South Africa Seeks Help After Cyberattack Targets Air Traffic Control
Sep 30, 2026
French Tax Data Theft Using Stolen Staff Passwords Went Undetected for Seven Weeks
Sep 30, 2026
Russia's Star Blizzard Targets 100+ Organizations With Fake Event Invites to Deliver Backdoor
Sep 30, 2026
OpenAI Shelves GPT-6.1 Astra After Tests Find Deception and Unauthorized Actions
Sep 30, 2026
OpenAI Pauses Tool Use After Agent Bypasses Internet Controls to Reach External Chatbot
Sep 30, 2026
Apple Zero-Day Vulnerability Weaponized in Targeted Attacks
Sep 30, 2026
Unsloth Studio Flaw Turns Routine Model Inspection Into Code Execution
Sep 30, 2026
Nvidia Launches AI Agent Safety Platform to Prevent Rogue Activities
Sep 30, 2026
Why the CISO-CFO Relationship Is a Key to Cybersecurity Success
Sep 30, 2026
New Spectre-v2 BTR Attack Leaks Linux Memory Despite Existing Defenses
Sep 29, 2026
Kiteworks Fixes Critical Flaw Found During Nine-Hour Precautionary Shutdown
Sep 29, 2026
101 Malicious npm Packages Add Developers' WhatsApp Accounts to Groups Without Consent
Sep 29, 2026
Dutch Police Arrest 24-Year-Old Amsterdam Man in ShinyHunters Investigation
Sep 29, 2026
Official MCP Python SDK Flaw Can Let Malicious Servers Steal OAuth Credentials
Sep 29, 2026
Cloudflare Announces Public Certificate Authority for the Post-Quantum Web
Sep 29, 2026
'NeedyMantis' Provides Long-Term Access to Compromised Networks
Sep 29, 2026
Dual NetScaler Zero-Days Trigger Chaos for Citrix Customers
Sep 29, 2026
Apple Patches CoreGraphics Flaw Possibly Exploited in Targeted Attacks
Sep 29, 2026
Hackers Use NeedyMantis to Maintain Long-Term Access in Breached Networks
Sep 29, 2026
IAM for AI agents: A Practical Enterprise Framework
Sep 29, 2026
Bitget Says Attacker Exploited Third-Party Security Product Flaw to Steal $388M
Sep 29, 2026
RatHat Android Malware Console Uses Gemini to Identify Higher-Value Victims
Sep 29, 2026
Carbonato Botnet Puts an AI Agent on Hacked Docker Hosts
Sep 29, 2026
AI Agents Are Privileged Users; Who Is Auditing Their Access?
Sep 29, 2026
⚡ Weekly Recap: $387M Crypto Hack, Citrix Exploits, AI Agents Go Off-Script, and More Threats
Sep 28, 2026
Webinar: How to Govern AI Agents, Reduce Excessive Access, and Control Shadow AI
Sep 28, 2026
Carbonato Botnet Compromises Docker Hosts to Deploy Telegram-Controlled Hermes AI Agent
Sep 28, 2026
JADEPUFFER-Linked Attackers Used Compromised Service Principals to Delete Azure Resources
Sep 28, 2026
CISA Says Attackers Are Exploiting Two Critical Citrix NetScaler Flaws Globally
Sep 28, 2026
Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation
Sep 28, 2026
Chrome Store Hosts 'Poper Blocker' Spyware Downloaded by Millions
Sep 28, 2026
JadePuffer AI Actor Compromises Azure Tenant in Destructive Cloud Attack
Sep 28, 2026
How the CISO CFO Relationship is a Key to Cybersecurity Success
Sep 28, 2026
Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation
Sep 27, 2026
Lunex Stealer Abuses AMD Driver to Disable Security Monitoring and Steal Browser Credentials
Sep 27, 2026
Researcher Drops BigDiskBuster Zero-Day PoC That Blocks Microsoft Defender Updates
Sep 27, 2026
Malicious npm Package indexed-btree Hid Its Loader in Runtime Code Before Removal
Sep 27, 2026
SideCopy Broadens India Targeting to Academia With ReverseRAT Spear-Phishing
Sep 27, 2026
One Hidden Meta Muse Setting Could Let Attackers Turn the AI Assistant Into a Backdoor
Sep 27, 2026
Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells
Sep 26, 2026
Zero Trust for AI Agents Starts With Fixing Zero Visibility
Sep 26, 2026
Elementor CSRF Flaw Lets Attackers Take Over Sites After Admin Clicks Crafted Link
Sep 26, 2026
SharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wild
Sep 26, 2026
Kiteworks Urges Customers to Shut Down Systems for 9 Hours Over Possible Cyber Attack
Sep 26, 2026
GitLab Email Addresses Can Be Weaponized for Supply Chain Attacks
Sep 26, 2026
Cloudflare Fixes Flaw That Let One Container Read Another Customer's Leftover Disk Data
Sep 26, 2026
WSO2 and Adobe Commerce Flaws Exploited in Attacks, Added to CISA KEV
Sep 26, 2026
Chinese Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malware
Sep 26, 2026
Critical Next.js ImageResponse Flaw Can Lead to Server Code Execution via Crafted SVG Input
Sep 26, 2026
ShinyHunters Claims FBI Breach, Says It Stole Data on Agents and Job Applicants
Sep 26, 2026
U.S. Soldier Gets 70 Months in Prison for AT&T, Verizon Extortions
Sep 26, 2026
AI Sandbox Escapes: Why Forensic Readiness Matters More Than Containment
Sep 26, 2026
What We Missed: Google Gemini Joins the AI Escape Party
Sep 26, 2026
Compromised GitHub Actions Came Back Online and Resumed Executing Mini Shai-Hulud Malware
Sep 25, 2026
PamStealer macOS Malware Adds Live C2 Payload Decryption and Multi-Layer Persistence
Sep 25, 2026
The SOC Doesn't Need to Start Over with Every Alert
Sep 25, 2026
Bitget Says Suspected North Korean Hackers Stole $351.6M After Backend Compromise
Sep 25, 2026
Roundcube Pre-Auth SQL Injection Flaw Actively Exploited in the Wild
Sep 25, 2026
Stopping IT Worker Scams Requires Revamped HR Process
Sep 25, 2026
Russia's Hybrid Cyber-Physical War in Europe Heats Up
Sep 25, 2026
SASE Converges Network & Security Into One Cloud Solution
Sep 25, 2026
Unpatched OnePlus Flaws Let Installed Android Apps Gain Root Without Permissions
Sep 25, 2026
ThreatsDay: AI Search Poisoning, AI Coding Tool Leaking Repos, One-Click Code Execution and 13 More Stories
Sep 25, 2026
OpenAI Agent Bypassed Australian Medicare Portal Controls to Access Non-Public Files
Sep 25, 2026
TeamFiltration Campaign Compromises Seven Microsoft 365 Accounts Using Default Passwords
Sep 25, 2026
Attackers Exploit WordPress CVE-2026-87902 Within Hours of Disclosure
Sep 25, 2026
'Salesbleed' Exploits Salesforce Agents to Enable Slack Phishing
Sep 25, 2026
SectopRAT Returns, Hiding Inside a Legitimate Application
Sep 25, 2026
Prompt-Injection Bug Hits $4B Agentic AI App 'Manus'
Sep 25, 2026
Placeholder third-party[.]com Referenced Across 1,700+ Repositories Now Serves Malicious Content
Sep 24, 2026
Hacked Ukrainian Sites Serve Fake Cloudflare ClickFix Lures for Psychedelic Stealer
Sep 24, 2026
Corp MDM Spyware Targets Logistics Firms, Steals New SMS and Redirects Calls
Sep 24, 2026
Secrets Sprawl Is an Identity Problem That AI Just Made Impossible to Ignore
Sep 24, 2026
17,000 URLs Reveal How ClickFix Turns Trusted Websites Into Malware Traps: Report by CTM360
Sep 24, 2026
3 Cyber Threats That Defined the Summer of 2026
Sep 24, 2026
How to Build A SASE Framework for Modern Cybersecurity
Sep 24, 2026
Ghost Service Accounts Enable M365 Data Theft in Chile
Sep 24, 2026
Attackers Use Malicious Terraform Providers to Deliver Go Malware via HashiCorp Registry
Sep 24, 2026
A Leaked GitLab Issue Email Address Lets Anyone Push Code and Run CI Jobs as You
Sep 24, 2026
Anthropic and OpenAI Models Still Attempt Restricted Actions in Safety Tests
Sep 24, 2026
Exploit Released for Unpatched Ubuntu Linux Flaw Enabling Host-Root Container Escape
Sep 24, 2026
F5 Patches Critical BIG-IP APM Zero-Day Exploited for Unauthenticated RCE on OAuth Servers
Sep 24, 2026
EDR Evasion Stack Helps Process Injection Slip Past Defenses
Sep 24, 2026
Deception by Design: CISA's Guide to Tricking Cybercriminals
Sep 24, 2026
MikroTrick Chain Let Attackers Take Over MikroTik Routers Without a Password or SSH Key
Sep 23, 2026
This Windows Malware is Built to Let Up to Four AI Models Vote on Its Next Move
Sep 23, 2026
Compromised MemTensor Packages Deliver sckit Credential Stealer via npm and PyPI
Sep 23, 2026
New cPanel Flaw Lets a Hosting Account Run Code as Root, Take Full Server Control
Sep 23, 2026
545 Hackers Tested It First. Now XRanges for AI Scores Your Security Agent
Sep 23, 2026
UAE, Saudi Arabia Face Onslaught of Increasingly Complex Cyberattacks
Sep 23, 2026
Attackers Manipulate AI Chatbots in Mass Disinformation, Phishing Campaign
Sep 23, 2026
How the CISO-CMO Alliance Builds Trust Before Crisis Strikes
Sep 23, 2026
Check Point Warns of Management Server Zero-Day Exploited in Targeted Attacks
Sep 23, 2026
WordPress Issues Patch for Critical Flaw That Can Enable Code Execution on Some Servers
Sep 23, 2026
Malicious npm Package Poses as Twilio Bug-Bounty Probe, Can Exfiltrate Credentials
Sep 23, 2026
Microsoft Takes Down EvilTokens Device-Code Phishing Service Tied to 12,000 Inbox Compromises
Sep 23, 2026
Critical Bifrost AI Gateway Flaw Lets Attackers Run Commands Without Credentials
Sep 23, 2026
Relays Are Masking Chinese Access to Frontier AI Models in the US
Sep 23, 2026
Microsoft Disrupts EvilTokens Device Code Phishing Service
Sep 23, 2026
Shai-Hulud Attack Nips Cyber-Firm CrowdSec's GitHub Data
Sep 23, 2026
AI Agents Are Rewriting the Rules of Lateral Movement
Sep 22, 2026
New CVSS 10.0 VeloCloud Orchestrator Flaw Actively Exploited in Certificate-Based Setups
Sep 22, 2026
DORA Year Two: Can Your SOC Actually See the Attack?
Sep 22, 2026
New Linux Kernel Flaw Gives ARM64 KVM Guests Read-Write Access to Host Memory
Sep 22, 2026
SharePoint Flaw Initially Listed as Spoofing by Microsoft Enables Authenticated RCE
Sep 22, 2026
Amid Ongoing Rogue Incidents, Debate Over AI Safety Gets Real
Sep 22, 2026
More Than a Third of Industrial Orgs See Cybersecurity Risk as a Top Obstacle to Growth, Study Finds
Sep 22, 2026
ShinyHunters Hacked Cl0p. Now What About Cl0p's Victims?
Sep 22, 2026
Fake LastPass Authenticator Installer Abuses Microsoft-Signed Driver to Kill Antivirus and EDR
Sep 22, 2026
Contagious Interview Campaign Compromises 30,000 Devices, Steals $10.71M in Crypto
Sep 22, 2026
Google Fined €403 Million Over GDPR Violations Tied to Location Data
Sep 22, 2026
How AI Agents Can Trigger Runaway Costs for Enterprises
Sep 22, 2026
ShinyHunters Hacked Clop. Now What About Clop's Victims?
Sep 22, 2026
Cybercriminals Are Hiding New Malware in Torrents for Popular Films
Sep 22, 2026
⚡ Weekly Recap: Cisco 0-Day, AI Agent RCE, ClickFix Attacks, ClickFix Surge, and Browser Hijacks
Sep 21, 2026
TASK#STOMP PowerShell Backdoor Steals Documents, Wi-Fi Passwords, and Clipboard Data
Sep 21, 2026
ClickFix Lures Deploy ChainScript RAT Using Polygon to Rotate C2 Infrastructure
Sep 21, 2026
Jade Sleet Linked to Indian IT Provider Breach With FLATROOF and ROOFDECK Backdoors
Sep 21, 2026
Rogue Behavior: OpenAI Reveals More Model Misalignment Incidents
Sep 21, 2026
CrowdSec Says TanStack npm Attack Led to Copy of 170 Private GitHub Repositories
Sep 20, 2026
CISA Flags Three Linux Kernel Vulnerabilities Exploited in the Wild
Sep 20, 2026
Cisco Warns of New Zero-Day ISE Auth Bypass (CVSS 10.0) Exploited in Active Attacks
Sep 20, 2026
U.S. Seizes NightmareStresser Domains Linked to Hundreds of Thousands of DDoS Attacks
Sep 20, 2026
Active Exploitation Attempts Target WSO2 API Manager JWT Bypass With Forged Admin Tokens
Sep 20, 2026
Identity Visibility in 2026: The Foundation of Identity Security
Sep 19, 2026
Claude Opus 5 Helped Researchers Take Over OpenAI Staff Accounts via Chained Flaws
Sep 19, 2026
SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE
Sep 19, 2026
Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild
Sep 19, 2026
Google Gemini Broke Into Real Company Systems After Security Test Domain Mix-Up
Sep 19, 2026
MFA Won't Save You From OAuth Consent Abuse
Sep 19, 2026
Public Exploits Released for Four Linux Kernel Flaws That Enable Local Root
Sep 19, 2026
New WordPress Click2Shell Flaw Forces Theme Installs, Can Chain to Code Execution
Sep 19, 2026
Claimed Bug Bounty Hunter Likely Used LLM to Build PhantomRaven npm Stealer
Sep 19, 2026
RatHat Android Malware Abuses ADB to Retain Shell Access After Uninstall
Sep 19, 2026
Gyazo Breach Exposes 23.62 Million User Records and 490 Million Image Metadata Records
Sep 19, 2026
Vectra AI Launches Ascent to Help Address New Era of AI-Driven Attacks
Sep 19, 2026
Cisco Zero-Day Highlights API Endpoint Authentication Issues
Sep 19, 2026