Archive
ShinyHunters Suspect Rey Reportedly Detained in Jordan, Helping FBI Identify Group Members
14h ago
Two Alleged ‘TeamPCP’ Hackers Arrested in Australia
14h ago
MI5 Says China’s MSS Funded Research Involving 100+ U.K.-Linked Academics
Yesterday
FBI Probes Service Selling 153M+ Drivers Licenses
Yesterday
RemoteThreat Bets Security Teams Need to Test What Happens After Defenses Fail
Yesterday
GitLab Patches Critical 9.9 AI Gateway Flaw Allowing Command Execution on Self-Hosted Servers
2 days ago
Microsoft Plugs Nearly 1,000 Security Holes
2 days ago
Kiteworks & Citrix Incidents Show Challenges of Zero-Day Response
2 days ago
OpenAI Parts Ways With Three Safety Researchers Over Sensitive Information Mishandling
3 days ago
Police Arrest 16-Year-Old Suspected of Running KillSec, Seize Ransomware Leak Site and Servers
3 days ago
One Packet Can Crash OT Servers in Industrial Sectors
3 days ago
Citrix NetScaler Post-Exploitation Payload Creates Superuser, Maps Web Shell to CSS-Like URLs
4 days ago
Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets
4 days ago
Attackers Abuse MSP360 to Deploy ScreenConnect in Dual-RMM Phishing Attacks
4 days ago
Attackers Exploit NetScaler Flaw for Root Access, Deploy WHIPSHOT and SLAPSHOT
4 days ago
OpenSSL Fixes High-Severity DTLS Flaw That Can Leak Heap Memory Unencrypted
4 days ago
Malicious Custom GPTs Turn ChatGPT Into RAT Delivery Lure
4 days ago
Trump, Tech Giants Strike Voluntary AI Safety Accord
4 days ago
As AI Reshapes the SOC Career Ladder, Satisfaction Rises for 91%, but Entry Gets Harder for Nearly Half
4 days ago
Cisco Warns of Attackers Exploiting Critical Authentication Bypass in SD-WAN Manager
5 days ago
Attackers Abuse ChatGPT Custom GPTs to Deliver RAT via ClickFix Lures
5 days ago
Know Your Enemy: Browser-Based Attack Techniques in 2026
5 days ago
AI Coding Agents Exposed 13,000 Internal Images, Including Billing Records, on GitHub
5 days ago
US-Focused CSuite Phishing Steals Microsoft 365 Sessions and Deploys RMM Tools for Remote Access
5 days ago
Russia's Star Blizzard Ditches ClickFix to Widen Phishing Net
5 days ago
South Africa Seeks Help After Cyberattack Targets Air Traffic Control
5 days ago
French Tax Data Theft Using Stolen Staff Passwords Went Undetected for Seven Weeks
5 days ago
Russia's Star Blizzard Targets 100+ Organizations With Fake Event Invites to Deliver Backdoor
5 days ago
OpenAI Shelves GPT-6.1 Astra After Tests Find Deception and Unauthorized Actions
5 days ago
OpenAI Pauses Tool Use After Agent Bypasses Internet Controls to Reach External Chatbot
5 days ago
Apple Zero-Day Vulnerability Weaponized in Targeted Attacks
5 days ago
Unsloth Studio Flaw Turns Routine Model Inspection Into Code Execution
5 days ago
Nvidia Launches AI Agent Safety Platform to Prevent Rogue Activities
5 days ago
Why the CISO-CFO Relationship Is a Key to Cybersecurity Success
5 days ago
New Spectre-v2 BTR Attack Leaks Linux Memory Despite Existing Defenses
6 days ago
Kiteworks Fixes Critical Flaw Found During Nine-Hour Precautionary Shutdown
6 days ago
101 Malicious npm Packages Add Developers' WhatsApp Accounts to Groups Without Consent
6 days ago
Dutch Police Arrest 24-Year-Old Amsterdam Man in ShinyHunters Investigation
6 days ago
Official MCP Python SDK Flaw Can Let Malicious Servers Steal OAuth Credentials
6 days ago
Cloudflare Announces Public Certificate Authority for the Post-Quantum Web
6 days ago
'NeedyMantis' Provides Long-Term Access to Compromised Networks
6 days ago
Dual NetScaler Zero-Days Trigger Chaos for Citrix Customers
6 days ago
Apple Patches CoreGraphics Flaw Possibly Exploited in Targeted Attacks
6 days ago
Hackers Use NeedyMantis to Maintain Long-Term Access in Breached Networks
6 days ago
IAM for AI agents: A Practical Enterprise Framework
6 days ago
Bitget Says Attacker Exploited Third-Party Security Product Flaw to Steal $388M
6 days ago
RatHat Android Malware Console Uses Gemini to Identify Higher-Value Victims
6 days ago
Carbonato Botnet Puts an AI Agent on Hacked Docker Hosts
6 days ago
AI Agents Are Privileged Users; Who Is Auditing Their Access?
6 days ago
⚡ Weekly Recap: $387M Crypto Hack, Citrix Exploits, AI Agents Go Off-Script, and More Threats
Sep 28, 2026
Webinar: How to Govern AI Agents, Reduce Excessive Access, and Control Shadow AI
Sep 28, 2026
Carbonato Botnet Compromises Docker Hosts to Deploy Telegram-Controlled Hermes AI Agent
Sep 28, 2026
JADEPUFFER-Linked Attackers Used Compromised Service Principals to Delete Azure Resources
Sep 28, 2026
CISA Says Attackers Are Exploiting Two Critical Citrix NetScaler Flaws Globally
Sep 28, 2026
Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation
Sep 28, 2026
Chrome Store Hosts 'Poper Blocker' Spyware Downloaded by Millions
Sep 28, 2026
JadePuffer AI Actor Compromises Azure Tenant in Destructive Cloud Attack
Sep 28, 2026
How the CISO CFO Relationship is a Key to Cybersecurity Success
Sep 28, 2026
Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation
Sep 27, 2026
Lunex Stealer Abuses AMD Driver to Disable Security Monitoring and Steal Browser Credentials
Sep 27, 2026
Researcher Drops BigDiskBuster Zero-Day PoC That Blocks Microsoft Defender Updates
Sep 27, 2026
Malicious npm Package indexed-btree Hid Its Loader in Runtime Code Before Removal
Sep 27, 2026
SideCopy Broadens India Targeting to Academia With ReverseRAT Spear-Phishing
Sep 27, 2026
One Hidden Meta Muse Setting Could Let Attackers Turn the AI Assistant Into a Backdoor
Sep 27, 2026
Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells
Sep 26, 2026
Zero Trust for AI Agents Starts With Fixing Zero Visibility
Sep 26, 2026
Elementor CSRF Flaw Lets Attackers Take Over Sites After Admin Clicks Crafted Link
Sep 26, 2026
SharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wild
Sep 26, 2026
Kiteworks Urges Customers to Shut Down Systems for 9 Hours Over Possible Cyber Attack
Sep 26, 2026
GitLab Email Addresses Can Be Weaponized for Supply Chain Attacks
Sep 26, 2026
Cloudflare Fixes Flaw That Let One Container Read Another Customer's Leftover Disk Data
Sep 26, 2026
WSO2 and Adobe Commerce Flaws Exploited in Attacks, Added to CISA KEV
Sep 26, 2026
Chinese Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malware
Sep 26, 2026
Critical Next.js ImageResponse Flaw Can Lead to Server Code Execution via Crafted SVG Input
Sep 26, 2026
ShinyHunters Claims FBI Breach, Says It Stole Data on Agents and Job Applicants
Sep 26, 2026
U.S. Soldier Gets 70 Months in Prison for AT&T, Verizon Extortions
Sep 26, 2026
AI Sandbox Escapes: Why Forensic Readiness Matters More Than Containment
Sep 26, 2026
What We Missed: Google Gemini Joins the AI Escape Party
Sep 26, 2026
Compromised GitHub Actions Came Back Online and Resumed Executing Mini Shai-Hulud Malware
Sep 25, 2026
PamStealer macOS Malware Adds Live C2 Payload Decryption and Multi-Layer Persistence
Sep 25, 2026
The SOC Doesn't Need to Start Over with Every Alert
Sep 25, 2026
Bitget Says Suspected North Korean Hackers Stole $351.6M After Backend Compromise
Sep 25, 2026
Roundcube Pre-Auth SQL Injection Flaw Actively Exploited in the Wild
Sep 25, 2026
Stopping IT Worker Scams Requires Revamped HR Process
Sep 25, 2026
Russia's Hybrid Cyber-Physical War in Europe Heats Up
Sep 25, 2026
SASE Converges Network & Security Into One Cloud Solution
Sep 25, 2026
Unpatched OnePlus Flaws Let Installed Android Apps Gain Root Without Permissions
Sep 25, 2026
ThreatsDay: AI Search Poisoning, AI Coding Tool Leaking Repos, One-Click Code Execution and 13 More Stories
Sep 25, 2026
OpenAI Agent Bypassed Australian Medicare Portal Controls to Access Non-Public Files
Sep 25, 2026
TeamFiltration Campaign Compromises Seven Microsoft 365 Accounts Using Default Passwords
Sep 25, 2026
Attackers Exploit WordPress CVE-2026-87902 Within Hours of Disclosure
Sep 25, 2026
'Salesbleed' Exploits Salesforce Agents to Enable Slack Phishing
Sep 25, 2026
SectopRAT Returns, Hiding Inside a Legitimate Application
Sep 25, 2026
Prompt-Injection Bug Hits $4B Agentic AI App 'Manus'
Sep 25, 2026
Placeholder third-party[.]com Referenced Across 1,700+ Repositories Now Serves Malicious Content
Sep 24, 2026
Hacked Ukrainian Sites Serve Fake Cloudflare ClickFix Lures for Psychedelic Stealer
Sep 24, 2026
Corp MDM Spyware Targets Logistics Firms, Steals New SMS and Redirects Calls
Sep 24, 2026
Secrets Sprawl Is an Identity Problem That AI Just Made Impossible to Ignore
Sep 24, 2026
17,000 URLs Reveal How ClickFix Turns Trusted Websites Into Malware Traps: Report by CTM360
Sep 24, 2026
3 Cyber Threats That Defined the Summer of 2026
Sep 24, 2026
How to Build A SASE Framework for Modern Cybersecurity
Sep 24, 2026
Ghost Service Accounts Enable M365 Data Theft in Chile
Sep 24, 2026
Attackers Use Malicious Terraform Providers to Deliver Go Malware via HashiCorp Registry
Sep 24, 2026
A Leaked GitLab Issue Email Address Lets Anyone Push Code and Run CI Jobs as You
Sep 24, 2026
Anthropic and OpenAI Models Still Attempt Restricted Actions in Safety Tests
Sep 24, 2026
Exploit Released for Unpatched Ubuntu Linux Flaw Enabling Host-Root Container Escape
Sep 24, 2026
F5 Patches Critical BIG-IP APM Zero-Day Exploited for Unauthenticated RCE on OAuth Servers
Sep 24, 2026
EDR Evasion Stack Helps Process Injection Slip Past Defenses
Sep 24, 2026
Deception by Design: CISA's Guide to Tricking Cybercriminals
Sep 24, 2026
MikroTrick Chain Let Attackers Take Over MikroTik Routers Without a Password or SSH Key
Sep 23, 2026
This Windows Malware is Built to Let Up to Four AI Models Vote on Its Next Move
Sep 23, 2026
Compromised MemTensor Packages Deliver sckit Credential Stealer via npm and PyPI
Sep 23, 2026
New cPanel Flaw Lets a Hosting Account Run Code as Root, Take Full Server Control
Sep 23, 2026
545 Hackers Tested It First. Now XRanges for AI Scores Your Security Agent
Sep 23, 2026
UAE, Saudi Arabia Face Onslaught of Increasingly Complex Cyberattacks
Sep 23, 2026
Attackers Manipulate AI Chatbots in Mass Disinformation, Phishing Campaign
Sep 23, 2026
How the CISO-CMO Alliance Builds Trust Before Crisis Strikes
Sep 23, 2026
Check Point Warns of Management Server Zero-Day Exploited in Targeted Attacks
Sep 23, 2026
WordPress Issues Patch for Critical Flaw That Can Enable Code Execution on Some Servers
Sep 23, 2026
Malicious npm Package Poses as Twilio Bug-Bounty Probe, Can Exfiltrate Credentials
Sep 23, 2026
Microsoft Takes Down EvilTokens Device-Code Phishing Service Tied to 12,000 Inbox Compromises
Sep 23, 2026
Critical Bifrost AI Gateway Flaw Lets Attackers Run Commands Without Credentials
Sep 23, 2026
Relays Are Masking Chinese Access to Frontier AI Models in the US
Sep 23, 2026
Microsoft Disrupts EvilTokens Device Code Phishing Service
Sep 23, 2026
Shai-Hulud Attack Nips Cyber-Firm CrowdSec's GitHub Data
Sep 23, 2026
AI Agents Are Rewriting the Rules of Lateral Movement
Sep 22, 2026
New CVSS 10.0 VeloCloud Orchestrator Flaw Actively Exploited in Certificate-Based Setups
Sep 22, 2026
DORA Year Two: Can Your SOC Actually See the Attack?
Sep 22, 2026
New Linux Kernel Flaw Gives ARM64 KVM Guests Read-Write Access to Host Memory
Sep 22, 2026
SharePoint Flaw Initially Listed as Spoofing by Microsoft Enables Authenticated RCE
Sep 22, 2026
Amid Ongoing Rogue Incidents, Debate Over AI Safety Gets Real
Sep 22, 2026
More Than a Third of Industrial Orgs See Cybersecurity Risk as a Top Obstacle to Growth, Study Finds
Sep 22, 2026
ShinyHunters Hacked Cl0p. Now What About Cl0p's Victims?
Sep 22, 2026
Fake LastPass Authenticator Installer Abuses Microsoft-Signed Driver to Kill Antivirus and EDR
Sep 22, 2026
Contagious Interview Campaign Compromises 30,000 Devices, Steals $10.71M in Crypto
Sep 22, 2026
Google Fined €403 Million Over GDPR Violations Tied to Location Data
Sep 22, 2026
How AI Agents Can Trigger Runaway Costs for Enterprises
Sep 22, 2026
ShinyHunters Hacked Clop. Now What About Clop's Victims?
Sep 22, 2026
Cybercriminals Are Hiding New Malware in Torrents for Popular Films
Sep 22, 2026
⚡ Weekly Recap: Cisco 0-Day, AI Agent RCE, ClickFix Attacks, ClickFix Surge, and Browser Hijacks
Sep 21, 2026
TASK#STOMP PowerShell Backdoor Steals Documents, Wi-Fi Passwords, and Clipboard Data
Sep 21, 2026
ClickFix Lures Deploy ChainScript RAT Using Polygon to Rotate C2 Infrastructure
Sep 21, 2026
Jade Sleet Linked to Indian IT Provider Breach With FLATROOF and ROOFDECK Backdoors
Sep 21, 2026
Rogue Behavior: OpenAI Reveals More Model Misalignment Incidents
Sep 21, 2026
CrowdSec Says TanStack npm Attack Led to Copy of 170 Private GitHub Repositories
Sep 20, 2026
CISA Flags Three Linux Kernel Vulnerabilities Exploited in the Wild
Sep 20, 2026
Cisco Warns of New Zero-Day ISE Auth Bypass (CVSS 10.0) Exploited in Active Attacks
Sep 20, 2026
U.S. Seizes NightmareStresser Domains Linked to Hundreds of Thousands of DDoS Attacks
Sep 20, 2026
Active Exploitation Attempts Target WSO2 API Manager JWT Bypass With Forged Admin Tokens
Sep 20, 2026
Identity Visibility in 2026: The Foundation of Identity Security
Sep 19, 2026
Claude Opus 5 Helped Researchers Take Over OpenAI Staff Accounts via Chained Flaws
Sep 19, 2026
SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE
Sep 19, 2026
Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild
Sep 19, 2026
Google Gemini Broke Into Real Company Systems After Security Test Domain Mix-Up
Sep 19, 2026
MFA Won't Save You From OAuth Consent Abuse
Sep 19, 2026
Public Exploits Released for Four Linux Kernel Flaws That Enable Local Root
Sep 19, 2026
New WordPress Click2Shell Flaw Forces Theme Installs, Can Chain to Code Execution
Sep 19, 2026
Claimed Bug Bounty Hunter Likely Used LLM to Build PhantomRaven npm Stealer
Sep 19, 2026
RatHat Android Malware Abuses ADB to Retain Shell Access After Uninstall
Sep 19, 2026
Gyazo Breach Exposes 23.62 Million User Records and 490 Million Image Metadata Records
Sep 19, 2026
Vectra AI Launches Ascent to Help Address New Era of AI-Driven Attacks
Sep 19, 2026
Cisco Zero-Day Highlights API Endpoint Authentication Issues
Sep 19, 2026
EY Survey Finds Autonomous AI Implementation Outpaces Oversight
Sep 19, 2026
Transparent Tribe Deploys New Rust Backdoor Using Private GitHub Repositories for C2
Sep 18, 2026
Microsoft Patches CVSS 10.0 Azure AI Foundry Flaw Enabling Unauthorized Privilege Escalation
Sep 18, 2026
An Abandoned CDN Domain Was Re-Registered. Thousands of Sites Still Call It.
Sep 18, 2026
Plugin4Shell Lets Repository Owners Swap Pinned Plugin Code Across Four AI Coding Agents
Sep 18, 2026
WeaselBiscuit Stealer Spreads via 13 npm Packages to Harvest Chrome Extension Storage
Sep 18, 2026
AI Agent Breaches Spanish Organization, Modifies Personal Data
Sep 18, 2026
Critical Check Point Management Flaw Lets Unauthenticated Attackers Run Code as Root
Sep 18, 2026
ThreatsDay: Self-Rewriting Agents, 800+ Flaws Patched, Insider SIM Swaps and 22 More New Stories
Sep 18, 2026
Critical Docker Sandboxes Flaw Lets Malicious Guest Code Read and Modify macOS Host Files
Sep 18, 2026
Iran-Linked Handala Hack Tied to HEAVYGRAM Telegram Backdoor That Can Steal Passwords
Sep 18, 2026
BIND 9 Update Fixes 14 Flaws, Including an Unauthenticated Crash Over DNS-over-HTTPS
Sep 18, 2026
CISA Ditches Weekly Vulnerability Roundups for Risk-Based Focus
Sep 18, 2026
China's FamousSparrow APT Spies on US Politics in Latin America
Sep 18, 2026
Critical Unbound DNSSEC Validator Flaw Could Allow RCE via a Malicious DNS Zone
Sep 17, 2026
Can You Prove a New CVE Is Exploitable Before Attackers Do? Learn How in This Webinar
Sep 17, 2026
CISO's Expert Guide to Agentic Pentesting for Websites
Sep 17, 2026
China-Aligned FamousSparrow Deploys SparroWocky Backdoor Across Latin America
Sep 17, 2026
OpenAI Reveals Six Model Incidents Involving Hidden Failures and Unauthorized Uploads
Sep 17, 2026
[Virtual Event] Cybersecurity Outlook 2027
Sep 17, 2026
Black Hat USA 2026 | OpenAI's Deep Dive Into Hugging Face Incident
Sep 17, 2026
N0va Phishkit Targets US and EU Businesses: A New Challenge for Identity Security
Sep 17, 2026
Google Patches Pixel Modem Flaw Amid Signs of Limited Targeted Exploitation
Sep 17, 2026
Threat Intelligence Alone Won't Close the Exploitation Gap
Sep 17, 2026
Acronis cPanel Backup Plugin Vulnerability Exploited in Targeted Attacks
Sep 17, 2026
Attackers Exploit WooCommerce Wholesale Lead Capture Flaw to Plant PHP Web Shells
Sep 17, 2026
Data Broker Radaris Loses Domains in Privacy Fight
Sep 17, 2026
AI Security Spending Jumps as Fear Outpaces Proof of Value
Sep 17, 2026
Fighting Your Dragons Through Tough Tech Times
Sep 17, 2026
Attackers Exploit Issabel Framework Flaw Enabling Unauthenticated OS Command Execution
Sep 16, 2026
Three Threat Groups Target Russian Enterprises With Backdoors, Ransomware, and Wipers
Sep 16, 2026
One Extension Could Hijack AI Assistants Across Chrome, Comet, Edge, Opera Neon and Claude
Sep 16, 2026
Attacker Hijacks AI Coding Assistant Session, Spreads Shai-Hulud Across About 100 Repositories
Sep 16, 2026
Parallels Desktop Flaw Lets Non-Admin Mac Users Gain Root, but Intel Macs Can't Install Fix
Sep 16, 2026
BragJack Attack Can Turn a Browser's Agentic AI Against It
Sep 16, 2026
KREMLIN Banking Malware Hijacks Chrome and Edge to Steal Credentials and Session Tokens
Sep 16, 2026
Iranian Hackers Use Telegram-Controlled Malware to Spy on Dissidents and Journalists
Sep 16, 2026
Mass-Scanning Campaign Exploits Vite Flaw to Extract Cloud Credentials From Exposed Dev Servers
Sep 16, 2026