Archive
Crypto Clipper Campaign Abuses Fake Reviews, AI Narrators, and VirusTotal Comments
16h ago
Microsoft Confirms RoguePlanet Defender Zero-Day, Says Patch is in Development
16h ago
CISA Warns of Actively Exploited Joomla JCE Flaw Allowing PHP Code Execution
16h ago
Leak confirms OpenAI is testing a ChatGPT for Science subscription
16h ago
Google to use UK and EU user IP addresses for ad personalization
16h ago
Why Account Takeovers Are Rising and How to Stop Them
16h ago
Junior Hacker Used Tailscale and OpenSSH to Keep Access After His C2 Went Offline
Yesterday
Malicious JetBrains Plugins Steal AI API Keys as Chrome Extensions Capture Chatbot Chats
Yesterday
Adversarial Exposure Validation Turns Security Visibility into Confident Prioritization
Yesterday
The Top 10 Attack Surface Exposures in 2026
Yesterday
144 Mastra npm Packages Compromised via Hijacked Contributor Account
Yesterday
FortiBleed leak exposes Fortinet VPN credentials for 73,000 devices.
Yesterday
Google Vertex AI SDK Flaw Let Attackers Hijack Model Uploads via Bucket Squatting
Yesterday
ClickFix Campaigns Expand Malware Delivery With New Loaders and Fake Update Lures
Yesterday
Cisco Releases Security Updates for Actively Exploited SD-WAN Manager Flaw
Yesterday
CISA Flags LiteSpeed cPanel Plugin Flaw Exploited for Root Privilege Escalation
Yesterday
Patch Tuesday, May 2026 Edition
Yesterday
Malicious JetBrains Marketplace plugins steal AI API keys from developers
Yesterday
New Rokarolla Android Malware Steals PINs, SMS Codes, and Crypto Wallet Funds
2 days ago
Survey: 94% of Incidents Involve Anonymized Infrastructure. Teams Are Still Reactive
2 days ago
Attackers Exploit Three Fortinet FortiSandbox Flaws, One Patched Last Week
2 days ago
China-Linked SprySOCKS Backdoor Expands to Windows with Driver-Based Stealth
2 days ago
Fake Microsoft Alerts Used to Deploy North Korean NarwhalRAT Malware
2 days ago
Chinese Hackers Abused Google Workspace Rules to Steal Research and Defense Emails
2 days ago
North Korean Hackers Are Turning Developer Tools Into Malware Delivery Channels
2 days ago
Popular WordPress Plugin Scripts Tampered to Plant Hidden Backdoors on Sites
2 days ago
Sniper Dz Scams Target MENA Users via Fake Facebook Offers and Browser Alerts
2 days ago
Palo Alto Warns of Active Exploitation of PAN-OS GlobalProtect VPN Flaw
2 days ago
LiteLLM Vulnerability Chain Lets Low-Privilege Users Take Over AI Gateway Servers
3 days ago
One-Click Microsoft 365 Copilot Flaw Could Have Let Attackers Steal Emails, Files, and MFA Codes
3 days ago
⚡ Weekly Recap: Chrome 0-Day, UniFi Exploits, macOS Stealers, VPN Flaw and More
3 days ago
The Onboarding Password Mistake That Creates Unnecessary Risk
3 days ago
152 Chrome Wallpaper Extensions with 105K Installs Linked to Adware and Fake Traffic
3 days ago
Japanese energy firm loses drive with data of 10.9 million clients
3 days ago
Maine breach portal abused to publish fake data breach disclosures
3 days ago
Max-Severity Ivanti Flaw Exploited 24 Hours After Disclosure
3 days ago
Segmentation Works for OT If Operators Are Paying Attention
3 days ago
Chinese, N. Korean Threat Groups Build on Asia-Pacific Success
3 days ago
CISA Rewrites Federal Patching Requirements for AI Threat Era
3 days ago
Bug Bounty Research Triggers ServiceNow Security Alert
3 days ago
Ransomware Attacks are on the Rise
3 days ago
FBI disrupts massive AI-powered phishing service using a million URLs
4 days ago
Microsoft fixes Windows update failures linked to WUSA installer
4 days ago
Pharma giant Novo Nordisk discloses breach of clinical trials data
4 days ago
CISA orders feds to patch actively exploited Ivanti flaw by Sunday
4 days ago
Over 73,000 French govt employees affected in Tchap messenger breach
4 days ago
ShinyHunters Uses Oracle Zero-Day to Rampage Higher Ed
4 days ago
Claude Fable 5 Doesn't Change the Mythos Security Story
4 days ago
Phishing Attack Volume Down 20%, But Risk Still Rising
4 days ago
Ex-school district employee jailed for hacks on former employer
4 days ago
Maine disables data breach notification portal after fake disclosures
4 days ago
phpBB forum fixes auth bypass bug lurking for a decade
4 days ago
Ukrainian national pleads guilty to role in Conti ransomware operation
4 days ago
Early Warning Signs of Supply-Chain Attacks Live in the Dark Web
4 days ago
Student Loan Breach Exposes 2.5M Records
4 days ago
Watering Hole Attacks Push ScanBox Keylogger
4 days ago
Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
4 days ago
Critical Splunk Enterprise Flaw Lets Attackers Run Code Without Authentication
5 days ago
U.S. Orders Anthropic to Suspend Fable 5 and Mythos 5 Access for Foreign Nationals
5 days ago
Langflow Vulnerability CVE-2026-5027 Exploited for Unauthenticated RCE
5 days ago
Chinese hackers hijack auth flow, spy on isolated network for a decade
5 days ago
US Gov asks Anthropic to ban 'foreign national' access to Fable, Mythos
5 days ago
Over 400 Arch Linux AUR Packages Hijacked to Deploy Infostealer and eBPF Rootkit
5 days ago
Google Sues Chinese Smishing Network Accused of Using Gemini AI in Phishing
5 days ago
China-Linked Hackers Backdoored Linux Login Software to Hide for Nearly a Decade
5 days ago
New GreatXML Exploit Bypasses Windows BitLocker via Recovery Partition XML Files
5 days ago
GitHub to Disable npm Install Scripts by Default to Stop Supply Chain Attacks
5 days ago
Agentjacking Attack Tricks AI Coding Agents Into Running Malicious Code
6 days ago
Rethinking MDR as Attackers and Defenders Embrace AI
6 days ago
LangGraph Flaw Chain Exposes Self-Hosted AI Agents to Remote Code Execution
6 days ago
INTERPOL Operation Takes Down Sniper Dz Phishing Platform, Arrests Administrator
6 days ago
Europol Disrupts AudiA6 Crypto Laundering Service Used by Ransomware Gangs
6 days ago
Netherlands Seizes 800 Servers, Arrests 2 for Aiding Cyberattacks
6 days ago
Canvas Breach Disrupts Schools & Colleges Nationwide
6 days ago
Over 400 Arch Linux packages compromised to push rootkit, infostealer
6 days ago
ShinyHunters Exploits Oracle PeopleSoft Zero-Day (CVE-2026-35273) to Breach Universities
6 days ago
New Attacks Trick OpenClaw AI Agent Into Running Code and Leaking Secrets
6 days ago
Authorities dismantle 'AudiA6' ransomware crypto-laundering service
6 days ago
Why AI-driven threats are exposing the limits of MSP security stacks
6 days ago
Coupang hit with record $409 million data breach fine in Korea
6 days ago
The Gentlemen Ransomware Claims 478 Victims, Can Spread Like a Worm
Jun 11, 2026
Cybersecurity Stars Awards 2026: Winners Announced Across 95 Categories
Jun 11, 2026
ThreatsDay Bulletin: Worm Code Leaked, AI Agent Phished, Claude Code Patch + 28 New Stories
Jun 11, 2026
AI Broke Vulnerability Management. That's Why CISOs Are Moving Budget to BAS.
Jun 11, 2026
OceanLotus Hits Vietnam Investors With SPECTRALVIPER in FireAnt Attack
Jun 11, 2026
A Record-Breaking Patch Tuesday for June 2026
Jun 11, 2026
Lawmakers Demand Answers as CISA Tries to Contain Data Leak
Jun 11, 2026
Anti-DDoS Firm Heaped Attacks on Brazilian ISPs
Jun 11, 2026
Microsoft Patches Record 206 Flaws, Including Three Zero-Days and Critical RCE Bugs
Jun 11, 2026
Anthropic Releases Claude Fable 5, Its Most Powerful AI Yet, With Cyber Safeguards
Jun 11, 2026
ServiceNow Flaw Exploited to Gain Unauthorized Access to Customer Instances
Jun 11, 2026
Microsoft Defender RoguePlanet Zero-Day Grants SYSTEM Access on Updated Windows
Jun 11, 2026
LiteLLM Flaw CVE-2026-42271 Exploited in the Wild, Chains to Unauthenticated RCE
Jun 11, 2026
Who Runs the Ransomware Group ‘The Gentlemen?’
Jun 11, 2026
China-Linked JDY Botnet Expands to 1,500+ Devices for Cyber Reconnaissance
Jun 10, 2026
Ivanti, Fortinet, and SAP Release Patches for Multiple Critical Vulnerabilities
Jun 10, 2026
Unpatched Langflow Flaw CVE-2026-5027 Exploited for Unauthenticated RCE
Jun 10, 2026
CISA Adds Cisco, Chrome, and Arista Flaws to KEV Catalog Amid Active Exploitation
Jun 10, 2026
Your Automated Pentest Looks Clean. See What It Missed in This Expert Webinar
Jun 10, 2026
Six Proto6 Vulnerabilities in protobuf.js Expose Node.js Apps to RCE and DoS
Jun 10, 2026
Meta to Use Off-Site Business Data for Feed and AI Personalization
Jun 10, 2026
Veeam Backup & Replication RCE Flaw Lets Domain Users Run Remote Code
Jun 10, 2026
New FROST Attack Lets Websites Track What Sites and Apps You Open via SSD Timing
Jun 10, 2026
Hades PyPI Attack: 19 Packages Poisoned to Auto-Run Bun Credential Stealer
Jun 10, 2026
Microsoft Restores Some GitHub Repos, Keeps Others Offline as Miasma Probe Continues
Jun 9, 2026
WinRAR Flaw Exploited by Russia-Aligned Groups to Deploy Stealers in Ukraine
Jun 9, 2026
Researchers Build Self-Replicating AI Worm That Operates Entirely on Local, Open-Weight Models
Jun 9, 2026
Chrome V8 Zero-Day CVE-2026-11645 Exploited in the Wild - Patch Now
Jun 9, 2026
The Hidden Security Risk in Modern Networks: The Work Between Tools
Jun 9, 2026
One-Character Linux Kernel Flaw Enables Local Root Access, Exploits Now Public
Jun 9, 2026
Meta Blocks NSO Group's New WhatsApp Phishing Attack, Files Contempt Order
Jun 9, 2026
UNC3753 Used Vishing and Physical Intrusions in U.S. Data Theft Extortion Campaign
Jun 9, 2026
VS Code Adds 2-Hour Extension Auto-Update Delay to Limit Supply Chain Attacks
Jun 9, 2026
Unpatched Windows Search URI Vulnerability Lets Attackers Steal NTLMv2 Hashes
Jun 9, 2026
Critical Check Point VPN Flaw Exploited to Bypass Passwords in IKEv1 Setups
Jun 8, 2026
AI Phishing Is Crushing SOCs with Alert Volume: How to Reduce Tier 1 Overload
Jun 8, 2026
⚡ Weekly Recap: Instagram Account Hacks, Android Zero-Day, GitHub Worm and More
Jun 8, 2026
The Hardest Fork
Jun 8, 2026
VerdantBamboo Deploys BSD Variant of BRICKSTORM on Linux Appliances
Jun 8, 2026
Hackers Spied on a Stock Exchange Executive's Outlook Mailbox for Five Months
Jun 8, 2026
DoJ Disrupts Southeast Asia Crypto Fraud Networks, Freezes $3.8 Million in Assets
Jun 8, 2026
Microsoft Fixes One-Click GitHub Dev Attack That Let Attackers Steal OAuth Tokens
Jun 8, 2026
CISA Adds Exploited Magento RCE Flaw CVE-2026-45247 to KEV Catalog
Jun 8, 2026
Shrinking the IAM Attack Surface through Identity Visibility and Intelligence Platforms (IVIP)
Jun 8, 2026
Hands on with Intelligent Terminal, an AI-powered Windows Terminal
Jun 8, 2026
Silent Ransom Group targets law firms with fake IT support calls
Jun 8, 2026
Only 10% of SOCs Say They’re Getting Excellent Value From AI. Here’s What the Second Wave Has to Deliver
Jun 7, 2026
FIFA World Cup 2026 Scams Are Already Live: Fake Sites, Banking Malware, and Stolen Logins
Jun 7, 2026
PCPJack Hijacks 230 AWS, Google Cloud, and Azure Servers for Covert SMTP Relay Network
Jun 7, 2026
FlutterShell Backdoor Spreads to macOS via Malicious Google and YouTube Ads
Jun 7, 2026
Fake Sites Mimicking Open-Source Tools Rank High on Google to Deliver Malware via TDS
Jun 7, 2026
Alleged Kimwolf Botmaster ‘Dort’ Arrested, Charged in U.S. and Canada
Jun 7, 2026
C0XMO botnet spreads via DD-WRT router flaw, kills rival malware
Jun 7, 2026
New ChatGPT Lockdown Mode Limits Tools That Could Enable Data Exfiltration
Jun 7, 2026
Free Apps Are Quietly Turning Smart TVs Into Web-Scraping Proxies for AI
Jun 7, 2026
CISA Adds Actively Exploited SolarWinds Serv-U DoS Flaw to KEV Catalog
Jun 7, 2026
AI Agent Uncovers 21 Zero-Days in FFmpeg; Chrome Patches Record 429 Bugs
Jun 7, 2026
Miasma Worm Hits 73 Microsoft GitHub Repositories in Major Supply Chain Attack
Jun 7, 2026
CISA: Hackers now exploit SolarWinds Serv-U flaw to crash servers
Jun 7, 2026
Opinion: The Mobile Security Industry's Speed Addiction Is Making Us Less Safe
Jun 6, 2026
Opinion: The Race to Patch Mobile Threats Is Making Us Less Secure
Jun 6, 2026
Opinion: The "Ransomware-as-a-Service is Unstoppable" Narrative Deserves Serious Pushback
Jun 6, 2026
Opinion: The Great Tool Consolidation Will Reward Pragmatists, Not Platform Evangelists
Jun 6, 2026
Opinion: The Regulatory Compliance Industry Is Becoming Cybersecurity's Worst Enemy
Jun 6, 2026
Cisco Catalyst SD-WAN Manager CVE-2026-20245 Flaw Actively Exploited – No Patch Available
Jun 6, 2026
IronWorm and New Miasma Worm Variant Hit npm in Supply Chain Attacks
Jun 6, 2026
Android Spyware Asin Targets Arabic Users via Fake News, PDF and War Map Apps
Jun 6, 2026
New Threat Cluster OP-512 Targets Microsoft IIS Servers with Custom Web Shell Framework
Jun 6, 2026
Hackers Exploit Critical Everest Forms Pro WordPress Plugin Flaw to Take Over Sites
Jun 6, 2026
CISA Admin Leaked AWS GovCloud Keys on Github
Jun 6, 2026
Suspicious Polyfill login prompts pop up on Toshiba, Muji websites
Jun 6, 2026
Opinion: Everyone's Focused on Mobile Malware, But the Real Crisis Is Device Fragmentation
Jun 5, 2026
Opinion: Everyone's Obsessing Over Cloud Security Incidents. They're Missing Why Incidents Keep Happening.
Jun 5, 2026
Opinion: The Breach Notification Arms Race We Don't Need
Jun 5, 2026
Opinion: The Race to Patch Everything Is Making Us Less Secure
Jun 5, 2026
Opinion: The 'AI-Powered Malware' Panic Is Being Sold as Inevitable. We Should Resist It.
Jun 5, 2026
Cisco Patches CVE-2026-20230 in Unified CM as Exploit Code Goes Public
Jun 5, 2026
Claude Code GitHub Action Flaw Let One Malicious Issue Hijack Repositories
Jun 5, 2026
Agentic AI Is Transforming Defense, But Only Secure IT Infrastructure Will Maximize It
Jun 5, 2026
ThreatsDay Bulletin: AI Agents Gone Wrong, Sketchy C2 Tools, ClickFix Tricks, JS Backdoors & 20+ New Stories
Jun 5, 2026
China-Linked TA4922 Expands Phishing Attacks to U.K., Germany, Italy, and South Africa
Jun 5, 2026
Brave Software releases Origin for a paid, bloat-free browsing experience
Jun 5, 2026
Hola Browser for Windows compromised to deliver cryptominer
Jun 5, 2026
Opinion: The Compliance Theater Era Is Ending, and That's Bad News for Bloatware Vendors
Jun 4, 2026
Opinion: The Winners Will Be the Operators Who Simplify the Mess, Not the Ones Who Add Another Layer of Hype
Jun 4, 2026
Opinion: Stop Building Security Cathedrals. We Need Security Plumbing.
Jun 4, 2026
Opinion: The 'Self-Regulating Tech' Myth Deserves Serious Pushback
Jun 4, 2026
Opinion: The Case for Slowing Down in the AI Security Arms Race
Jun 4, 2026
WhatsApp, Slack Notifications Could Hijack Google Gemini on Android
Jun 4, 2026
Google DoubleClick Abused in New Malspam Campaign to Deliver DesckVB RAT
Jun 4, 2026
Beyond the Zero-Day: See Your Network Like an Attacker | Webinar with HD Moore
Jun 4, 2026
Microsoft 365 Android Apps Let Any App Steal Account Tokens via Leftover Debug Flag
Jun 4, 2026
Autonomous AI Tool Finds 2-Year-Old RCE Flaw in Redis (CVE-2026-23479)
Jun 4, 2026
Chinese hackers use new Atlas RAT malware in European cyberattacks
Jun 4, 2026
U.S. sanctions Nobitex crypto exchange used by Iranian ransomware actors
Jun 4, 2026
CISA warns of cyberattacks targeting fuel tank monitoring systems
Jun 4, 2026
New 'HTTP/2 Bomb' DoS attack crashes web servers in under a minute
Jun 4, 2026
Opinion: The Ransomware-as-a-Service Economy Is Becoming Infrastructure, Not Crime
Jun 3, 2026
Opinion: The Mobile Security Theater Must End. Simplicity Wins.
Jun 3, 2026
Opinion: The Vulnerability Disclosure Mandate is Missing the Real Problem
Jun 3, 2026
Opinion: The Vulnerability Disclosure Panic is Really About Regulatory Vacuum
Jun 3, 2026
Opinion: Cloud Credential Sprawl Isn't a Problem to Solve. It's a Preview of the Compromise You're Already Living With.
Jun 3, 2026
Google June 2026 Android Update Patches 124 Flaws, One Actively Exploited
Jun 3, 2026
Gamaredon Exploits WinRAR to Deliver GammaWorm and GammaSteel Against Ukraine
Jun 3, 2026
Oracle WebLogic CVE-2024-21182 Added to KEV Catalog After Active Exploitation
Jun 3, 2026
AI-Driven Exploitation is Destroying Vulnerability Management. Here’s How to Handle It.
Jun 3, 2026
How Leading Organizations Are Turning EDR Into Operational Resilience
Jun 3, 2026
OpenAI upgrades GPT-5.5, as it plans to retire legacy ChatGPT models
Jun 3, 2026
Critical Kirki flaw exploited to hijack WordPress admin accounts
Jun 3, 2026
Opinion: The Breach Notification Panic Is Making Us Less Secure
Jun 2, 2026
Opinion: The 'Zero Trust' Regulatory Mandate Is Being Sold as Inevitable. It Deserves More Skepticism Than It Is Getting.
Jun 2, 2026
Opinion: The Case for Slowing Down AI Security Regulation
Jun 2, 2026
Opinion: Cloud's Shared Responsibility Myth Is Collapsing—And That's Actually Good
Jun 2, 2026
Opinion: The Password Manager Breach Isn't a Security Failure—It's a Regulation Failure
Jun 2, 2026
Dashlane Discloses Brute-Force Attack, Encrypted Vaults of Fewer Than 20 Users Downloaded
Jun 2, 2026
Miasma Supply Chain Attack Compromises Red Hat npm Packages with Credential-Stealing Worm
Jun 2, 2026
⚡ Weekly Recap: New Linux Flaw, PAN-OS Exploit, AI-Powered Attacks, OAuth Phishing and More
Jun 2, 2026
China-Aligned Groups Ramp Up Attacks: Dragon Weave Hits Czech Republic & Taiwan
Jun 2, 2026
The Security Growth Platform: Why MSPs Are Moving Beyond vCISO Tools
Jun 2, 2026
Hackers Used Meta’s AI Support Bot to Seize Instagram Accounts
Jun 2, 2026