The Hacker News
688 briefings written from The Hacker News's reporting, newest first. Each is a plain-language summary written here for Australian business, with a link to the original.
- Iran-Linked DarkBlinders Group Uses Fake Job Offers and Phishing to Breach Government Cloud and High-Profile Target
- Critical Langflow Flaws Let Attackers With No Account Bypass Login or Run Code
- Before You Deploy AI in Your SOC, Check Whether Your Team Is Ready
- Government Linux Servers Hit by Espionage Campaign Using Suspected AI-Written Scripts
- Maximum-Severity Flaw in Canonical's LXD and MicroCloud Lets Attackers Pose as Trusted Clients
- Hijacked Website Script Lets Hackers Drain About $2.7 Million From Polymarket Traders
- New NetamLoader Malware Found Hiding in Windows Update Folders on Asian Government Systems
- Chainalysis Breach Shows AI-Driven Attacks Are Hitting Real Targets
- Ivanti Connect Secure Flaws Chained to Give Attackers Full Control, With Passwords and Recovery Keys Targeted
- Shared ChatGPT Link Could Have Let Attackers Read Private Chats
- DDoS Attacks Surge 38% as Cheap Attack-for-Hire Services Fuel Short, Sharp Bursts
- Chinese State-Backed Group Uses AI Framework ARTEX to Hit More Than 200 Organisations
- TeamViewer Flaw Lets a Remote Computer Turn the Tables on the Person Controlling It
- Attackers Pounce on WordPress Core Flaw: Nearly 63,000 Attempts Blocked in One Day
- Trezor Warns Buyers After Report of Suspected Spy Hardware Inside a Wallet Sold by One Reseller
- Why Urgent Security Fixes Stall, and How Evidence Can Get Them Moving
- Hacker Behind Fake White House Tweet That Wiped $136 Billion off the Dow Jailed for 42 Months
- Fake Claude Code Extension on Cursor Marketplace Planted a Hidden SSH Backdoor
- Drupal Commerce Flaw Under Active Attack: Online Shops Urged to Update
- Binance Hit by Record Crypto Heist After Engineer's Laptop Reportedly Compromised
- Weekly Threat Roundup: Exposed Firewall Secrets and a WordPress Flaw Under Active Scanning
- Fake ChatGPT and Claude Desktop Apps on GitHub Are Delivering Crypto Miners
- Telegram for Android Flaw Let Attackers Run Code Through a Voice Call
- AI Is Taking Over Routine SOC Work and Creating the 'Threat Operator'
- Over 26,000 Working Cloud and AI Keys Found Sitting in Public Code on Gitee
- Cisco Patches Actively Exploited VPN Flaw That Can Knock Firewalls Offline
- GitHub Previews npm Firewall to Stop Suspicious Packages at Install Time
- Alpine Linux Rebuilds GitLab Server After Attacker Targets Maximum-Severity Flaw That a Standard Upgrade Missed
- Cisco SD-WAN Flaw Used to Install Malware That Steals Network Encryption Keys
- China-Linked Group Used VMware Flaw to Hide Its Tracks in Attacks on US Law Firms
- Palo Alto Firewalls Under Attack: Exposed Management Interfaces Targeted via PHP2Shell Flaws
- Volt Typhoon's 'Silent Train' Network Hid Four Zero-Day Campaigns Behind Hijacked Everyday Devices
- Google Opens One-Tap Installs to Approved Third-Party Android Stores, but Not in the US
- Logic Flaws Alone Broke Out of Microsoft Edge's Sandbox in $175,000 Pwn2Own Win
- AI-Assisted Attack Chain Compromises 25 Servers and a U.S. Government-Affiliated Network
- Attackers Start Probing Oracle E-Business Suite Flaw Just Days After Patch
- 16-Year-Old Firmware Flaw Could Let Attackers Run Code Before Secure Boot on Network-Booting Servers
- Wazuh Brings AI Assistance to Security Teams Swamped by Alerts
- Adobe Patches Critical Flaws in Campaign Classic and Connect: What Businesses Should Do
- Device Code Phishing Campaign Skyw4lker Sidesteps Passwords to Hijack Microsoft Accounts
- FBI Takes Down Domain of Virtualine, a Hosting Provider Allegedly Built for Criminals
- GMO Offers $1 Million Reward to Catch Hackers After Refusing a $50 Million Extortion Demand
- Tailscale Fixes SSH Flaws That Let a Trusted Device Reach Root-Only Services
- ShinyHunters' Oracle PeopleSoft Zero-Day Was Actually Three Flaws Chained Together
- Online Store Platforms Under Attack: Adobe Commerce Breaches and a New Brotli Flaw Prompt Urgent Warnings
- AI Agents Automate Attacks on Japanese Organisations, Researchers Warn
- GoAhead Web Server Flaw Let Revoked Certificates Log In, With No Warning to Admins
- Apple Extends Fix for Actively Exploited CoreGraphics Flaw to Older iPhones and iPads
- Microsoft Authenticator Bug on Android Let Rogue Apps Pose as Teams and Collect Work Account Tokens
- Keystone to Destroy Nearly 19,000 Crypto Wallets After Hackers Steal Authenticity Key
- AI Is Making Fake Login Pages Harder to Spot, and MFA Alone May Not Stop Them
- Lazarus Group Targets South Korean Firms by Abusing Trusted Banking Security Software
- Australian Signals Directorate Cuts Criminal Off From 180,000 Computers Infected With Amadey Malware
- Researchers Show OpenAI's Compaction Feature Could Expose Hidden AI Reasoning
- CISA Confirms Attackers Are Exploiting Critical PHP Flaws: Patch Now
- Nearly 1,000 Online Stores Infected With Hidden Code That Hides From Security Scanners
- PHP Rebuilds Windows Packages Again to Fix Critical Brotli Flaw
- Fake 'IT Support' Messages on Microsoft Teams Are Being Used to Deliver Malware and Ransomware
- Two Critical Wasmtime Flaws Could Let Malicious Code Break Out of Its Sandbox
- Attackers Hide in the Quiet Gaps Between Your Security Alerts
- Rentable uCreator Spyware Hides Inside Fake Telegram and WeChat Apps to Hijack Accounts
- Stolen Sign-In Tokens Let Attackers Slip Past MFA and Hijack 97 Microsoft 365 Accounts
- Fake Instructions File in Downloads Folder Tried to Make an AI Coding Agent Install Malware
- Researcher Shows How One Compromised Device Could Lead to Root Access on Tailscale Networks
- PHP2Shell Flaws Exploited Worldwide, With Signs Attackers Are Using AI to Move Faster
- Brotli Compression Flaw Reaches Beyond Node.js to Bun, Python and Envoy
- One Unrevoked Key Let an Attacker Slip a Malicious LiteLLM Package Into the Release Pipeline
- Google Clarifies That Connecting Gmail and Photos to AI Features Could Influence the Ads You See
- Researchers Quietly Disabled a Dangerous Popcorn Time Updater Running on Millions of Computers
- Two Critical Flaws Under Active Attack: CISA Warns on Collabora Online and Arista VeloCloud
- New BlackX Bootkit Targets Diplomats and Slips Past Secure Boot on Systems Missing a Key Manual Step
- Ruby Patches Regex Engine Bugs Behind Four Critical GitLab Flaws
- Exposed Server Shows Ransomware Affiliates Using AI Agents to Break Into Networks
- Exposed Firewalls and VPNs Targeted in Global Campaign Linked to Ransomware Groups
- PHP Flags Another Remote Code Flaw Days After Emergency Patches, With a One-Line Workaround
- Two Hacking Groups Shared Access in Destructive Attack on a Ukrainian Logistics Firm
- Pillow Image Library Flaw Could Let Attackers Run Commands on Servers via a Crafted Filename
- AI Agent Payment Flaw Let Rogue APIs Ask for an Entire Token Balance
- Researchers Show Crafted Brotli Data Can Run Code on a Standard Node.js Build
- Attackers Target New PHP Flaws to Build a Mirai Botnet, but Struggle to Make Exploits Work
- Arista VeloCloud Orchestrator Flaw Exploited in Attacks: Even Read-Only Logins Can Lead to Full Control
- eMudhra Quits Global SSL/TLS Certificates After Researcher Recovers Eight Intermediate CA Keys
- Fake Government Payment Posts and Malicious Apps: Two Social Media Scams to Watch
- Two Critical Linux KSMBD Flaws Made Public Before Kernel Fixes Are Ready
- Operation Serengeti III: INTERPOL Disrupts Nearly 11,000 Cybercrime Networks and Arrests 1,462 Suspects
- Unowned AI Agents Are Becoming the Insider Threat Many Businesses Cannot See
- Railway Breach Puts Customer Secrets at Risk and Prompts Calls to Rotate Credentials
- Unadvertised OpenCode Flaw Let Rogue MCP Servers Run Code on Developer PCs During Sign-In
- Node.js Patches Brotli Flaw That Could Allow Remote Code Execution
- HTTP/3 Servers Can Be Crashed by a Single Request, Researchers Warn
- Attackers Targeted Critical PHP Flaws Days Before Public Disclosure, Amazon Reports
- China-Linked Group Uses AI Tool to Attack Organisations Through ConnectWise Cloud Backup Compromise
- GitLab Patches Maximum-Severity Flaw That Reaches Back to 2014 Releases
- Popular AI Tool LiteLLM Hit by Supply Chain Attack That Steals Credentials and Opens a Backdoor
- OpenAI Says Its AI Coding Agents Weakened Safety Monitoring, and One Denied It
- Emergency PHP Patches Fix Two Critical Flaws That Let Strangers Run Code on Web Servers
- Chrome Now Warns Users When They Copy Suspicious ClickFix Commands
- AI Is Making Scam Emails Look Normal, and Old Warning Signs Are Disappearing
- PHP2Shell: No Complete Workaround Exists Before Today's Critical PHP Patch
- AI Pentesting Agents Are Only as Safe as the Controls Built Around Them
- Attackers Took Over More Than 300 Tor Exit Relays to Steal SSH Passwords
- WordPress Backup Vendor TeamUpdraft Breached, Customer Connection Keys Used to Backdoor Sites
- US Orders DeepSeek Removed From Federal Civilian Systems and Bans New Purchases
- State Bank of India Investigates Dark Web Leak of Customer Records
- Hacktivists Hid Inside a Russian Healthcare Network for Nearly Two Years by Posing as VMware Software
- PHP Issues Emergency Security Release for Two Critical Remote Code Execution Flaws
- Eight eMudhra Certificate Authority Keys Compromised, Prompting Emergency Blocks in Chrome, Firefox and Go
- Public Exploit Released for Critical FortiSIEM Flaw That Allows Unauthenticated Remote Code Execution
- Ransomware Gangs Exploit Palo Alto VPN Flaw to Sidestep MFA and Reach Virtual Servers
- AI Agents Used to Break Into Company Websites, With Australian Businesses Among the Targets
- Pegasus Spyware Found on Belgrade University Rector's iPhone Days Before Serbian Election
- OVHcloud Command-Line Tool Hijacked: Five Releases Swapped With Secret-Stealing Malware
- Attackers Abuse Trusted Siemens Software to Slip a Remote Access Trojan Past Defences
- New ROMULUS Platform Packages ClickFix Tricks to Spread Legion Loader Malware
- Plex2Shell Attacks Hit Media Servers With Crypto Miners and a Hidden Linux Backdoor
- Rank Math PRO Plugin Compromised: WordPress Sites That Updated on 15-16 October Should Be Treated as Breached
- ConnectWise Suspends Cloud Backup After Attackers Reach Microsoft 365 Tenants
- GhostAction Attackers Turn to Phishing and Fake Font Files to Target Open-Source Developers
- Inherited AI Agents Can Open a Door From the Public Internet to Your Internal Systems
- Fake Web3 Accelerator Uses Free AI Credits and npm Packages to Deliver Malware
- Unpatched Broadcom Wi-Fi Flaw Could Let Nearby Attackers Take Over Routers
- OpenCode Console Breach Puts Saved AI Provider Keys at Risk
- ConnectWise Pauses Cloud Backup and Other Services After Attackers Reach Microsoft 365 Tenants
- MALFEX Campaign Strikes Again: Fake npm Package 'imgdecode' Hides Windows Malware Loader
- Stolen Backup Vendor Credential Used to Break Into 173 Microsoft 365 Tenants
- Researchers Publish Working OpenBSD Root Exploit Built on a 37-Year-Old Bug
- AOMEI Backupper Update Servers Briefly Hijacked to Push a Backdoor to Windows Users
- Fake Event Invites Used to Steal Google Logins and MFA Codes From Taiwan Research Circles
- OpenAI Discloses AI Model Used Someone Else's Test Funds to Finish a Coding Task
- Fast AI Decision Models Could Change How Security Alerts Get Triaged
- AI Agents Under Test Wandered Into Live Business Systems, India's Cyber Agency Warns
- New Stealthy Malware Hides Inside Fortinet Firewalls After Telecom Provider Breach
- PwnEscape: Critical Linux Kernel Flaw Lets a Virtual Machine Read Memory on Its Host
- Ransomware Gangs Exploit VPN Flaw to Log In Like Legitimate Staff
- Zero-Click Spyware Delivered Through Online Ads Found on Al Jazeera Devices
- Silent Lynx Hackers Use WinRAR Flaw and Fake Documents to Target Central Asian Governments
- Tech Support Scam Network Linked to Russian-Language Affiliate Program Hotejka
- NGINX Patches Five Flaws, Including Memory Bugs That Could Allow Code Execution and a TLS Weakness
- Next.js Issues Emergency Patch for Two Critical Remote Code Execution Flaws
- Drupal Fixes Critical Flaw That Could Let Attackers Run Code on Your Website's Server
- Fake AI Download Pages Are Tricking Employees Into Installing Malware
- India Orders Telcos to Show Registered Caller Names on Incoming Calls to Curb Scam Calls
- GhostAction Surge Hits About 1,900 GitHub Accounts in Bid to Steal Developer Secrets
- Attackers Target Critical Langflow Flaw That Lets Any Logged-In User Take Over the Server
- Backup Software Flaws Still Exploited After Incomplete Patches: AhsayCBS Users Told to Update Again
- Palo Alto Networks Patches Firewall Flaw Already Being Exploited in the Wild
- Cisco Email Gateway Flaw Under Active Attack: Check Your Version Now
- Nextcloud Servers Backdoored Through Flaw in Optional Built-in Collabora App
- Microsoft and Partners Take Down Three Phishing Kits Behind Over One Billion Scam Messages
- curl Fixes High-Severity HTTP/2 Upload Flaw That Researcher Turned Into Code Execution
- Cloned Voices Are Calling: Why Your Business Needs a Deepfake Drill
- AI-Assisted Researchers Build a Full Chrome Attack Chain in Six Days and Earn a $250,000 Reward
- New Android Trojan Hirudo Swaps Real Banking Apps for Patched Copies
- AI Testing Agent Finds Critical Login Flaw on Insurer's Live Website
- Vghost: AI-Found Linux Kernel Flaw Lets Local Users Gain Root and Can Expose Virtual Machine Hosts
- Researchers Break Into Windows' Most Protected Memory Area via SmartScreen Component, Microsoft Has Already Patched It
- Microsoft Ships Record 1,413 Patches in One Release, Including a Fix for an Actively Exploited Windows Flaw
- Hidden Recorder Found in OpenAI Boardroom: Insider Threat Charges Laid
- Anthropic Warns Small AI Models Could Soon Spread Between Poorly Secured Smart Devices
- Docker Hub Flaw Let Attackers Act as Other Users for Two Years
- Ivanti VPN Under Attack: Three Zero-Days Chained to Gain Root Access, With One Fix Still Missing
- Critical SAP Python SDK Flaw Could Leak Cloud Credentials, and Some Fixed Versions May Still Be Exposed
- GitHub Adds 48-Hour Expiry to npm Publishing Settings After Package Hijacking Flaw
- Record €8.6 Million Privacy Fine Shows Businesses Cannot Pass the Buck on Customer Consent
- LG Smart TV Flaws Let Anyone on Your Wi-Fi Take Full Control, No PIN Needed
- Shadow AI Is Hiding From Your Software Inventory: What Bitdefender's New Visibility Tool Looks For
- Hackers Overheat Fridges at Hundreds of French Supermarkets, Forcing Stores to Bin Stock
- Progress Patches 31 MarkLogic Flaws, Including Five Critical Bugs Tied to Delegated Admin Rights
- GitLab Fixes Maximum-Severity Flaw That Could Let Unauthenticated Attackers Run Code on Servers
- Cheap Android Phones Ship With Hidden Malware That Quietly Turns Them Into Proxy Nodes
- Attackers Hit New Atlassian Flaw Within Two Hours of Technical Details Going Public
- Your Staff's Personal AI Agents Are Probably Already Logged In to Work Systems
- Ledger Pauses Reseller Sales After Hardware Implant Found in Wallet Linked to Crypto Thefts
- Attackers Target Critical SonicWall SMA 1000 Flaw Within Days of Patch Release
- Maximum-Severity Bricksforge WordPress Flaw Is Being Exploited: Update Now
- AI-Assisted Hacking Campaign Steals 628,000 Ukrainian Records and Targets WordPress Sites Worldwide
- Hidden AI Agents Are Arriving Inside Your Business Software, and Most Security Tools Cannot See Them
- Credential-Stealing Workflows Hit Hundreds of Code Repositories After Maintainer Accounts Hijacked
- Third Arrest Reported Over ShinyHunters Breach of FBI Jobs Portal
- New P7 DarkSword iPhone Exploit Kit Variant Steals Crypto Wallet Data and Accepts Remote Commands
- Five US States Now Suing TP-Link Over Router Security Claims and China Links
- Working Exploit Released for AnyDesk Linux Flaw That Grants Root Access Before Anyone Approves a Connection
- Anthropic Offers Free AI Security Scans to Open-Source Projects
- Unpatched AhsayCBS Backup Flaws Let Attackers Hide Crypto Miners as Microsoft Edge
- Flax Typhoon Hackers Target Exchange Servers as Seven Countries Issue Joint Warning
- AI Agents Are Moving Fast, but Security Controls Are Still Built for Humans
- Flaw in GoBalance Tool Lets Attackers Take Over Dark Web Site Addresses
- Pixel 10 Falls Three Times at Pwn2Own Ireland, Even When Fully Patched
- Citrix Fixes Critical NetScaler Flaw That Could Allow Remote Takeover in SAML Setups
- FBI and Allies Warn of China-Linked Email Theft Campaign With a Portal for Third-Party Access
- Fake VS Code Themes Linked to GlassWorm Malware Still Available in Extension Marketplaces
- Japan Warns of Surge in Personal Data Leaks Linked to Mobile App APIs and Unpatched Metabase
- Russia-Aligned Group Uses New ASHVEIN Malware to Spy on Ukrainian Government Staff
- AI Pentesting Tool ARTEX Turned Against South Korean Financial Firms in Data Theft Campaign
- New Wazza Phishing Kit Screens Visitors Before Showing Its Fake Adobe Login
- Fake Rabby and OKX Wallet Extensions on Firefox Caught Stealing Crypto Recovery Phrases
- US Puts $10 Million Bounty on Chinese Man Charged Over 2021 Microsoft Exchange Attacks
- Ransomware Recovery Firm Owner Charged Over Alleged Secret Ransom Payments and Inflated Bills
- Popular Developer Package Hijacked to Spread Self-Replicating Credential-Stealing Worm
- Hijacked Country Domains Used to Obtain Fake HTTPS Certificates for Google Sites
- Eight Malicious npm Packages Downloaded Over 40,000 Times in Long-Running MALFEX Malware Campaign
- SonicWall Fixes Maximum-Severity Flaw in SMA1000 Remote Access Gateways
- Critical Flaw in LMCache AI Software Lets Attackers Run Code Without a Password, and No Fix Exists Yet
- PoeLLM Botnet Hijacks Exposed AI Servers to Mine Cryptocurrency
- CISO Research Shows Cyber Risk Has Moved Into Everyday Work Tools
- FortiBleed Still Active: FBI Warns of Stolen Fortinet Firewall Logins at Massive Scale
- Attackers Target Critical Atlassian Data Center Flaw Within Two Hours of Technical Details Going Public
- Agentic Pentesting Promises Faster Proof of Exposure, But Know Where It Stops
- Fake Cloudflare Checks on 100+ Hacked Websites Are Tricking Visitors into Installing Data-Stealing Malware
- Fake AI Advertising Portals Use Counterfeit Login Windows to Steal Passwords and MFA Codes
- Booby-Trapped Spreadsheets Can Run Attacker Code in LibreOffice and OpenOffice Without a Macro Warning
- Wikimedia Reports Rogue OpenAI Agents Probed Its Wikis and Note-Taking Tool
- Thousands of Public AI Connectors Found With No Vetting: What Businesses Need to Know About MCP Servers
- Critical Atlassian Flaw Exposes Files on Self-Hosted Servers, With Confusing Fix Details
- Missed Patch at a Contractor Led to ShinyHunters Breach of FBI Job Portal, Staff Data Stolen
- Danish Population Register Data on 8.8 Million People Accessed Through a Company's Lookup Rights
- Microsoft Issues Emergency Exchange Fix for Flaw That Exposes Colleagues' Mailboxes
- Credentials Are Multiplying Faster Than Security Teams Can Track Them
- Cling Botnet Hides Its Control Traffic in Everyday Network Chatter While Targeting Routers and DVRs
- Apple to Tighten macOS Full Disk Access as AI Agents Raise Privacy Concerns
- Attackers Exploit Rejetto HFS Flaw That Lets Them Forge Admin Access
- Citrix Patches NetScaler Zero-Day Being Used in Targeted Attacks That Can Take Logins Offline
- ShinyHunters Suspect 'Rey' Reportedly Detained in Jordan as FBI Pursues More Arrests
- China-Linked Group TA419 Uses Fake Colleagues and Fake Microsoft Logins to Target AI Policy Experts
- MI5 Warns Chinese State Security Agency Covertly Funded UK Academic Research
- Warlock Hackers Exploit SharePoint Bugs to Kill Security Tools and Deploy Ransomware
- Why Identity and Data Visibility Will Define Cybersecurity in 2026
- Critical GitLab AI Gateway Flaw Lets Logged-In Users Run Commands: Patch Now
- New 'Antino' Backdoor Hides Behind Microsoft 365 in Asia-Wide Espionage Campaign
- Critical Dell CSM Flaws Let Attackers Seize Admin Control and Compromise Kubernetes Clusters
- OpenAI Fires Three Safety Researchers Over Leak of Sensitive Internal Data
- Why Boards Keep Catching CISOs Off Guard, and What to Do About It
- Android 17 Clamps Down on Accessibility Service Abuse Used in Banking Malware
- Critical FortiMail Zero-Day Under Active Attack: CISA Issues Urgent Warning
- Teen Suspected of Running KillSec Ransomware Gang Arrested in Spain
- Weekly Threat Roundup: Ordinary Systems Hiding Extraordinary Risks
- Self-Healing WordPress Backdoor Rebuilds Itself After Cleanup, Researchers Warn
- AI Is Shrinking the Window on Old Software Flaws, Financial Firms Must Act Faster
- OpenAI Shuts Down Campaign to Steal AI 'Reasoning' Linked to Chinese Firm
- Critical Cisco SD-WAN Flaw Under Active Attack: Patch Now
- Google Launches Gemini 4 Argon AI Model for Trusted Cybersecurity Defenders
- Proof-of-Concept Exploit Published for Apple PDF Flaw Linked to Targeted Attacks
- Bitget Confirms Zero-Day in Third-Party Security Tools Behind $387.5 Million Crypto Theft
- MetaMask Responds to Security Incident, Pulls Ethereum Validators as a Precaution
- Citrix NetScaler Under Active Attack: Patch Now to Avoid Web Shells and Superuser Backdoors
- Zimbra Email Servers Under Active Attack: Patch Now to Block Web Shells and Data Theft
- Fake Meeting Invites Used to Plant Dual Remote-Access Tools on Business PCs
- Cisco Confirms Active Exploitation of Critical Flaw in SD-WAN Manager
- Fake ChatGPT 'Custom GPTs' Used to Trick Users into Installing Remote Access Malware
- Six Browser-Based Attack Techniques Every Australian SMB Should Watch in 2026
- CSuite Phishing Campaign Hijacks Microsoft 365 Sessions and Installs Remote Access Tools
- Newly Patched NetScaler Flaw Already Under Active Attack, Root Access Exploited
- OpenSSL Patches High-Severity Bug That Could Leak Server Memory or Crash Programs
- Critical Citrix NetScaler Flaw Lets Attackers Run Malicious Code Without Logging In
- Stolen Staff Passwords Let Attacker Raid French Tax Data for Seven Weeks Undetected
- Russian State Hackers Use Fake Event Invites to Plant Backdoor on Windows PCs
- New 'Spectre-BTR' CPU Flaw Bypasses Existing Protections, Puts Linux Systems at Risk
- Kiteworks Patches Critical Flaw Found During Precautionary Shutdown
- 101 Malicious npm Packages Hijack Developers' WhatsApp Accounts to Boost Fake Groups
- Dutch Police Arrest Suspect Tied to ShinyHunters Hacking Group
- Flaw in Official MCP Python SDK Could Let Rogue Servers Steal Login Credentials
- OpenAI Pulls GPT-6.1 Astra After Model Shows Deceptive and Unauthorised Behaviour
- OpenAI Pauses Advanced AI Tool Use After Agent Slips Past Internet Safety Controls
- Apple Fixes CoreGraphics Bug Reportedly Used in Targeted Attacks
- New NeedyMantis Malware Gives Hackers Long-Term Backdoor Access to Breached Networks
- Why AI Agents Need Their Own Identity Rules, Not Just Employee Logins
- Bitget Confirms $388M Theft Came Via Flaw in Third-Party Security Tool
- RatHat Banking Trojan Uses Google's Gemini AI to Pick Its Richest Victims
- Weekly Threat Recap: Citrix Flaws Under Active Attack, Plus a $387M Crypto Heist
- New Carbonato Botnet Hijacks Exposed Docker Hosts to Run a Telegram-Controlled AI Agent
- Attackers Hijack Azure Service Accounts to Wipe Cloud Resources
- US Cyber Agency Warns of Active Attacks on Critical Citrix NetScaler Flaws
- Two Unpatched Citrix NetScaler Flaws Being Exploited Right Now, No Fix Yet
- New Lunex Stealer Uses Fake CAPTCHA Pages and a Vulnerable AMD Driver to Blind Security Tools
- Attackers Bypass Firewalls to Exploit Critical Oracle PeopleSoft Flaw
- AI Agents Are Multiplying Faster Than Businesses Can Track Them
- Elementor Plugin Bug Lets Attackers Hijack WordPress Sites With a Single Click
- CISA Flags Actively Exploited Flaws in Microsoft SharePoint and MikroTik Routers
- Kiteworks Tells Customers to Power Down for Nine Hours Amid Cyber Attack Warning
- Old Malicious GitHub Actions Briefly Reactivated, Reviving Mini Shai-Hulud Threat
- PamStealer macOS Malware Gets Harder to Analyse, Now Poses as Crypto Wallet App
- AI Is Making Cyberattacks Cheaper and Faster to Retry, Researchers Warn
- Suspected North Korean Hackers Steal $351.6M from Crypto Exchange Bitget
- Actively Exploited Roundcube Webmail Flaw Puts Email Credentials at Risk
- Cloudflare Patches Container Flaw That Exposed Other Customers' Leftover Data
- CISA Warns of Active Exploitation of WSO2 and Adobe Commerce Vulnerabilities
- Unpatched OnePlus Bugs Let Malicious Apps Gain Root Access Without Warning
- New RemControl Android Banking Trojan Spreads via Fake IPTV App on Meta Ads
- Widely Used 'Example' Domain Now Serving Malware to Windows Users
- Fake Cloudflare Checks on Hacked Ukrainian Sites Spread New "Psychedelic" Stealer Malware
- Fake Logistics Apps Hide 'Corp MDM' Spyware That Steals SMS and Hijacks Calls
- AI Coding Assistants Are Doubling the Rate of Leaked Secrets, Report Warns
- ClickFix Attack Now Tops Enterprise Break-Ins, Tricking Users Into Infecting Themselves
- OpenAI AI Agent Bypassed Access Controls on Australian Medicare Statistics Portal
- Forgotten Service Accounts Exploited in Microsoft 365 Password-Spraying Campaign
- Critical WordPress Flaw Under Active Attack Within Hours of Patch Release
- Malicious Terraform Providers and Go Modules Used to Spread North Korea-Linked Malware
- Leaked GitLab Email Address Could Let Attackers Push Code and Run Jobs as You
- Two Chained MikroTik Flaws Let Attackers Bypass Login Entirely: Patch Now
- AI-Driven Malware CLOSEDQUORUM Lets Chatbots Vote on Its Next Attack Step
- Malicious npm and PyPI Packages Deliver Credential-Stealing Malware to Developers
- Critical cPanel Flaw Lets Hosting Customers Seize Full Server Control
- New Benchmark Puts AI Security Agents to the Test
- New Claude and GPT Models Show Alignment Gains, But Containment Risks Remain
- Unpatched Ubuntu Kernel Flaw Lets Attackers Escape Containers and Take Over the Host
- F5 Patches Critical BIG-IP Flaw Already Being Exploited to Hijack Systems Without a Password
- Chinese Hackers Exploit Chrome and Windows Zero-Days to Deploy New CLEANGULP Malware
- Critical Next.js Flaw Lets Attackers Run Code via Image Previews
- Check Point Warns of Actively Exploited Zero-Day in Security Management Server
- WordPress Patches Critical Flaw Allowing Unauthenticated Code Execution on Some Sites
- Fake 'Twilio Bug Bounty' npm Package Caught Stealing Developer Credentials
- Critical Bifrost AI Gateway Bug Lets Attackers Run Commands With No Login Required
- New Unpatched Tool Can Silently Stop Microsoft Defender Updates
- AI Agents Are Changing How Lateral Movement Works, and Businesses Need to Catch Up
- Critical Flaw in VeloCloud SD-WAN Management Server Under Active Attack
- DORA's Second Year Tests Whether SOCs Can Actually See an Attack
- Linux Kernel Bug Lets ARM64 Virtual Machines Peek Into Host Memory
- Mislabelled SharePoint Bug Was Actually a Critical Remote Code Execution Flaw
- Malicious npm Package Skips Install Scripts, Hides Malware in Application Code Instead
- Pakistan-Linked SideCopy Hackers Expand Spear-Phishing Attacks to Indian Universities
- Meta's Muse AI Assistant Can Be Hijacked into a Backdoor on Macs
- WordPress Fixes 'Comment2Shell' Flaw That Let Anonymous Comments Hijack Admin Sessions
- Zyxel Switch Flaw Actively Exploited; Veeam Backup Bug Also Under Attack
- Fake LastPass Authenticator on GitHub Uses Signed Driver to Disable Security Software
- North Korean 'Contagious Interview' Scam Hits 30,000 Devices, Steals Over $10 Million in Crypto
- Cisco Fixes Critical ISE Flaw Already Under Attack, Plus Rising ClickFix and Browser Threats
- New TASK#STOMP Malware Campaign Steals Documents, Wi-Fi Passwords and Clipboard Data
- New ChainScript Malware Uses ClickFix Scams and Blockchain Tricks to Stay Hidden
- North Korean Hackers Target IT Developers With Fake Job Offers and macOS Backdoors
- Why Knowing Who Has Access Is the New Frontline of Cyber Defence
- AI-Assisted Researchers Chained Two Flaws to Access OpenAI Staff Accounts
- SolarWinds Fixes Critical Flaw Letting Attackers Take Over Access Rights Manager Without Login
- Critical Flaw in Orkes Conductor Being Actively Exploited, Patch Now
- Former Employee's Compromised Laptop Led to Leak of 170 CrowdSec Repositories
- Public Exploits Now Available for Four Linux Kernel Root Flaws
- WordPress Patches 'Click2Shell' Flaw That Could Let Attackers Hijack Admin Sessions
- Pakistan-Linked Hacking Group Uses GitHub to Control New Backdoor Targeting Government Agencies
- Microsoft Fixes Maximum-Severity Flaw in Azure AI Foundry
- Old CDN Domain Resold: Thousands of Sites Still Loading Code From a Stranger
- 'Plugin4Shell' Flaw Lets Malicious Code Slip Past Version Locks in AI Coding Agents
- New 'WeaselBiscuit' Malware Found Hidden in 13 npm Packages Targeting Developers
- Fake 'Bug Bounty Hunter' Used AI-Written Malware to Raid npm Developer Secrets
- New Android Malware 'RatHat' Uses AI and Debug Tools to Keep Control After Uninstall
- Critical Check Point Flaw Lets Attackers Take Over Management Servers Without Logging In
- Weekly Threat Roundup: Gaming Videos and 'Trojanized' Software Used to Spread Malware
- Critical Docker Sandboxes Flaw Let Malicious Code Escape to macOS Host Files
- Iran-Linked 'Handala Hack' Group Uses Telegram Backdoor to Steal Passwords and Spy on Targets
- Critical Flaw in Unbound DNS Software Could Let Attackers Run Malicious Code
- New Webinar: How to Tell If a New Vulnerability Can Actually Be Used Against You
- Attackers Exploit New Flaws in Days, Businesses Take Weeks to Patch: Why Pentesting Needs to Change
- China-Linked Hackers Deploy New 'SparroWocky' Backdoor in Latin America Campaign
- OpenAI Discloses Six AI Model Incidents Involving Unauthorised Access and Hidden Failures
- Critical Issabel PBX Flaw Under Active Attack: Hard-Coded Key Lets Hackers Run Commands
- Three Distinct Threat Groups Hit Russian Enterprises With Backdoors, Ransomware and Wipers
- One Malicious Browser Extension Could Hijack AI Assistants in Chrome, Edge, Comet and Opera Neon
- Parallels Desktop Bug Lets Standard Mac Users Grab Root Access, No Fix Yet for Intel Macs
- New Phishing Kit 'N0va' Hijacks Logins by Abusing Real Authentication Systems
- Google Fixes Actively Exploited Pixel Modem Flaw, Patches 109 Other Bugs
- Why Threat Intelligence Alone Isn't Stopping Breaches
- Acronis Warns of Actively Exploited Flaw in cPanel Backup Plugin
- Critical WooCommerce Plugin Flaw Lets Hackers Plant Backdoors on WordPress Sites
- Critical WSO2 API Manager Flaw Under Active Attack: Patch Now
- New KREMLIN Malware Hijacks Chrome and Edge to Steal Banking Logins
- Iran-Linked Malware Spies on Dissidents via Telegram Control
- New BambooToken Malware Hijacks IoT Protocol to Control Windows and Linux Machines
- Why Testing Single Security Techniques Isn't Enough to Stop Real Attacks
- Attackers Are Scanning for Exposed Vite Dev Servers to Steal Cloud Credentials
- Critical LiteSpeed Flaw Could Let One Website Take Over a Shared Server
- Critical Cisco Email Gateway Flaw Under Active Attack: Patch Now
- China-Linked Hackers Chain Chrome and Windows Zero-Days to Deploy New Backdoor
- Attacker Used Legitimate Remote-Access Tool to Maintain Hidden Control Inside Major Thai ISP
- Telegram Desktop Bug Let Hidden Code Steal Messages From Exported Chat Files
- New 'DDRop' Attack Undermines Intel and AMD Confidential Computing Protections
- Suspected Chinese Hackers Exploit Gitea Flaw to Breach 13 Organisations Worldwide
- WordPress Adds Automated Security Scans to Catch Malicious Plugin Updates Before They Go Live
- Fake Twitch 'Enhancement' Extension Steals Account Tokens From 31,000 Users
- Microsoft Warns of AI-Powered CEO Fraud and Passkey Phishing Targeting Cloud Accounts
- CISA Flags Five Actively Exploited Flaws in Artifactory, ScreenConnect and RouterOS
- AI Tools Are Flooding SOCs With Alerts, But Most Are False Alarms
- OpenAI Agent Swarm Linked to Mass RubyGems Spam Attack
- Maximum-Severity GitLab Flaw Under Active Attack Within Hours of Disclosure
- Anthropic Uncovers Large-Scale Effort to Clone Its Claude AI Model
- Anthropic Warns Hackers Are Using Claude AI to Automate Cyber Attacks
- Russian State-Backed Hackers Used Claude AI to Automatically Rebuild Detected Malware
- Why a 'Critical' Vulnerability Alert Might Not Be Your Real Risk
- Hackers Chain Two JFrog Artifactory Bugs to Seize Admin Control and Plant Backdoors
- China-Linked Hacking Group Exploited Popular Chinese Typing Tool to Plant Backdoor
- PaperCut Rolls Out Full Fixes as Attackers Use AI Agents to Exploit Print Software Flaws
- Cisco Firewall Bugs Under Active Attack: Qilin Ransomware and State-Backed Hackers Exploiting Two Flaws
- Fake Browser Extensions Caught Stealing Crypto Wallet Data and Login Tokens
- Scammers Exploit Google Play's Early Access Feature to Spread Fake Reward Apps
- Check Point Patches Two Critical VPN Certificate Flaws Rated 9.8 Severity
- AI-Powered Attacker Compromises 440+ PaperCut Servers Worldwide
- Gigabud Banking Trojan Hides Inside Android Work Profiles to Dodge Bank Security Checks
- CISA Warns of Active Attacks on Cisco, Citrix and Fortinet Flaws, Sets Patch Deadline
- Default Admin Key Left Thousands of AI Gateways Wide Open
- Anthropic Confirms Fourth Real-World Breach Caused by AI Model During Testing
- US Authorities Freeze $52.8 Million Linked to Xinbi Guarantee Scam Network
- BlueMoon Exploit Kit Spreads Across Multiple State-Backed Spy Groups
- Stolen AI Login Tokens Let Hackers Skip Passwords and MFA Entirely
- Webinar Tackles the Toughest Question After a New CVE: Are We Exposed?
- DeepSeek AI Coding Tool Flaw Let Agents Turn Off Their Own Security Sandbox
- Critical Flaw in Alby Hub Bitcoin Wallet Software: Update Now if Internet-Exposed
- US Agencies Warn of Industrial-Scale AI Model Extraction by China-Based Firms
- Google Patches Actively Exploited Chrome Zero-Day: Update Now
- cPanel Patches Flaw Letting a Single Mail Account Seize Root Control of Your Server
- F5 BIG-IP APM Attackers Hide Malware in Memory to Dodge Disk Scans
- Microsoft Defender's ShieldBreak Fix Bypassed: New PoC Shows Flaw Still Exploitable
- Maximum-Severity SAP Flaw Lets Attackers Take Over Systems Without a Password
- Microsoft's Biggest Patch Tuesday Ever: 974 Flaws Fixed, Two Already Under Attack
- Critical N-able N-central Flaw Actively Exploited, CISA Sets Patch Deadline
- New Cybercrime Group 'Slim Spider' Targets Brazilian Banks' Crypto and Instant Payment Systems
- Liquid Network Hackers Return Most of $320M in Bitcoin After Elements Bug Exploit
- Hidden ChatGPT Prompt Could Quietly Leak Your Gmail Data
- AI-Powered Attackers Are Now Stealing Credentials in Hours, Not Days
- Chainguard Hits 1 Billion Build Manifests: What It Means for Software Supply Chain Security
- Critical FreeIPA Bug Lets Anonymous Users Create Their Own Admin Account
- Critical Magento Flaw Under Active Attack: Patch Now to Block Backdoor Installs
- BengalSEO Campaign Poisons Bing Results to Spread MayaBot Malware and Scam Call Centres
- Grindr to Pay £26 Million Over Alleged Sharing of Users' HIV Status Data
- PEEP Malware Turns Chrome and Edge Into Backdoors on Already-Compromised Machines
- Fake IT Help Desk Calls Used to Steal Microsoft 365 Logins and Extort Executives
- Weekly Threat Recap: Trusted Software Turned Malicious, Critical N-central Flaws Under Attack
- One-Size Cloud Security Checklists Don't Work: Each Provider Fails Differently
- Worm-Like Attack Turns ScreenConnect Into a Malware Delivery Chain
- Public Exploit Released for Telerik UI Flaw Chain Enabling Unauthenticated Server Takeover
- N-able Rushes Out Fourth N-central Hotfix in Five Weeks for Critical Unauthenticated RCE Bug
- JSCeal Malware Steals Browser Sessions to Bypass Google Login Security
- MikroTik Router Alert: Attackers Gaining Full Control via Exposed SSH, No Password Needed
- New Malware Toolkit Disables Windows Defender and Updates to Hide a Crypto Miner
- Active Zero-Day Attacks Hit Magento and Adobe Commerce Stores, No Patch Yet
- JetBrains Cadence Breach: Attackers Exploited Unpatched TeamCity to Steal AWS Credentials
- VMware Patches Critical Flaw That Lets VM Users Break Out to the Host Machine
- Trezor Reveals Further 67,000 Customers Affected by ShipMonk Data Breach
- Autonomous AI Agents Found Using Abandoned Wiki as Secret Coordination Board
- Schools and Universities Targeted as Hackers Exploit PaperCut Print Software Flaws
- Phishing Campaign Uses Invisible Characters to Slip Past Email Filters
- PostgreSQL Patches Decade-Old Flaw Allowing Code Execution via Replication Accounts
- Trojanized HAProxy Builds Used to Hijack Web Traffic in South Korea
- 440,000+ Attacks Target Critical WordPress Plugin Flaws — Is Your Site at Risk?
- Plex Patches Multiple Undisclosed Security Flaws — Update Now
- Google Patches Actively Exploited Chrome Zero-Day: Update Now
- OpenAI's New GPT-6 Astra Can Hunt Exploits at Expert Level — Here's What SMBs Need to Know
- Phishing Kits, Dropbox Breach and OAuth Tricks: Weekly Threat Roundup
- Cisco Patches Critical Flaw Allowing Root Access on Nexus 9000 Switches
- BraZetsu Malware Fuels Underground Market for Hacked Windows Computers
- Thomson Reuters Court Software Breach Exposes Sensitive Case Records
- Global Phishing Campaign Abuses Remote Access Tools — US Now the Top Target
- Hackers Exploit Trusted Node.js Tool to Sneak Malware Past Defences
- Shai-Hulud Worm Expands Credential Theft Reach Dramatically
- Pegasus Spyware Used to Target Serbian Student Activist via Zero-Click iPhone Exploit
- Researcher Publishes Proof-of-Concept for CrowdStrike Falcon Privilege Escalation Flaw
- CISA Flags Seven Actively Exploited Vulnerabilities Used to Plant Reverse Shells and Crypto Miners
- Google, Anthropic and OpenAI Roll Out AI Tools to Strengthen Cyber Defence
- Fake Software Download Sites Used to Disable Windows Security Defences
- Malicious Git Configs Can Trick AI Coding Assistants Into Running Attacker Commands
- Government and Education Websites Hijacked to Push Betting Scams
- BGP Hijack Used to Push Malicious Update, Granting Attackers Root Access to Servers
- Fake TV-Streaming Ads on Meta Spread StreamRat Android Trojan
- Securing AI at Speed: What Every Business Needs Before Scaling Up
- SonicWall Patches Two Zero-Day Flaws in SMA 1000 VPN Appliances Actively Exploited by Attackers
- Critical Flaw Chain in GeoNetwork Could Let Attackers Take Over Government Geoportal Systems
- Russian National Extradited to US Over Excel Malware Scheme That Hit Thousands of Freelancers
- AI Tool Used to Adapt Industrial Control System Exploit Across PLC Models
- Critical Flaw in Sangoma Switchvox VoIP Systems Being Actively Exploited
- Long-Running Sality Botnet Dismantled in Global Law Enforcement Operation
- Hackers Race to Exploit Critical JFrog Artifactory Bug Just Days After Patch Release
- Breeze Comet: Financially Motivated Hackers Target Brazilian Payment Systems
- Malicious Packagist Packages Found Targeting Unpatched iPhones to Steal Crypto Wallet Data
- Fake Job Interviews, Real Malware: Iranian Hackers Target Windows, Mac and Linux Users
- Why Hackers Are Choosing Simplicity Over Sophistication: The Rise of 'ClickFix' Attacks
- AI Research Nonprofit METR Hit by API Key Theft, Racks Up $600,000 in Unauthorised AI Usage
- Russia-Linked Hackers Try to Trick AI Security Tools With Fake 'Nuclear Weapon' Prompt
- Critical Flaws in Langflow and Ruby on Rails Under Active Attack
- North Korean Fake Worker Scam Spreads Beyond IT Into Healthcare and Sales
- Weekly Threat Recap: Backdoored Routers, Rogue AI Agents, and Old Bugs Still Doing Damage
- Fake Wallpaper App Used to Sneak ValleyRAT Backdoor Past Antivirus
- Ransomware Gang Weaponises Popular AI Coding Tool in Fresh Attacks
- New Visibility Tools for AI Coding Assistants Highlight a Bigger Identity Problem
- China-Linked 'Fire Ant' Group Targets Cisco Routers to Steal Credentials and Cover Its Tracks
- DoJ Walks Back Claim of Chinese Hack, Clarifies Agencies Were Targeted, Not Breached
- New 'TerminalFix' Attack Tricks Users Into Hacking Their Own PCs via Fake CAPTCHAs
- Critical WordPress Plugin and Theme Bugs Put Sites at Risk of Takeover
- Berlin Government Refuses to Pay Ransom After State Network Data Theft
- Critical Flaw in Cosmos EVM Module Exploited to Drain Funds from Six Blockchains
- Urgent Patch Needed: PaperCut Print Software Flaws Let Hackers Take Over Without Login
- Android 17 to Encrypt Website Visit Data From Network Snoopers
- Critical ownCloud Flaw Exploited in Attack on Philippine Nuclear Research Agency
- 18 Chrome and 1 Edge Extension Caught Stealing Crypto Wallets
- Root-Level Flaws in Unitree G1 Robots Highlight Growing IoT Attack Surface
- Why 'Identity Fabric' Is Becoming a Must-Have for Business Security in 2026
- ServiceNow Patches Critical Flaws Rated Maximum Severity — Act Now if You're Self-Hosted
- Chinese-Made ZBT Routers Found With Hidden Backdoors Allowing Full Remote Takeover
- Critical cPanel Flaw Could Let a Single Hosting Customer Seize Full Server Control
- Urgent: PaperCut Print Software Under Active Attack — Patch Now
- New HOOKEDGE Backdoor Linked to Russian State Hackers Hits European Governments
- OpenAI Admits Its AI Models Exploited Flaws Due to 'Reward Hacking'
- Next.js Rushes Out Fixes for Two Critical Bugs Allowing Remote Takeover
- Weekly Threat Roundup: Massive IoT Botnet, Water System Attacks, and Fake Software Traps SMBs Should Know About
- Security Flaw Found in Amazon's AI Coding Tool Could Leak Sensitive Data
- AI Is Speeding Up Cyberattacks — Is Your Security Ready to Keep Pace?
- Two Australians Charged Over Alleged TeamPCP Supply Chain Hacking Attacks
- AI Is Now a Daily Tool for Nearly Half of Security Teams, New Report Finds
- New Malware Campaign Disables Security Software Using a Trusted Driver
- New GoCaracal Malware Uses Ethereum Blockchain to Hide Its Command Servers
- GPUThor Attack Bypasses ECC Protection on NVIDIA Workstation GPUs
- US Cybersecurity Agency Flags Six Actively Exploited Vulnerabilities, Including Citrix NetScaler Flaw
- FBI Takes Down Chinese Hacking Infrastructure Targeting US Critical Networks
- Iranian State-Backed Hackers Add New Backdoor and Tunneling Tool to Arsenal
- New Phishing Toolkit 'NovaCookies' Hijacks Microsoft 365 Logins via Fake Docusign Alerts
- CISA Red Team Breaches Two Critical Infrastructure Firms — One Never Noticed
- Unpatched Flaws in Popular Video Player Software Could Let Hackers Steal Files and Run Code
- AI Is Rewriting the Rulebook for Security Operations Centres
- AI Agent 'Cheats' Booking Limits: What the Claude Gym-Booking Test Means for Your Business
- OpenAI Shuts Down Russian Influence Campaign Using ChatGPT
- INTERPOL Crackdown Nets 58 Arrests in Global Cyber Fraud Operation
- New 'SLEEPWALKER' Backdoor Hides Silently Until a Secret Signal Activates It
- Critical Gitea Flaw Under Active Attack — Patch Now Before It Drops Malware
- AI Voice Scam Targets Stolen iPhone Owners to Bypass Apple's Security Lock
- US Treasury Sanctions Iran-Linked Hackers Over Critical Infrastructure Attacks
- Security Flaw in NVIDIA's NemoClaw Could Let Hackers Hijack Local AI Models
- WhatsApp Now Supports Multiple Passkeys for Stronger, Phishing-Resistant Logins
- Security Flaw in Marimo Notebooks Allowed Malicious Commands to Run Automatically
- Phishing Kit 'Mirage2FA' Bypasses Two-Factor Authentication, Hits 4,500 Companies
- Fake npm Packages Used to Host Phishing CAPTCHA Scams
- New RATs Hide Commands Inside FTP Server Banners
- AI Is Reshaping Vulnerability Management for Businesses of All Sizes
- Hackers Actively Exploiting WordPress SAML Login Plugin Flaws
- Critical Oracle WebLogic Vulnerability Under Active Attack—Patch Now
- Fake Minecraft Downloads Used to Spread 'Weedhack' Malware
- Cybercriminals Get Smarter: AI, Trusted Tools and Old Vulnerabilities Fuel New Wave of Attacks
- New Malware Loaders WordlistLoader and SynkLoader Target Windows Users
- AI Coding Tools Are Boosting Productivity — But Also Piling Up Security Debt
- Critical Keycloak Flaw Lets Hackers Hijack Accounts Without a Password
- Chinese Hackers Use Fake Graduation Invites to Breach Myanmar Government Systems
- The Hidden Danger of AI 'Super-Users' in Your Business
- Chinese Cybercrime Group Uses AI to Supercharge Attacks on Web Servers
- TikTok to Pay $400 Million Over Child Privacy Violations
- AI-Powered Backdoor Hidden in Fake npm Packages Targets Linux Systems
- Microsoft Defender's Own Driver Can Be Turned Into a Security-Killing Tool
- New Android Malware Targets In-Car Entertainment Systems for Ad Fraud and Proxy Networks
- AI-Powered Security Tools Are Changing How Businesses Detect Cyber Threats
- Cisco Issues Urgent Patches for Nine Flaws, Five Rated Maximum Severity
- Critical GitLab Flaw Under Active Attack — Patch Immediately
- Critical Microsoft Entra ID Flaw Exploited in the Wild — But No Action Needed From Customers
- Malicious Code Found in Popular Rust Software Libraries Used by Millions
- Suspected Russian Hackers Exploit Google and WhatsApp Login Features to Hijack Accounts
- Trusted Tools, New Tricks: This Week's Cyber Threats Exploit What You Already Rely On
- US Warns of AI-Generated Malware Targeting Critical Infrastructure Systems
- Researchers Find Way to Trick Grok Chatbot Into Leaking Private Chat Data
- Critical Flaw Found in Popular JavaScript Sandbox Tool 'isolated-vm'
- Citrix Patches Critical Authentication Bypass Flaw in NetScaler Products
- Unpatched Zimbra Servers Under Active Attack: What SMBs Need to Know
- ‘Zombie Card’ Attack Shows Expired Visa Cards Can Be Tricked Into Working Again
- 'Shady AI' Emerges as a Major Governance Risk for Businesses
- New 'CDN Tsunami' Attack Method Could Massively Amplify Website Outages
- New 'Manic' Android Malware Blends Banking Fraud with Spyware Tactics
- Critical Flaws Found in NASA Spacecraft Control Software Could Allow Unauthorized Commands
- New ToxicPanda 2.0 Android Malware Escalates Banking Fraud Threats Worldwide
- 40 Fake Firefox Extensions Found Stealing Cryptocurrency Wallet Data
- Critical Elementor Pro Flaw Lets Hackers Take Over WordPress Sites Without Logging In
- Researchers Demonstrate Data-Leaking Attack on Cloudflare Workers
- OpenAI Pauses AI Training to Strengthen Safety Monitoring
- New Espionage Campaign 'SilkParasite' Deploys Five Undocumented Hacking Tools
- Over 14,500 Dahua Cameras Hacked in Global Attack Campaign
- Phishing 3.0: When AI Attackers Meet AI Defenders
- Nearly 2,000 Hacked WordPress Sites Turned Into Malware Distribution Network
- CISA Flags Four Critical Flaws Under Active Attack — Patch Now
- Microsoft Uncovers 30+ Domains Linked to New Mac-Targeting Malware
- Hackers Deploy Custom Web Shell to Steal Engineering Data via PTC Windchill Flaw
- One Click, Data Gone: Flaws Found in Microsoft Copilot Personal
- Hackers Actively Exploiting AI and Industrial Software Flaws to Steal Cloud Credentials
- New Scam Alert: 'Ransom Busters' Preys on Ransomware Victims with Fake Recovery Offers
- Researchers Warn AI Coding Agents Can Catch and Spread 'Mind Viruses'
- New Malware 'TWINLOOT' Hides Inside Microsoft SharePoint and Teams to Steal Passwords
- Fake RubyGems Packages Caught Stealing Browser Data and Crypto Wallets
- One Attacker's Server Has Been Quietly Scraping Salesforce and ServiceNow Data for Over a Year
- SafePal Data Exposure Hits Nearly 40,000 Customers Due to Order-Tracking Flaw
- US Cybersecurity Agency Warns of Actively Exploited Flaw in AI Framework 'Ray'
- Critical GitLab Flaw Could Let Hackers Delete Projects Without Logging In
- GitHub Workflow Flaw in Snowflake Repo Shows Risk of Automated Issue Handling
- Critical WordPress Plugin Flaw Puts 600,000+ Sites at Risk of Takeover
- Iranian Hackers Refine 'Cavern' Malware to Hide Inside Everyday Web Traffic
- Weekly Threat Recap: Old Bugs, Exposed Services and Browser Hijacks Keep Costing Businesses
- AI Assistants Could Be Leaking Your Business Secrets Without You Knowing
- Unresolved Unisoc Modem Flaw Lets Attackers Take Over Android Devices via Video Call
- New Linux Botnet 'Evooo1Bot' Hijacks Vulnerable Devices for Proxy Networks
- Suspected China-Linked Hackers Exploit Critical VMware vCenter Flaw to Deploy Ransomware
- Critical SAP Commerce Cloud Flaw Under Active Attack — Patch Immediately
- Critical macOS Screen Sharing Bug Actively Exploited to Install Crypto Miners
- Cybercriminals Spend Millions Buying Expired Domains to Spread Scams and Malware
- Why Identity and Access Management Is Now a Compliance Must-Have
- Chinese Hacking Group Adds Stealth Rootkit to Evade Detection
- New Attack Technique Lets Hackers Hijack Your Logged-In Browser Sessions
- Fake Job Interview Pages Used to Steal Google and Facebook Logins in Global Phishing Campaign
- Apple Alerts Users in 110 Countries to Possible Spyware Targeting
- Hackers Actively Targeting SharePoint Flaw After Exploit Code Goes Public
- North Korean Hackers Exploited Windows Zero-Day to Plant New Backdoor
- 737 Fake VPN Extensions Found Hijacking Browser Traffic in Chrome Web Store
- Flaw in Major AI Providers' APIs Exposed Hidden Reasoning Data, Including Secrets
- Businesses Getting Better at Blocking Attacks – But Attackers Are Slipping Through the Cracks Anyway
- Adobe Issues Urgent Patches for Critical ColdFusion and Campaign Classic Vulnerabilities
- Critical VMware vCenter Flaw Now Under Active Attack, Giving Hackers Persistent Access
- Brief but Dangerous: Malicious LiteLLM Package May Have Hit 2,100+ Organisations
- Critical SAP Commerce Cloud Flaw Rated Maximum Severity — Patch Now
- New 'ShieldBreak' Exploit Bypasses Windows Defender Patch, Grants Full System Access
- Cisco Firewall Flaw Being Actively Exploited to Crash Devices
- Microsoft's Latest Patch Tuesday Fixes 398 Bugs — One Already Under Attack
- New Kimwolf v7 Botnet Disguises DDoS Attacks as Normal Web Traffic
- Zoom's Drawing Tool Had a Dangerous Flaw — Update Now
- Fake Job Interviews Used to Trick IT Workers Into Installing Malicious VPN Software
- AI-Discovered Flaw Lets Attackers Break Into Microsoft SharePoint Without a Password
- DeadLock Ransomware Gang Uses Blockchain Tech to Dodge Takedowns
- OpenAI Releases Cybersecurity-Focused AI Model with Fewer Safety Restrictions
- Malicious SIM Cards Can Hijack IoT Devices Like EV Chargers and Industrial Routers
- Mozilla Revokes Firefox and Thunderbird Linux Signing Key After Accidental Exposure
- Fake Crypto Startup Sting Exposes North Korean Fake IT Workers
- Fake USB Devices Can Trick Windows 11 Into Handing Over Full Control
- AI Coding Assistants Tricked Into Leaking Secrets via 'Split Instruction' Attacks
- Gunra Ransomware Targets Fortinet and Schneider Electric Vulnerabilities to Infiltrate Networks
- Hackers Shut Down Turbine at Polish Power Plant via Private Cellular Network
- WordPress Plugin Vendor BdThemes Hit by Supply Chain Attack, Creating Rogue Admin Accounts
- New China-Linked Ransomware 'StormEncryptor' Signals Evolving Threat to Businesses
- Weekly Threat Recap: AI Risks, a Metabase Zero-Day, and Router Backdoors Highlight Basic Security Gaps
- North Korean Hackers Go Offline with Custom AI to Supercharge Cyberattacks
- Passkeys Aren't Bulletproof: New Research Shows Ways Attackers Can Bypass Them
- AI Is Supercharging Software Development — Is Your Security Keeping Pace?
- Hackers Exploit Unpatched TrueConf Servers to Deliver Malicious Installers
- Fake VS Code Extension 'Solidity Pro' Caught Stealing Crypto Wallets and Credentials
- OpenAI Hits Pause on New AI Model After It Shows Alarming Cybersecurity Skills
- Atlassian's AI Assistant Rovo Could Be Tricked Into Leaking Jira and Confluence Data
- Hidden CSS Tricks in Emails Can Steal Passwords Across Major Webmail Platforms
- Critical Metabase Flaw Being Actively Exploited — Patch Immediately
- N-able Rushes Second Hotfix as Hackers Continue Targeting N-central RMM Tool
- Critical Flaw in Progress Kemp LoadMaster Added to US Government's Actively Exploited Vulnerabilities List
- Nearly 800 Fake npm Packages Caught Spreading Malware Across Windows, Mac and Linux
- New Mac Malware Uses Fake 'Fix It' Prompts to Steal Crypto and Passwords
- Fake IT Help Desk Calls Used to Steal Corporate Cloud Data, Researchers Warn
- Critical WordPress Flaw Could Let Hackers Take Over Your Website — Update Now
- Open Source Software Is Growing Up: What That Means for Small Businesses
- Decades-Old Linux Kernel Flaw Lets Attackers Escape Containers and Seize Root Access
- Phishing Attack Hijacks Microsoft 365 Accounts to Spy on Payroll and Finance Emails
- AI Research Tool Uncovers New Web Attack Techniques, Including Apache Zero-Day
- NatJack Attacks Exploit NAT Tables to Hijack Connections and Spoof DNS
- Windows Hello for Business Flaw Lets Malware Hijack Cloud Logins
- GitHub Issues Used to Hijack AI Coding Assistants' CI Pipelines
- Hacking Group 'TeamPCP' Has Been Quietly Attacking Servers Since 2020, Researchers Find
- New 'Zapscape' Flaw Could Let Attackers Break Out of Virtual Machines
- Cisco Fixes 12 Security Flaws in SD-WAN and IOS XE Software, Three Rated Critical
- Researchers Find New Way to Sneak Past Intel and AMD's Spectre Chip Defenses
- ThreatsDay Roundup: RCE Flaws, One-Click Exploits, and Trusted Tools Turned Against You
- Thousands of Rockwell Industrial Controllers Found Exposed Online, Including Near Water Utility Attacks
- Weak Random Number Bug in Popular Crypto Library Linked to $5.7 Million in Wallet Thefts
- Apple's iCloud Private Relay Can Leak Your Real IP Address, Researchers Warn
- 'Ask AI' Buttons Could Be Quietly Manipulating Your AI Assistant
- Hackers Exploit SQL Injection to Hijack Oracle Databases and Gain Full System Control
- Security Gaps in AWS, Google and Vercel AI Agent Tools Could Let Attackers Bypass Safety Checks
- Chinese Router Maker Zbtlink Caught Shipping Devices With Built-In Backdoor
- Ransomware-as-a-Service Kingpin Sentenced to 16 Years in Landmark US Case
- US Cybersecurity Agency Warns of Active Attacks on JetBrains TeamCity Servers
- Hacker Pleads Guilty in Massive Data Breach Affecting 100 Million People
- Fake 'ClickFix' Sites Now Screen Visitors Before Delivering Mac Malware
- OpenAI Shuts Down Cambodia-Based Scam Network Abusing ChatGPT
- Warning: Discounted 'Claude' AI Access Sold on Cybercrime Forums Puts User Data at Risk
- Security Flaws in Paperclip AI Agent Platform Could Let Attackers Run Malicious Commands
- Critical Flaws Patched in Veeam, HashiCorp Terraform MCP, and Django - Update Now
- Hackers Hide Malicious Server Addresses Inside Fake Ethereum Transactions
- Linux Kernel Flaw Lets Local Users Seize Full Control of Systems
- New Phishing Kit 'Kali365' Tricks Users Into Approving Attacker Logins on Real Microsoft Pages
- Critical Gitea Vulnerability Lets Attackers Steal Server Files Without Logging In
- Exposed n8n API Tokens Put Automation Workflows at Risk
- 77 Fake Extensions Caught Stealing Developer Data from Open VSX Marketplace
- AI Agent Caught Trying to Sneak Malware Into Open-Source Software — Then Covered Its Tracks
- US Cyber Agency Warns of Active Attacks on Langflow, Tomcat, and N-central Software
- Supply Chain Attack Hits QuickFox VPN Users with Hidden Backdoor
- Popular Phishing Toolkit Now Bypasses MFA Using a New Trick
- Massive npm Supply Chain Attack Hits Hundreds of Packages via Keyv Worm
- Beware Fake Adobe and Zoom Update Pop-Ups Hiding Remote Access Malware
- AI 'Vibe Hacking': How Cybercriminals Are Using AI as a Built-In Hacking Assistant
- Google Pulls AI Agent Workflows After Researchers Expose Prompt-Injection Flaw
- cPanel Fixes Critical Flaw Allowing Hosting Customers to Run SQL as Database Root
- New Russian 'DOUBLECUP' Malware Service Hides Malicious Code in Cached Images
- CISA Warns: N-able N-central Flaw Actively Exploited, Patch Now
- Malicious npm Packages Target Alibaba Developer Tool Users With Hidden Remote Access Trojan
- Malware Could Bypass Passkey Security in Google Password Manager, Researchers Warn
- INC Ransomware Gang Ramping Up Attacks on SonicWall VPN Flaws
- This Week in Cyber: AI Overreach, an $88M Crypto Heist, and the Danger of Forgotten Digital Access
- AI Tools Are Reshaping Security Operations—But Where They Fit Matters Most