RSS Feeds

• [Bleeping Computer] Data breach at medical billing firm MCBS affects 1.26 million people [Jul 28, 2026]
• ⚠ CRITICAL [Bleeping Computer] Hackers target US firms in FastJson RCE zero-day attacks [Jul 27, 2026]
• ⚠ CRITICAL [Bleeping Computer] Arista patches VeloCloud Orchestrator zero-day exploited in attacks [Jul 27, 2026]
• [Bleeping Computer] New Dysphoria DDoS botnet spreads to 200k devices worldwide [Jul 27, 2026]
• [Bleeping Computer] New Certighost PoC exploit lets attackers hijack Windows domains [Jul 27, 2026]
• [Bleeping Computer] Apple sued over fake App Store crypto wallet app stealing $1.8M in Bitcoin [Jul 27, 2026]
• [Bleeping Computer] Coca-Cola confirms data theft in Fairlife ransomware attack [Jul 27, 2026]
• [Bleeping Computer] Ernst & Young data breach claimed by ShinyHunters extortion gang [Jul 27, 2026]
• [Bleeping Computer] Shadow AI agents are multiplying. Here's how to find and secure them. [Jul 27, 2026]
• [Bleeping Computer] GitHub, PyPI add time-based defenses against supply chain attacks [Jul 26, 2026]
• [Bleeping Computer] Steam forum ClickFix attacks infect gamers with XMRig cryptominers [Jul 25, 2026]
• [Bleeping Computer] Malicious sites use JavaScript to build malware in browser memory [Jul 25, 2026]
• [Bleeping Computer] ShinyHunters data leaks fuel $2,000 sextortion email scam [Jul 25, 2026]
• [Bleeping Computer] OpenAI confirms ChatGPT is down worldwide [Jul 25, 2026]
• [Bleeping Computer] OnTrac notifies customers of data breach after network hack [Jul 24, 2026]
• [Security Week] Hush Security Raises $30 Million for AI Agent Governance [Jul 28, 2026]
• [Security Week] Google Adopts New Threat Actor Naming System [Jul 28, 2026]
• ⚠ CRITICAL [Security Week] Unpatched Fastjson Vulnerability Exploited in Attacks [Jul 28, 2026]
• ⚠ CRITICAL [Security Week] Critical Arista VeloCloud Orchestrator Vulnerability Exploited as Zero-Day [Jul 28, 2026]
• [Security Week] Origin Energy Data Breach Affects 900,000 Australians [Jul 28, 2026]
• [Security Week] For Some, So-Called ‘Skynet Day’ Came too Close to Sci-Fi After a Rogue Agent Hacked Into a Startup [Jul 28, 2026]
• [Security Week] New GitHub, PyPI Policies Boost Supply Chain Security [Jul 27, 2026]
• [Security Week] PTC Windchill Vulnerability Exploited in Ransomware Campaign [Jul 27, 2026]
• [Security Week] MedusaHVNC Malware Uses Hidden Windows Desktops to Evade Detection [Jul 27, 2026]
• [Security Week] Nvidia and Tech Giants Launch AI Security Alliance [Jul 27, 2026]
• ⚠ CRITICAL [The Hackers News] Critical TeamCity Flaw Could Let Attackers Run OS Commands Without Logging In [Jul 28, 2026]
• [The Hackers News] Researcher Says AI Helped Develop Linux Traffic-Control Race Into Root Exploit [Jul 28, 2026]
• [The Hackers News] Microsoft Says New Cybersecurity AI Model Helps MDASH Score 95.95% at Half the Cost [Jul 28, 2026]
• [The Hackers News] Attackers Exploit Arista VeloCloud Orchestrator Command Injection Flaw [Jul 28, 2026]
• ⚠ CRITICAL [The Hackers News] NVIDIA Forms 37-Member Open Secure AI Alliance and Open-Sources NOOA Framework [Jul 27, 2026]
• [The Hackers News] Dysphoria IoT Botnet Adds Blockchain C2 and Victim Relays After JackSkid Disruption [Jul 27, 2026]
• [The Hackers News] Public Exploit Released for Patched vBulletin Pre-Auth Code Execution Flaw [Jul 27, 2026]
• [The Hackers News] ⚡ Weekly Recap: Rogue AI Agents, Check Point Exploit, Slopsquatting, ClickFix Lures and More [Jul 27, 2026]
• [The Hackers News] n8n Sandbox Escape Lets Workflow Editors Run OS Commands as the n8n Process [Jul 27, 2026]
• [The Hackers News] Operation BlueDash Deploys Level RMM and ScreenConnect via Fake Teams Update [Jul 27, 2026]
• [The Hackers News] Cruciferra Crypter Uses BYOVD and Process Ghosting to Hide Windows Malware [Jul 27, 2026]
• [The Hackers News] TELESHIM Abuses Telegram for C2 in Attacks Against Middle East Governments [Jul 27, 2026]
• [The Hackers News] GitHub Adds 3-Day Dependabot Cooldown to Limit Poisoned Package Adoption [Jul 27, 2026]
• [The Hackers News] Malvertising Sends Malware in Pieces, Then Makes the Browser Build the Executable [Jul 25, 2026]
• ⚠ CRITICAL [The Hackers News] Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patched Available [Jul 25, 2026]
• ⚠ CRITICAL [The Hackers News] Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git [Jul 25, 2026]
• [The Hackers News] CTM360 Research Reveals How Insurance Phishing Has Evolved Into Real-Time Account Hijacking [Jul 25, 2026]
• ⚠ CRITICAL [The Hackers News] Cl0p Affiliates Target Internet-Exposed PTC Windchill and FlexPLM with Unauthenticated RCE [Jul 25, 2026]
• [The Hackers News] DevMan RaaS Portal Centralizes Payload Builds, Victim Management, and Affiliate Payouts [Jul 25, 2026]
• [The Hackers News] BlueNoroff Zoom Phishing Kit Profiles Crypto Wallets Before Malware Delivery [Jul 24, 2026]
• [The Hackers News] Certighost Exploit Lets Low-Privileged Active Directory Users Impersonate a Domain Controller [Jul 24, 2026]
• [The Hackers News] ChatGPT AgentForger Flaw Could Deploy Rogue Workspace Agents via a Phishing Link [Jul 24, 2026]
• [The Hackers News] Bing Images Flaws Let Crafted SVGs Run Commands as SYSTEM on Microsoft's Servers [Jul 24, 2026]
• ⚠ CRITICAL [The Hackers News] Seeing AI Agents Is Not Enough. Security Teams Must Enforce What They Can Do [Jul 24, 2026]
• [The Hackers News] Hacker Runs Hermes AI Agent Unattended for Post-Exploitation at Thai Finance Ministry [Jul 24, 2026]
• [The Hackers News] Golden Chickens Resurfaces With Four New Malware Families and Modular Implants [Jul 24, 2026]
• [The Hackers News] NodeBB Patches Eight AI-Found Flaws Exposing Admin Access and Private Chats [Jul 24, 2026]
• ⚠ CRITICAL [The Hackers News] Kimi K3 Agents Found Redis Zero-Days and Built RCE Exploit, Researchers Say [Jul 24, 2026]
• [The Hackers News] Fake Notepad++ Plugin Delivers MATCHBOIL.V2 in UAC-0099 Attacks [Jul 24, 2026]
• ⚠ CRITICAL [The Hackers News] Russian Espionage Group Exploited Zimbra Zero-Day to Steal Mail and 2FA Codes [Jul 23, 2026]
• [The Hackers News] ThreatsDay: Android Spyware, PLC Attacks, AI Image Prompt Injection + 12 More Stories [Jul 23, 2026]
• [The Hackers News] Claude Cowork Flaw Could Let AI Agent Escape Its VM and Access Mac Files [Jul 23, 2026]
• [The Hackers News] Chaos Ransomware Uses msaRAT to Route C2 Traffic Through Headless Chrome and Edge [Jul 23, 2026]
• [The Hackers News] China-Nexus JadeProx Uses New TriBack Loader in Government and Healthcare Attacks [Jul 23, 2026]
• [The Hackers News] How Synthetic Identity Fraud is Coming for Machine Identities [Jul 23, 2026]
• [The Hackers News] Attackers Weaponize GitHub Actions Runners to Target cPanel and WHM Servers [Jul 23, 2026]
• [The Hackers News] Google Adds Selfie Video Recovery for Users Locked Out of Their Accounts [Jul 23, 2026]
• [The Hackers News] Nine-Year-Old RefluXFS Linux Flaw Gives Local Users Root on Default RHEL Installs [Jul 23, 2026]
• [The Hackers News] Check Point Patches Exploited SmartConsole Flaw Allowing Full Admin Access [Jul 23, 2026]
• [The Hackers News] GitHub Cuts Public Bug Bounty Payouts, Moves Top Rewards to VIP Tier [Jul 22, 2026]
• [The Hackers News] Ubuntu snap-confine Flaw Could Give Local Users Root on Default Desktop Installs [Jul 22, 2026]
• [The Hackers News] Adobe Acrobat Extension Flaw Let Malicious Sites Read WhatsApp Web Data [Jul 22, 2026]
• [The Hackers News] Hackers Exploit Windmill Flaw to Read Arbitrary Server Files Without Authentication [Jul 22, 2026]
• [The Hackers News] The Fastest Path to AI Adoption Runs Through Security [Jul 22, 2026]
• [The Hackers News] OpenAI Says Its AI Models Escaped Sandbox, Targeted Hugging Face to Cheat Benchmark [Jul 22, 2026]
• [The Hackers News] Why Modern SOCs Need Multi-Layered Detections [Jul 22, 2026]
• [The Hackers News] Police Dismantle Kratos Phishing Kit Built to Steal Microsoft 365 Sessions and Bypass MFA [Jul 22, 2026]
• [The Hackers News] Trojanized Newtonsoft.Json Fork Hides Game-Rigging Code in a Working Library [Jul 22, 2026]
• [The Hackers News] Microsoft Azure DevOps MCP Flaw Lets Hidden PR Comments Hijack AI Review Agents [Jul 22, 2026]
• [The Hackers News] Apple Fixes Hide My Email Bug That Exposed Real Addresses in Mail Logs [Jul 21, 2026]
• [CISA ICS Advisories] Rockwell Automation ThinManager [Jul 23, 2026]
• [CISA ICS Advisories] Weintek cMT3092X [Jul 23, 2026]
• [CISA ICS Advisories] Johnson Controls C-CURE 9000 and Victor application server [Jul 23, 2026]
• [CISA ICS Advisories] Johnson Controls XAAP Android [Jul 23, 2026]
• [CISA ICS Advisories] Panduit IntraVUE [Jul 23, 2026]
• [CISA ICS Advisories] MZ Automation libIEC61850 [Jul 23, 2026]
• [CISA ICS Advisories] MZ Automation lib60870 [Jul 23, 2026]
• [CISA ICS Advisories] Tycon Systems TPDIN-Monitor-WEB2 [Jul 21, 2026]
• [CISA ICS Advisories] Rockwell Automation 1734 POINT I/O [Jul 21, 2026]
• [CISA ICS Advisories] Siemens Opcenter X [Jul 21, 2026]
• [CISA ICS Advisories] Siemens RUGGEDCOM APE1808 with Palo Alto Networks Virtual NGFW [Jul 21, 2026]
• [CISA ICS Advisories] Siemens IAM Client [Jul 21, 2026]
• [CISA ICS Advisories] Rockwell Automation Studio 5000 Logix Designer [Jul 21, 2026]
• [CISA ICS Advisories] Rockwell Automation FactoryTalk Services Platform [Jul 21, 2026]
• [CISA ICS Advisories] Siemens SIDIS Secured SmartPlug [Jul 21, 2026]
• [CISA ICS Advisories] Rockwell Automation 1718-AENTR/1719-AENTR [Jul 21, 2026]
• [CISA ICS Advisories] Siemens CADRA [Jul 21, 2026]
• [CISA ICS Advisories] SALTO ProAccess Space [Jul 16, 2026]
• [CISA ICS Advisories] AutomationDirect Productivity Suite [Jul 16, 2026]
• [CISA ICS Advisories] Rockwell Automation Arena [Jul 16, 2026]
• [CISA ICS Advisories] Siemens SICAM 8 [Jul 16, 2026]
• [CISA ICS Advisories] Rockwell Automation CompactLogix, ControlLogix, Compact GuardLogix and GuardLogix [Jul 16, 2026]
• [CISA ICS Advisories] Rockwell Automation 1756-EN2, 1756-EN3, and 1756-ENBT [Jul 16, 2026]
• [CISA ICS Advisories] Rockwell Automation FactoryTalk DataMosaix [Jul 16, 2026]
• [CISA ICS Advisories] NASA Core Flight System (cFS) Health & Safety (HS) Application [Jul 16, 2026]
• [CISA ICS Advisories] Rockwell Automation Flex 5000 Adapter [Jul 16, 2026]
• [CISA ICS Advisories] ABB Ability Edgenius [Jul 14, 2026]
• [CISA ICS Advisories] Rockwell Automation 1715-AENTR EtherNet/IP Adapter [Jul 14, 2026]
• [CISA ICS Advisories] ABB T-MAC Plus [Jul 14, 2026]
• [CISA ICS Advisories] ABB Advant Master Online Builder [Jul 14, 2026]
• [Fortinet Outbreak] Palo Alto Networks PAN-OS GlobalProtect Auth Bypass [Jul 21, 2026]
• ⚠ CRITICAL [Fortinet Outbreak] Joomla SP Page Builder RCE [Jul 17, 2026]
• [Fortinet Outbreak] Ivanti Sentry OS Command Injection Vulnerability [Jul 7, 2026]
• ⚠ CRITICAL [Fortinet Outbreak] Langflow Unauth RCE Attack [Jul 6, 2026]
• [Fortinet Outbreak] HTTP/2 Bomb Denial-of-Service Vulnerability [Jun 19, 2026]
• [Fortinet Outbreak] Citrix NetScaler Memory Overread Vulnerability [May 28, 2026]
• ⚠ CRITICAL [Fortinet Outbreak] Cisco ASA and FTD Firewall RCE [Apr 27, 2026]
• ⚠ CRITICAL [Fortinet Outbreak] SmarterTools SmarterMail RCE [Apr 6, 2026]
• ⚠ CRITICAL [Fortinet Outbreak] React2Shell Remote Code Execution [Apr 2, 2026]
• [Fortinet Outbreak] Iran-linked Cyber Attacks [Mar 31, 2026]
• [Fortinet Outbreak] Interlock Ransomware Attack [Mar 19, 2026]
• [Fortinet Outbreak] Outbreak Alert- Annual Report 2025 [Mar 9, 2026]
• [Fortinet Outbreak] Versa Concerto SD-WAN Authentication Bypass [Feb 3, 2026]
• ⚠ CRITICAL [Fortinet Outbreak] UNC1549 Critical Infrastructure Espionage Attack [Dec 2, 2025]
• [Fortinet Outbreak] Akira Ransomware [Nov 13, 2025]
• ⚠ CRITICAL [Fortinet Outbreak] Oracle E-Business Suite RCE Zero-day [Oct 8, 2025]
• [Fortinet Outbreak] Fortra GoAnywhere MFT Attack [Oct 7, 2025]
• [Fortinet Outbreak] ShadowSilk Data Exfiltration Attack [Sep 12, 2025]
• [Fortinet Outbreak] Citrix Bleed 2 [Aug 6, 2025]
• ⚠ CRITICAL [Fortinet Outbreak] Microsoft SharePoint Zero-day Attack [Jul 31, 2025]
• ⚠ CRITICAL [Fortinet Threat Signal] Joomla SP Page Builder RCE [Jul 17, 2026]
• ⚠ CRITICAL [Fortinet Threat Signal] Ubiquiti UniFi OS RCE [Jul 9, 2026]
• ⚠ CRITICAL [Fortinet Threat Signal] Ivanti Sentry Pre-Authentication RCE [Jul 4, 2026]
• [Fortinet Threat Signal] Splunk Enterprise Authentication Bypass Vulnerability [Jun 30, 2026]
• ⚠ CRITICAL [Fortinet Threat Signal] Oracle PeopleSoft Zero-Day [Jun 25, 2026]
• [Fortinet Threat Signal] Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability [Jun 25, 2026]
• [Fortinet Threat Signal] npm Supply Chain Cryptocurrency Malware [Jun 17, 2026]
• [Fortinet Threat Signal] Palo Alto Networks PAN-OS GlobalProtect Authentication Bypass [Jun 11, 2026]
• [Fortinet Threat Signal] Check Point VPN Authentication Bypass Vulnerability [Jun 11, 2026]
• ⚠ CRITICAL [Fortinet Threat Signal] Windows Netlogon Remote Code Execution Vulnerability [Jun 9, 2026]