RSS Feeds

• [Bleeping Computer] Maine disables data breach notification portal after fake disclosures
• [Bleeping Computer] phpBB forum fixes auth bypass bug lurking for a decade
• [Bleeping Computer] Ukrainian national pleads guilty to role in Conti ransomware operation
• [Bleeping Computer] Over 400 Arch Linux packages compromised to push rootkit, infostealer
• [Bleeping Computer] Early Warning Signs of Supply-Chain Attacks Live in the Dark Web
• [Bleeping Computer] Microsoft fixes Windows update failures linked to WUSA installer
• [Bleeping Computer] Pharma giant Novo Nordisk discloses breach of clinical trials data
• [Bleeping Computer] CISA orders feds to patch actively exploited Ivanti flaw by Sunday
• [Bleeping Computer] Over 73,000 French govt employees affected in Tchap messenger breach
• [Bleeping Computer] Japanese energy firm loses drive with data of 10.9 million clients
• [Bleeping Computer] Maine breach portal abused to publish fake data breach disclosures
• [Bleeping Computer] Oracle mitigates PeopleSoft zero-day exploited in data theft attacks
• [Bleeping Computer] Authorities dismantle 'AudiA6' ransomware crypto-laundering service
• [Bleeping Computer] Why AI-driven threats are exposing the limits of MSP security stacks
• [Bleeping Computer] Coupang hit with record $409 million data breach fine in Korea
• [Security Week] Anthropic Says It Has Taken Its Latest AI Models Offline to Comply With New Export Controls
• [Security Week] In Other News: Google Security Layoffs, AudiA6 Takedown, $400 Million Coupang Fine
• [Security Week] Industry Reactions to Claude Fable 5: Feedback Friday
• [Security Week] Iranian Cyber Group Handala Claims Cal Water Hack
• [Security Week] Ivanti Sentry Exploitation Attempts Hitting Honeypots
• [Security Week] Chrome 149 Update Patches 28 Vulnerabilities
• [Security Week] Anthropic Disputes Fable 5 AI Jailbreak
• [Security Week] Google Confirms Exploitation of Oracle PeopleSoft Zero-Day by ShinyHunters
• [Security Week] Oracle Addresses PeopleSoft Vulnerability Amid Reports of Zero-Day Attacks
• [Security Week] Alert Fatigue Is Becoming a Security Threat of Its Own
• [The Hackers News] U.S. Orders Anthropic to Suspend Fable 5 and Mythos 5 Access for Foreign Nationals
• [The Hackers News] Over 400 Arch Linux AUR Packages Hijacked to Deploy Infostealer and eBPF Rootkit
• [The Hackers News] Google Sues Chinese Smishing Network Accused of Using Gemini AI in Phishing
• [The Hackers News] China-Linked Hackers Backdoored Linux Login Software to Hide for Nearly a Decade
• [The Hackers News] Agentjacking Attack Tricks AI Coding Agents Into Running Malicious Code
• [The Hackers News] Rethinking MDR as Attackers and Defenders Embrace AI
• [The Hackers News] LangGraph Flaw Chain Exposes Self-Hosted AI Agents to Remote Code Execution
• [The Hackers News] INTERPOL Operation Takes Down Sniper Dz Phishing Platform, Arrests Administrator
• [The Hackers News] Europol Disrupts AudiA6 Crypto Laundering Service Used by Ransomware Gangs
• [The Hackers News] ShinyHunters Exploits Oracle PeopleSoft Zero-Day (CVE-2026-35273) to Breach Universities
• [The Hackers News] New Attacks Trick OpenClaw AI Agent Into Running Code and Leaking Secrets
• [The Hackers News] New GreatXML Exploit Bypasses Windows BitLocker via Recovery Partition XML Files
• [The Hackers News] The Gentlemen Ransomware Claims 478 Victims, Can Spread Like a Worm
• [The Hackers News] Cybersecurity Stars Awards 2026: Winners Announced Across 95 Categories
• [The Hackers News] ThreatsDay Bulletin: Worm Code Leaked, AI Agent Phished, Claude Code Patch + 28 New Stories
• [The Hackers News] AI Broke Vulnerability Management. That's Why CISOs Are Moving Budget to BAS.
• [The Hackers News] OceanLotus Hits Vietnam Investors With SPECTRALVIPER in FireAnt Attack
• [The Hackers News] GitHub to Disable npm Install Scripts by Default to Stop Supply Chain Attacks
• [The Hackers News] China-Linked JDY Botnet Expands to 1,500+ Devices for Cyber Reconnaissance
• [The Hackers News] Ivanti, Fortinet, and SAP Release Patches for Multiple Critical Vulnerabilities
• [The Hackers News] Langflow Vulnerability CVE-2026-5027 Exploited for Unauthenticated RCE
• [The Hackers News] CISA Adds Cisco, Chrome, and Arista Flaws to KEV Catalog Amid Active Exploitation
• [The Hackers News] Your Automated Pentest Looks Clean. See What It Missed in This Expert Webinar
• [The Hackers News] Microsoft Patches Record 206 Flaws, Including Three Zero-Days and Critical RCE Bugs
• [The Hackers News] Anthropic Releases Claude Fable 5, Its Most Powerful AI Yet, With Cyber Safeguards
• [The Hackers News] ServiceNow Flaw Exploited to Gain Unauthorized Access to Customer Instances
• [The Hackers News] Microsoft Defender RoguePlanet Zero-Day Grants SYSTEM Access on Updated Windows
• [The Hackers News] Six Proto6 Vulnerabilities in protobuf.js Expose Node.js Apps to RCE and DoS
• [The Hackers News] Meta to Use Off-Site Business Data for Feed and AI Personalization
• [The Hackers News] Veeam Backup & Replication RCE Flaw Lets Domain Users Run Remote Code
• [The Hackers News] Microsoft Restores Some GitHub Repos, Keeps Others Offline as Miasma Probe Continues
• [The Hackers News] WinRAR Flaw Exploited by Russia-Aligned Groups to Deploy Stealers in Ukraine
• [The Hackers News] Researchers Build Self-Replicating AI Worm That Operates Entirely on Local, Open-Weight Models
• [The Hackers News] Chrome V8 Zero-Day CVE-2026-11645 Exploited in the Wild - Patch Now
• [The Hackers News] The Hidden Security Risk in Modern Networks: The Work Between Tools
• [The Hackers News] New FROST Attack Lets Websites Track What Sites and Apps You Open via SSD Timing
• [The Hackers News] Hades PyPI Attack: 19 Packages Poisoned to Auto-Run Bun Credential Stealer
• [The Hackers News] LiteLLM Flaw CVE-2026-42271 Exploited in the Wild, Chains to Unauthenticated RCE
• [The Hackers News] One-Character Linux Kernel Flaw Enables Local Root Access, Exploits Now Public
• [The Hackers News] Meta Blocks NSO Group's New WhatsApp Phishing Attack, Files Contempt Order
• [The Hackers News] Critical Check Point VPN Flaw Exploited to Bypass Passwords in IKEv1 Setups
• [The Hackers News] AI Phishing Is Crushing SOCs with Alert Volume: How to Reduce Tier 1 Overload
• [The Hackers News] ⚡ Weekly Recap: Instagram Account Hacks, Android Zero-Day, GitHub Worm and More
• [The Hackers News] The Hardest Fork
• [The Hackers News] VerdantBamboo Deploys BSD Variant of BRICKSTORM on Linux Appliances
• [The Hackers News] UNC3753 Used Vishing and Physical Intrusions in U.S. Data Theft Extortion Campaign
• [The Hackers News] VS Code Adds 2-Hour Extension Auto-Update Delay to Limit Supply Chain Attacks
• [The Hackers News] New ChatGPT Lockdown Mode Limits Tools That Could Enable Data Exfiltration
• [The Hackers News] Free Apps Are Quietly Turning Smart TVs Into Web-Scraping Proxies for AI
• [The Hackers News] CISA Adds Actively Exploited SolarWinds Serv-U DoS Flaw to KEV Catalog
• [CISA ICS Advisories] Brickcom Cameras
• [CISA ICS Advisories] Yarbo Android/iOS Mobile Application and Cloud Infrastructure
• [CISA ICS Advisories] Naxclow IoT Platform
• [CISA ICS Advisories] Schneider Electric Modicon Network Managed Switches
• [CISA ICS Advisories] Siemens KACO Blueplanet Inverters
• [CISA ICS Advisories] Schneider Electric EcoStruxure Panel Server
• [CISA ICS Advisories] Hitachi Energy MACH HiDraw
• [CISA ICS Advisories] Hitachi Energy RTU500
• [CISA ICS Advisories] NAVTOR NavBox
• [CISA ICS Advisories] Hitachi Energy ITT600 Explorer
• [CISA ICS Advisories] B&R PPT30 Operating System
• [CISA ICS Advisories] KMW CCTV Security Cameras
• [CISA ICS Advisories] ABB Busch-Welcome 2 Wire Door Opener Actuator
• [CISA ICS Advisories] MacGregor Voyage Data Recorder (VDR) G4e
• [CISA ICS Advisories] Schneider Electric EcoStruxure Machine Expert HVAC
• [CISA ICS Advisories] XCharge C6
• [CISA ICS Advisories] ABB EIBPORT
• [CISA ICS Advisories] Jinan USR IOT Technology Limited (PUSR) USR-W610 RS232/485 to Wi-Fi/Ethernet Converter
• [CISA ICS Advisories] CP Plus 8 Ch. Network Video Recorder
• [CISA ICS Advisories] ABB LVS MConfig
• [CISA ICS Advisories] ABB Ability Zenon Remote Transport Vulnerability (Update A)
• [CISA ICS Advisories] ABB AC500 V2
• [CISA ICS Advisories] ABB B&R Automation Runtime DoS Vulnerability in System Diagnostics Manager (SDM)
• [CISA ICS Advisories] ABB Ability Camera Connect
• [CISA ICS Advisories] ABB Terra AC
• [CISA ICS Advisories] ABB B&R PCs
• [CISA ICS Advisories] Hitachi Energy GMS600
• [CISA ICS Advisories] ABB B&R Automation Studio
• [CISA ICS Advisories] ABB Terra AC Wallbox
• [CISA ICS Advisories] ABB B&R Automation Runtime
• [Fortinet Outbreak] Palo Alto Networks PAN-OS GlobalProtect Auth Bypass
• [Fortinet Outbreak] Citrix NetScaler Memory Overread Vulnerability
• [Fortinet Outbreak] Cisco ASA and FTD Firewall RCE
• [Fortinet Outbreak] SmarterTools SmarterMail RCE
• [Fortinet Outbreak] React2Shell Remote Code Execution
• [Fortinet Outbreak] Iran-linked Cyber Attacks
• [Fortinet Outbreak] Interlock Ransomware Attack
• [Fortinet Outbreak] Outbreak Alert- Annual Report 2025
• [Fortinet Outbreak] Versa Concerto SD-WAN Authentication Bypass
• [Fortinet Outbreak] Zimbra Collaboration Local File Inclusion
• [Fortinet Outbreak] UNC1549 Critical Infrastructure Espionage Attack
• [Fortinet Outbreak] Akira Ransomware
• [Fortinet Outbreak] Oracle E-Business Suite RCE Zero-day
• [Fortinet Outbreak] Fortra GoAnywhere MFT Attack
• [Fortinet Outbreak] ShadowSilk Data Exfiltration Attack
• [Fortinet Outbreak] Citrix Bleed 2
• [Fortinet Outbreak] Microsoft SharePoint Zero-day Attack
• [Fortinet Outbreak] SonicWall Secure Mobile Access Attack
• [Fortinet Outbreak] Langflow Unauth RCE Attack
• [Fortinet Outbreak] TBK DVRs Botnet Attack
• [Fortinet Threat Signal] Palo Alto Networks PAN-OS GlobalProtect Authentication Bypass
• [Fortinet Threat Signal] Check Point VPN Authentication Bypass Vulnerability
• [Fortinet Threat Signal] Windows Netlogon Remote Code Execution Vulnerability
• [Fortinet Threat Signal] Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability
• [Fortinet Threat Signal] cPanel & WHM Authentication Bypass
• [Fortinet Threat Signal] Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
• [Fortinet Threat Signal] Microsoft Shell Spoofing Zero-day Vulnerability
• [Fortinet Threat Signal] Apache ActiveMQ RCE
• [Fortinet Threat Signal] Medusa Ransomware Attack
• [Fortinet Threat Signal] TrueConf Zero-Day Attack