Security Alerts

FIRESTARTER Backdoor Hits Federal Cisco Firepower Devices

FIRESTARTER Backdoor Hits Federal Cisco Firepower Devices

Apr 24, 2026 · 1 min read

Joint Advisory Warns of Chinese Threat Actors Using Covert SOHO Networks

Joint Advisory Warns of Chinese Threat Actors Using Covert SOHO Networks

Apr 24, 2026 · 1 min read

Google Chrome issues emergency update for zero-day exploited in the wild (CVE-2026-4555)

Google Chrome issues emergency update for zero-day exploited in the wild (CVE-2026-4555)

Apr 8, 2026 · 1 min read

React2Shell exploit hits 766 Next.js servers in 24 hours — mass credential theft campaign confirmed (CVE-2025-55182)

React2Shell exploit hits 766 Next.js servers in 24 hours — mass credential theft campaign confirmed (CVE-2025-55182)

Apr 7, 2026 · 3 min read

Second FortiClient EMS zero-day in a week actively exploited — emergency hotfix released (CVE-2026-35616)

Second FortiClient EMS zero-day in a week actively exploited — emergency hotfix released (CVE-2026-35616)

Apr 6, 2026 · 2 min read

LinkedIn browser script can detect 6,000+ Chrome extensions: what users should check now

Apr 4, 2026 · 1 min read

CISA adds Citrix CVE-2026-3055 to KEV after active exploitation reports

CISA adds Citrix CVE-2026-3055 to KEV after active exploitation reports

Apr 3, 2026 · 1 min read

Cisco IMC auth bypass (CVE-2026-20093) can let attackers take admin control

Cisco IMC auth bypass (CVE-2026-20093) can let attackers take admin control

Apr 3, 2026 · 1 min read

Drift Protocol suspends withdrawals after Security Council takeover drains hundreds of millions

Drift Protocol suspends withdrawals after Security Council takeover drains hundreds of millions

Apr 3, 2026 · 1 min read

OpenSSH 10.3 fixes security flaws, including SSH client command-injection risk

OpenSSH 10.3 fixes security flaws, including SSH client command-injection risk

Apr 2, 2026 · 1 min read

Over 14,000 F5 BIG-IP APM systems still exposed after active CVE-2025-53521 exploitation alerts

Over 14,000 F5 BIG-IP APM systems still exposed after active CVE-2025-53521 exploitation alerts

Apr 2, 2026 · 1 min read

OpenClaw patches unauthenticated Telegram webhook resource-exhaustion flaw (CVE-2026-32980)

OpenClaw patches unauthenticated Telegram webhook resource-exhaustion flaw (CVE-2026-32980)

Apr 1, 2026 · 1 min read

Google Drive ransomware detection is now generally available for Workspace tiers

Google Drive ransomware detection is now generally available for Workspace tiers

Apr 1, 2026 · 1 min read

Gigabyte Control Center flaw can allow remote file writes when pairing is enabled (CVE-2026-4415)

Gigabyte Control Center flaw can allow remote file writes when pairing is enabled (CVE-2026-4415)

Apr 1, 2026 · 1 min read

CareCloud discloses material cyber incident with potential patient data exposure

CareCloud discloses material cyber incident with potential patient data exposure

Mar 30, 2026 · 1 min read

Critical FortiClient EMS flaw (CVE-2026-21643) now reported as actively exploited

Critical FortiClient EMS flaw (CVE-2026-21643) now reported as actively exploited

Mar 30, 2026 · 1 min read

FBI confirms compromise of Director Patel's personal email inbox

FBI confirms compromise of Director Patel's personal email inbox

Mar 30, 2026 · 1 min read

Smart Slider 3 flaw (CVE-2026-3098) can expose sensitive server files

Smart Slider 3 flaw (CVE-2026-3098) can expose sensitive server files

Mar 29, 2026 · 1 min read

TA446 uses leaked DarkSword iOS kit in spear-phishing campaign

TA446 uses leaked DarkSword iOS kit in spear-phishing campaign

Mar 29, 2026 · 1 min read

CISA adds CVE-2025-53521 (F5 BIG-IP APM) to KEV after active exploitation

Mar 29, 2026 · 1 min read

Apple sends critical software alerts to outdated iPhones after web-attack activity

Apple sends critical software alerts to outdated iPhones after web-attack activity

Mar 28, 2026 · 1 min read

Attackers abuse .arpa and IPv6 reverse DNS to evade phishing detection

Attackers abuse .arpa and IPv6 reverse DNS to evade phishing detection

Mar 23, 2026 · 2 min read

Feds disrupt major IoT DDoS botnets after record-smashing attacks

Feds disrupt major IoT DDoS botnets after record-smashing attacks

Mar 20, 2026 · 1 min read

Marquis Software breach impacts 672,000+ people at U.S. financial institutions

Marquis Software breach impacts 672,000+ people at U.S. financial institutions

Mar 19, 2026 · 1 min read

ConnectWise patches ScreenConnect flaw that could enable unauthorized access

ConnectWise patches ScreenConnect flaw that could enable unauthorized access

Mar 18, 2026 · 0 min read

Apple pushes first Background Security Improvements update to fix WebKit flaw

Apple pushes first Background Security Improvements update to fix WebKit flaw

Mar 18, 2026 · 1 min read

Medusa ransomware claims attack on Mississippi hospital and Passaic County

Medusa ransomware claims attack on Mississippi hospital and Passaic County

Mar 17, 2026 · 1 min read

AI sandbox flaws in Bedrock, LangSmith, and SGLang raise data-exfiltration and RCE risk

AI sandbox flaws in Bedrock, LangSmith, and SGLang raise data-exfiltration and RCE risk

Mar 17, 2026 · 1 min read

CISA adds Wing FTP CVE-2025-47813 to KEV catalog after active exploitation

CISA adds Wing FTP CVE-2025-47813 to KEV catalog after active exploitation

Mar 17, 2026 · 0 min read

Font-rendering trick can hide dangerous commands from AI assistants

Font-rendering trick can hide dangerous commands from AI assistants

Mar 17, 2026 · 1 min read

Telus Digital confirms breach after ShinyHunters claims nearly 1PB data theft

Telus Digital confirms breach after ShinyHunters claims nearly 1PB data theft

Mar 16, 2026 · 1 min read

AI-generated Slopoly malware deployed in Interlock ransomware attacks

AI-generated Slopoly malware deployed in Interlock ransomware attacks

Mar 16, 2026 · 1 min read

ClickFix campaigns push MacSync infostealer via fake AI tool installers

ClickFix campaigns push MacSync infostealer via fake AI tool installers

Mar 16, 2026 · 1 min read

AppsFlyer Web SDK hijack exposed websites to crypto-stealing JavaScript

AppsFlyer Web SDK hijack exposed websites to crypto-stealing JavaScript

Mar 15, 2026 · 1 min read

Microsoft ships OOB hotpatch for Windows 11 RRAS remote code execution risk

Microsoft ships OOB hotpatch for Windows 11 RRAS remote code execution risk

Mar 15, 2026 · 0 min read

Betterleaks launches as a new open-source secrets scanner for repos and files

Betterleaks launches as a new open-source secrets scanner for repos and files

Mar 15, 2026 · 1 min read

Operation Synergia III: Interpol-led action sinkholes 45,000 malicious IPs

Operation Synergia III: Interpol-led action sinkholes 45,000 malicious IPs

Mar 15, 2026 · 0 min read

GlassWorm campaign abuses Open VSX extension dependencies in supply-chain attacks

GlassWorm campaign abuses Open VSX extension dependencies in supply-chain attacks

Mar 14, 2026 · 1 min read

Veeam patches critical Backup & Replication flaws tied to RCE risk

Veeam patches critical Backup & Replication flaws tied to RCE risk

Mar 14, 2026 · 1 min read

England Hockey investigates AiLock ransomware claim

England Hockey investigates AiLock ransomware claim

Mar 14, 2026 · 1 min read

CISA adds two Google Chrome zero-days to KEV catalog

CISA adds two Google Chrome zero-days to KEV catalog

Mar 14, 2026 · 0 min read

DOJ alleges incident responder colluded with BlackCat during ransom negotiations

DOJ alleges incident responder colluded with BlackCat during ransom negotiations

Mar 14, 2026 · 1 min read

Starbucks discloses employee data breach after Partner Central phishing

Mar 13, 2026 · 0 min read

Anthropic launches Claude Code Security in limited research preview

Anthropic launches Claude Code Security in limited research preview

Mar 12, 2026 · 1 min read

CISA adds n8n RCE flaw (CVE-2025-68613) to KEV

CISA adds n8n RCE flaw (CVE-2025-68613) to KEV

Mar 11, 2026 · 0 min read

CISA flags SolarWinds, Ivanti, and Workspace ONE flaws as actively exploited

CISA flags SolarWinds, Ivanti, and Workspace ONE flaws as actively exploited

Mar 10, 2026 · 1 min read

FBI warns of phishing emails impersonating city and county officials

FBI warns of phishing emails impersonating city and county officials

Mar 9, 2026 · 1 min read

Microsoft: Threat actors are operationalizing AI across the cyberattack lifecycle

Microsoft: Threat actors are operationalizing AI across the cyberattack lifecycle

Mar 7, 2026 · 1 min read

CISA orders patching of exploited iOS flaws tied to Coruna kit

CISA orders patching of exploited iOS flaws tied to Coruna kit

Mar 6, 2026 · 0 min read

Cisco warns additional SD-WAN Manager flaws are actively exploited

Cisco warns additional SD-WAN Manager flaws are actively exploited

Mar 5, 2026 · 0 min read

Google reports 90 zero-days exploited in 2025, with enterprise systems heavily targeted

Google reports 90 zero-days exploited in 2025, with enterprise systems heavily targeted

Mar 5, 2026 · 1 min read

Microsoft warns OAuth error-flow abuse is driving phishing and malware

Microsoft warns OAuth error-flow abuse is driving phishing and malware

Mar 4, 2026 · 0 min read

CISA adds VMware Aria RCE flaw (CVE-2026-22719) to KEV

CISA adds VMware Aria RCE flaw (CVE-2026-22719) to KEV

Mar 4, 2026 · 0 min read

Android patches Qualcomm zero-day exploited in attacks

Android patches Qualcomm zero-day exploited in attacks

Mar 3, 2026 · 0 min read

LexisNexis confirms breach after hackers leak stolen files

LexisNexis confirms breach after hackers leak stolen files

Mar 3, 2026 · 0 min read

DJI Romo vacuum cloud flaw exposed camera and device control

DJI Romo vacuum cloud flaw exposed camera and device control

Mar 2, 2026 · 1 min read

QuickLens Chrome extension steals crypto, shows ClickFix attack

QuickLens Chrome extension steals crypto, shows ClickFix attack

Mar 1, 2026 · 0 min read

Samsung TVs to stop collecting Texans’ data without express consent

Samsung TVs to stop collecting Texans’ data without express consent

Mar 1, 2026 · 0 min read

1 2 3 4 5 6