News

FIRESTARTER Backdoor Hits Federal Cisco Firepower Devices

FIRESTARTER Backdoor Hits Federal Cisco Firepower Devices

Apr 24, 2026 · 1 min read

McGraw Hill Confirms Major Data Breach Exposing 13.5 Million Records

McGraw Hill Confirms Major Data Breach Exposing 13.5 Million Records

Apr 24, 2026 · 1 min read

Joint Advisory Warns of Chinese Threat Actors Using Covert SOHO Networks

Joint Advisory Warns of Chinese Threat Actors Using Covert SOHO Networks

Apr 24, 2026 · 1 min read

Hackers Exploiting Acrobat Reader Zero-Day Flaw

Hackers Exploiting Acrobat Reader Zero-Day Flaw

Apr 9, 2026 · 0 min read

Critical Cisco Flaw Lets Hackers Take Full Control of Wireless LAN Controllers

Critical Cisco Flaw Lets Hackers Take Full Control of Wireless LAN Controllers

Apr 9, 2026 · 1 min read

Google Chrome issues emergency update for zero-day exploited in the wild (CVE-2026-4555)

Google Chrome issues emergency update for zero-day exploited in the wild (CVE-2026-4555)

Apr 8, 2026 · 1 min read

React2Shell exploit hits 766 Next.js servers in 24 hours — mass credential theft campaign confirmed (CVE-2025-55182)

React2Shell exploit hits 766 Next.js servers in 24 hours — mass credential theft campaign confirmed (CVE-2025-55182)

Apr 7, 2026 · 3 min read

Germany unmasks REvil and GandCrab ransomware leader 'UNKN' as Russian national Daniil Shchukin

Germany unmasks REvil and GandCrab ransomware leader 'UNKN' as Russian national Daniil Shchukin

Apr 7, 2026 · 4 min read

BlueHammer: leaked Windows zero-day gives attackers SYSTEM privileges — no patch yet

BlueHammer: leaked Windows zero-day gives attackers SYSTEM privileges — no patch yet

Apr 6, 2026 · 3 min read

Qilin and Warlock ransomware now kill 300+ EDR tools using vulnerable signed drivers

Qilin and Warlock ransomware now kill 300+ EDR tools using vulnerable signed drivers

Apr 6, 2026 · 3 min read

Second FortiClient EMS zero-day in a week actively exploited — emergency hotfix released (CVE-2026-35616)

Second FortiClient EMS zero-day in a week actively exploited — emergency hotfix released (CVE-2026-35616)

Apr 6, 2026 · 2 min read

LinkedIn browser script can detect 6,000+ Chrome extensions: what users should check now

Apr 4, 2026 · 1 min read

Hims & Hers discloses Zendesk-related data exposure risk

Hims & Hers discloses Zendesk-related data exposure risk

Apr 4, 2026 · 1 min read

CISA orders agencies to patch Ivanti Connect Secure RCE under active exploitation

CISA orders agencies to patch Ivanti Connect Secure RCE under active exploitation

Apr 4, 2026 · 1 min read

Apple expands iOS 18.7.7 security update to protect holdout devices from DarkSword

Apple expands iOS 18.7.7 security update to protect holdout devices from DarkSword

Apr 3, 2026 · 1 min read

CERT-EU confirms European Commission cloud breach linked to Trivy supply-chain compromise

CERT-EU confirms European Commission cloud breach linked to Trivy supply-chain compromise

Apr 3, 2026 · 1 min read

CISA adds Zimbra CVE-2025-66376 to KEV after active exploitation warning

CISA adds Zimbra CVE-2025-66376 to KEV after active exploitation warning

Apr 3, 2026 · 1 min read

CISA adds Citrix CVE-2026-3055 to KEV after active exploitation reports

CISA adds Citrix CVE-2026-3055 to KEV after active exploitation reports

Apr 3, 2026 · 1 min read

Cisco IMC auth bypass (CVE-2026-20093) can let attackers take admin control

Cisco IMC auth bypass (CVE-2026-20093) can let attackers take admin control

Apr 3, 2026 · 1 min read

Drift Protocol suspends withdrawals after Security Council takeover drains hundreds of millions

Drift Protocol suspends withdrawals after Security Council takeover drains hundreds of millions

Apr 3, 2026 · 1 min read

OpenSSH 10.3 fixes security flaws, including SSH client command-injection risk

OpenSSH 10.3 fixes security flaws, including SSH client command-injection risk

Apr 2, 2026 · 1 min read

Over 14,000 F5 BIG-IP APM systems still exposed after active CVE-2025-53521 exploitation alerts

Over 14,000 F5 BIG-IP APM systems still exposed after active CVE-2025-53521 exploitation alerts

Apr 2, 2026 · 1 min read

Apple releases iOS 18.7.7 and iPadOS 18.7.7 security updates for older devices

Apple releases iOS 18.7.7 and iPadOS 18.7.7 security updates for older devices

Apr 2, 2026 · 1 min read

TrueConf CVE-2026-3502 zero-day abused to push malicious updates from trusted servers

TrueConf CVE-2026-3502 zero-day abused to push malicious updates from trusted servers

Apr 1, 2026 · 1 min read

Google patches CVE-2026-5281, the fourth actively exploited Chrome zero-day of 2026

Google patches CVE-2026-5281, the fourth actively exploited Chrome zero-day of 2026

Apr 1, 2026 · 1 min read

OpenClaw patches unauthenticated Telegram webhook resource-exhaustion flaw (CVE-2026-32980)

OpenClaw patches unauthenticated Telegram webhook resource-exhaustion flaw (CVE-2026-32980)

Apr 1, 2026 · 1 min read

Google Drive ransomware detection is now generally available for Workspace tiers

Google Drive ransomware detection is now generally available for Workspace tiers

Apr 1, 2026 · 1 min read

Gigabyte Control Center flaw can allow remote file writes when pairing is enabled (CVE-2026-4415)

Gigabyte Control Center flaw can allow remote file writes when pairing is enabled (CVE-2026-4415)

Apr 1, 2026 · 1 min read

Telegram ZDI-CAN-30207: critical zero-click claim appears in coordinated disclosure window

Mar 30, 2026 · 1 min read

CareCloud discloses material cyber incident with potential patient data exposure

CareCloud discloses material cyber incident with potential patient data exposure

Mar 30, 2026 · 1 min read

Critical FortiClient EMS flaw (CVE-2026-21643) now reported as actively exploited

Critical FortiClient EMS flaw (CVE-2026-21643) now reported as actively exploited

Mar 30, 2026 · 1 min read

FBI confirms compromise of Director Patel's personal email inbox

FBI confirms compromise of Director Patel's personal email inbox

Mar 30, 2026 · 1 min read

Smart Slider 3 flaw (CVE-2026-3098) can expose sensitive server files

Smart Slider 3 flaw (CVE-2026-3098) can expose sensitive server files

Mar 29, 2026 · 1 min read

TA446 uses leaked DarkSword iOS kit in spear-phishing campaign

TA446 uses leaked DarkSword iOS kit in spear-phishing campaign

Mar 29, 2026 · 1 min read

Backdoored Telnyx PyPI package delivered WAV-hidden malware in TeamPCP supply-chain incident

Backdoored Telnyx PyPI package delivered WAV-hidden malware in TeamPCP supply-chain incident

Mar 29, 2026 · 1 min read

Infiniti Stealer targets macOS users via fake Cloudflare ClickFix prompts

Infiniti Stealer targets macOS users via fake Cloudflare ClickFix prompts

Mar 29, 2026 · 2 min read

CISA adds CVE-2025-53521 (F5 BIG-IP APM) to KEV after active exploitation

Mar 29, 2026 · 1 min read

Hong Kong Correctional Services reports illegal access to staff-data systems

Hong Kong Correctional Services reports illegal access to staff-data systems

Mar 28, 2026 · 1 min read

Apple sends critical software alerts to outdated iPhones after web-attack activity

Apple sends critical software alerts to outdated iPhones after web-attack activity

Mar 28, 2026 · 1 min read

WAGO industrial managed switches exposed to critical hidden-CLI flaw (CVE-2026-3587)

WAGO industrial managed switches exposed to critical hidden-CLI flaw (CVE-2026-3587)

Mar 28, 2026 · 1 min read

CISA adds F5 BIG-IP CVE-2025-53521 to KEV after active exploitation

CISA adds F5 BIG-IP CVE-2025-53521 to KEV after active exploitation

Mar 28, 2026 · 1 min read

UK sanctions Xinbi crypto marketplace linked to scam centers

UK sanctions Xinbi crypto marketplace linked to scam centers

Mar 27, 2026 · 2 min read

Google sets 2029 post-quantum cryptography migration deadline

Google sets 2029 post-quantum cryptography migration deadline

Mar 27, 2026 · 1 min read

OpenTelemetry Java Agent 2.26.1 fixes RMI deserialization RCE risk (CVE-2026-33701)

OpenTelemetry Java Agent 2.26.1 fixes RMI deserialization RCE risk (CVE-2026-33701)

Mar 27, 2026 · 1 min read

CISA adds Langflow CVE-2026-33017 to KEV after active RCE exploitation

CISA adds Langflow CVE-2026-33017 to KEV after active RCE exploitation

Mar 27, 2026 · 2 min read

Google Chrome 146.0.7680.80 security update fixes high-risk desktop browser bugs

Google Chrome 146.0.7680.80 security update fixes high-risk desktop browser bugs

Mar 27, 2026 · 1 min read

BuildKit patches two high-severity build-context escape flaws (CVE-2026-33747, CVE-2026-33748)

BuildKit patches two high-severity build-context escape flaws (CVE-2026-33747, CVE-2026-33748)

Mar 26, 2026 · 1 min read

CISA adds Trivy CVE-2026-33634 to KEV after supply-chain compromise

CISA adds Trivy CVE-2026-33634 to KEV after supply-chain compromise

Mar 26, 2026 · 1 min read

GitLab patch release fixes high-severity security flaws in self-managed instances

GitLab patch release fixes high-severity security flaws in self-managed instances

Mar 26, 2026 · 1 min read

Mozilla releases Firefox 149 and ESR updates fixing dozens of security flaws

Mozilla releases Firefox 149 and ESR updates fixing dozens of security flaws

Mar 25, 2026 · 1 min read

Citrix patches critical NetScaler bleed-like flaws (CVE-2026-3055, CVE-2026-4368)

Citrix patches critical NetScaler bleed-like flaws (CVE-2026-3055, CVE-2026-4368)

Mar 25, 2026 · 1 min read

PTC warns of critical Windchill and FlexPLM RCE flaw (CVE-2026-4681)

PTC warns of critical Windchill and FlexPLM RCE flaw (CVE-2026-4681)

Mar 25, 2026 · 1 min read

Attackers abuse .arpa and IPv6 reverse DNS to evade phishing detection

Attackers abuse .arpa and IPv6 reverse DNS to evade phishing detection

Mar 23, 2026 · 2 min read

CISA flags 5 actively exploited flaws in Apple, Craft CMS, and Laravel Livewire

CISA flags 5 actively exploited flaws in Apple, Craft CMS, and Laravel Livewire

Mar 22, 2026 · 1 min read

VoidStealer bypasses Chrome ABE to steal browser master key

VoidStealer bypasses Chrome ABE to steal browser master key

Mar 22, 2026 · 2 min read

Microsoft Authenticator flaw (CVE-2026-26123) can leak sign-in codes

Microsoft Authenticator flaw (CVE-2026-26123) can leak sign-in codes

Mar 22, 2026 · 1 min read

Microsoft Azure Monitor alerts abused in callback phishing campaigns

Microsoft Azure Monitor alerts abused in callback phishing campaigns

Mar 21, 2026 · 1 min read

FBI and CISA warn Russian phishing targets Signal and WhatsApp

Mar 21, 2026 · 1 min read

Oracle patches critical Identity Manager RCE (CVE-2026-21992)

Oracle patches critical Identity Manager RCE (CVE-2026-21992)

Mar 21, 2026 · 1 min read

Trivy GitHub Action tags hijacked in supply-chain breach

Trivy GitHub Action tags hijacked in supply-chain breach

Mar 20, 2026 · 1 min read

LeakNet ransomware uses ClickFix and Deno runtime for stealthier intrusions

LeakNet ransomware uses ClickFix and Deno runtime for stealthier intrusions

Mar 20, 2026 · 1 min read

Feds disrupt major IoT DDoS botnets after record-smashing attacks

Feds disrupt major IoT DDoS botnets after record-smashing attacks

Mar 20, 2026 · 1 min read

Ubiquiti patches critical UniFi account-takeover flaw (CVE-2026-22557)

Ubiquiti patches critical UniFi account-takeover flaw (CVE-2026-22557)

Mar 19, 2026 · 1 min read

Critical Microsoft SharePoint RCE (CVE-2026-20963) is now actively exploited

Critical Microsoft SharePoint RCE (CVE-2026-20963) is now actively exploited

Mar 19, 2026 · 1 min read

Marquis Software breach impacts 672,000+ people at U.S. financial institutions

Marquis Software breach impacts 672,000+ people at U.S. financial institutions

Mar 19, 2026 · 1 min read

Nine IP-KVM flaws expose root-level takeover paths across low-cost devices

Nine IP-KVM flaws expose root-level takeover paths across low-cost devices

Mar 18, 2026 · 2 min read

Aura confirms breach exposing 900,000 marketing-contact records

Aura confirms breach exposing 900,000 marketing-contact records

Mar 18, 2026 · 0 min read

ConnectWise patches ScreenConnect flaw that could enable unauthorized access

ConnectWise patches ScreenConnect flaw that could enable unauthorized access

Mar 18, 2026 · 0 min read

OFAC sanctions DPRK IT worker fraud network targeting U.S. businesses

OFAC sanctions DPRK IT worker fraud network targeting U.S. businesses

Mar 18, 2026 · 0 min read

Apple pushes first Background Security Improvements update to fix WebKit flaw

Apple pushes first Background Security Improvements update to fix WebKit flaw

Mar 18, 2026 · 1 min read

Medusa ransomware claims attack on Mississippi hospital and Passaic County

Medusa ransomware claims attack on Mississippi hospital and Passaic County

Mar 17, 2026 · 1 min read

AI sandbox flaws in Bedrock, LangSmith, and SGLang raise data-exfiltration and RCE risk

AI sandbox flaws in Bedrock, LangSmith, and SGLang raise data-exfiltration and RCE risk

Mar 17, 2026 · 1 min read

CISA adds Wing FTP CVE-2025-47813 to KEV catalog after active exploitation

CISA adds Wing FTP CVE-2025-47813 to KEV catalog after active exploitation

Mar 17, 2026 · 0 min read

Font-rendering trick can hide dangerous commands from AI assistants

Font-rendering trick can hide dangerous commands from AI assistants

Mar 17, 2026 · 1 min read

Telus Digital confirms breach after ShinyHunters claims nearly 1PB data theft

Telus Digital confirms breach after ShinyHunters claims nearly 1PB data theft

Mar 16, 2026 · 1 min read

AI-generated Slopoly malware deployed in Interlock ransomware attacks

AI-generated Slopoly malware deployed in Interlock ransomware attacks

Mar 16, 2026 · 1 min read

ClickFix campaigns push MacSync infostealer via fake AI tool installers

ClickFix campaigns push MacSync infostealer via fake AI tool installers

Mar 16, 2026 · 1 min read

AppsFlyer Web SDK hijack exposed websites to crypto-stealing JavaScript

AppsFlyer Web SDK hijack exposed websites to crypto-stealing JavaScript

Mar 15, 2026 · 1 min read

Microsoft ships OOB hotpatch for Windows 11 RRAS remote code execution risk

Microsoft ships OOB hotpatch for Windows 11 RRAS remote code execution risk

Mar 15, 2026 · 0 min read

Betterleaks launches as a new open-source secrets scanner for repos and files

Betterleaks launches as a new open-source secrets scanner for repos and files

Mar 15, 2026 · 1 min read

Operation Synergia III: Interpol-led action sinkholes 45,000 malicious IPs

Operation Synergia III: Interpol-led action sinkholes 45,000 malicious IPs

Mar 15, 2026 · 0 min read

GlassWorm campaign abuses Open VSX extension dependencies in supply-chain attacks

GlassWorm campaign abuses Open VSX extension dependencies in supply-chain attacks

Mar 14, 2026 · 1 min read

Veeam patches critical Backup & Replication flaws tied to RCE risk

Veeam patches critical Backup & Replication flaws tied to RCE risk

Mar 14, 2026 · 1 min read

England Hockey investigates AiLock ransomware claim

England Hockey investigates AiLock ransomware claim

Mar 14, 2026 · 1 min read

CISA adds two Google Chrome zero-days to KEV catalog

CISA adds two Google Chrome zero-days to KEV catalog

Mar 14, 2026 · 0 min read

DOJ alleges incident responder colluded with BlackCat during ransom negotiations

DOJ alleges incident responder colluded with BlackCat during ransom negotiations

Mar 14, 2026 · 1 min read

Starbucks discloses employee data breach after Partner Central phishing

Mar 13, 2026 · 0 min read

Iran-linked Handala claims disruptive wiper attack on medtech giant Stryker

Mar 13, 2026 · 1 min read

Anthropic launches Claude Code Security in limited research preview

Anthropic launches Claude Code Security in limited research preview

Mar 12, 2026 · 1 min read

CISA adds n8n RCE flaw (CVE-2025-68613) to KEV

CISA adds n8n RCE flaw (CVE-2025-68613) to KEV

Mar 11, 2026 · 0 min read

CISA flags SolarWinds, Ivanti, and Workspace ONE flaws as actively exploited

CISA flags SolarWinds, Ivanti, and Workspace ONE flaws as actively exploited

Mar 10, 2026 · 1 min read

FBI warns of phishing emails impersonating city and county officials

FBI warns of phishing emails impersonating city and county officials

Mar 9, 2026 · 1 min read

Cognizant TriZetto breach exposes health data of 3.4 million patients

Cognizant TriZetto breach exposes health data of 3.4 million patients

Mar 7, 2026 · 1 min read

Microsoft: Threat actors are operationalizing AI across the cyberattack lifecycle

Microsoft: Threat actors are operationalizing AI across the cyberattack lifecycle

Mar 7, 2026 · 1 min read

FBI confirms breach investigation involving wiretap management systems

FBI confirms breach investigation involving wiretap management systems

Mar 6, 2026 · 0 min read

CISA orders patching of exploited iOS flaws tied to Coruna kit

CISA orders patching of exploited iOS flaws tied to Coruna kit

Mar 6, 2026 · 0 min read

Cisco warns additional SD-WAN Manager flaws are actively exploited

Cisco warns additional SD-WAN Manager flaws are actively exploited

Mar 5, 2026 · 0 min read

Google reports 90 zero-days exploited in 2025, with enterprise systems heavily targeted

Google reports 90 zero-days exploited in 2025, with enterprise systems heavily targeted

Mar 5, 2026 · 1 min read

Microsoft warns OAuth error-flow abuse is driving phishing and malware

Microsoft warns OAuth error-flow abuse is driving phishing and malware

Mar 4, 2026 · 0 min read

CISA adds VMware Aria RCE flaw (CVE-2026-22719) to KEV

CISA adds VMware Aria RCE flaw (CVE-2026-22719) to KEV

Mar 4, 2026 · 0 min read

Android patches Qualcomm zero-day exploited in attacks

Android patches Qualcomm zero-day exploited in attacks

Mar 3, 2026 · 0 min read

LexisNexis confirms breach after hackers leak stolen files

LexisNexis confirms breach after hackers leak stolen files

Mar 3, 2026 · 0 min read

DJI Romo vacuum cloud flaw exposed camera and device control

DJI Romo vacuum cloud flaw exposed camera and device control

Mar 2, 2026 · 1 min read

QuickLens Chrome extension steals crypto, shows ClickFix attack

QuickLens Chrome extension steals crypto, shows ClickFix attack

Mar 1, 2026 · 0 min read

Samsung TVs to stop collecting Texans’ data without express consent

Samsung TVs to stop collecting Texans’ data without express consent

Mar 1, 2026 · 0 min read

1 2 3 4 5 6 7 8 9 10 11