Security News

Recent publicly reported cyber threat coverage from free RSS sources, filtered for security relevance and linked to matching threat actors when attribution is clear. The underlying archive is additive — older items are retained even when feeds stop returning them.

Feed updated · 752 stored · showing newest 100 · Archive · JSON

  1. Chipmaker Patch Tuesday: Over 200 Vulnerabilities Addressed by Intel, AMD

    SecurityWeek
  2. Recently Patched Barracuda Vulnerabilities Exploited in Attacks

    SecurityWeek
  3. Bluetooth, AirPlay Pairing Vulnerabilities Patched Across Apple Platforms

    SecurityWeek
  4. Microsoft Patch Tuesday for November 2026 — Snort rules and prominent vulnerabilities

    Cisco Talos
  5. November Patch Tuesday: An Overflowing Cornucopia of CVEs

    DarkReading
  6. Patch Tuesday - November 2026

    Rapid7
  7. Microsoft Fixes Nearly 1,100 Security Vulnerabilities

    KrebsOnSecurity
  8. Artex: The AI Pen-Test Tool Hackers Turned Into a Weapon

    DarkReading
  9. Microsoft’s Patch Tuesday surpasses 1,000 bugs for second month in a row

    The Record
  10. Exploited Outlook Zero-Day Among 1,094 Flaws Patched by Microsoft

    SecurityWeek
  11. SGLang RCE Exploit Breaches NEAR AI, Steals Data From 18 Agents and About 100 Users

    The Hacker News

    breach

  12. Hackers Exploit Critical Xen Orchestra Auth Bypass Flaw to Gain Admin Access

    The Hacker News
  13. Adobe Patches 110 Vulnerabilities Across 9 Products

    SecurityWeek
  14. Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem

    The Hacker News
  15. AI company Fireworks says hackers stole data, billing info during October breaches

    The Record

    breach

  16. Attackers Exploit AhsayCBS Flaws to Deploy Sandbox-Evading Python Backdoor

    The Hacker News
  17. Blind Eagle Uses Fake Court Notices to Deliver Remote Access Trojan Across Latin America

    The Hacker News
  18. Cybercriminals are increasingly infecting regular people with spyware

    The Record
  19. Fireworks AI Confirms Wider Breach Affecting Customer Datasets, Model Weights and Notion AI Chats

    The Hacker News

    breach

  20. Today: CISO Forum Virtual Summit 2026 – Join Global Cybersecurity Leaders

    SecurityWeek
  21. SAP Patches Critical ICM2SHELL, ProxyGate Vulnerabilities

    SecurityWeek
  22. Palantir exec nominated to lead CISA; lame-duck Senate vote is uncertain

    The Record
  23. Critical vulnerabilities in N-able N-central prompt hosted shutdown

    Rapid7
  24. AI Makes Reverse Engineering Mainstream Software & Malware Far Easier

    DarkReading
  25. Binance Warns of iOS Sandbox Escape That Could Expose Crypto Wallet Keys, No Fix Confirmed

    The Hacker News
  26. CISA Adds Six Known Exploited Vulnerabilities to Catalog

    CISA Advisories
  27. Apple Patches iMessage Group Chat Privacy Flaws and Bluetooth Pairing Vulnerabilities

    The Hacker News
  28. Russian Turla Hackers Use New Cereal Malware to Steal Emails From Government Exchange Servers

    The Hacker News
  29. Anthropic's Claude Fable 5.2 Beats GPT-6 Cyber in Multi-Stage Cyberattack Benchmark

    The Hacker News
  30. IT threat evolution in Q3 2026. Non-mobile statistics

    Securelist
  31. IT threat evolution in Q3 2026. Mobile statistics

    Securelist
  32. France Blames Iran for a Cyberattack That Heated Supermarket Refrigerators

    SecurityWeek
  33. Google Issues Chrome Security Update for Eighth Actively Exploited Zero-Day of 2026

    The Hacker News
  34. CISA Warns of Active Exploitation of OpenSSH, GPUStack, FreeSWITCH, and IBM Flaws

    The Hacker News
  35. Chrome Update Patches Exploited XML Zero-Day, Eighth This Year

    SecurityWeek
  36. CISA Announces Enhanced Reporting Form for Cyber Incidents

    DarkReading
  37. Microsoft Fixes RCE Bug in Windows Paint After Weeks of Confusion

    DarkReading
  38. Data breach at hearing aid giant Amplifon impacts thousands

    The Record

    breach

  39. Black Hat India 2026 Makes a Landmark Debut in Bengaluru, Bringing the Global Cybersecurity Community to India

    DarkReading
  40. Vulnerability that lets hackers SSH into Linux devices is under active exploitation

    Ars Technica
  41. Vanderbilt cybersecurity incident impacting campus devices and systems

    The Record
  42. Hackers Exploit Qubole's Trusted AWS Access to Breach Customer Accounts and Steal Data

    The Hacker News

    breach

  43. Hackers Compromise Ethersphere's bee-js and Swarm Desktop to Deliver Wallet-Stealing Malware

    The Hacker News
  44. Bitter Hackers Deploy New PapRAT Backdoor in Cyberespionage Campaign Targeting South Asia

    The Hacker News
  45. Alleged AI-aided cyberattack exploits assistant interface to breach German web host

    The Record

    breach

  46. Revolve Puts Data Breach Victim Count at 1.5 Million

    SecurityWeek

    breach

  47. Iris Plaza Breach May Have Exposed Data of 7.7 Million Customers

    SecurityWeek

    breach

  48. Italy’s Meloni Blames Pro-Russian Hackers for Leak of Foreign Minister’s Data on the Dark Web

    SecurityWeek
  49. Hackers Exploiting ‘SSHole’ Authentication Bypass in OpenSSH

    SecurityWeek
  50. CISA Adds Four Known Exploited Vulnerabilities to Catalog

    CISA Advisories
  51. Amplifon Americas Data Breach Impacts 1.3 Million

    SecurityWeek

    breach

  52. Over 3 Million People Hit by Frontline Education Data Breach

    SecurityWeek

    breach

  53. Taiwan-Based Hacker Used BOSSAI AI Agents to Steal Taipei Emergency Dispatch Records

    The Hacker News
  54. CISA Flags SonicWall SonicOS MFA Bypass Flaw Amid Reports of Possible Exploitation

    The Hacker News
  55. Emerging Threat: Critical Vulnerability in N-able N-central

    Beazley Security Labs Advisories
  56. The Fridge-Hacking Spree Is an Internet-of-Things Wake-Up Call

    Wired Security
  57. SonicWall Patches Exploited SonicOS Vulnerability That Weakens VPN Logins

    SecurityWeek
  58. Chainalysis says hackers stole credentials and tokens for all of its customers

    Ars Technica
  59. Certificate authority DigiCert reports data breach involving business customer info

    The Record

    breach

  60. Free Chinese AI Models Are Getting Scary Good at Hacking

    Wired Security
  61. The Good, the Bad and the Ugly in Cybersecurity - Week 45 (2026)

    SentinelOne
  62. Japan Announces Emergency Cybersecurity Package Following a Wave of Attacks

    SecurityWeek
  63. FBI agent pleads guilty to stealing $2.4 million in crypto from nation-state hackers

    The Record
  64. Hackers Target OpenSSH SSHole Flaw Within Hours of Disclosure, Gain Root on Honeypot

    The Hacker News
  65. DigiCert Data Breach Impacts Business Customer Information

    SecurityWeek

    breach

  66. Metasploit Wrapup: Unauth RCE modules in Network Perimeter Devices and much more

    Rapid7
  67. Grocery Giant Ahold Delhaize Estimates Financial Toll of October Cyberattack

    SecurityWeek
  68. Microsoft Paint RCE Fix Now Available, but Windows Update Won't Deliver It

    The Hacker News
  69. CISA Adds One Known Exploited Vulnerability to Catalog

    CISA Advisories
  70. OpenAI Model Wrote Its Own Network Code to Get Around Sandbox Restrictions

    SecurityWeek
  71. Chainalysis Breach Exposes All Users' Credentials, Forces Shutdown of Key Services

    The Hacker News

    breach

  72. Hackers Hide Linux Backdoor in Control Web Panel Server to Execute Commands Without Logs

    The Hacker News
  73. Threat actors use agentic AI tooling to find and abuse exposed secrets

    Microsoft Security
  74. Meet *sshole, the vulnerability that lets hackers SSH into Linux devices

    Ars Technica
  75. Queens Public Library says ransomware attack disrupted Wi-Fi, on-site computers

    The Record

    ransomware

  76. What We Missed: Knicks Phishing Test Goes Out of Bounds

    DarkReading
  77. APT29's Watering Holes Target Thousands of Mobile Users

    DarkReading

    apt

  78. Russian state-linked hackers target iPhone, Android devices in zero-click espionage campaign

    The Record
  79. Email threat landscape: Q3 2026 trends and insights

    Microsoft Security
  80. ThreatsDay: Apache OFBiz RCE, DreamHost Breach, DeFi Site Hijacks + 17 More Stories

    The Hacker News

    breach

  81. Bank Phishing Sites Show Fake ‘Suspended’ Pages to Evade Takedowns

    SecurityWeek
  82. Cyberattack Hits French Blood Bank Site but No Blood Products Are Compromised

    SecurityWeek
  83. Zyxel Switch Hacks Blamed on Patched Flaw Actually Exploited a Zero-Day

    SecurityWeek
  84. Russia-Linked Hackers Hit iOS, Android Devices With Exploit Chains via Watering Holes

    SecurityWeek
  85. OpenAI Finds GPT-6 Astra Quietly Holding Back on Internal Red-Teaming, Exploit Tasks

    SecurityWeek
  86. The SOC Files 5: Ghost in the pipeline, or a fileless SharePoint breach by Storm-2603

    Securelist

    breach

  87. Zyxel GS1900 Patch Fails to Block Zero-Day Exploit Allowing Root Command Execution

    The Hacker News
  88. Hackers Exploit Patched Apple Flaw to Deliver Info-Stealing Malware, CISA Says

    The Hacker News
  89. Hackers exploited iOS and Android flaws to infect phones

    Ars Technica
  90. Canadian extradited to US for allegedly hacking schools in at least four states

    The Record
  91. French bank confirms cyber heist, hackers suspected to have stolen an estimated $133 million

    The Record
  92. Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as Root

    The Hacker News

    apt

  93. SonicWall Won't Patch EoL GMS Flaws That Could Expose Files, Alter Database Records

    The Hacker News
  94. Google, Partners Disrupt 1.3 Million-Device-Strong XCPE Botnet

    DarkReading
  95. Ukrainian news outlet Kyiv Independent hit by suspected Russian cyberattack

    The Record
  96. Binance says hackers who stole billions in crypto spent months planning heist

    Ars Technica
  97. APT29-Linked Hackers Hijack Web Analytics Script to Deliver iOS and Android Exploits

    The Hacker News

    apt

  98. Cyberattack wipes cloud data at major Russian hosting provider Beget

    The Record
  99. HYFLOCK Ransomware Evolves with New Builds and Encryption Weaknesses

    Check Point

    ransomware

  100. Modernising threat hunting: Using Semantic Search to Find Risky AI Agent Behavior

    Elastic Security