Security News Archive
Full additive archive of security-news items retained by the daily pipeline.
The main news page shows the newest items;
monthly shards under data/news/archive/ keep the corpus from bloating a single Jekyll data file.
752 items stored · JSON index
All stored items (newest first)
-
Chipmaker Patch Tuesday: Over 200 Vulnerabilities Addressed by Intel, AMD
-
Recently Patched Barracuda Vulnerabilities Exploited in Attacks
-
Bluetooth, AirPlay Pairing Vulnerabilities Patched Across Apple Platforms
-
Microsoft Patch Tuesday for November 2026 — Snort rules and prominent vulnerabilities
-
November Patch Tuesday: An Overflowing Cornucopia of CVEs
-
Patch Tuesday - November 2026
-
Microsoft Fixes Nearly 1,100 Security Vulnerabilities
-
Artex: The AI Pen-Test Tool Hackers Turned Into a Weapon
-
Microsoft’s Patch Tuesday surpasses 1,000 bugs for second month in a row
-
Exploited Outlook Zero-Day Among 1,094 Flaws Patched by Microsoft
-
SGLang RCE Exploit Breaches NEAR AI, Steals Data From 18 Agents and About 100 Users
-
Hackers Exploit Critical Xen Orchestra Auth Bypass Flaw to Gain Admin Access
-
Adobe Patches 110 Vulnerabilities Across 9 Products
-
Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem
-
AI company Fireworks says hackers stole data, billing info during October breaches
-
Attackers Exploit AhsayCBS Flaws to Deploy Sandbox-Evading Python Backdoor
-
Blind Eagle Uses Fake Court Notices to Deliver Remote Access Trojan Across Latin America
-
Cybercriminals are increasingly infecting regular people with spyware
-
Fireworks AI Confirms Wider Breach Affecting Customer Datasets, Model Weights and Notion AI Chats
-
Today: CISO Forum Virtual Summit 2026 – Join Global Cybersecurity Leaders
-
SAP Patches Critical ICM2SHELL, ProxyGate Vulnerabilities
-
Palantir exec nominated to lead CISA; lame-duck Senate vote is uncertain
-
Critical vulnerabilities in N-able N-central prompt hosted shutdown
-
AI Makes Reverse Engineering Mainstream Software & Malware Far Easier
-
Binance Warns of iOS Sandbox Escape That Could Expose Crypto Wallet Keys, No Fix Confirmed
-
CISA Adds Six Known Exploited Vulnerabilities to Catalog
-
Apple Patches iMessage Group Chat Privacy Flaws and Bluetooth Pairing Vulnerabilities
-
Russian Turla Hackers Use New Cereal Malware to Steal Emails From Government Exchange Servers
-
Anthropic's Claude Fable 5.2 Beats GPT-6 Cyber in Multi-Stage Cyberattack Benchmark
-
IT threat evolution in Q3 2026. Non-mobile statistics
-
IT threat evolution in Q3 2026. Mobile statistics
-
France Blames Iran for a Cyberattack That Heated Supermarket Refrigerators
-
Google Issues Chrome Security Update for Eighth Actively Exploited Zero-Day of 2026
-
CISA Warns of Active Exploitation of OpenSSH, GPUStack, FreeSWITCH, and IBM Flaws
-
Chrome Update Patches Exploited XML Zero-Day, Eighth This Year
-
CISA Announces Enhanced Reporting Form for Cyber Incidents
-
Microsoft Fixes RCE Bug in Windows Paint After Weeks of Confusion
-
Data breach at hearing aid giant Amplifon impacts thousands
-
Black Hat India 2026 Makes a Landmark Debut in Bengaluru, Bringing the Global Cybersecurity Community to India
-
Vulnerability that lets hackers SSH into Linux devices is under active exploitation
-
Vanderbilt cybersecurity incident impacting campus devices and systems
-
Hackers Exploit Qubole's Trusted AWS Access to Breach Customer Accounts and Steal Data
-
Hackers Compromise Ethersphere's bee-js and Swarm Desktop to Deliver Wallet-Stealing Malware
-
Bitter Hackers Deploy New PapRAT Backdoor in Cyberespionage Campaign Targeting South Asia
-
Alleged AI-aided cyberattack exploits assistant interface to breach German web host
-
Revolve Puts Data Breach Victim Count at 1.5 Million
-
Iris Plaza Breach May Have Exposed Data of 7.7 Million Customers
-
Italy’s Meloni Blames Pro-Russian Hackers for Leak of Foreign Minister’s Data on the Dark Web
-
Hackers Exploiting ‘SSHole’ Authentication Bypass in OpenSSH
-
CISA Adds Four Known Exploited Vulnerabilities to Catalog
-
Amplifon Americas Data Breach Impacts 1.3 Million
-
Over 3 Million People Hit by Frontline Education Data Breach
-
Taiwan-Based Hacker Used BOSSAI AI Agents to Steal Taipei Emergency Dispatch Records
-
CISA Flags SonicWall SonicOS MFA Bypass Flaw Amid Reports of Possible Exploitation
-
Emerging Threat: Critical Vulnerability in N-able N-central
-
The Fridge-Hacking Spree Is an Internet-of-Things Wake-Up Call
-
SonicWall Patches Exploited SonicOS Vulnerability That Weakens VPN Logins
-
Chainalysis says hackers stole credentials and tokens for all of its customers
-
Certificate authority DigiCert reports data breach involving business customer info
-
Free Chinese AI Models Are Getting Scary Good at Hacking
-
The Good, the Bad and the Ugly in Cybersecurity - Week 45 (2026)
-
Japan Announces Emergency Cybersecurity Package Following a Wave of Attacks
-
FBI agent pleads guilty to stealing $2.4 million in crypto from nation-state hackers
-
Hackers Target OpenSSH SSHole Flaw Within Hours of Disclosure, Gain Root on Honeypot
-
DigiCert Data Breach Impacts Business Customer Information
-
Metasploit Wrapup: Unauth RCE modules in Network Perimeter Devices and much more
-
Grocery Giant Ahold Delhaize Estimates Financial Toll of October Cyberattack
-
Microsoft Paint RCE Fix Now Available, but Windows Update Won't Deliver It
-
CISA Adds One Known Exploited Vulnerability to Catalog
-
OpenAI Model Wrote Its Own Network Code to Get Around Sandbox Restrictions
-
Chainalysis Breach Exposes All Users' Credentials, Forces Shutdown of Key Services
-
Hackers Hide Linux Backdoor in Control Web Panel Server to Execute Commands Without Logs
-
Threat actors use agentic AI tooling to find and abuse exposed secrets
-
Meet *sshole, the vulnerability that lets hackers SSH into Linux devices
-
Queens Public Library says ransomware attack disrupted Wi-Fi, on-site computers
-
What We Missed: Knicks Phishing Test Goes Out of Bounds
-
APT29's Watering Holes Target Thousands of Mobile Users
-
Russian state-linked hackers target iPhone, Android devices in zero-click espionage campaign
-
Email threat landscape: Q3 2026 trends and insights
-
ThreatsDay: Apache OFBiz RCE, DreamHost Breach, DeFi Site Hijacks + 17 More Stories
-
Bank Phishing Sites Show Fake ‘Suspended’ Pages to Evade Takedowns
-
Cyberattack Hits French Blood Bank Site but No Blood Products Are Compromised
-
Zyxel Switch Hacks Blamed on Patched Flaw Actually Exploited a Zero-Day
-
Russia-Linked Hackers Hit iOS, Android Devices With Exploit Chains via Watering Holes
-
OpenAI Finds GPT-6 Astra Quietly Holding Back on Internal Red-Teaming, Exploit Tasks
-
The SOC Files 5: Ghost in the pipeline, or a fileless SharePoint breach by Storm-2603
-
Zyxel GS1900 Patch Fails to Block Zero-Day Exploit Allowing Root Command Execution
-
Hackers Exploit Patched Apple Flaw to Deliver Info-Stealing Malware, CISA Says
-
Hackers exploited iOS and Android flaws to infect phones
-
Canadian extradited to US for allegedly hacking schools in at least four states
-
French bank confirms cyber heist, hackers suspected to have stolen an estimated $133 million
-
Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as Root
-
SonicWall Won't Patch EoL GMS Flaws That Could Expose Files, Alter Database Records
-
Google, Partners Disrupt 1.3 Million-Device-Strong XCPE Botnet
-
Ukrainian news outlet Kyiv Independent hit by suspected Russian cyberattack
-
Binance says hackers who stole billions in crypto spent months planning heist
-
APT29-Linked Hackers Hijack Web Analytics Script to Deliver iOS and Android Exploits
-
Cyberattack wipes cloud data at major Russian hosting provider Beget
-
HYFLOCK Ransomware Evolves with New Builds and Encryption Weaknesses
-
Modernising threat hunting: Using Semantic Search to Find Risky AI Agent Behavior
-
China-Aligned Hackers Hijack Sogou Input Method DNS Requests to Deploy DarkVigil Backdoor
-
Malicious cPGuard Updates Served in OpsShield Supply Chain Attack
-
Russian Police Arrest 3 Suspected VasyGrek Hackers, Dismantle Criminal Infrastructure
-
High-Severity Remote Code Execution Vulnerability in WordPress Core Under Active Exploitation (CVE-2026-119977)
-
Google Issues Patches for Critical Android Flaw That Could Allow RCE Without User Interaction
-
CISA Confirms Hackers Exploiting WordPress Core Flaw During Software Upgrades
-
Philippine Migrant Worker Data Likely Leaked in 69GB Government Breach
-
Phishing-Resistant Isn't Enough; Yubico Takes Aim at Identity-Verification Gap
-
Google dismantles massive botnet hidden in Android TV boxes
-
Binance Says Hackers Used Well-Known Tricks to Carry Out a $6.34 Billion Heist
-
Several German lawmakers and foreign policy staff received Apple warnings on spyware
-
Chainstack Reports Production Systems Breach Exposing Customer Data and Password Hashes
-
Google dismantles botnet secretly running on 1.3 million Android TV boxes
-
cPGuard Update Channel Hijacked to Backdoor Linux Servers and Collect Password Hashes
-
Frontline Education Data Breach Impacts Over 1.3 Million
-
A hidden backdoor put 1.3 million TV boxes to work for criminals
-
Introducing Zero Wire, a hub for investigating critical Internet vulnerabilities
-
Android’s November 2026 Updates Patch Over 200 Vulnerabilities
-
Hackers put porn on public billboards and claim it was “far too easy”
-
Revolve card breach: 1.5 million people may be affected
-
Red Hat Patches 9.8-Rated Linux TCP RCE Flaw While Ubuntu Releases Fixes for Testing
-
Russia-Aligned Gorbag Hackers Exploit WinRAR Flaw to Deploy Data-Stealing Malware
-
Google Dismantles XCPE Botnet of 1.3 Million Android Devices
-
Hackers Exploit BTCPay Server Flaw to Steal Bitcoin and Litecoin From Hot Wallets
-
Synology NAS Devices Targeted in Ransomware Attacks Exploiting Patched DSM Flaw
-
Critical Authentication Bypass in Barracuda Email Security Gateway (CVE-2026-116606, CVE-2026-111560)
-
Attackers Exploit Critical Siemens IoT2050 Flaw to Plant Remote Command Backdoors
-
Tech Firms Dismantle Botnet That Turned 1.3M TV Boxes Into Proxies
-
Unit 42 Threat Intelligence Highlights - Nov. 2, 2026
-
One Compromised Laptop, Billions Lost: The Binance Attack-Path Warning
-
Largest crypto exchange in Brazil confirms cyberattack as millions flow out of platform
-
What exploited vulnerabilities have in common: A data-driven analysis of real-world attacks
-
Michigan State cyber incident claimed by ransomware gang behind recent hospital attack
-
Storm Ransomware Is Scaling Fast and Selling an AI Powered Image
-
Guiding Customers Through Critical PHP Vulnerabilities
-
Russia's statistics agency confirms cyberattack claimed by Belarusian and Ukrainian hackers
-
Google Disrupts 1.3 Million-Device Android Botnet, Says TV Box Maker Sold Criminal Access
-
Cybersecurity M&A Roundup: 37 Deals Announced in October 2026
-
Revolve Data Breach Impacts at Least 200,000 People
-
Malicious Claude Code Extension Served in Cursor Supply Chain Attack
-
Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)
-
Chainalysis Discloses Data Breach Following AI-Driven Cyberattack
-
New VOLTA Infostealer Uses Claude, Gemini, and Kimi AI to Rank Victims by Financial Value
-
Hackers Steal About $2.7 Million From Polymarket Traders via Hijacked DebugBear Script
-
NetamLoader Malware Targets Government Windows 10 Systems in Asia via .NET Injection
-
Spooky New Infostealer Malware Uses AI to ‘Autodox’ Victims
-
Appraisal by AI: Model-driven victim prioritization in the VOLTA infostealer
-
Syrian Hacker Gets Prison Time in US After Over a Decade on the Run
-
Cloudflare Reports 18.2 Million Network-Layer DDoS Attacks in Q3, Up 38%
-
Inside a malicious Claude Code-branded extension and its persistent SSH backdoor
-
A Supply Chain Attack Put Malicious Anthropic Claude Extensions on Thousands of Devices
-
Fashion retailer Resolve says hackers stole payment card information
-
The Good, the Bad and the Ugly in Cybersecurity - Week 44 (2026)
-
Chinese Hackers Use AI-Powered ARTEX to Target Over 200 Organizations Worldwide
-
Rapid7 Analysis: Unauthenticated File Upload to RCE in BeyondTrust Remote Support (CVE-2026-102764)
-
Florida warns that 4.9 million people had Social Security numbers leaked in financial aid site breach
-
Stopping Node2Shell: How SentinelOne Protects Customers From Brotli-Based Remote Code Execution
-
In Other News: Anthropic Breach Dispute, UEFI Flaw Hits Most Servers, Cloudflare AI Data Leak
-
Syrian Electronic Army hacker gets prison time for attacks on Western targets
-
WordPress RCE Flaw Draws Nearly 63,000 Attack Attempts in Just 24 Hours
-
Hackers steal $6.3 billion from Binance in record crypto heist
-
CISA says max severity GitLab flaw now exploited in the wild
-
Fresh WordPress Vulnerability in Attackers’ Crosshairs
-
CISA Adds Two Known Exploited Vulnerabilities to Catalog
-
Hackers steal and publish data on 41,000 Homeland Security workers
-
Drupal Commerce Core Vulnerability Exploited Against Online Stores
-
Syrian Hacker Behind Fake Tweet That Triggered $136 Billion Market Drop Gets 42 Months in Prison
-
$2 Million+ Drained From Polymarket Traders in New Supply Chain Attack
-
Binance links $6.3 billion crypto theft to compromised DevOps laptop
-
Official Claude Code Extension on Cursor Marketplace Trojanized with Persistent SSH Backdoor
-
Hackers Actively Exploit Highly Critical Drupal Commerce Core Authorization Bypass Flaw
-
CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEV
-
Critical Remote Code Execution Vulnerability in the Linux Kernel TCP Stack (CVE-2026-98432)
-
Binance Suffers Security Breach Affecting $6.3 Billion in Assets, Nearly $3 Billion Frozen
-
Binance pauses withdrawals as hackers suspected of stealing billions in crypto
-
Hugging Face malware campaign returns to hijack GPUs for crypto mining
-
Japan Airlines suffers third-party data breach exposing passenger info
-
Polymarket halts trading after crypto-draining script breach, $2.5M traced
-
Anthropic-Themed Phishing Emails Bypass Top Security Tools
-
Rethinking Cybersecurity Awareness in the AI Era
-
Polymarket Halted International Trading After Hackers Drained Accounts
-
Hackers exploit Cisco SD-WAN flaw to deploy custom KeyDrift malware
-
Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619 (Updated October 29)
-
A quiet week in infosec <.<
-
Tracking AI adoption in North Korean threat actor tradecraft
-
Threat Modeling With 4 Simple Questions on a White Board
-
Backdoor or Confused Agent? What We Learned Replaying the Qwen Incident
-
IR trends Q3 2026: Actors impersonate IT help desks in vishing attacks as ransomware activity increases
-
CISA warns of Fragnesia Linux flaw chained in PHP2Shell attacks
-
Google's Gemini 4 Carbon Leads Benchmarks for Finding, Exploiting, and Patching Vulnerabilities
-
Cloudflare DDoS Threat Report 2026 Q3: More swarms, fewer giants
-
A Hacker Targeted High-Stakes Poker Players With Malware That Exposed Their Cards
-
NIK C2: The new AI-enabled command-and-control framework
-
Shadowy AI Relay Disables OpenAI Codex, Claude Code Sandboxes
-
HTTP2Shell: The Brotli Vulnerability That Extends Beyond Node.js
-
Attacker Tried to Exploit Alpine Linux’s GitLab via CVSS 10.0 Flaw Its Ruby Left Open
-
Hackers Exploited Cisco SD-WAN Flaw to Plant Malware Built to Steal Encryption Keys
-
Unknown APT uses NetamLoader to attack a Win10 OS customized for governments in Asia
-
Cyber Vulnerabilities Besiege Italy, Absent Clear Cause
-
China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility
-
Attackers Exploit PHP2Shell Flaws in Internet-Exposed Palo Alto Networks Management Interfaces
-
Denial of Service Vulnerability in Cisco Secure Firewall ASA Under Active Exploitation (CVE-2026-76418)
-
Hacker stole personnel data about thousands of Homeland Security employees, including CBP and ICE agents
-
GhostAction Hacking Wave Fizzles, but Attackers Lurk on in GitHub
-
Volt Typhoon Used Covert Silent Train Network in Four Zero-Day Exploitation Campaigns
-
Volt Typhoon hides zero-day attacks using 'Silent Train' framework
-
CISA warns of hackers now exploiting critical Node2Shell flaw
-
Millions of security cameras at risk: DoS vulnerability in Intelbras devices
-
Nefilim and Hive ransomware affiliate gets 70 months in prison
-
Japan's GMO Offers $1 Million Bounty to Catch Hackers Behind FX Trading Cloud Breach
-
ShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained Flaws
-
Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic Emerges
-
Hackers hijack Convertr analytics script to steal payment card data
-
SBOMs Alone Can't Reveal the Scope of a Supply Chain Attack
-
CyberStrikeAI Uses 44 AI Agents to Automate Hacking Operations Against Japan Targets
-
Tailscale warns of SSH flaws allowing root privilege escalation
-
Japan internet giant GMO says hackers posted stolen customer data
-
Yoba Malware Abuses Signed ChatGPT and Claude Binaries to Target AI Users
-
An insecure neighbor: how a vulnerability chain led to an isolation bypass in cloud infrastructure
-
Keystone to Destroy 18,835 Hardware Wallets After Hackers Steal Device Verification Key
-
Lazarus Abuses South Korean Security Software to Deploy Malware Using Post-Quantum Encryption
-
Apple backports CoreGraphics zero-day patches to older iPhones
-
CISA confirms PHP2Shell vulnerabilities now exploited in attacks
-
CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution
-
Hackers Infect 953 Online Stores With Scanner-Evading JavaScript, Mostly on Magento
-
CVE-2026-111497: Critical out-of-bounds write in the Node.js Brotli decoder
-
Attackers Use Microsoft Teams IT Support Scams to Deploy Malware and Ransomware
-
Two Critical Wasmtime Flaws Could Let Malicious WebAssembly Modules Escape Sandboxes
-
Patient records exposed in Quest breach: What you need to know
-
uCreator Android Spyware Can Steal Telegram 2FA Passwords and Clone WeChat Accounts
-
OpenAI AI Agents Demonstrate VM Escapes and Secret Cross-Sandbox Communication
-
Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software
-
Researchers Push Over 2 Million Updates to Remotely Disable Popcorn Time Updater That Could Fuel a Botnet
-
CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud
-
Abandoned Popcorn Time app exposed millions of devices to RCE attacks
-
Microsoft Teams to get AI-powered, context-aware phishing detection
-
Inside the LiteLLM 1.107.0 supply chain compromise: Credential theft through Python startup hooks
-
Ruby Fixes Three Regex Engine Bugs Responsible for Four Critical GitLab RCE Flaws
-
Exposed Infrastructure Reveals How Ransomware Affiliates Used AI Agents to Execute Intrusions
-
The Good, the Bad and the Ugly in Cybersecurity - Week 43 (2026)
-
Knicks sent employees fake offer of championship rings in phishing test: Report
-
PHP shares mitigation for new RCE vulnerability with no patch
-
Infostealers Are Targeting AI: What Aokigahara Infostealer Reveals About the New Developer Attack Surface
-
PHP Warns of Another Unpatched RCE Risk Two Days After Emergency PHP2Shell Patches
-
Researchers Demonstrate Node2Shell RCE Exploit on Node.js Build Using Crafted Brotli Data
-
PHP2Shell Exploit Attempts Hit Millions as Attackers Try to Deploy Mirai Malware
-
State Bank of India Suffers a Customer PII Data Leak
-
How CVE-2026-73570 turns a Zimbra log file into remote code execution
-
Critical Authentication Bypass Vulnerability in HPE Aruba Networking AOS-10 (CVE-2026-79844)
-
Railway warns devs to rotate secrets after potential breach
-
Microsoft Links Storm-0940 to ConnectWise Supply Chain Attack
-
LiteLLM release pipeline hacked to distribute info-stealer malware
-
The AI Agent Nobody Owns: Watch Expert Webinar On Your Newest Insider Threat
-
Arista Warns of Critical VeloCloud SQL Injection Zero-Day Exploited in Attacks
-
EMudhra Intermediate CA Certificates Compromised
-
Hackers got a four-day head start on epic PHP2Shell vulnerability
-
GitLab warns of new max severity code execution vulnerability
-
High-Severity Remote Code Execution Vulnerability in Brotli Decoder (CVE-2026-111497)
-
Someone Tried to Exploit PHP2Shell 4 Days Before the Vulnerabilities Were Publicly Disclosed
-
How APT41 revived the BlackLotus bootkit to attack diplomatic organizations in Central Asia
-
China-Linked Hackers Use ARTEX AI Agents in ConnectWise Supply Chain Attack
-
Hackers Exploited the PHP Vulnerabilities Days Before They Were Patched
-
Compromised eMudhra intermediate certificates
-
Lazarus hackers use post-quantum cryptography for malware delivery
-
Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releases
-
AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise
-
LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor
-
Optiv Launches CyberBOT Cybersecurity Awareness Training Program
-
CVE-2026-109618 and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHP
-
Critical RCE vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619)
-
‘This Is Not a Drill’: Critical PHP Vulnerabilities Are Setting the Internet on Fire
-
“Next Exploit Opportunities”: How a Threat Actor Used AI to Help Plan and Execute Multiple Types of Cybercrime Activities
-
PHP Issues Emergency Patches for Two Critical PHP2Shell RCE Flaws as Exploit Attempts Emerge
-
AI Guardrails Aren’t Stopping Criminal Hackers
-
Cloudflare deploys protections against php2shell vulnerability
-
How Fraudulent Airline Support Numbers Exploit Search Results and AI-Generated Answers
-
Q3 2026 Threat Update: Attackers Are Exploiting Vulnerabilities Within 3 Days
-
CISA: SafePay ransomware hit over 600 critical infrastructure orgs
-
State Bank of India Confirms Data Leak After 3,897 Customer Records Found on Dark Web
-
Critical Unauthenticated Remote Code Execution in GitLab CE and EE (CVE-2026-110264)
-
Critical Remote Code Execution Vulnerability in Cisco Expressway Series (CVE-2026-76466)
-
PHP2Shell: Two Unpatched Critical PHP RCE Flaws (CVSS 9.2) Trigger Emergency Security Alert
-
Mozilla, Google, Apple block compromised eMudhra CA certificates
-
php2shell: Assessing Elastic detection coverage relevant to CVE-2026-109618 and CVE-2026-109619
-
8 eMudhra certificates are compromised. Here's what you need to know
-
Tech Giants Block eMudhra Certificates Tied to 8 Compromised Keys
-
Active Exploitation of May 2026 PAN-OS CVE-2026-0257 (Updated October 20)
-
The Internet goes on high alert after discovery of 8 compromised TLS certs
-
Eight eMudhra CA Keys Compromised, Triggering Emergency Fixes Across Browsers and Software
-
Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution
-
Qilin and INC Ransomware Groups Exploit Palo Alto Networks Flaw to Bypass MFA
-
There's only so much code: the rise in vulnerability numbers
-
Pegasus Spyware Infection Confirmed on Serbian University Rector's iPhone Days Before Election
-
Ahold Delhaize: Cyberattack affects services across US and Europe
-
Russian APT28 Breaches NATO Naval Shipbuilder in NATO Country, Deploys New Reflective Loader
-
ClickFix Attackers Exploit Siemens Software Center Flaw to Deploy Remote Access Trojan
-
PHP2SHELL: Critical PHP RCE Flaws Threaten Web Infrastructure Amid Active Exploitation (CVE-2026-109618 & CVE-2026-109619)
-
Hackers Use New ROMULUS ClickFix Platform to Deliver LegionLoader and Other Malware
-
WordPress SEO plugin Rank Math compromised to backdoor websites
-
'AdFection' Turns Ad Impressions Into Zero-Click Spyware Delivery
-
PSA: Patch your Plex media server before someone hacks it
-
Hackers Exploit Plex2Shell Flaws to Install Crypto Miners and Linux Proxy Backdoor
-
Your Next Insider Threat Won’t be Human: Securing AI Agents From the Outside in
-
Popular WordPress SEO Plugin Rank Math PRO Hijacked to Deliver Self-Restoring Backdoor
-
Authentication Bypass, Remote Code Execution, and Database Read in Eptura Archibus (FIXED)
-
Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779
-
CVE-2026-102764: Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild
-
The Evolving Cybersecurity Lexicon: Vulnerability Discovery to Resilience
-
Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site
-
GhostAction Attackers Plant Credential Stealer Disguised as Font in 94 GitHub Repositories
-
Fake Web3 Accelerator Uses npm Packages to Spread Malware and Hijack AI Agent Traffic
-
Hackers exploit SiteGuard WAF flaw to run commands as admins
-
Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack
-
Drupal patches critical RCE flaws, warns exploits may emerge soon
-
BeyondTrust Remote Support Zero-Day Continues Trend of Exploited Edge Bugs
-
Critical BlockStrap flaw lets hackers run code on Magento servers
-
How SentinelOne Blocked APT29's CaptiveCrunch Campaign
-
Researchers Demonstrate OpenBSD Root Exploit Chaining 37-Year-Old Shared-Memory Bug
-
Top 5 Initial Access Threat Vectors Observed by Unit 42 in September 2026
-
Targeted ads installed Candiru spyware in zero-click attacks
-
Attackers Tampered with AOMEI Backupper's Update Servers for Minutes to Deliver a Backdoor
-
UAT-11985 Uses Fake Event Invites to Target Taiwan Research Affiliates With Google AitM Phishing
-
Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)
-
Inside the Q3 2026 Brand Phishing Report: Microsoft Now Accounts for One in Three Brand Impersonation
-
BeyondTrust patches zero-day exploited in attacks since August
-
PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessions
-
SecTor 2026 Reveals a Rapidly Shifting Cybersecurity Landscape
-
Targeted ads delivered 0-click exploits to install mercenary malware
-
Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory
-
ThreatsDay: Adobe RCE, DNS Wallet Theft, NVIDIA Container Escape, Self-Healing Backdoor + 23 More
-
Fake Arch Linux packages push malware with root privileges
-
Fake Calendar Invites Target Thousands of Organizations in Microsoft Credential-Phishing Campaign
-
Citizen Lab Traces Zero-Click Candiru Spyware Infections at Al Jazeera to Targeted Online Ads
-
Vulnerability Management Isn't About the Score — It's About How It Applies to You
-
Researchers Uncover Thousands of Phishing Domains Hiding Behind Inactive Pages
-
‘Nightmare Scenario’: Zero-Click Spyware Is Infecting Phones via Targeted Ads
-
Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts
-
Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitation
-
Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacks
-
Critical Authentication Bypass in Juniper Junos OS J-Web (CVE-2026-101956, CVE-2026-101986)
-
Ivanti ICS Zero-Day Attacks Highlight Vendor Patching Hurdles
-
Anthropic 'SneakPeek' Flaw Is a Silent Zero-Click Threat
-
Cisco Warns of Active Attacks Exploiting New Critical Secure Email Gateway Vulnerability
-
Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE App
-
Global takedown hits network behind 1 billion phishing messages
-
CISA warns admins to immediately fix Ivanti flaw exploited as zero-day
-
CISA Urges Immediate Ivanti Connect Secure Updates as Honeypots Log 105 Exploit Attempts
-
Hirudo Android malware replaces banking apps to evade security checks
-
Researchers Used a Public OpenAI Model to Build a $250,000 Chrome Full-Chain Exploit in Six Days
-
Hirudo Android Trojan Uses Patched Banking Apps to Bypass Their Built-In Security Checks
-
Ransomware Gangs Embrace Physical Threats, Family Stalking?
-
Zero-Days Lurk in Microsoft's Overgrown October Patch Tuesday
-
Patch Tuesday - October 2026
-
Ghostscript flaw lets hackers hijack servers via PDF uploads
-
SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theft
-
TFG London cyberattack disrupts systems at Hobbs and Whistles retailers
-
Ivanti warns of Connect Secure zero-day exploited in attacks
-
Check Point Research Discovers High Risk Vulnerabilities in LiteLLM, One of the Most Widely Used LLM Gateways
-
NHS England evolves its cybersecurity strategy with Palo Alto Networks and IBM
-
Low-Cost Android Phones Ship With Preinstalled Malware That Turns Them Into Residential Proxies
-
Prominent Ransomware Negotiator Faces Extortion Charges
-
Retail giant Ahold Delhaize takes systems offline after cyberattack
-
GitLab warns of max severity code execution vulnerability
-
Critical SonicWall SMA 1000 Flaw Targeted in 135 Exploitation Attempts After Patch
-
Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE
-
Nippon Columbia malware incident exposes 8.6 million karaoke fan records
-
P7 DarkSword iOS Exploit Kit Adds Crypto Wallet Data Theft and Remote Commands
-
Cyber exec arrested in case allegedly tied to ShinyHunters hackers
-
FBI Arrests Founder of Ransomware Negotiation Firm
-
Hackers abuse Google Ads, Bing redirects to push Claude ClickFix attacks
-
AI Scramble Drives Cybersecurity M&A Boom
-
Credential-Stealing GitHub Actions Workflows Planted in Tens of Thousands of Repositories
-
FBI arrests another suspected ShinyHunters hacker after agency breach
-
Germany arrests alleged core Qilin ransomware member after extradition
-
Researchers Publish Working Exploit for Pre-Auth AnyDesk Linux Flaw That Gives Root Access
-
Flax Typhoon Exploits Five Flaws as CISA Sets October 11 Deadline for Federal Agencies
-
How Luna Moth Runs Data Extortion Like a Business
-
Citrix warns admins to patch new NetScaler RCE flaw immediately
-
Low-cost Android phones ship with residential proxy malware
-
Venezuelan Cartel's Malware Honcho Nabbed for ATM Jackpotting
-
FBI Says China-Linked Hackers Ran Portal Giving Third Parties Access to Stolen Emails
-
Russian Spies Give 'MatchBoil' Malware a Stealthy Facelift
-
ThreatsDay: Ransomware Affiliate Betrayal, WhatsApp RAT, Exposed Hacker Tools and 12 More Stories
-
FakeGit malware campaign returns with 17,610 malicious GitHub repos
-
Uranium crypto exchange hacker convicted for stealing $53 million
-
September 2026 Cyber Threat Landscape: Global Attacks Jump 48% as Phishing and GenAI Data Exposure Rise
-
Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm
-
Ransomware recovery CEO charged over secret ransom payments
-
Evolution of Web3 in Cloud Supply Chain Attacks
-
Eight Malicious npm Packages Downloaded 40,767 Times Deliver Overlord RAT and Stealer
-
PoeLLM Malware Infects 3,400+ Servers to Expand Crypto Mining Botnet
-
PoeLLM malware infects exposed AI servers in cryptomining attacks
-
Hackers exploit critical Atlassian flaw after public PoC release
-
CVE-2026-21589: Critical unauthenticated arbitrary file access in Atlassian products
-
100+ Compromised Websites Use Fake Cloudflare Checks to Deliver LunexStealer
-
Hackers exploit 32 zero-days on first day of Pwn2Own Ireland
-
ASOS confirms data breach after “HACKED” in-app notifications
-
FBI Removes Accenture Contractor After Patch Failure Led to ShinyHunters Breach
-
Critical Arbitrary File Read Vulnerability in Atlassian Data Center Products (CVE-2026-21589)
-
Critical Server-Side Request Forgery Vulnerability in SonicWall SMA1000 (CVE-2026-102255)
-
New Dell System Update flaw lets hackers gain root privileges
-
Alleged dev of Ploutus ATM malware appears in US court after arrest
-
The Credential Layer Is Expanding Faster Than Security Teams Can See It
-
Realtek Jungle SDK Exploit Attempts Deliver Cling Botnet With STUN-Based C2
-
New NetScaler Zero-Day Exploited in Targeted Attacks Can Knock SAML Deployments Offline
-
Citrix patches NetScaler SAML zero-day exploited in attacks
-
China-Aligned TA419 Targets U.S. AI Policy Experts With Microsoft AitM Phishing
-
ShinyHunters hacker reportedly detained in Jordan, aiding FBI
-
Warlock Exploits SharePoint Flaws to Disable Security Tools and Deploy Ransomware
-
Danish university DTU breach exposes data of up to 200,000 people
-
The State of Cybersecurity in 2026: Key Segments, Insights, and Innovations
-
Frontline Education breach exposes school district employee data
-
Warlock ransomware breach SharePoint in water, telecom operator attacks
-
Antino Backdoor Uses Outlook and OneDrive for C2 in China-Nexus Espionage Campaign
-
SWIFT Banking & Government Middleware Enables RCE
-
GitLab warns of critical RCE vulnerability in AI Gateway service
-
Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes
-
Fortinet warns of critical FortiMail flaw exploited in zero-day attacks
-
Alleged KillSec Ransomware Mastermind a 16-Year-Old
-
Police Arrest 16-Year-Old Suspected of Running KillSec, Seize Ransomware Leak Site and Servers
-
Police dismantle KillSec ransomware gang allegedly led by 16-year-old
-
Warlock Ransomware Hits Large Spanish, Portuguese Orgs
-
How Financial Services Companies Can Modernize Their Software Supply Chain
-
Bitget Confirms Third-Party Zero-Day Behind $387.5 Million Cryptocurrency Theft
-
Russian state hackers use new RedFlick technique to push malware
-
Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets
-
Attackers Abuse MSP360 to Deploy ScreenConnect in Dual-RMM Phishing Attacks
-
CISA warns of critical pre-auth RCE flaw in MikroTik RouterOS
-
Russia's Star Blizzard Ditches ClickFix to Widen Phishing Net
-
Cisco warns of new SD-WAN zero-day exploited in attacks
-
Bitget hacked via zero-day in third-party security products
-
Attackers Exploit NetScaler Flaw for Root Access, Deploy WHIPSHOT and SLAPSHOT
-
South Africa Seeks Help After Cyberattack Targets Air Traffic Control
-
Citrix NetScaler CVE-2026-88772 Exploit Details Show Pre-Auth Path to Shellcode Execution
-
Apple Zero-Day Vulnerability Weaponized in Targeted Attacks
-
Custom ChatGPTs push ClickFix attacks to deploy RAT malware
-
Dutch police arrest ShinyHunters hacker accused of planning two murders
-
Russia's Star Blizzard Targets 100+ Organizations With Fake Event Invites to Deliver Backdoor
-
'NeedyMantis' Provides Long-Term Access to Compromised Networks
-
Apple patches CoreGraphics zero-day flaw exploited in attacks
-
Carbonato Botnet Puts an AI Agent on Hacked Docker Hosts
-
Dutch police confirm arrest in ShinyHunters hacking investigation
-
Hackers Use NeedyMantis to Maintain Long-Term Access in Breached Networks
-
RatHat Android Malware Console Uses Gemini to Identify Higher-Value Victims
-
Chrome Store Hosts 'Poper Blocker' Spyware Downloaded by Millions
-
Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation
-
Carbonato Botnet Compromises Docker Hosts to Deploy Telegram-Controlled Hermes AI Agent
-
JADEPUFFER-Linked Attackers Used Compromised Service Principals to Delete Azure Resources
-
CISA Says Attackers Are Exploiting Two Critical Citrix NetScaler Flaws Globally
-
CISA orders feds to patch exploited Citrix flaws by Wednesday
-
Citrix confirms two NetScaler RCE zero-days exploited in attacks
-
Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation
-
Lunex Stealer Abuses AMD Driver to Disable Security Monitoring and Steal Browser Credentials
-
Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells
-
SharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wild
-
CISA warns of Sharepoint, WSO2, Adobe Commerce flaws exploited in attacks
-
Appeals Court Lets the Pentagon Designate Anthropic a Supply-Chain Risk
-
Compromised GitHub Actions Came Back Online and Resumed Executing Mini Shai-Hulud Malware
-
PamStealer macOS Malware Adds Live C2 Payload Decryption and Multi-Layer Persistence
-
Bitget Says Suspected North Korean Hackers Stole $351.6M After Backend Compromise
-
Hackers steal $351.6 million in Bitget crypto exchange hack
-
WSO2 and Adobe Commerce Flaws Exploited in Attacks, Added to CISA KEV
-
'Salesbleed' Exploits Salesforce Agents to Enable Slack Phishing
-
MacSync malware uses public iCloud calendars to deliver new payloads
-
Hacked Ukrainian Sites Serve Fake Cloudflare ClickFix Lures for Psychedelic Stealer
-
17,000 URLs Reveal How ClickFix Turns Trusted Websites Into Malware Traps: Report by CTM360
-
New RemControl Android banking malware targets users in Europe and Canada
-
GitLab Email Addresses Can Be Weaponized for Supply Chain Attacks
-
Check Point warns of hackers exploiting Security Gateway VPN RCE flaw
-
Attackers Use Malicious Terraform Providers to Deliver Go Malware via HashiCorp Registry
-
545 Hackers Tested It First. Now XRanges for AI Scores Your Security Agent
-
Exploit Released for Unpatched Ubuntu Linux Flaw Enabling Host-Root Container Escape
-
Ryuk ransomware member sentenced to 24 months in prison
-
F5 patches BIG-IP APM zero-day flaw exploited in RCE attacks
-
An INC Ransomware Affiliate’s BYOVD Buffet
-
ShinyHunters Claims FBI Breach, Says It Stole Data on Agents and Job Applicants
-
ShinyHunters claims FBI hack, data theft in PeopleSoft zero-day breach
-
Hacking group ShinyHunters claims it breached the FBI, stole agents’ and applicants’ data
-
Check Point Warns of Management Server Zero-Day Exploited in Targeted Attacks
-
Researcher Drops BigDiskBuster Zero-Day PoC That Blocks Microsoft Defender Updates
-
D-Link warns of max severity zero-day bug in DIR-822A routers
-
New Windows Defender zero-day blocks Microsoft antivirus updates
-
SideCopy Broadens India Targeting to Academia With ReverseRAT Spear-Phishing
-
One Hidden Meta Muse Setting Could Let Attackers Turn the AI Assistant Into a Backdoor
-
WordPress Comment2Shell Flaw Can Turn Anonymous Comment XSS Into RCE via Admin Session
-
OpenAI forms math advisory group as its AI resolves more than 100 open problems
-
CISA alerts of active exploitation of three Linux kernel flaws
-
WordPress Click2Shell flaw lets hackers execute PHP on the server
-
ClickFix Lures Deploy ChainScript RAT Using Polygon to Rotate C2 Infrastructure
-
Jade Sleet Linked to Indian IT Provider Breach With FLATROOF and ROOFDECK Backdoors
-
Researchers escape OpenAI Codex sandbox to run commands on host
-
An undercover Google analyst infiltrated a notorious supply-chain hacking gang
-
North Korean WaterPlum hackers infected 30,000 devices worldwide
-
ShinyHunters hacks Clop leak site, threatens to extort ransomware gang
-
Forget the AI Slowdown—the Vulnerability Explosion Is Already Happening
-
Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild
-
CISA Flags Three Linux Kernel Vulnerabilities Exploited in the Wild
-
Cisco Zero-Day Highlights API Endpoint Authentication Issues
-
Transparent Tribe Deploys New Rust Backdoor Using Private GitHub Repositories for C2
-
Fake LastPass Authenticator GitHub repos push new Rapuncel infostealer