All Tags

• Android March 2026 Security Update Patches 129

• CISA Flags Actively Exploited n8n RCE Bug as 24,700

• CISA Orders Federal Agencies to Patch n8n RCE Flaw

• CISA Flags Actively Exploited n8n RCE Bug as 24,700

• Researchers Disclose Critical n8n Flaws Enabling RCE and Credential Theft

• Veeam Patches Five Critical RCE Vulnerabilities Exposing

• CISA Flags Actively Exploited n8n RCE Bug as 24,700

• CISA Orders Federal Agencies to Patch n8n RCE Flaw

• Researchers Disclose Critical n8n Flaws Enabling RCE and Credential Theft

• ShinyHunters Dumps 5.1 Million Panera Bread Customer

• Substack Discloses Data Breach After 100-Day Undetected

• Fintech Giant Figure Technology Confirms Breach: Nearly 1

• WEF Global Cybersecurity Outlook 2026 Warns of 'Permanent

• Cline CLI Supply Chain Attack Installs Unauthorized

• Japanese Semiconductor Giant Advantest Hit by Ransomware

• ShinyHunters Dumps 5.1 Million Panera Bread Customer

• Ransomware in 2026: Data-Only Extortion Replaces Encryption

• HellCat Ransomware Group Breaches Ascom, Exfiltrates 44GB

• WormGPT Hacked: 19,000 Cybercriminal AI Platform Users

• Europol-Coordinated Action Dismantles Tycoon2FA — 330

• Phobos Ransomware Admin Pleads Guilty — 1,000+ Victims

• Ex-L3Harris Executive Pleads Guilty to Selling Eight

• CrowdStrike 2026 Threat Report: eCrime Breakout Time Falls

• U.S. Treasury Sanctions Russian Zero-Day Broker Operation

• File Read Flaw in Smart Slider Plugin Impacts 500K

• Hackers Exploit Critical Flaw in Ninja Forms WordPress

• Hackers Actively Exploiting Breeze Cache File Upload Bug in WordPress Attacks

• PromptSpy: First Android Malware to Weaponize Generative AI

• Google Disrupts Massive Chinese Espionage Campaign

• GlassWorm Escalates: 72 Malicious Open VSX Extensions Use

• NIST to Stop Rating Non-Priority Flaws Due to Volume

• Federal Audit Reveals NIST's NVD Is Plagued by Poor Planning and Duplication

• AI Is Accelerating Vulnerability Discovery — Can Defenders Keep Up?

• Ransomware in 2026: Data-Only Extortion Replaces Encryption

• AI-Driven Threats Accelerate: Agentic Attacks, Model

• AI-Armed Amateur Hacker Compromises 600+ FortiGate

• Fortinet Patches Actively Exploited CVE-2026-35616 in FortiClient EMS

• New FortiClient EMS Flaw Exploited in Attacks, Emergency

• New Critical Exim Mailer Flaw Allows Remote Code Execution

• Telus Digital Confirms Massive Breach After ShinyHunters

• AppsFlyer Web SDK Supply Chain Attack Spread

• CISA Adds Wing FTP Server Flaw to KEV as RCE Chain Exploits

• AI-Driven Threats Accelerate: Agentic Attacks, Model

• WormGPT Hacked: 19,000 Cybercriminal AI Platform Users

• Cline CLI Supply Chain Attack Installs Unauthorized

• Europol-Coordinated Action Dismantles Tycoon2FA — 330

• Microsoft Releases Windows 11 OOB Hotpatch to Fix Three

• Windows 11 February Update Breaks C:\ Drive Access on Samsung PCs

• Hackers Are Exploiting a Critical LiteLLM Pre-Auth SQLi Flaw

• Drupal Core SQL Injection Bug Actively Exploited, Added to CISA KEV

• Drupal: Critical SQL Injection Flaw Now Targeted in Attacks

• Cisco Patches Critical and High-Severity Vulnerabilities

• Disgruntled Researcher Leaks BlueHammer Windows Zero-Day

• GPUBreach: New Rowhammer Attack on GPU GDDR6 Memory Enables

• AppsFlyer Web SDK Supply Chain Attack Spread

• Hackers Actively Exploiting Breeze Cache File Upload Bug in WordPress Attacks

• Avada Builder WordPress Plugin Flaws Allow Site Credential

• CISA Orders Federal Agencies to Patch n8n RCE Flaw

• Researchers Disclose Critical n8n Flaws Enabling RCE and Credential Theft

• Veeam Patches Five Critical RCE Vulnerabilities Exposing

• Google's $32 Billion Wiz Acquisition Clears Final Hurdle as

• CrowdStrike 2026 Threat Report: eCrime Breakout Time Falls

• Cloudflare 2026 Threat Report: 230 Billion Daily Threats as

• GlassWorm Escalates: 72 Malicious Open VSX Extensions Use

• GlassWorm ForceMemo: Stolen GitHub Tokens Used to Poison

• Weekly Recap: Chrome 0-Days, Router Botnets, AWS Breach

• Cisco Patches Critical and High-Severity Vulnerabilities

• Actively Exploited nginx-ui Flaw (CVE-2026-33032) Enables

• Critical cPanel and WHM Bug Exploited as Zero-Day, PoC Now

• Microsoft Releases Windows 11 OOB Hotpatch to Fix Three

• Microsoft Shares Fix for Windows C: Drive Access Issues on Samsung PCs

• Microsoft Halts Forced Global Rollout of Microsoft 365

• Veeam Patches Five Critical RCE Vulnerabilities Exposing

• Critical Langflow RCE Flaw Exploited Within 20 Hours of Disclosure

• CISA: New Langflow Flaw Actively Exploited to Hijack AI

• Former Cybersecurity Responders Plead Guilty to BlackCat Attacks

• Europol-Coordinated Action Dismantles Tycoon2FA — 330

• Phobos Ransomware Admin Pleads Guilty — 1,000+ Victims

• Leaked Documents Reveal China's 'Expedition Cloud' Cyber

• Google Disrupts Massive Chinese Espionage Campaign

• Cloudflare-Themed ClickFix Attack Drops Infiniti Stealer on Macs

• CISA Flags Actively Exploited n8n RCE Bug as 24,700

• CISA Orders Federal Agencies to Patch n8n RCE Flaw

• CISA Adds Wing FTP Server Flaw to KEV as RCE Chain Exploits

• Ransomware in 2026: Data-Only Extortion Replaces Encryption

• Ransomware Forces University of Mississippi Medical Center

• Former Cybersecurity Responders Plead Guilty to BlackCat Attacks

• Diesel Vortex: Russian Cybercrime Ring Steals 1,649

• Operation Epic Fury Triggers Unprecedented Cyber Escalation

• Europol-Coordinated Action Dismantles Tycoon2FA — 330

• Microsoft Details Cookie-Controlled PHP Web Shells

• Laravel Lang Packages Hijacked to Deploy

• Laravel-Lang PHP Packages Compromised to Deliver

• Apple Blocked Over $11 Billion in App Store Fraud in 6 Years

• Apple Rejected 2 Million App Store Submissions in 2025 for Security and Fraud Prevention

• npm Adds 2FA-Gated Publishing and Package Install Controls

• Senator Demands AT&T, Verizon CEOs Testify Over Salt

• Operation Epic Fury Triggers Unprecedented Cyber Escalation

• Cloudflare 2026 Threat Report: 230 Billion Daily Threats as

• UNC6426 Weaponizes Old nx npm Compromise to Seize AWS Admin Access

• CanisterWorm: First Blockchain-Powered Self-Spreading Worm

• Attack on Axios Developer Tool Threatens Widespread

• Ex-L3Harris Executive Pleads Guilty to Selling Eight

• Pro-Russian Hacktivists Launch Sustained Cyber Campaign

• APT28 Operation MacroMaze: Russia-Linked Hackers Hit

• CISA Loses 62% of Workforce as DHS Shutdown Guts America's

• Japanese Semiconductor Giant Advantest Hit by Ransomware

• Ransomware Forces University of Mississippi Medical Center

• Anthropic Exposes Industrial-Scale AI Distillation Attacks

• CrowdStrike 2026 Threat Report: eCrime Breakout Time Falls

• AI-Armed Amateur Hacker Compromises 600+ FortiGate

• Arista Patches VeloCloud Orchestrator Zero-Day Exploited in Attacks

• NASA AIT-GUI Flaws Could Let Unauthenticated Attackers Issue Spacecraft Commands

• Attackers Chain Two SonicWall SMA 1000 Zero-Days in Active Attacks

• Substack Discloses Data Breach After 100-Day Undetected

• IRS Shares Tax Data of 1.28 Million Individuals with DHS

• Persona Source Code Leak Exposes Hidden Biometric

• Google's $32 Billion Wiz Acquisition Clears Final Hurdle as

• Google Disrupts Massive Chinese Espionage Campaign

• Android March 2026 Security Update Patches 129

• Critical Unpatched GNU Telnetd Flaw (CVE-2026-32746)

• Microsoft Details Cookie-Controlled PHP Web Shells

• New 'Pack2TheRoot' Flaw Gives Hackers Root Linux Access

• CISA Loses 62% of Workforce as DHS Shutdown Guts America's

• CISA Orders Federal Agencies to Patch n8n RCE Flaw

• CISA Adds Zimbra XSS and SharePoint RCE to KEV; Cisco FMC

• Scattered Lapsus$ ShinyHunters Alliance Hits 100+

• Fintech Giant Figure Technology Confirms Breach: Nearly 1

• Axios npm Hack Used Fake Teams Error Fix to Hijack

• North Korea's UNC4899 Breached Crypto Firm via AirDropped

• AppsFlyer Web SDK Supply Chain Attack Spread

• Hacker Walks Away with $24.5 Million After Breaching Resolv

• Cline CLI Supply Chain Attack Installs Unauthorized

• Betterleaks: New Open-Source Secrets Scanner Built to Replace Gitleaks

• Claude Code Source Code Accidentally Leaked in NPM Package

• Critical Unpatched GNU Telnetd Flaw (CVE-2026-32746)

• Citrix NetScaler CVE-2026-3055 (CVSS 9.3) Under Active

• Fortinet Warns of Critical RCE Flaws in FortiSandbox and FortiAuthenticator

• WordPress wp2shell Exploitation Grows as Public Exploit Fuels Mass Scanning

• Hackers Exploit Windmill Flaw to Read Arbitrary Server Files Without Authentication

• CVE-2016-20052: Snews CMS 1.7 Unrestricted File Upload

• Senator Demands AT&T, Verizon CEOs Testify Over Salt

• Anthropic Exposes Industrial-Scale AI Distillation Attacks

• Leaked Documents Reveal China's 'Expedition Cloud' Cyber

• Diesel Vortex: Russian Cybercrime Ring Steals 1,649

• Researchers Disclose Critical n8n Flaws Enabling RCE and Credential Theft

• GlassWorm Escalates: 72 Malicious Open VSX Extensions Use

• Device Code Phishing Attacks Surge 37x as New Kits Spread

• Why Chargebacks Are Just One Piece of the Fraud Puzzle

• Hackers Used Meta's AI Support Bot to Seize Instagram Accounts

• Ex-L3Harris Executive Pleads Guilty to Selling Eight

• APT28 Operation MacroMaze: Russia-Linked Hackers Hit

• Leaked Documents Reveal China's 'Expedition Cloud' Cyber

• Android March 2026 Security Update Patches 129

• Veeam Patches Five Critical RCE Vulnerabilities Exposing

• Microsoft Releases Windows 11 OOB Hotpatch to Fix Three

• CISA Adds CVE-2025-53521 to KEV After Active F5 BIG-IP APM

• Citrix NetScaler CVE-2026-3055 (CVSS 9.3) Under Active

• CISA: New Langflow Flaw Actively Exploited to Hijack AI

• Path Traversal Flaw in AI Dev Platform Langflow Exploited in Attacks

• 7 Unpatched Flaws Disclosed in FatFs Filesystem Used in Millions of Embedded Devices

• Progress Confirms ShareFile Zero-Day Flaw Behind Storage Zone Shutdown

• ShinyHunters Dumps 5.1 Million Panera Bread Customer

• Scattered Lapsus$ ShinyHunters Alliance Hits 100+

• Fintech Giant Figure Technology Confirms Breach: Nearly 1

• Hackers Actively Exploiting Breeze Cache File Upload Bug in WordPress Attacks

• Forminator WordPress Plugin Flaw Enables Unauthenticated RCE via PHP Upload

• Elementor Pro Flaw Exploited to Hack WordPress Sites, 190K+ Attempts Blocked

• DoJ Disrupts 3 Million-Device IoT Botnets Behind Record

• Weekly Recap: CI/CD Backdoor, FBI Buys Location Data

• Feds Disrupt IoT Botnets Behind Huge DDoS Attacks

• Weekly Recap: AI Goes Rogue, Metabase 0-Day, MCP Supply-Chain Attacks, and Router Backdoors

• Cisco IOS XE Web UI Privilege Escalation Actively Exploited

• CVE-2024-51311: Critical Stack Overflow in Tenda TX9 Router Firmware

• WP Maps Pro Bug Exploited to Create Admin Accounts on WordPress Sites

• CVE-2016-20066: WordPress CP Polls Persistent XSS via File Upload

• CVE-2026-12761: miniOrange WordPress Social Login Auth Bypass Enables Full Admin Takeover

• UNC6426 Weaponizes Old nx npm Compromise to Seize AWS Admin Access

• GlassWorm ForceMemo: Stolen GitHub Tokens Used to Poison

• The State of Secrets Sprawl 2026: 9 Takeaways for CISOs

• The Good, the Bad and the Ugly in Cybersecurity – Week 14

• Hypersonic Supply Chain Attacks: AI Defense Stops Zero-Days

• Researchers Uncover Pre-Stuxnet 'fast16' Malware Targeting

• How to Configure Microsoft Sentinel Analytics Rules

• Automating Report Generation with Python and Jinja2

• Automated News Aggregation with Deduplication Algorithms

• IRS Shares Tax Data of 1.28 Million Individuals with DHS

• LexisNexis Confirms Cloud Breach Exposing 400K User

• European Commission Confirms Data Breach After Europa.eu

• Interlock Ransomware Has Been Exploiting Cisco FMC Zero-Day

• CISA Adds Zimbra XSS and SharePoint RCE to KEV; Cisco FMC

• Interlock Ransomware Exploited Cisco FMC Zero-Day for 36

• Trellix Source Code Breach Highlights Growing Supply Chain

• Gentlemen Ransomware Uses Multiple EDR Killers to Disable Defenses

• GodDamn Ransomware Deploys Microsoft-Signed PoisonX Driver to Kill EDR Tools

• CVE-2025-69941: Critical SQL Injection in Tailor Management System — Measurement Endpoint

• CVE-2025-69947: Critical SQL Injection in Tailor Management System — Customer Edit Endpoint

• CVE-2026-10184: SourceCodester Hospital Records SQL Injection via Delete

• LexisNexis Confirms Cloud Breach Exposing 400K User

• UNC6426 Weaponizes Old nx npm Compromise to Seize AWS Admin Access

• AI Flaws in Amazon Bedrock, LangSmith, and SGLang Enable

• VoidStealer Malware Steals Chrome Master Key via Debugger

• Trivy Hack Spreads Infostealer via Docker, Triggers Worm

• Trivy Supply Chain Attack Targets CI/CD Secrets

• Adversaries Exploit Vacant Homes to Intercept Mail in Hybrid Cybercrime

• FCC Proposes $4.5 Million Fine for Voice Provider Hosting

• Over 20,000 Crypto Fraud Victims Identified in International Crackdown

• PromptSpy: First Android Malware to Weaponize Generative AI

• Android March 2026 Security Update Patches 129

• Android 17 Blocks Non-Accessibility Apps from Accessibility

• Over 10,000 Zimbra Servers Vulnerable to Ongoing XSS Attacks

• Microsoft Exchange Zero-Day Under Attack, No Patch Available

• Zimbra Urges Customers to Patch Critical Web Client XSS Flaw Exploited in the Wild

• Fortinet Warns of Critical RCE Flaws in FortiSandbox and FortiAuthenticator

• Critical Everest Forms Pro Flaw Exploited to Take Over WordPress Sites

• Cisco Patches Critical Webex Vulnerability Allowing Remote

• CISA Loses 62% of Workforce as DHS Shutdown Guts America's

• Here's How the FTC Plans to Enforce the Take It Down Act

• Can Laws Stop Deepfakes? South Korea Aims to Find Out

• AI-Armed Amateur Hacker Compromises 600+ FortiGate

• Critical Fortinet FortiClient EMS Flaw Now Exploited in Attacks

• Fortinet Patches Actively Exploited CVE-2026-35616 in FortiClient EMS

• Betterleaks: New Open-Source Secrets Scanner Built to Replace Gitleaks

• The State of Secrets Sprawl 2026: 9 Takeaways for CISOs

• Cisco Source Code Stolen in Trivy-Linked Dev Environment

• Trivy Hack Spreads Infostealer via Docker, Triggers Worm

• Malicious KICS Docker Images and VS Code Extensions Hit

• Open Source DockSec Uses AI to Cut Through Vulnerability

• PTC Warns of Imminent Threat from Critical Windchill

• Critical Flaw in protobuf.js Library Enables JavaScript

• Hackers Exploited KnowledgeDeliver Zero-Day for Web Shell

• Critical Vulnerability in HP VoIP Phones Enables Enterprise Network Breaches

• CVE-2016-20049: JAD Java Decompiler Stack-Based Buffer

• CVE-2017-20225: TiEmu TI Calculator Emulator Stack Buffer

• Persona Source Code Leak Exposes Hidden Biometric

• OpenAI Says ChatGPT Ads Are Not Rolling Out Globally For Now

• ChatGPT Rolls Out New $100 Pro Subscription to Challenge

• North Korea's UNC4899 Breached Crypto Firm via AirDropped

• Axios NPM Package Breached in North Korean Supply Chain

• Google Attributes Axios npm Supply Chain Attack to North

• Stryker Cyberattack Wiped Tens of Thousands of Devices — No

• Dutch Finance Ministry Takes Treasury Banking Portal

• The Backup Myth That Is Putting Businesses at Risk

• DoJ Disrupts 3 Million-Device IoT Botnets Behind Record

• Manager of Botnet Used in Ransomware Attacks Gets 2 Years

• Feds Disrupt IoT Botnets Behind Huge DDoS Attacks

• Anthropic Exposes Industrial-Scale AI Distillation Attacks

• Claude Code Source Code Accidentally Leaked in NPM Package

• Claude Code Source Leaked via npm Packaging Error

• GlassWorm ForceMemo: Stolen GitHub Tokens Used to Poison

• Supply Chain Attack Hits Widely-Used AI Package, Risking

• Backdoored Telnyx PyPI Package Pushes Malware Hidden in WAV

• ThreatsDay Bulletin: Hybrid P2P Botnet, 13-Year-Old Apache

• Mirai Variant Nexcorium Exploits CVE-2024-3721 to Hijack

• EnOcean SmartServer Flaws Expose Buildings to Remote Hacking

• Hackers Bypass SonicWall VPN MFA Due to Incomplete Patching

• Europe Dismantles VPN Service Used by Cybercriminals to Hide Ransomware Attacks

• Police Seize 'First VPN' Service Used in Ransomware and Data Theft Attacks

• CVE-2019-25662: ResourceSpace 8.6 Unauthenticated SQL

• Critical Blind SQL Injection in Akilli E-Commerce Website

• CVE-2025-62319: Critical SQL Injection in HCL Unica (CVSS

• ThreatsDay Bulletin: Edge Plaintext Passwords, ICS 0-Days

• Accenture to Acquire Majority Stake in Dragos, runZero, and NetRise in $4.1 Billion OT Cybersecurity Push

• Cal Water Says No OT Systems Breached in Iranian Handala Cyberattack

• Velociraptor DFIR Setup, Hunts, and Forensic Collection

• Osquery Endpoint Visibility & Threat Hunting

• Linux auditd: Kernel-Level Security Monitoring and Compliance Logging

• Termite Ransomware Operator Velvet Tempest Chains ClickFix

• LeakNet Ransomware Weaponizes ClickFix and Deno Runtime for Stealthy Corporate Attacks

• Cloudflare-Themed ClickFix Attack Drops Infiniti Stealer on Macs

• Trivy Hack Spreads Infostealer via Docker, Triggers Worm

• Trivy Supply Chain Attack Targets CI/CD Secrets

• TeamPCP Pushes Malicious Telnyx Versions to PyPI, Hides

• VoidStealer Malware Steals Chrome Master Key via Debugger

• Google Fixes Fourth Chrome Zero-Day Exploited in Attacks in 2026

• New Chrome Zero-Day CVE-2026-5281 Under Active Exploitation

• Former DigitalMint Ransomware Negotiator Pleads Guilty to $75.3M Extortion Scheme

• ADT Confirms Data Breach After ShinyHunters Leak Threat

• New BlackFile Extortion Group Linked to Surge of Vishing

• CVE-2026-10520: Ivanti Sentry OS Command Injection — CVSS 10.0

• CVE-2026-15511: Critical OS Command Injection in Comfast CF-WR631AX Router

• CVE-2026-27130 — Dokploy OS Command Injection via appName

• CISA Adds Apple DarkSword iOS Exploits, Craft CMS, and Laravel Livewire Flaws to KEV Catalog

• Weekly Recap: Telecom Sleeper Cells, LLM Jailbreaks, Apple

• Apple Expands iOS 18 Updates to More iPhones to Block

• Firestarter Malware Survives Cisco Firewall Updates and Security Patches

• FIRESTARTER Backdoor Hit Federal Cisco Firepower Device

• FortiBleed: Russian IAB Harvested 110 Million Credentials from 430,000 FortiGate Firewalls

• SentinelOne Application Control Policies

• SentinelOne Control vs Complete Feature Comparison

• SentinelOne Create and Manage Exclusion Policies

• SentinelOne Application Control Policies

• SentinelOne Control vs Complete Feature Comparison

• SentinelOne Create and Manage Exclusion Policies

• FBI Warns of ATM Jackpotting Surge as Losses Top $20

• Ransomware Forces University of Mississippi Medical Center

• FBI Warns Russian Intelligence Targeting Signal and WhatsApp in Mass Phishing Campaign

• AI-Driven Threats Accelerate: Agentic Attacks, Model

• OpenClaw AI Agent Flaws Enable Prompt Injection, 1-Click

• Shadow AI in SaaS: How Hidden AI Agents Are Enabling

• GlassWorm Escalates: 72 Malicious Open VSX Extensions Use

• GlassWorm ForceMemo: Stolen GitHub Tokens Used to Poison

• Attack on Axios Developer Tool Threatens Widespread

• Highly Critical Drupal Core Flaw Exposes PostgreSQL Sites

• Apache Struts Critical RCE via OGNL Injection Returns

• CVE-2018-25362: Twitter-Clone SQL Injection via follow.php

• OpenAI Temporarily Relaxes GPT-5.6 Sol Usage Limits Amid Demand Surge

• FortiGate Firewall Policy Management with PowerShell

• SentinelOne Application Control Policies

• Coolify CVE-2026-34047: Terminal WebSocket Authorization Bypass (CVSS 9.9)

• CVE-2026-11807: Critical Authorization Bypass in Event-Driven Ansible WebSocket API

• CVE-2026-12153: WP Learn Manager Plugin — Unauthenticated Authorization Bypass Allows Plugin Installation

• PromptSpy: First Android Malware to Weaponize Generative AI

• Android March 2026 Security Update Patches 129

• Android 17 Blocks Non-Accessibility Apps from Accessibility

• Former Cybersecurity Responders Plead Guilty to BlackCat Attacks

• Phobos Ransomware Admin Pleads Guilty — 1,000+ Victims

• DoJ Disrupts 3 Million-Device IoT Botnets Behind Record

• LMDeploy CVE-2026-33626 Flaw Exploited Within 13 Hours of Disclosure

• CVE-2026-20230: Cisco Unified CM WebDialer SSRF Now Exploited in the Wild

• SonicWall SMA 1000 Zero-Days Enable Unauthenticated RCE

• Microsoft Patch Tuesday, March 2026 Edition

• ConsentFix v3 Automates Azure OAuth Abuse With Mass

• Microsoft Rejects Critical Azure Vulnerability Report, No

• Cloudflare-Themed ClickFix Attack Drops Infiniti Stealer on Macs

• New Infinity Stealer Malware Grabs macOS Data via ClickFix

• In Other News: ChatGPT Data Leak, Android Rootkit, Water

• Funnel Builder WordPress Plugin Bug Exploited to Steal

• Funnel Builder Flaw Under Active Exploitation Enables

• CVE-2025-10656: WooCommerce Plugin Missing Authorization Allows Unauthenticated Admin Account Creation

• Ransom Busters: Ransomware Affiliate Poses as Data Recovery Firm

• Network Traffic Analysis with Zeek: From Deployment to Threat Detection

• Velociraptor DFIR Setup, Hunts, and Forensic Collection

• Actively Exploited Apache ActiveMQ Flaw Impacts 6,400

• Critical Unauthenticated Hook Injection in ComboBlocks WordPress Plugin

• CVE-2025-32432: Craft CMS Code Injection Vulnerability

• CVE-2026-10042: manga-image-translator RCE via Unsafe Python Deserialization

• CVE-2026-11849: IRM-IEI Remote Management Hardcoded Credentials

• CVE-2026-14894: WordPress Super Forms Plugin Critical Arbitrary File Upload

• Google: 90 Zero-Days Exploited in 2025 — Enterprise Tech

• New Progress ShareFile Flaws Can Be Chained in Pre-Auth RCE

• Fortinet FortiClient EMS Zero-Day CVE-2026-35616 Actively

• Researchers Disclose Critical n8n Flaws Enabling RCE and Credential Theft

• Edgecution: Malicious Edge Extension Escapes Browser Sandbox via Native Messaging

• n8n Sandbox Escape Lets Workflow Editors Run OS Commands as the n8n Process

• CISA Adds Zimbra XSS and SharePoint RCE to KEV; Cisco FMC

• CISA Adds CVE-2025-53521 to KEV After Active F5 BIG-IP APM

• CISA: New Langflow Flaw Actively Exploited to Hijack AI

• Navia Data Breach Impacts 2.7 Million People

• Cloudflare-Themed ClickFix Attack Drops Infiniti Stealer on Macs

• Cisco Patches Critical and High-Severity Vulnerabilities

• Spanish-Ukrainian Police Bust Gambling Ring That Exploited

• Pro-Ukraine Hacker Group Bearlyfy Targets Russian Companies

• Bearlyfy Hits Russian Firms with Custom GenieLocker

• Trivy Hack Spreads Infostealer via Docker, Triggers Worm

• VoidLink: AI-Generated Cloud-Native Malware Framework

• CVE-2025-69902: Critical Command Injection in kubectl-mcp-server

• Google Fixes Fourth Chrome Zero-Day Exploited in Attacks in 2026

• New Chrome Zero-Day CVE-2026-5281 Under Active Exploitation

• Microsoft Backpedals: Edge to Stop Loading Cleartext

• Over 10,000 Zimbra Servers Vulnerable to Ongoing XSS Attacks

• New Exim BDAT Vulnerability Exposes GnuTLS Builds to Potential Code Execution

• Microsoft Warns of Exchange Zero-Day Flaw Exploited in Attacks

• Six Proto6 Vulnerabilities in protobuf.js Expose Node.js Apps to RCE and DoS

• NPM 12 Will Change Script Execution Behavior to Prevent Supply Chain Attacks

• Amazon Links Debug, Chalk NPM Supply Chain Attacks to North Korean Hackers

• South Korean Startup Platform Breach Exposes Critical Key Management Failures

• CVE-2025-71327: Flowise Authentication Bypass Grants Full API Access

• CVE-2026-14450: MaaS API Auth Bypass via Forged HTTP Headers

• Iran Plunged Into Digital Darkness: Internet Drops to 4% in Cyberattack

• Operation Epic Fury Triggers Unprecedented Cyber Escalation

• Iran-Linked Hackers Breach FBI Director's Personal Email

• UNC6426 Weaponizes Old nx npm Compromise to Seize AWS Admin Access

• Trivy Security Scanner GitHub Actions Breached — 75 Tags

• Trivy Supply Chain Attack Targets CI/CD Secrets

• PolyShell Attacks Target 56% of All Vulnerable Magento

• WebRTC Skimmer Bypasses CSP to Steal Payment Data from E-Commerce Sites

• Hackers Use Pixel-Large SVG Trick to Hide Credit Card

• The State of Trusted Open Source Report: Key Findings for 2025

• Chainguard Unveils Factory 2.0 to Automate Hardening the Software Supply Chain

• Open Source DockSec Uses AI to Cut Through Vulnerability

• Building a Secure Homelab in 2026: Complete Guide

• Keycloak SSO: Self-Hosted Identity Provider for Your Homelab

• Build a Collaborative IPS with CrowdSec

• WEF Global Cybersecurity Outlook 2026 Warns of 'Permanent

• Edu-Tech Firm Instructure Discloses Cyber Incident, Probes

• Trellix Confirms Source Code Breach With Unauthorized

• Ericsson US Discloses Data Breach Affecting Employees and Customers

• Marquis Ransomware Breach: 672K People Exposed as Attack

• Hims & Hers Warns of Data Breach After Zendesk Support

• Oracle Pushes Emergency Fix for Critical Identity Manager

• Oracle Mitigates PeopleSoft Zero-Day Exploited in Data Theft Attacks

• ShinyHunters Exploits Oracle PeopleSoft Zero-Day to Breach Universities

• Claude Code Source Leaked via npm Packaging Error

• Anthropic's Claude Mythos Finds Thousands of Zero-Day Flaws

• Can Anthropic Keep Its Exploit-Writing AI Out of the Wrong

• ThreatsDay Bulletin: Defender 0-Day, SonicWall Brute-Force

• Hackers Bypass SonicWall VPN MFA Due to Incomplete Patching

• SonicWall Warns of SMA1000 Flaws Exploited in Zero-Day Attacks, Patch Now

• New Mirai Campaign Exploits RCE Flaw in End-of-Life D-Link

• CISA Adds 4 Exploited Flaws to KEV, Sets May 2026 Federal

• AryStinger Botnet Infected Thousands of D-Link Routers Worldwide

• EnOcean SmartServer Flaws Expose Buildings to Remote Hacking

• Exposed Fuel Tank Gauges Under Attack in the US

• Australian Sugar Producer Works to Restore Operations After Ransomware Attack

• Fastjson 1.x RCE Actively Exploited With No Patch Available

• Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patch Available

• Hackers Target US Firms in FastJson RCE Zero-Day Attacks

• Europol-Coordinated Action Dismantles Tycoon2FA — 330

• Operation PowerOFF Seizes 53 DDoS Domains, Exposes 3

• Police Seize 'First VPN' Service Used in Ransomware and Data Theft Attacks

• OpenClaw AI Agent Flaws Enable Prompt Injection, 1-Click

• Microsoft, Salesforce Patch AI Agent Data Leak Flaws

• New ChatGPT Lockdown Mode Limits Tools That Could Enable Data Exfiltration

• Critical Citrix NetScaler Memory Flaw Actively Exploited in Attacks

• Critical Fortinet FortiClient EMS Flaw Now Exploited in Attacks

• Over 14,000 F5 BIG-IP APM Instances Still Exposed to RCE

• Healthcare Software Firm CareCloud Informs SEC of Potential

• DORA and Operational Resilience: Credential Management as a

• New Initiative Tackles Security for End-of-Life Open Source Software

• Stolen Logins Are Fueling Everything From Ransomware to Nation-State Cyberattacks

• Why Simple Breach Monitoring Is No Longer Enough

• Your Next Breach Will Look Like Business as Usual

• Axios NPM Package Breached in North Korean Supply Chain

• China-Linked APT GopherWhisper Abuses Legitimate Services

• CryptoBandits Malware Doubles as a Backdoor, Abuses Tor for Stealthy C2

• Only 10% of SOCs Say They're Getting Excellent Value From AI — What the Second Wave Must Deliver

• Critical Splunk Enterprise Flaw Lets Attackers Run Code Without Authentication

• CVE-2026-17561: Critical Code Injection in Logsign SIEM

• TerminalFix ClickFix Variant Deploys Reverse-Tunnel Backdoor

• Microsoft Warns of TerminalFix Attacks Deploying Reverse Tunnels

• ClickFix Attacks Evolve to Abuse DNS nslookup for Payload Delivery

• Senator Demands AT&T, Verizon CEOs Testify Over Salt

• Ericsson US Discloses Data Breach Affecting Employees and Customers

• Telus Digital Confirms Massive Breach After ShinyHunters

• Japan Airlines Confirms Data Breach Affecting 28,000

• IDMerit KYC Data Breach Exposes 1 Billion Records Across 26

• Ericsson US Discloses Data Breach Affecting Employees and Customers

• Pro-Russian Hacktivists Launch Sustained Cyber Campaign

• Iran Plunged Into Digital Darkness: Internet Drops to 4% in Cyberattack

• Cloudflare 2026 Threat Report: 230 Billion Daily Threats as

• ShinyHunters Claims Mass Data Theft From 400 Firms via Salesforce Aura

• Microsoft, Salesforce Patch AI Agent Data Leak Flaws

• 7-Eleven Data Breach Confirmed After ShinyHunters Ransom

• AppsFlyer Web SDK Supply Chain Attack Spread

• Critical Flaw in protobuf.js Library Enables JavaScript

• New npm Supply Chain Attack Self-Spreads to Steal Developer

• Trivy Security Scanner GitHub Actions Breached — 75 Tags

• Trivy Vulnerability Scanner Breached to Push Infostealer

• Trivy Supply Chain Attack Targets CI/CD Secrets

• CISA: New Langflow Flaw Actively Exploited to Hijack AI

• Path Traversal Flaw in AI Dev Platform Langflow Exploited in Attacks

• Unpatched Langflow Flaw CVE-2026-5027 Exploited for Unauthenticated RCE

• File Read Flaw in Smart Slider Plugin Impacts 500K

• Avada Builder WordPress Plugin Flaws Allow Site Credential

• Critical Everest Forms Pro Flaw Exploited to Take Over WordPress Sites

• Payouts King Ransomware Uses QEMU Virtual Machines to Bypass Endpoint Security

• Microsoft Warns of New Defender Zero-Days Exploited in Attacks

• Trend Micro Warns of Apex One Zero-Day Exploited in the Wild

• Ubiquiti Patches Three Max-Severity UniFi OS Vulnerabilities

• Metabase SQLi Zero-Day Exploited in Customer Data-Theft Attacks

• CVE-2017-20230: Perl Storable Stack Overflow — CVSS 10.0

• IBM and Red Hat Commit $5 Billion to Secure Open Source Supply Chains Under "Project Lightwell"

• Anthropic's AI Finds Bugs. IBM Bets $5B It Can Fix Them.

• CVE-2025-36359: IBM DevOps Session Hijacking Vulnerability (CVSS 8.1)

• FIFA Bug Exposes World Cup Streams to Remote Takeover

• Forget Data Leakage: Shadow AI's Real Threat Is Access Control

• CVE-2018-25391: HaPe PKH 1.1 Unauthenticated Record Deletion via Missing Authorization

• New Tool Traces AI-Generated Videos Back to Their Source

• Velociraptor DFIR Setup, Hunts, and Forensic Collection

• SentinelOne Control vs Complete Feature Comparison

• CVE-2009-10007: Catalyst::Plugin::Authentication Session Fixation

• CVE-2011-10043: Perl Module::Load Arbitrary Module Injection Resurfaces

• CVE-2017-20230: Perl Storable Stack Overflow — CVSS 10.0

• Cloud Security Startup Native Exits Stealth With $42

• Eclypsium Raises $25 Million to Expand Device Supply Chain

• Exaforce Raises $125 Million for Agentic SOC Platform

• Shadow AI in SaaS: How Hidden AI Agents Are Enabling

• Device Code Phishing Attacks Surge 37x as New Kits Spread

• Vercel Employee's AI Tool Access Led to Data Breach

• Oracle Pushes Emergency Fix for Critical Identity Manager

• Hackers Now Exploit Critical F5 BIG-IP Flaw in Attacks

• Fortinet Patches Actively Exploited CVE-2026-35616 in FortiClient EMS

• CISA Adds Apple DarkSword iOS Exploits, Craft CMS, and Laravel Livewire Flaws to KEV Catalog

• DarkSword GitHub Leak Threatens to Turn Elite iPhone

• TA446 Deploys DarkSword iOS Exploit Kit in Targeted

• Hacker Walks Away with $24.5 Million After Breaching Resolv

• Hacker Charged with Stealing $53 Million from Uranium

• Crypto Platform Drift Suspends Services After Hundreds of Millions Stolen

• Supply Chain Attack Hits Widely-Used AI Package, Risking

• Backdoored Telnyx PyPI Package Pushes Malware Hidden in WAV

• TeamPCP Pushes Malicious Telnyx Versions to PyPI, Hides

• Dutch Court Threatens xAI with Fines Over Grok's

• Italian Regulator Fines Financial Giant $36 Million for Data Protection Failures

• Italian Regulator Fines National Postal Service Orgs $15

• The State of Trusted Open Source Report: Key Findings for 2025

• Axios npm Hack Used Fake Teams Error Fix to Hijack

• 13-Year-Old Bug in ActiveMQ Lets Hackers Remotely Execute

• Adobe Reader Zero-Day Exploited via Malicious PDFs Since

• Hackers Exploiting Acrobat Reader Zero-Day Flaw Since

• Adobe Patches Actively Exploited Zero-Day That Lingered for Months

• Anthropic MCP Design Vulnerability Enables RCE, Threatening

• 2-Click Cursor Exploit Enables Dev Environment Takeover

• Ruflo MCP Flaw Lets Unauthenticated Attackers Run Commands and Poison AI Memory

• Kyber Ransomware Gang Uses Post-Quantum Encryption to Target Windows and ESXi

• Ivanti, Fortinet, SAP, VMware, n8n Patch RCE, SQL

• Hackers Earn $1,298,250 for 47 Zero-Days at Pwn2Own Berlin

• CVE-2015-20115: RealtyScript 4.0.2 Stored XSS via File

• CVE-2026-10081: Unlimited Elements for Elementor Stored XSS via Google Reviews

• CVE-2026-15002: Stored XSS in Autopay WooCommerce Plugin for WordPress

• Ex-L3Harris Executive Pleads Guilty to Selling Eight

• Former Cybersecurity Responders Plead Guilty to BlackCat Attacks

• New Jersey Men Sentenced to Combined 17 Years for Running

• ShinyHunters Dumps Harvard and UPenn Data After Ransom

• ShinyHunters Breach Infinite Campus — K-12 Platform Serving

• Edu-Tech Firm Instructure Discloses Cyber Incident, Probes

• AT&T Breach Data Resurfaces: 176 Million Records with Fully

• IDMerit KYC Data Breach Exposes 1 Billion Records Across 26

• Ericsson US Discloses Data Breach Affecting Employees and Customers

• Europol-Coordinated Action Dismantles Tycoon2FA — 330

• Spanish-Ukrainian Police Bust Gambling Ring That Exploited

• Operation Synergia III: Police Sinkhole 45,000 IPs in Global Cybercrime Crackdown

• Eclypsium Raises $25 Million to Expand Device Supply Chain

• Flipper Zero Firmware Development Continues With Community Help

• Six U-Boot Flaws Could Enable Stealthy Firmware Attacks on Embedded Devices

• CanisterWorm: First Blockchain-Powered Self-Spreading Worm

• Hacker Walks Away with $24.5 Million After Breaching Resolv

• Google Slashes Quantum Resource Requirements for Breaking

• Device Code Phishing Attacks Surge 37x as New Kits Spread

• ConsentFix v3 Automates Azure OAuth Abuse With Mass

• Tycoon2FA Hijacks Microsoft 365 Accounts via Device-Code

• Why Changing Passwords Doesn't End an Active Directory

• Microsoft: Domain Controller Lookup May Fail on Windows

• Can You Enforce Strong Active Directory Password Rules Without Frustrating Users?

• Cisco Patches Another SD-WAN Zero-Day, the Sixth Exploited

• Cisco Catalyst SD-WAN Controller Auth Bypass Actively

• Cisco Warns of Unpatched SD-WAN Zero-Day Exploited in Attacks

• CVE-2026-33669: SiYuan Unauthenticated Document Content

• CVE-2026-33670: SiYuan readDir Path Traversal Notebook

• CVE-2026-40259 — SiYuan Knowledge Management Authorization

• SentinelOne Control vs Complete Feature Comparison

• SentinelOne Deep Visibility Threat Hunting

• SentinelOne File Fetch and Forensic File Collection

• WormGPT Hacked: 19,000 Cybercriminal AI Platform Users

• AT&T Breach Data Resurfaces: 176 Million Records with Fully

• Paid AI Accounts Are Now a Hot Underground Commodity

• AI-Armed Amateur Hacker Compromises 600+ FortiGate

• FortiBleed Leak Exposes Fortinet VPN Credentials for 73,000 Devices

• FortiBleed Campaign Used Custom FortiGate Sniffer to Steal Credentials

• Cognizant TriZetto Breach Exposes Health Data of 3.4

• 3.1 Million Impacted by QualDerm Partners Data Breach

• 250,000 Affected by Data Breach at Nacogdoches Memorial

• Dutch Finance Ministry Takes Treasury Banking Portal

• Healthcare IT Provider ChipSoft Hit by Ransomware Attack

• Dutch Hospitals Disrupted After Ransomware Hits Healthcare

• Black Hat USA 2026: What to Expect from the Year''s Biggest

• 1 Billion CISA KEV Records Reveal Human-Scale Security Has

• Analysis of 216M Security Findings Shows a 4x Increase in Critical Risk (2026 Report)

• Commerce Setting Up New AI Export Regime to Push Adoption

• Google Detects First AI-Generated Zero-Day Exploit in the Wild

• Google: Hackers Used AI to Develop Zero-Day Exploit for Web

• Your Next Breach Will Look Like Business as Usual

• Cybersecurity Evolution: From Perimeter Defense to AI-Native Security

• Beyond Assume-Breach: How AI-Native Security Will Reshape Enterprise Defense

• cPanel & WHM Emergency Update Fixes Critical Auth Bypass Bug

• Critical cPanel and WHM Bug Exploited as Zero-Day, PoC Now

• Critical cPanel Flaw Mass-Exploited in 'Sorry' Ransomware

• Microsoft Patches 138 Vulnerabilities Including DNS and Netlogon RCE Flaws

• 'Underminr' Vulnerability Lets Attackers Hide Malicious

• Hackers Hijack Hotel Wi-Fi DNS to Steal Microsoft 365 Accounts

• Drupal Patches Highly Critical Vulnerability Exposing

• CISA Warns of Actively Exploited Joomla JCE Flaw Allowing PHP Code Execution

• Australia Warns of Global Campaign Targeting Vulnerable CMS Platforms

• CVE-2021-4473: Tianxin Behavior Management System

• CVE-2026-0596: MLflow Command Injection via Unsanitized

• CVE-2026-12486: GeoVision GV-I/O Box 4E OS Command Injection via libNetSetObj.so

• Weekly Recap: Chrome 0-Days, Router Botnets, AWS Breach

• Weekly Recap: CI/CD Backdoor, FBI Buys Location Data

• Weekly Recap: Telecom Sleeper Cells, LLM Jailbreaks, Apple

• Trivy Hack Spreads Infostealer via Docker, Triggers Worm

• Weekly Recap: CI/CD Backdoor, FBI Buys Location Data

• Anti-Piracy Coalition Takes Down AnimePlay App with 5

• Google Slashes Quantum Resource Requirements for Breaking

• Apple Open-Sources Quantum-Resistant Encryption Code

• Security Roundup: OpenAI Open Sources Codex Security CLI, AWS Pins NPM Attacks on North Korea, Anthropic Mythos Cracks Crypto

• Authorities Disrupt APT28 Router DNS Hijacks Targeting

• ThreatsDay Bulletin: Linux Rootkits, Router 0-Day, AI

• Acer Working to Patch Max Severity Zero-Days in Wave 7 Routers

• Actively Exploited nginx-ui Flaw (CVE-2026-33032) Enables

• 18-Year-Old NGINX Rewrite Module Flaw Enables

• 18-Year-Old NGINX Vulnerability Allows DoS and Potential RCE

• cPanel & WHM Emergency Update Fixes Critical Auth Bypass Bug

• Chinese Hackers Hijack Auth Flow, Spy on Isolated Network for a Decade

• Critical Keycloak Flaw Lets Attackers Reset Any Account Password Without Authentication

• Ubiquiti Patches Three Max-Severity UniFi OS Vulnerabilities

• UniFi OS Command Injection via Improper Input Validation

• UniFi OS Improper Access Control — Unauthorized System

• HollowByte: 11-Byte Payload Triggers Memory Bloat DoS on OpenSSL Servers

• Google Begins Post-Quantum Cryptography Rollout Across

• CVE-2026-35560: Amazon Athena ODBC Driver Fails Certificate

• Named Pipes Under Attack: Securing Windows Interprocess Communication

• Lynis: Linux Security Auditing and Hardening in Practice

• Nginx + ModSecurity WAF: Protecting Web Apps with OWASP CRS

• CVE-2016-20030: ZKTeco ZKBioSecurity 3.0 Username

• CVE-2025-47813: Wing FTP Server Path Disclosure Enables RCE

• CVE-2026-33669: SiYuan Unauthenticated Document Content

• CVE-2018-25362: Twitter-Clone SQL Injection via follow.php

• CVE-2024-46636: NASA EOSDIS MODAPS v8.1 SQL Injection

• CVE-2026-11334: SQL Injection in College Management System

• CVE-2024-51311: Critical Stack Overflow in Tenda TX9 Router Firmware

• CVE-2026-38577: Tenda HG21 Hardcoded Admin Credentials

• Tenda A15 UploadCfg Stack Buffer Overflow (CVE-2026-4567)

• CVE-2025-2749: Kentico Xperience Path Traversal

• CVE-2025-43510: Apple Multiple Products Improper Locking

• CVE-2026-10167: School Student Management System Cookie Auth Bypass

• CVE-2026-10187: Totolink N300RH Stack Buffer Overflow in WiFi Config

• CVE-2026-31027: TOTOlink A3600R Buffer Overflow in setAppEasyWizardConfig

• CVE-2026-36841: TOTOLINK N200RE V5 Command Injection

• HellCat Ransomware Group Breaches Ascom, Exfiltrates 44GB

• Microsoft Shares Fix for Windows C: Drive Access Issues on Samsung PCs

• Microsoft Halts Forced Global Rollout of Microsoft 365

• Japanese Semiconductor Giant Advantest Hit by Ransomware

• Mazda Discloses Security Breach Exposing Employee and Partner Data

• Hackers Exploited KnowledgeDeliver Zero-Day for Web Shell

• Phobos Ransomware Admin Pleads Guilty — 1,000+ Victims

• Tables Turn on 'The Gentlemen' RaaS Gang With Data Leak

• Who Runs the Ransomware Group 'The Gentlemen'?

• OpenAI Says ChatGPT Ads Are Not Rolling Out Globally For Now

• In Other News: ChatGPT Data Leak, Android Rootkit, Water

• ChatGPT Rolls Out New $100 Pro Subscription to Challenge

• Cloud Security Startup Native Exits Stealth With $42

• Eclypsium Raises $25 Million to Expand Device Supply Chain

• Socket Raises $60 Million at $1 Billion Valuation

• Cegedim Santé Breach Exposes 15.8 Million French Healthcare

• Elon Musk Fails to Appear for Questioning by French Police

• French Government Agency France Titres Confirms Data Breach

• Trivy Hack Spreads Infostealer via Docker, Triggers Worm

• Mini Shai-Hulud Worm Compromises TanStack, Mistral AI

• Worm Redux: Fresh Mini Shai-Hulud Infections Bite npm

• Supply Chain Attack Hits Widely-Used AI Package, Risking

• Dutch Court Threatens xAI with Fines Over Grok's

• European Parliament Rejects Extension of CSAM Scanning

• Google Fixes Fourth Chrome Zero-Day Exploited in Attacks in 2026

• New Chrome Zero-Day CVE-2026-5281 Under Active Exploitation

• Autonomous AI Tool Finds 2-Year-Old RCE Flaw in Redis (CVE-2026-23479)

• 6-Year Ransomware Campaign Targets Turkish Homes and SMBs

• CVE-2026-4149: Sonos Era 300 Unauthenticated RCE via SMB

• Why Every Business Needs Cyber Insurance in 2026

• Critical Unpatched Flaw Leaves Hugging Face LeRobot Open to Unauthenticated RCE

• Fake OpenAI Repository on Hugging Face Pushes Infostealer

• Hugging Face Warns an Autonomous AI Agent Hacked Its Network

• In Other News: Scattered Spider Member Arrested, SOC

• One Missed Threat Per Week: What 25M Alerts Reveal About

• Exaforce Raises $125 Million for Agentic SOC Platform

• CISA Gives Federal Agencies Four Days to Patch Actively

• Ivanti Customers Confront Yet Another Actively Exploited

• Ivanti Warns of New EPMM Flaw Exploited in Zero-Day Attacks

• UK Water Utility Fined £963,900 After Cl0p Lurked

• UK Fines Water Supplier $1.3M for Exposing Data of 664K

• GCHQ Chief: AI Is an 'Unstoppable Force' with Offensive and Defensive Cyber Ramifications

• New Exim BDAT Vulnerability Exposes GnuTLS Builds to Potential Code Execution

• Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git

• CVE-2025-43510: Apple Multiple Products Improper Locking

• Ubiquiti Patches Three Max-Severity UniFi OS Vulnerabilities

• Weekly Recap: Chrome 0-Day, UniFi Exploits, macOS Stealers, VPN Flaw and More

• CVE-2026-34909 — UniFi OS Path Traversal Leading to Account

• Security of 100 AI Agents Tested and Ranked – What You Need to Know

• Anthropic Says Claude Mistook the Open Internet for a CTF and Breached Three Organizations

• Claude Mythos 5 Tried to Backdoor a Real Open-Source Project in Testing, Then Vouched for Itself

• CISA Orders Feds to Patch Max Severity Joomla Plugin Flaw by Friday

• CISA Warns of Actively Exploited Joomla JCE Flaw Allowing PHP Code Execution

• CISA Warns of Actively Exploited RCE Flaws in Joomla Extensions

• New CSS Attacks Can Break Webmail Defenses to Steal Passwords and Tokens

• NovaCookies Campaigns Abuse Genuine Docusign Notifications to Steal Microsoft 365 Sessions

• JSCeal Malware Hijacks Google Sessions via Stolen Cookies

• Critical Flaws Discovered in Belgian eID Software Used by 2 Million People

• Password Spraying Attacks Surge 155x as Hackers Exploit MFA Gaps

• WhatsApp Adds Multiple Passkeys for Phishing-Resistant Sign-Ins

• Google: 90 Zero-Days Exploited in 2025 — Enterprise Tech

• Black Hat USA 2026: What to Expect from the Year''s Biggest

• GPUBreach: New Rowhammer Attack on GPU GDDR6 Memory Enables

• Spanish-Ukrainian Police Bust Gambling Ring That Exploited

• US Sentences Nigerian National to 7 Years in $6 Million

• Money Launderer for Crypto Thieves Given 5-Year Prison

• The Zero-Day Scramble Is Avoidable: Why Attack Surface

• 1 Billion CISA KEV Records Reveal Human-Scale Security Has

• Analysis of 216M Security Findings Shows a 4x Increase in Critical Risk (2026 Report)

• CISA Flags Actively Exploited n8n RCE Bug as 24,700

• Recent Apache ActiveMQ Vulnerability Exploited in the Wild

• Adobe Patches Actively Exploited Zero-Day That Lingered for Months

• Malaysia Airlines Listed by Qilin Ransomware Group

• Die Linke German Political Party Confirms Data Stolen by Qilin Ransomware

• CISA Gives Feds 3 Days to Patch Check Point VPN Bug Exploited as Zero-Day

• US Sentences Nigerian National to 7 Years in $6 Million

• FBI: Americans Lost a Record $21 Billion to Cybercrime Last

• FBI: Cybercrime Losses Neared $21 Billion in 2025

• PolyShell Attacks Target 56% of All Vulnerable Magento

• WebRTC Skimmer Bypasses CSP to Steal Payment Data from E-Commerce Sites

• Hackers Use Pixel-Large SVG Trick to Hide Credit Card

• European Parliament Rejects Extension of CSAM Scanning

• Broken VECT 2.0 Ransomware Acts as a Data Wiper for Large

• In Other News: Big Tech vs Canada Encryption Bill, Cisco's

• Italian Regulator Fines Financial Giant $36 Million for Data Protection Failures

• Italian Regulator Fines National Postal Service Orgs $15

• Coupang Hit with Record $409 Million Data Breach Fine in South Korea

• Italian Regulator Fines Financial Giant $36 Million for Data Protection Failures

• European Commission Accuses Meta of Breaching Child Safety

• UK to Require Government ID or Face Scan Before Creating Social Media Accounts

• The State of Secrets Sprawl 2026: 9 Takeaways for CISOs

• OWASP Incubator Project Helps Developers Find and Fix Vulnerable Dependencies in Seconds

• New Initiative Tackles Security for End-of-Life Open Source Software

• Weekly Recap: Telecom Sleeper Cells, LLM Jailbreaks, Apple

• Claude Fable 5 Isn't Permanently Leaving Subscriptions, Anthropic Says

• Claude Fable Relaunch Disappoints Users With Nerfed Performance

• Attack on Axios Developer Tool Threatens Widespread

• Axios Supply Chain Attack Pushes Cross-Platform RAT via Compromised npm Account

• CERT-UA Impersonation Campaign Spread AGEWHEEZE Malware to 1 Million Emails

• Hackers Exploit CVE-2025-55182 to Breach 766 Next.js Hosts

• Hackers Exploit React2Shell in Automated Credential Theft

• Next.js Creator Vercel Hacked

• Microsoft Drops Its Second-Largest Monthly Patch Batch on Record

• Microsoft Issues Patches for SharePoint Zero-Day and 168

• Over 1,300 Microsoft SharePoint Servers Vulnerable to Ongoing Spoofing Attacks

• Vercel Confirms Breach as Hackers Claim to Be Selling

• Next.js Creator Vercel Hacked

• Vercel Breach Tied to Context AI Hack Exposes Limited

• Microsoft to Roll Out Entra Passkeys on Windows in Late

• ConsentFix v3 Automates Azure OAuth Abuse With Mass

• Breach at the Beach: Play the Ultimate Entra ID CTF

• SAP-Related npm Packages Compromised in Credential-Stealing

• TeamPCP Hits SAP npm Packages With 'Mini Shai-Hulud' Supply

• 1,800 Hit in Mini Shai-Hulud Attack on SAP, Lightning, and Intercom

• Mini Shai-Hulud Worm Compromises TanStack, Mistral AI

• Worm Redux: Fresh Mini Shai-Hulud Infections Bite npm

• OpenAI Asks macOS Users to Update After TanStack npm Supply

• West Pharmaceutical Services Hit by Disruptive Ransomware

• West Pharmaceutical Warns of Ransomware Attack Impacting

• Foxconn Confirms Cyberattack Claimed by Nitrogen Ransomware

• IBM and Red Hat Commit $5 Billion to Secure Open Source Supply Chains Under "Project Lightwell"

• Miasma Supply Chain Attack Compromises Red Hat npm Packages with Credential-Stealing Worm

• CVE-2026-10059: Multicluster Engine ClusterCurator Token Escalation (CVSS 9.1)

• Public PoC Released for Critical libssh2 CVE-2026-55200 Client-Side SSH Flaw

• Attackers Hijack MikroTik Routers Through Internet-Exposed SSH Without Authentication

• CVE-2025-15638: Net::Dropbear Bundles Vulnerable

• CVE-2018-25391: HaPe PKH 1.1 Unauthenticated Record Deletion via Missing Authorization

• CVE-2025-10656: WooCommerce Plugin Missing Authorization Allows Unauthenticated Admin Account Creation

• Critical RCE in Hitachi Vantara Pentaho via Unrestricted

• CVE-2025-12886: Oxygen Theme SSRF Allows Unauthenticated

• CVE-2026-13439: WordPress Easy Form Builder Unauthenticated Privilege Escalation (CVSS 9.8)

• CVE-2026-14545: TrueBooker WordPress Plugin Lets Anyone Take Over Admin Accounts

• CVE-2025-36568: Dell PowerProtect Data Domain BoostFS

• CVE-2026-35155: Dell iDRAC10 Race Condition Enables

• Dell ECS and ObjectScale: Hard-Coded Credentials

• Cline CLI Supply Chain Attack Installs Unauthorized

• OpenClaw AI Agent Flaws Enable Prompt Injection, 1-Click

• More Malicious OpenClaw Skills Threaten AI Supply Chain

• CISA Flags Actively Exploited n8n RCE Bug as 24,700

• CISA Orders Federal Agencies to Patch n8n RCE Flaw

• Researchers Disclose Critical n8n Flaws Enabling RCE and Credential Theft

• Researchers Disclose Critical n8n Flaws Enabling RCE and Credential Theft

• Microsoft Hit by Back-to-Back Outages: M365 Admin Center

• CVE-2026-30836: Step CA SCEP UpdateReq Allows

• Telus Digital Confirms Massive Breach After ShinyHunters

• In Other News: Big Tech vs Canada Encryption Bill, Cisco's

• Alleged Kimwolf Botmaster ''Dort'' Arrested, Charged in U.S. and Canada

• OpenClaw AI Agent Flaws Enable Prompt Injection, 1-Click

• AI Flaws in Amazon Bedrock, LangSmith, and SGLang Enable

• Trigona Ransomware Deploys Custom CLI Exfiltration Tool in Active Attacks

• CISA Adds Zimbra XSS and SharePoint RCE to KEV; Cisco FMC

• Over 10,000 Zimbra Servers Vulnerable to Ongoing XSS Attacks

• Zimbra Urges Customers to Patch Critical Web Client XSS Flaw Exploited in the Wild

• Trivy Supply Chain Attack Targets CI/CD Secrets

• Blast Radius of TeamPCP Attacks Expands Amid Hacker

• 6-Year Ransomware Campaign Targets Turkish Homes and SMBs

• AI Slashes Cyberattack Exploit Timelines From Years to Days

• New Linux 'Dirty Frag' Zero-Day Gives Root on All Major

• Unpatchable 'usbliter8' Exploit Breaks Apple A12 and A13 SecureROM Boot Chain

• Cisco Source Code Stolen in Trivy-Linked Dev Environment

• Trellix Confirms Source Code Breach With Unauthorized

• Trellix Source Code Breach Claimed by RansomHouse Hackers

• Adversaries Exploit Vacant Homes to Intercept Mail in Hybrid Cybercrime

• Ransomware Actors Show Up In Person to Steal Law Firm Data

• Japanese Energy Firm Loses Drive with Data of 10.9 Million Clients

• 250,000 Affected by Data Breach at Nacogdoches Memorial

• Medtronic Confirms Breach After Hackers Claim 9 Million

• Medtronic Hack Confirmed After ShinyHunters Threatens Data

• Feds Disrupt IoT Botnets Behind Huge DDoS Attacks

• Germany Doxes "UNKN," Head of RU Ransomware Gangs REvil

• Microsoft Patch Tuesday, March 2026 Edition

• NAKIVO v11.2: Ransomware Defense, Faster Replication

• New Veeam Vulnerability Exposes Backup Servers to RCE Attacks

• Veeam Backup and Replication RCE Flaw Lets Domain Users Run Remote Code

• Microsoft to Roll Out Entra Passkeys on Windows in Late

• Tycoon2FA Hijacks Microsoft 365 Accounts via Device-Code

• Every AI Agent Is an Identity. Most Organizations Don't Treat Them That Way

• New BlackFile Extortion Group Linked to Surge of Vishing

• Zara Data Breach Exposed Personal Information of 197,000

• 7-Eleven Data Breach Confirmed After ShinyHunters Ransom

• American Utility Firm Itron Discloses Breach of Internal IT

• West Pharmaceutical Warns of Ransomware Attack Impacting

• Coca-Cola Fairlife Ransomware Attack Halts All US Dairy Production

• Home Security Giant ADT Data Breach Affects 5.5 Million

• DocketWise Data Breach Impacts 143,000 Individuals

• IMA Diligence Services Data Breach Impacts 525,000 People

• Money Launderer for Crypto Thieves Given 5-Year Prison

• Former Incident Responders Sentenced to 4 Years for Ransomware Attacks on Clients

• Cyber Incident Responders Sentenced to 4 Years for Carrying

• Edu-Tech Firm Instructure Discloses Cyber Incident, Probes

• Hackers Exploited KnowledgeDeliver Zero-Day for Web Shell

• KnowledgeDeliver Flaw Exploited as Zero-Day to Install Web

• 18-Year-Old NGINX Rewrite Module Flaw Enables

• 18-Year-Old NGINX Vulnerability Allows DoS and Potential RCE

• PoC Code Published for Critical NGINX Vulnerability

• 18-Year-Old NGINX Vulnerability Allows DoS and Potential RCE

• Six Proto6 Vulnerabilities in protobuf.js Expose Node.js Apps to RCE and DoS

• HollowByte: 11-Byte Payload Triggers Memory Bloat DoS on OpenSSL Servers

• NGINX CVE-2026-42945 Exploited in the Wild, Causing Worker

• Critical FortiClient EMS Vulnerability Exploited in Fresh Attacks

• WP Maps Pro Bug Exploited to Create Admin Accounts on WordPress Sites

• Grafana Confirms Breach After Hackers Claim They Stole Data

• Grafana Says Stolen GitHub Token Let Hackers Steal Codebase

• Grafana Breach Caused by Missed Token Rotation After

• Data Exposure Flaws in Dify AI Platform Put 1 Million+ App Tenants at Risk

• Coolify CVE-2026-34037: CVSS 9.9 IDOR Enables Cross-Team Resource Takeover

• CVE-2026-25197: IDOR Flaw Lets Authenticated Users Access

• OpenAI Previews GPT-5.6 Sol Under Government-Gated Rollout with Stronger Cyber Safeguards

• Anthropic's Claude Breached 3 Orgs, Uploaded PyPI Malware During Tests

• Anthropic Says Claude Mistook the Open Internet for a CTF and Breached Three Organizations

• CVE-2016-20026: ZKTeco ZKBioSecurity 3.0 Hardcoded Tomcat

• CVE-2025-63823: My Safetipin Android App Exposes Hardcoded Credentials (CVSS 9.8)

• CVE-2026-11849: IRM-IEI Remote Management Hardcoded Credentials

• CVE-2018-25272: ELBA5 5.8.0 RCE via Default Database

• CVE-2026-19001: MongoDB BI Connector ODBC Driver Buffer Overflow (CVSS 9.8)

• CVE-2026-24013: Apache IoTDB Authentication Bypass via Forged Session ID

• CVE-2021-47933: WordPress MStore API 2.0.6 Arbitrary File

• CVE-2026-15162: WordPress Object Sync for Salesforce — SQLi via REST API

• CVE-2026-16149: Security Hardener WordPress Plugin Bypasses All REST API Authorization

• CVE-2026-10178: SQL Injection in Online Music Site 1.0 Admin Panel

• CVE-2026-5017: SQL Injection in code-projects Simple Food

• CVE-2026-5018: SQL Injection in code-projects Simple Food

• CVE-2026-15265: Tenable Agent Path Traversal — Arbitrary File Write & RCE (CVSS 9.1)

• CVE-2026-26026: GLPI Template Injection Enables

• CVE-2026-31986: Apache OFBiz Hard-Coded Cryptographic Key

• FBI Warns of ATM Jackpotting Surge as Losses Top $20

• Cryptocurrency ATM Giant Bitcoin Depot Reports $3.6 Million

• Cybercriminals Target Accountants to Drain Russian Firms'

• APT28 Operation MacroMaze: Russia-Linked Hackers Hit

• Authorities Disrupt APT28 Router DNS Hijacks Targeting

• APT28 Deploys PRISMEX Malware in Campaign Targeting Ukraine

• The World's First Transatlantic Fiber Cable Is Being Pulled

• Police Seize 'First VPN' Service Used in Ransomware and Data Theft Attacks

• DeadLock Ransomware Uses Blockchain to Resist Infrastructure Takedown

• LexisNexis Confirms Cloud Breach Exposing 400K User

• Hackers Exploit React2Shell in Automated Credential Theft

• CVE-2026-13550: SQL Injection in itsourcecode Baptism Information Management System 1.0

• Google: 90 Zero-Days Exploited in 2025 — Enterprise Tech

• DarkSword GitHub Leak Threatens to Turn Elite iPhone

• Bulgaria Allowed Surveillance Tech Firm to Sell Products to Repressive Regimes, Report Says

• Cognizant TriZetto Breach Exposes Health Data of 3.4

• Hims & Hers Breach Exposes the Most Sensitive Kinds of Patient PHI

• 716,000 Impacted by OpenLoop Health Data Breach

• Veeam Patches Five Critical RCE Vulnerabilities Exposing

• New Veeam Vulnerability Exposes Backup Servers to RCE Attacks

• Veeam Backup and Replication RCE Flaw Lets Domain Users Run Remote Code

• Stryker Cyberattack Wiped Tens of Thousands of Devices — No

• Moldova's Health Insurance Agency Reports Possible Data

• Cyberattack on Russian Tech Firm Astral Disrupts Business and Government Services for a Week

• Mazda Discloses Security Breach Exposing Employee and Partner Data

• Nissan Says Stolen Data Came from Third-Party Vendor After

• GM to Pay Over $12 Million in Largest-Ever CCPA Fine Over

• Supply Chain Attack Hits Widely-Used AI Package, Risking

• Mercor Confirms Security Incident Tied to LiteLLM Supply

• The Good, the Bad and the Ugly in Cybersecurity – Week 14

• New RoadK1ll WebSocket Implant Used to Pivot on Breached

• Coolify CVE-2026-34047: Terminal WebSocket Authorization Bypass (CVSS 9.9)

• Coolify CVE-2026-34048: Low-Privilege Terminal Escalation via WebSocket (CVSS 9.9)

• Claude Code Source Code Accidentally Leaked in NPM Package

• Claude Code Leak Used to Push Infostealer Malware on GitHub

• Critical Vulnerability in Claude Code Emerges Days After

• ThreatsDay Bulletin: Hybrid P2P Botnet, 13-Year-Old Apache

• In Other News: Satellite Cybersecurity Act, $90K Chrome

• ThreatsDay Bulletin: Defender 0-Day, SonicWall Brute-Force

• European Commission Accuses Meta of Breaching Child Safety

• Hackers Used Meta's AI Support Bot to Seize Instagram Accounts

• WhatsApp Is Finally Getting Usernames to Help Keep Phone Numbers Private

• Critical Apache HTTP/2 Flaw (CVE-2026-23918) Enables DoS

• AI-Assisted HTTP Terminator Finds Novel Desync Techniques and Apache Zero-Day

• CVE-2025-55017: Apache IoTDB Critical Path Traversal Vulnerability

• Hackers Exploited KnowledgeDeliver Zero-Day for Web Shell

• KnowledgeDeliver Flaw Exploited as Zero-Day to Install Web

• KnowledgeDeliver LMS Flaw Exploited to Deploy Godzilla and Cobalt Strike

• Frontier AI Reinforces the Future of Modern Cyber Defense

• Claude Fable 5 Stays Free for Paid Users Until July 19 as Anthropic Buys More Time

• OpenAI Temporarily Relaxes GPT-5.6 Sol Usage Limits Amid Demand Surge

• Metabase Zero-Day Exploited in Wild Allows Admin Access Without Authentication

• CVE-2026-1579: MAVLink Protocol Unauthenticated Shell Access

• CVE-2026-27053: Critical PHP Object Injection in Broadcast Live Video Plugin

• Critical GiveWP Flaw Lets Hackers Run Server Commands

• CVE-2026-14637: PHP Deserialization RCE in CodeIgniter Ecommerce Bootstrap Shopping Cart

• CVE-2026-15962: PHP Object Injection in Fluent Forms Pro (CVSS 8.8)

• CVE-2025-57735: Apache Airflow JWT Token Not Invalidated on Logout

• CVE-2026-1114: lollms JWT Weak Secret Key Allows Admin

• MStore API Plugin: Unauthenticated JWT Forgery Auth Bypass

• CVE-2026-19874: Critical Heap Buffer Overflow in Metal Gear Online 3

• CVE-2026-20889: LibRaw x3f_thumb_loader Heap Buffer

• CVE-2026-20911: LibRaw HuffTable::initval Heap Buffer

• CVE-2026-40621: ELECOM Wireless LAN Access Point

• CrowdSec: Deploy a Community-Powered Intrusion Prevention System

• How to Set Up BGP Monitoring and Route Alerts

• GeoVision LPC Camera Critical RCE via thttpd Buffer Overflow (CVE-2026-57878)

• GeoVision LPC Camera Critical RCE via ssvr RTSP Auth Buffer Overflow (CVE-2026-57879)

• GeoVision LPC Camera Critical RCE via ssvr RTSP Digest Auth Buffer Overflow (CVE-2026-57880)

• FortiGate Security Hardening: Best Practices for Enterprise

• Windows Server Hardening: A Complete Security Guide for Enterprises

• AWS Security Hub: Centralized Security Findings

• How to Set Up BGP Monitoring and Route Alerts

• Network Monitoring Basics: Detect Threats Before They Spread

• Build a Production Monitoring Stack with Prometheus and Grafana

• Google's $32 Billion Wiz Acquisition Clears Final Hurdle as

• CERT-EU: European Commission Hack Exposes Data of 30 EU

• DORA and Operational Resilience: Credential Management as a

• ShinyHunters Dumps Harvard and UPenn Data After Ransom

• Deepfake Voice Attacks Are Outpacing Defenses: What

• Weaponized AI: The New Frontier of Fraud and Identity

• Persona Source Code Leak Exposes Hidden Biometric

• Citizen Lab: Law Enforcement Used Webloc to Track 500

• Bulgaria Allowed Surveillance Tech Firm to Sell Products to Repressive Regimes, Report Says

• Cline CLI Supply Chain Attack Installs Unauthorized

• Microsoft Suspends Dev Accounts for High-Profile Open

• Critical Gemini CLI Flaw Enabled Host Code Execution

• CrowdStrike 2026 Threat Report: eCrime Breakout Time Falls

• CrowdStrike Dismantles Glassworm Botnet Targeting Open-Source Supply Chain

• GlassWorm Malware Takedown Disrupts Developer Supply Chain Attack Infrastructure

• Europol-Coordinated Action Dismantles Tycoon2FA — 330

• Why Simple Breach Monitoring Is No Longer Enough

• Tycoon2FA Hijacks Microsoft 365 Accounts via Device-Code

• Windows 11 February Update Breaks C:\ Drive Access on Samsung PCs

• Microsoft Now Force-Upgrades Unmanaged Windows 11 24H2 PCs

• Microsoft Rolls Out Revamped Windows Insider Program

• Windows 11 February Update Breaks C:\ Drive Access on Samsung PCs

• Microsoft Shares Fix for Windows C: Drive Access Issues on Samsung PCs

• CISA Adds 4 Exploited Flaws to KEV, Sets May 2026 Federal

• Operation Synergia III: Police Sinkhole 45,000 IPs in Global Cybercrime Crackdown

• INTERPOL Warns Phishing, Ransomware, and AI Scams Are Rising Across Asia-Pacific

• Ransomware Thugs Masquerade as Interpol to Entice Small Biz

• Dutch Court Threatens xAI with Fines Over Grok's

• UK Government Threatens Tech Bosses With Jail Time Over AI

• Elon Musk Fails to Appear for Questioning by French Police

• Attack on Axios Developer Tool Threatens Widespread

• Axios Supply Chain Attack Pushes Cross-Platform RAT via Compromised npm Account

• Axios NPM Package Breached in North Korean Supply Chain

• Drift Crypto Platform Confirms $280 Million Stolen as

• KelpDAO Suffers $290 Million Heist Tied to Lazarus Hackers

• Crypto Infrastructure Company Blames $290 Million Theft on North Korean Hackers

• The Hidden Cost of Recurring Credential Incidents

• One Missed Threat Per Week: What 25M Alerts Reveal About

• Why Chargebacks Are Just One Piece of the Fraud Puzzle

• Commerce Setting Up New AI Export Regime to Push Adoption

• Anthropic Disables Fable 5 and Mythos 5 After U.S. Government Export Control Decree

• Anthropic Confirms Fable 5 and Mythos 5 Offline to Comply With US Export Controls

• Microsoft Teams Right-Click Paste Broken by Edge Update Bug

• ThreatsDay Bulletin: Edge Plaintext Passwords, ICS 0-Days

• Google and Microsoft Pull ModHeader After Hidden Tracker Found in 1.6M-Install Extension

• Microsoft Releases Emergency Updates to Fix Windows Server

• Microsoft: Domain Controller Lookup May Fail on Windows

• Microsoft June 2026 Updates Break Recycle Bin Confirmation Prompts on All Windows Versions

• Italian Regulator Fines National Postal Service Orgs $15

• UK Fines Water Supplier $1.3M for Exposing Data of 664K

• Coupang Hit with Record $409 Million Data Breach Fine in South Korea

• Tropic Trooper Uses Trojanized SumatraPDF and GitHub to Deploy AdaptixC2

• 'Underminr' Vulnerability Lets Attackers Hide Malicious

• Microsoft Teams Relay Servers Abused in DragonForce Ransomware Attack

• cPanel & WHM Emergency Update Fixes Critical Auth Bypass Bug

• Critical cPanel and WHM Bug Exploited as Zero-Day, PoC Now

• Critical cPanel Flaw Mass-Exploited in 'Sorry' Ransomware

• Ollama Out-of-Bounds Read Flaw Allows Remote Process Memory

• New ChatGPT Lockdown Mode Limits Tools That Could Enable Data Exfiltration

• JadePuffer Agentic Attacks Now Target AI Model Data with Ransomware

• PAN-OS RCE Exploit Under Active Use Enabling Root Access

• ThreatsDay Bulletin: PAN-OS RCE, Mythos cURL Bug, AI

• Palo Alto GlobalProtect VPN Auth Bypass Flaw Now Exploited in Attacks

• Can Laws Stop Deepfakes? South Korea Aims to Find Out

• Coupang Hit with Record $409 Million Data Breach Fine in South Korea

• South Korea Discloses Data Breach Impacting Diplomats Worldwide

• Gitea Vulnerability Exposes Private Container Images without Authentication

• Hackers Exploit Critical Auth Bypass in Official Gitea Docker Image

• Coolify CVE-2026-34037: CVSS 9.9 IDOR Enables Cross-Team Resource Takeover

• Dashlane Password Manager Users Locked Out by Brute Force Attacks

• Dashlane Brute-Force Attack Leads to Limited Encrypted Vault Downloads

• Dashlane Discloses Brute-Force Attack: Encrypted Vaults of Fewer Than 20 Users Downloaded

• Only 10% of SOCs Say They're Getting Excellent Value From AI — What the Second Wave Must Deliver

• How to Deploy Falco for Kubernetes Runtime Security

• How to Deploy Wazuh SIEM/XDR for Unified Security Monitoring

• WhatsApp Phishing Attack Uses Fake Business Docs to Hack PCs

• WhatsApp VBScript Campaign Uses Fake Documents to Install ManageEngine RMM Tool

• Ukraine Says Russian Intelligence Used Fake Support Texts to Steal Messaging Credentials

• Google and Microsoft Pull ModHeader After Hidden Tracker Found in 1.6M-Install Extension

• Chrome Web Store Extensions Caught Stealing Crypto, Browser Data

• Google Chrome Critical Update Patches High-Severity Code

• Identity Attacks Overtake Exploits as Top Ransomware Cause

• Password Spraying Attacks Surge 155x as Hackers Exploit MFA Gaps

• WhatsApp Adds Multiple Passkeys for Phishing-Resistant Sign-Ins

• Adobe Patches Three CVSS 10.0 Flaws in ColdFusion and Campaign Classic

• Adobe's September 2026 Patch Tuesday Fixes 170+ Flaws Across Experience Manager, ColdFusion & More

• CVE-2026-47928: Adobe ColdFusion Critical RCE — CVSS 9.6

• CVE-2026-12485: GeoVision GV-I/O Box 4E UDP Stack Overflow (IP Address Field)

• CVE-2026-12486: GeoVision GV-I/O Box 4E OS Command Injection via libNetSetObj.so

• CVE-2026-12846: GeoVision GV-I/O Box 4E UDP Stack Overflow (Net Mask Field)

• CVE-2026-12866: expr-eval npm Package Enables Arbitrary Code Execution via toJSFunction()

• CVE-2026-1540: Spam Protect CF7 WordPress Plugin PHP Log RCE

• CVE-2026-22679: Weaver E-cology 10.0 Unauthenticated Remote

• CVE-2026-35051: Traefik ForwardAuth Authentication Bypass

• CVE-2026-39858: Traefik Forwarded-Header Sanitization

• Multi-Stack Docker Infrastructure with Traefik and Authentik

• WEF Global Cybersecurity Outlook 2026 Warns of 'Permanent

• Pro-Russian Hacktivists Launch Sustained Cyber Campaign

• Commerce Setting Up New AI Export Regime to Push Adoption

• ShinyHunters Dumps Harvard and UPenn Data After Ransom

• New BlackFile Extortion Group Linked to Surge of Vishing

• Deepfake Voice Attacks Are Outpacing Defenses: What

• Anthropic Exposes Industrial-Scale AI Distillation Attacks

• AI-Generated Browser Ransomware Abuses Chromium API on Windows, Linux, macOS, Android

• Chinese Threat Actor Uses DeepSeek and Hermes Agent to Launch Fully Autonomous Cyberattacks

• APT28 Operation MacroMaze: Russia-Linked Hackers Hit

• Italian Regulator Fines Financial Giant $36 Million for Data Protection Failures

• Europe Evolves Into Ransomware's Favorite Region

• U.S. Treasury Sanctions Russian Zero-Day Broker Operation

• Russian Spies Aggressively Targeting Western Technology as Sanctions Bite

• The U.S. Sanctions Nobitex Crypto Exchange Used by Ransomware

• Former Cybersecurity Responders Plead Guilty to BlackCat Attacks

• Former Ransomware Negotiator Pleads Guilty to BlackCat

• US Ransomware Negotiators Get 4 Years in Prison Over

• CISA Flags Actively Exploited n8n RCE Bug as 24,700

• CISA Orders Federal Agencies to Patch n8n RCE Flaw

• Researchers Disclose Critical n8n Flaws Enabling RCE and Credential Theft

• CISA Orders Federal Agencies to Patch n8n RCE Flaw

• CISA Adds CVE-2025-53521 to KEV After Active F5 BIG-IP APM

• CISA Gives Federal Agencies Four Days to Patch Actively

• Veeam Patches Five Critical RCE Vulnerabilities Exposing

• Veeam Backup & Replication Auth RCE — CVE-2026-21666

• Veeam Backup & Replication 2nd Auth RCE — CVE-2026-21667

• Veeam Patches Five Critical RCE Vulnerabilities Exposing

• Veeam Backup & Replication Auth RCE — CVE-2026-21666

• Veeam Backup & Replication 2nd Auth RCE — CVE-2026-21667

• GlassWorm Escalates: 72 Malicious Open VSX Extensions Use

• Malicious KICS Docker Images and VS Code Extensions Hit

• GitHub Links Repo Breach to TanStack npm Supply-Chain Attack

• Shadow AI Is Everywhere. Here's How to Find and Secure It.

• Learning from the Vercel Breach: Shadow AI and OAuth Sprawl

• 5 Steps to Managing Shadow AI Tools Without Slowing Down

• Shadow AI Is Everywhere. Here's How to Find and Secure It.

• Shadow AI in SaaS: How Hidden AI Agents Are Enabling

• Video Service Vimeo Confirms Anodot Breach Exposed User Data

• Citrix Urges Admins to Patch NetScaler Flaws as Soon as

• Citrix NetScaler CVE-2026-3055 (CVSS 9.3) Under Active

• Critical Citrix NetScaler Memory Flaw Actively Exploited in Attacks

• PolyShell Attacks Target 56% of All Vulnerable Magento

• Hackers Exploit Critical Adobe Commerce Flaw to Hijack Customer Accounts

• 'StyleSmuggler' Zero-Day in Magento and Adobe Commerce Is Actively Backdooring Live Stores

• CISA Adds CVE-2025-53521 to KEV After Active F5 BIG-IP APM

• Hackers Now Exploit Critical F5 BIG-IP Flaw in Attacks

• F5 BIG-IP Vulnerability Reclassified from DoS to RCE Under

• CISA Adds CVE-2025-53521 to KEV After Active F5 BIG-IP APM

• Hackers Now Exploit Critical F5 BIG-IP Flaw in Attacks

• F5 BIG-IP Vulnerability Reclassified from DoS to RCE Under

• FCC Bans Import of Foreign-Made Consumer Routers Over

• New U.S. Cyber Force Would Cost Up to $11 Billion to Start, Commission Says

• Anthropic Disables Fable 5 and Mythos 5 After U.S. Government Export Control Decree

• Three China-Linked Clusters Target Southeast Asian

• DoJ Disrupts Southeast Asia Crypto Fraud Networks, Freezes $3.8 Million in Assets

• Over 1.4 Million Accounts Disrupted in Cybercrime Crackdown

• Google Slashes Quantum Resource Requirements for Breaking

• Hackers Steal $3.6 Million from Crypto ATM Giant Bitcoin

• ShinyHunters Data Leaks Fuel $2,000 Sextortion Email Scam

• Crypto Platform Drift Suspends Services After Hundreds of Millions Stolen

• Polymarket Customers Lose $3 Million in Supply-Chain Attack

• $3 Million Reportedly Stolen in Polymarket Hack

• New Progress ShareFile Flaws Can Be Chained in Pre-Auth RCE

• vBulletin Fixes Critical Pre-Auth RCE Flaw with Public Exploit

• BeyondTrust Remote Support Pre-Authentication RCE Under

• Axios npm Hack Used Fake Teams Error Fix to Hijack

• Suspicious Polyfill Login Prompts Pop Up on Toshiba, Muji Websites

• Polymarket Customers Lose $3 Million in Supply-Chain Attack

• Trump Budget Proposal Would Cut Hundreds of Millions More

• Why the Axios Attack Proves AI Is Mandatory for Supply

• Former DigitalMint Ransomware Negotiator Pleads Guilty to $75.3M Extortion Scheme

• GPUBreach: New Rowhammer Attack on GPU GDDR6 Memory Enables

• NVIDIA Confirms GeForce NOW Data Breach Affecting Armenian

• Microsoft, Tech Companies Throw Weight Behind Spread of Open-Source AI

• The Hidden Cost of Recurring Credential Incidents

• DORA and Operational Resilience: Credential Management as a

• FortiBleed Leak Exposes Fortinet VPN Credentials for 73,000 Devices

• 1 Billion CISA KEV Records Reveal Human-Scale Security Has

• 73 Seconds to Breach, 24 Hours to Patch: The Case for Autonomous Validation

• CISA Orders Feds to Patch Max Severity Joomla Plugin Flaw by Friday

• Commerce Setting Up New AI Export Regime to Push Adoption

• Anthropic Disables Fable 5 and Mythos 5 After U.S. Government Export Control Decree

• Anthropic Confirms Fable 5 and Mythos 5 Offline to Comply With US Export Controls

• Three Microsoft Defender Zero-Days Actively Exploited; Two

• Microsoft Warns of New Defender Zero-Days Exploited in Attacks

• Microsoft Warns of Two Actively Exploited Defender

• Microsoft Teams Right-Click Paste Broken by Edge Update Bug

• Threat Actor Uses Microsoft Teams to Deploy New 'Snow'

• KongTuke Hackers Now Use Microsoft Teams for Corporate

• Firefox Vulnerability Allows Tor User Fingerprinting Across

• Chrome and Firefox Updated to Patch Critical, High-Severity Vulnerabilities

• CVE-2026-5731: Firefox and Thunderbird Critical Memory

• European Commission Accuses Meta of Breaching Child Safety

• Canadian Man Gets 33 Years for Using Social Media to Coerce US Children

• Senators Press TikTok Over Withholding Safety Features from Users

• Top Five Sales Challenges Costing MSPs Cybersecurity Revenue

• Ransomware Protection for MSPs: A 6-Point Checklist for Faster Recovery

• CVE-2026-18577: N-able N-central Authentication Bypass and Account Takeover

• CISA Gives Federal Agencies Four Days to Patch Actively

• Ivanti Customers Confront Yet Another Actively Exploited

• Ivanti Warns of New EPMM Flaw Exploited in Zero-Day Attacks

• New Linux 'Dirty Frag' Zero-Day Gives Root on All Major

• Making Vulnerable Drivers Exploitable Without Hardware: The

• Eight-Year-Old Samsung KNOX Flaw Exposed Millions of Galaxy Devices to Kernel Attacks

• PAN-OS RCE Exploit Under Active Use Enabling Root Access

• Palo Alto GlobalProtect VPN Auth Bypass Flaw Now Exploited in Attacks

• PAN-OS GlobalProtect Authentication Bypass (CVE-2026-0257) Under Active Exploitation

• China's 'FamousSparrow' APT Nests in South Caucasus Energy

• Japanese Energy Firm Loses Drive with Data of 10.9 Million Clients

• Origin Energy Data Breach Exposes Millions of Australian Customers

• Windows BitLocker Zero-Day Gives Access to Protected

• Researcher Drops YellowKey, GreenPlasma Windows Zero-Days

• Windows Zero-Days Expose BitLocker Bypasses and CTFMON

• 18-Year-Old NGINX Rewrite Module Flaw Enables

• CVE-2026-40492: SAIL XWD Codec Heap Buffer Overflow (CVSS

• CVE-2026-40494: SAIL TGA Codec RLE Decoder Asymmetric

• PraisonAI CVE-2026-44338 Auth Bypass Targeted Within Hours

• CVE-2026-39888: PraisonAI Sandbox Escape Enables Remote

• CVE-2026-39890: PraisonAI YAML Injection Achieves Remote

• Microsoft Rejects Critical Azure Vulnerability Report, No

• Microsoft Says Zero-Day Public Releases Are 'Never Justifiable' as Researcher Threatens More Drops

• Microsoft Says It Will Not Pursue Security Researchers After Zero-Day Backlash

• ''First VPN'' Cybercrime Service Disrupted, Administrator

• Alleged Kimwolf Botmaster ''Dort'' Arrested, Charged in U.S. and Canada

• Canadian Man Arrested and Charged for Running KimWolf DDoS

• Making Vulnerable Drivers Exploitable Without Hardware: The

• Security of 100 AI Agents Tested and Ranked – What You Need to Know

• Leak Confirms OpenAI Is Testing a ChatGPT for Science Subscription

• Gitea Vulnerability Exposes Private Container Images without Authentication

• Hackers Exploit Critical Auth Bypass in Official Gitea Docker Image

• Critical Gitea RCE Actively Exploited as Reported Attack Drops Miner-Like Payload

• Dashlane Password Manager Users Locked Out by Brute Force Attacks

• Minnesota Man Known as 'Snoopy' Sentenced in DraftKings Hack

• Chick-fil-A Discloses Data Breach After Credential Stuffing Attacks

• CISA Gives Feds 3 Days to Patch Check Point VPN Bug Exploited as Zero-Day

• Check Point VPN Zero-Day Exploited Since Early May by Qilin Ransomware

• Check Point Patches SmartConsole Zero-Day Exploited in Attacks

• Australian Sugar Producer Works to Restore Operations After Ransomware Attack

• Origin Energy Data Breach Exposes Millions of Australian Customers

• Origin Energy Data Breach: Fired Employee's Credentials Expose Up to 2 Million Australian Customers

• Novo Nordisk Breach Exposes Software Development Pipeline Risk

• SailPoint to Acquire Entro in Reported $200 Million Deal

• Lessons Learned from CISA's Recent GitHub Leak

• Data Exposure Flaws in Dify AI Platform Put 1 Million+ App Tenants at Risk

• Adobe Acrobat Extension Flaw Let Malicious Sites Read WhatsApp Web Data

• 9,300+ Leaked AWS Keys Still Active, Granting Full Corporate Account Control

• Russia Used Social Engineering to Breach Prominent Messaging Accounts, Ukraine Says

• Ukraine and FBI Expose Russian Intelligence Campaign Stealing Signal Credentials via Fake SMS

• FBI: Russian Hackers Now Target Signal Backup Recovery Keys

• Ukraine Says Russian Intelligence Used Fake Support Texts to Steal Messaging Credentials

• RedWing MaaS Packages Android Bank Fraud as a Telegram Rental Service

• Hackers Hijack Russian Journalist Sobchak's Telegram Channels via Email Breach, Claim 350 GB Stolen

• Progress Kemp LoadMaster Pre-Auth RCE Flaw Faces Active Exploitation Attempts

• Progress Kemp LoadMaster Flaw Hits CISA KEV After 792 Reported Exploit Attempts

• CVE-2026-47868: VMware Avi Load Balancer Local Privilege Escalation

• 7 Unpatched Flaws Disclosed in FatFs Filesystem Used in Millions of Embedded Devices

• Flipper Zero Firmware Development Continues With Community Help

• Six U-Boot Flaws Could Enable Stealthy Firmware Attacks on Embedded Devices

• Chinese LLMs Broaden the Gap Between Attackers & Defenders

• China-Linked Storm-1175 Turns N-able N-central Into MSP Ransomware Launchpad

• Ransom Busters: Ransomware Affiliate Poses as Data Recovery Firm

• 'Phantom Squatting': An Emerging AI-Driven Supply Chain Threat

• Exposed Hacker Server Reveals WP-SHELLSTORM Backdooring Thousands of WordPress Sites

• China-Linked Storm-1175 Turns N-able N-central Into MSP Ransomware Launchpad

• Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git

• Critical GitLab GraphQL Flaw Lets Unauthenticated Attackers Delete Public Projects

• CISA Adds Four Critical Vulnerabilities to KEV Catalog

• Cisco FMC Zero-Day Actively Exploited, Static Credentials Could Expose Sensitive Data

• The Network Has Become the Control Plane for AI Security

• FBI, South Korea Warn of Gunra Ransomware Gang Targeting Critical Infrastructure

• Adobe Campaign Classic CVSS 10.0 Flaw Could Run Code Without User Interaction

• UniFi OS Improper Access Control — Unauthorized System

• CVE-2026-47131: vm2 Sandbox Escape via Buffer Prototype Hijack (CVSS 10.0)

• Cisco Warns of ASA and FTD VPN Flaw Actively Exploited to Crash Firewalls

• CVE-2018-25169: Denial of Service Vulnerability Catalogued

• CVE-2026-20349: Cisco ASA and FTD Heap Inspection Vulnerability

• Critical VMware Workstation and Fusion Flaw Lets VM Admins Execute Host Code

• CVE-2026-47865: Critical Authentication Bypass in VMware Avi Load Balancer

• CVE-2026-47866: Authorization Bypass in VMware Avi Load Balancer

• CVE-2015-20118: Stored XSS in RealtyScript 4.0.2 Admin

• CVE-2025-61311: Reflected XSS in docuForm Managed Print

• CVE-2026-10087: GitLab EE Stored XSS via Developer Role

• CVE-2025-15036: MLflow Path Traversal in Archive Extraction

• CVE-2026-14289: FacturaONE WooCommerce Plugin Allows Unauthenticated File Write

• CVE-2026-15265: Tenable Agent Path Traversal — Arbitrary File Write & RCE (CVSS 9.1)

• PicketLink SAML Authentication Bypass — Forged Assertions Accepted Without Validation

• CVE-2026-15013: WordPress SAML SSO Plugin — Algorithm Confusion Auth Bypass

• CVE-2026-15981: WordPress SAML SSO Authentication Bypass (CVSS 9.8)

• CVE-2026-12183: Critical Auth Bypass in Gas Station Automation System

• CVE-2026-12492: WooCommerce OTP Login Plugin Auth Bypass — Full Admin Takeover

• CVE-2026-14205: WP Events Manager Plugin Allows Fraudulent Paid Event Bookings via Payment Bypass

• CVE-2026-13339: CubeWP Framework WordPress Plugin Directory Traversal (CVSS 7.5)

• CVE-2026-18352: WordPress User Access Manager Directory Traversal

• CVE-2026-34909 — UniFi OS Path Traversal Leading to Account

• CVE-2026-13498: SQL Injection in Restaurant Management System via Password Reset

• CVE-2026-14364: TrueBooker WordPress Plugin Account Takeover via Password Reset Bypass

• CVE-2026-24467: OpenAEV Password Reset Account Takeover

• CVE-2026-14484: WordPress RapiSafe Plugin Arbitrary File Deletion

• CVE-2026-14487: WordPress Simple Coherent Form Plugin — Critical Unauthenticated File Deletion

• CVE-2026-14524: Critical Unauthenticated File Deletion in ProSolution WP Client

• CVE-2026-14894: WordPress Super Forms Plugin Critical Arbitrary File Upload

• CVE-2026-15282: WordPress Instant Appointment Plugin Critical File Upload

• Critical File Upload RCE in Templatiq WordPress Plugin (CVE-2026-32474)

• CVE-2026-25769: Wazuh Critical RCE via Insecure

• CVE-2026-25770: Wazuh Privilege Escalation to Root via Cluster Protocol File Write

• CVE-2026-56699: Critical NDJSON Injection in Wazuh Manager (CVSS 10.0)

• CVE-2026-37431: Beauty Parlour Management System SQL

• CVE-2026-38158: Critical SQL Injection in UReport v2.2.9 (CVSS 9.8)

• CVE-2026-41583: ZEBRA Zcash Node Consensus Rule Bypass

• CVE-2026-47131: vm2 Sandbox Escape via Buffer Prototype Hijack (CVSS 10.0)

• CVE-2026-47137: vm2 Sandbox Escape via Strict Equality require Bypass (CVSS 10.0)

• CVE-2026-47140: vm2 Sandbox Escape via Incomplete Builtin Denylist (CVSS 10.0)

• Ex-L3Harris Executive Pleads Guilty to Selling Eight

• LexisNexis Confirms Cloud Breach Exposing 400K User

• Microsoft's Zero-Day Legal Threats Spark Backlash

• Ransomware in 2026: Data-Only Extortion Replaces Encryption

• Evolution of Ransomware: Multi-Extortion Ransomware Attacks

• Tata Electronics Confirms Cyberattack; World Leaks Exposes Apple Manufacturing IP

• Scattered Lapsus$ ShinyHunters Alliance Hits 100+

• In Other News: Scattered Spider Member Arrested, SOC

• Grafana Confirms Breach After Hackers Claim They Stole Data

• AI-Driven Threats Accelerate: Agentic Attacks, Model

• UK Government Threatens Tech Bosses With Jail Time Over AI

• Here's How the FTC Plans to Enforce the Take It Down Act

• Japan Airlines Confirms Data Breach Affecting 28,000

• Malaysia Airlines Listed by Qilin Ransomware Group

• Iranian APT Targets Aviation, Software Companies With

• PromptSpy: First Android Malware to Weaponize Generative AI

• Critical Gemini CLI Flaw Enabled Host Code Execution

• Google Gemini CLI Jailbroken and Used as a Hacking Agent to Run a Malware Botnet

• Pro-Russian Hacktivists Launch Sustained Cyber Campaign

• Operation Epic Fury Triggers Unprecedented Cyber Escalation

• Bearlyfy Hits Russian Firms with Custom GenieLocker

• The World's First Transatlantic Fiber Cable Is Being Pulled

• Google Disrupts Massive Chinese Espionage Campaign

• FCC Proposes $4.5 Million Fine for Voice Provider Hosting

• IDMerit KYC Data Breach Exposes 1 Billion Records Across 26

• CVE-2026-19001: MongoDB BI Connector ODBC Driver Buffer Overflow (CVSS 9.8)

• CVE-2026-45688: Rocket.Chat CAS Login MongoDB Operator Injection (CVSS 9.1)

• Cloudflare 2026 Threat Report: 230 Billion Daily Threats as

• Cloudflare BGP Routing Error Cascades Across AWS, X, and More

• CVE-2026-11325: Cloudflare pages-action GitHub Actions RCE

• Europol-Coordinated Action Dismantles Tycoon2FA — 330

• Tycoon 2FA Loses Phishing Kit Crown Amid Surge in Attacks

• Misconfigured Server Exposes Three Evilginx Phishing Ops Targeting M365

• Phobos Ransomware Admin Pleads Guilty — 1,000+ Victims

• Ukrainian National Pleads Guilty to Role in Conti Ransomware Operation

• Alleged Scattered Spider Hacker Peter Stokes Extradited to the United States

• Cognizant TriZetto Breach Exposes Health Data of 3.4

• ShinyHunters Exploits Oracle PeopleSoft Zero-Day to Breach Universities

• Cal Water Says No OT Systems Breached in Iranian Handala Cyberattack

• ShinyHunters Claims Mass Data Theft From 400 Firms via Salesforce Aura

• New BlackFile Extortion Group Linked to Surge of Vishing

• Colorado Governor Commutes Prison Sentence for Election

• ShinyHunters Claims Mass Data Theft From 400 Firms via Salesforce Aura

• Wesco Confirms Security Incident After ExfilSquad Claims 2.6M Record Theft

• Over 1,000 Charities Hit by Beacon CRM Data Breach

• Windows 11 February Update Breaks C:\ Drive Access on Samsung PCs

• Microsoft Teams Right-Click Paste Broken by Edge Update Bug

• Microsoft June 2026 Updates Break Recycle Bin Confirmation Prompts on All Windows Versions

• AI Flaws in Amazon Bedrock, LangSmith, and SGLang Enable

• SGLang CVE-2026-5760 (CVSS 9.8) Enables RCE via Malicious

• CVE-2026-14890: SGLang ZeroMQ Unauthenticated RCE via Pickle Deserialization

• Microsoft Halts Forced Global Rollout of Microsoft 365

• FCC Proposes New Rule to Further Crack Down on Illegal

• GM to Pay Over $12 Million in Largest-Ever CCPA Fine Over

• Marquis Ransomware Breach: 672K People Exposed as Attack

• DORA and Operational Resilience: Credential Management as a

• American Lending Center Data Breach Affects 123,000

• DoJ Disrupts 3 Million-Device IoT Botnets Behind Record

• Alleged Kimwolf Botmaster ''Dort'' Arrested, Charged in U.S. and Canada

• Canadian Man Arrested and Charged for Running KimWolf DDoS

• Mazda Discloses Security Breach Exposing Employee and Partner Data

• CVE-2026-14950: 389 Directory Server Session Expiry Bypass Allows Unauthorized Access

• CVE-2026-25199: Apache CloudStack Proxmox Extension Allows

• Russian Hacker Who Helped Yanluowang Ransomware Gang Gets

• FortiBleed: Russian IAB Harvested 110 Million Credentials from 430,000 FortiGate Firewalls

• FortiBleed: 5-Stage Attack Chain Behind 110 Million Credential Heist on FortiGate Firewalls

• Iran-Linked Hackers Breach FBI Director's Personal Email

• Researchers Uncover Pre-Stuxnet 'fast16' Malware Targeting

• UK Cyberspying Chief Calls AI 'an Unstoppable Force' and Warns About Russia

• Google Slashes Quantum Resource Requirements for Breaking

• Kyber Ransomware Gang Uses Post-Quantum Encryption to Target Windows and ESXi

• Apple Open-Sources Quantum-Resistant Encryption Code

• Iran Deploys 'Pseudo-Ransomware,' Revives Pay2Key Operations

• Broken VECT 2.0 Ransomware Acts as a Data Wiper for Large

• Vect 2.0 Ransomware Acts as Wiper Thanks to Design Error

• The State of Trusted Open Source Report: Key Findings for 2025

• Chainguard Unveils Factory 2.0 to Automate Hardening the Software Supply Chain

• Growing Up The Hard Way: Open Source Security's Painful Maturation

• The State of Trusted Open Source Report: Key Findings for 2025

• What Changes When AI Writes Your Code: Supply Chain Security in the Age of LLMs

• Growing Up The Hard Way: Open Source Security's Painful Maturation

• Die Linke German Political Party Confirms Data Stolen by Qilin Ransomware

• BKA Identifies REvil Leaders Behind 130 German Ransomware

• Police Shut Down Reboot of Crimenetwork Marketplace, Arrest

• Why Simple Breach Monitoring Is No Longer Enough

• Microsoft Backpedals: Edge to Stop Loading Cleartext

• MokN Raises $15 Million for Phish-Back Platform

• The Hidden Cost of Recurring Credential Incidents

• Gartner Identifies the Top 6 Cybersecurity Trends Reshaping

• CVE-2026-82856: @hulumi/policies GitHub OIDC Trust Policy Bypass

• 13-Year-Old Bug in ActiveMQ Lets Hackers Remotely Execute

• ThreatsDay Bulletin: Hybrid P2P Botnet, 13-Year-Old Apache

• CISA Flags Apache ActiveMQ Flaw as Actively Exploited in Attacks

• Adobe Reader Zero-Day Exploited via Malicious PDFs Since

• Hackers Exploiting Acrobat Reader Zero-Day Flaw Since

• Adobe Patches Actively Exploited Zero-Day That Lingered for Months

• Payouts King Ransomware Uses QEMU Virtual Machines to Bypass Endpoint Security

• Making Vulnerable Drivers Exploitable Without Hardware: The

• GodDamn Ransomware Uses PoisonX Kernel Driver to Neutralize Endpoint Security

• Payouts King Ransomware Uses QEMU Virtual Machines to Bypass Endpoint Security

• NAKIVO v11.2: Ransomware Defense, Faster Replication

• CVE-2026-25199: Apache CloudStack Proxmox Extension Allows

• NAKIVO v11.2: Ransomware Defense, Faster Replication

• Azure Backup: VMs, Files, and SQL with Recovery Services

• Implementing a Robust Backup Strategy: The 3-2-1 Rule

• NIST to Stop Rating Non-Priority Flaws Due to Volume

• Federal Audit Reveals NIST's NVD Is Plagued by Poor Planning and Duplication

• CISA Mandates Full Zero Trust Architecture for Federal

• Surge in Bomgar RMM Exploitation Demonstrates Supply Chain

• WhatsApp VBScript Campaign Uses Fake Documents to Install ManageEngine RMM Tool

• N-able Patches Max-Severity N-central RCE Amid Live Attacks

• Malicious KICS Docker Images and VS Code Extensions Hit

• Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain

• Checkmarx Confirms GitHub Repository Data Posted on Dark

• Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain

• Dashlane Password Manager Users Locked Out by Brute Force Attacks

• Dashlane Brute-Force Attack Leads to Limited Encrypted Vault Downloads

• Firefox Vulnerability Allows Tor User Fingerprinting Across

• CVE-2026-5731: Firefox and Thunderbird Critical Memory

• CVE-2026-6748: Critical Uninitialized Memory Flaw in Firefox and Thunderbird Web Codecs

• Hackers Exploit RCE Flaws in Qinglong Task Scheduler for Cryptomining

• Gitea Vulnerability Exposes Private Container Images without Authentication

• CVE-2026-18248: Fastify AWS Lambda Auth Bypass Allows Privilege Escalation

• Poisoned Ruby Gems and Go Modules Exploit CI Pipelines for Credential Theft

• CVE-2026-15704: Critical Auth Bypass in Eclipse BaSyx Go Components

• CVE-2026-35392: Critical Path Traversal in goshs Go HTTP

• Fake OpenAI Repository on Hugging Face Pushes Infostealer

• Suno, Paidwork Data Breaches Affect Tens of Millions of Accounts

• CVE-2025-34291: Langflow Origin Validation Error

• Hackers Abuse Google Ads and Claude.ai Chats to Push Mac

• New OXLOADER Loader Uses Malicious Google Ads to Deliver CastleStealer

• SourTrade: Malicious Sites Use JavaScript to Assemble Malware Directly in Browser Memory

• One Missed Threat Per Week: What 25M Alerts Reveal About

• Exaforce Raises $125 Million for Agentic SOC Platform

• Only 10% of SOCs Say They're Getting Excellent Value From AI — What the Second Wave Must Deliver

• Microsoft May 2026 Patch Tuesday Fixes 120 Flaws, No

• FFmpeg Fixes PixelSmash Flaw in Widely Used Video Decoder

• Microsoft Fixes AutoGen Studio Flaw That Enabled Code Execution

• Cisco Patches Another SD-WAN Zero-Day, the Sixth Exploited

• Cisco Zero-Day Under Ongoing Attack by Persistent Threat

• Suricata IDS/IPS Deployment: From Install to Active Threat

• Colorado Governor Commutes Prison Sentence for Election

• Can Laws Stop Deepfakes? South Korea Aims to Find Out

• ODNI Taps Officials to Coordinate Response to Foreign

• PoC Code Published for Critical NGINX Vulnerability

• MiniPlasma Windows 0-Day Enables SYSTEM Privilege

• Microsoft Defender RoguePlanet Zero-Day Grants SYSTEM Access on Updated Windows

• ThreatsDay Bulletin: Linux Rootkits, Router 0-Day, AI

• Lazarus Exploits Windows Zero-Day to Gain SYSTEM Access and Deploy Backdoor

• UAT-10147 Uses AI to Scale Server Attacks, Deploys SPECTRE With EDR Bypass and Linux Rootkit

• Laravel Lang Packages Hijacked to Deploy

• Laravel-Lang PHP Packages Compromised to Deliver

• CVE-2025-54068: Laravel Livewire Code Injection

• LiteSpeed cPanel Plugin CVE-2026-48172 Exploited to Run

• CISA Gives Feds 4 Days to Patch Actively Exploited cPanel Plugin Flaw

• CISA Urges Immediate Patching of Exploited LiteSpeed cPanel

• Open Source DockSec Uses AI to Cut Through Vulnerability

• OWASP Incubator Project Helps Developers Find and Fix Vulnerable Dependencies in Seconds

• Vague Task, Total Access: When AI Delegation Becomes a Security Risk

• Exposed Fuel Tank Gauges Under Attack in the US

• Russian Hackers Breached Polish Energy Plant via Private APN in World-First DER Cyberattack

• In Other News: Rapid7 Layoffs, Hacking a Boeing 737, Refrigeration System Vulnerabilities

• Chrome and Firefox Updated to Patch Critical, High-Severity Vulnerabilities

• CVE-2026-5731: Firefox and Thunderbird Critical Memory

• CVE-2026-6748: Critical Uninitialized Memory Flaw in Firefox and Thunderbird Web Codecs

• WhatsApp VBScript Campaign Uses Fake Documents to Install ManageEngine RMM Tool

• Crafty Phishing Campaigns Auto-Adapt to Victim's Device, OS

• Teen Suspect in Scattered Spider Hacks Is Extradited to US

• CISA Orders Feds to Prioritize Patching Langflow Auth Bypass Flaw

• 2-Click Cursor Exploit Enables Dev Environment Takeover

• Trojanized MCP Server Deploys StealC Infostealer Targeting

• OpenAI Confirms ChatGPT Is Down Worldwide — ~50-Minute Global Outage

• Microsoft Blames Massive Microsoft 365 Outage on Automated Maintenance Bug

• Cloudflare BGP Routing Error Cascades Across AWS, X, and More

• OpenAI Agent Used Exposed Credentials Across Four Services During Hugging Face Breach

• 768 Live AWS Keys with Full Admin Access Found Across Public Repos, AI Training Data, and Docker Images

• CVE-2025-36568: Dell PowerProtect Data Domain BoostFS

• CISA Flags Langflow RCE, Tomcat, and N-central Flaws as Actively Exploited

• China-Linked Storm-1175 Deploys StormEncryptor Ransomware via Critical N-central Flaw

• N-able Patches Max-Severity N-central RCE Amid Live Attacks

• When Credentials Are No Longer Enough: Device Trust in the AI Era

• HashiCorp Vault: Centralized Secrets Management for Modern

• OpenSSH Hardening with Certificate-Based Authentication

• Critical Avada WordPress Theme Flaw Enables Zero-Click RCE

• Five Critical WordPress Plugin and Theme Flaws Enable Site Takeover or RCE

• CVE-2026-12415: WordPress Invoice Generator Privilege Escalation (CVSS 9.8)

• Dropbox Accounts Breached Through Lenovo Email Verification Flaw

• CVE-2026-11374: ManageEngine SSO Ticket Prediction Enables Unauthenticated Account Takeover

• CVE-2026-15013: WordPress SAML SSO Plugin — Algorithm Confusion Auth Bypass

• CVE-2016-20049: JAD Java Decompiler Stack-Based Buffer

• CVE-2017-20225: TiEmu TI Calculator Emulator Stack Buffer

• CVE-2026-10187: Totolink N300RH Stack Buffer Overflow in WiFi Config

• CVE-2020-37168: Systempay Weak Crypto Allows Payment

• CVE-2021-47923: OpenCart 3.0.3.8 Session Fixation Enables

• CVE-2025-65336: Critical SQL Injection in Fruits Bazar PHP Ecommerce

• CVE-2024-51311: Critical Stack Overflow in Tenda TX9 Router Firmware

• CVE-2026-19977: EFM ipTIME A3004T Authentication Bypass — CVSS 10.0

• CVE-2026-31027: TOTOlink A3600R Buffer Overflow in setAppEasyWizardConfig

• CVE-2025-15036: MLflow Path Traversal in Archive Extraction

• CVE-2025-15379: MLflow Command Injection in Model Serving

• CVE-2026-0596: MLflow Command Injection via Unsanitized

• CVE-2025-36568: Dell PowerProtect Data Domain BoostFS

• CVE-2026-49814: Dell PowerProtect Data Domain OS Command Injection

• CVE-2026-53481: Dell PowerProtect Data Domain Path Traversal — CVSS 9.8

• CVE-2026-10263: SQL Injection in SourceCodester Computer Repair Shop Management System

• CVE-2026-14732: SQL Injection in SourceCodester Timetabling System via /edit_exam.php

• CVE-2026-14733: SQL Injection in SourceCodester Timetabling System via /edit_coursea.php

• CVE-2026-11807: Critical Authorization Bypass in Event-Driven Ansible WebSocket API

• CVE-2026-24303: Microsoft Partner Center Privilege

• CVE-2026-2611: MLflow 3.9.0 Improper Origin Validation

• CVE-2026-14688: SQL Injection in itsourcecode Hotel Management Admin Login

• CVE-2026-3730: SQL Injection in itsourcecode Free Hotel

• CVE-2026-3740: SQL Injection in itsourcecode University

• CVE-2026-15065: Reserved Vulnerability Advisory

• CVE-2026-58003: Reserved Security Advisory

• CVE-2026-59256: Reserved Security Advisory

• CVE-2026-25449: Critical Object Injection in Shinetheme

• CVE-2026-25769: Wazuh Critical RCE via Insecure

• CVE-2026-48207: Apache Fury PyFury Deserialization RCE

• CVE-2026-26026: GLPI Template Injection Enables

• CVE-2026-41258: OpenMRS Velocity Template Injection Enables

• CVE-2026-73043: SiYuan RCE via Template Calculation Operator

• CVE-2026-29067: ZITADEL Password Reset Poisoned by Host Header Injection

• ZITADEL Critical XSS in SAML Endpoint Enables 1-Click

• CVE-2026-29192: ZITADEL Stored XSS via Default Redirect URI

• CVE-2026-30836: Step CA SCEP UpdateReq Allows

• CVE-2026-9648: X.509 NameConstraints Bypass in crypton-x509-validation

• HashiCorp Vault: Centralized Secrets Management for Modern

• CVE-2026-31027: TOTOlink A3600R Buffer Overflow in setAppEasyWizardConfig

• CVE-2026-32956: Critical Heap Buffer Overflow in silex

• CVE-2026-7136: Totolink A8000RU OS Command Injection via setDmzCfg

• UniFi OS Command Injection via Improper Input Validation

• CVE-2026-47367: UID Enterprise Agent Command Injection via Improper Input Validation

• CVE-2026-47369: UniFi OS Privilege Escalation via Improper Input Validation

• CVE-2026-33669: SiYuan Unauthenticated Document Content

• CVE-2026-33670: SiYuan readDir Path Traversal Notebook

• CVE-2026-40259 — SiYuan Knowledge Management Authorization

• Dell ECS and ObjectScale: Hard-Coded Credentials

• CVE-2026-49191: M3WebServer Hard-Coded API Keys Exposed via Error Pages

• CVE-2026-50208: TLS Bypass and Hard-Coded DES Keys Enable MITM Attacks

• Container Security Scanning with Trivy: Images, IaC, and CI/CD

• Docker Security Hardening: Locking Down Container Environments

• Docker Security Fundamentals: Protecting Your Containers

• Suricata IDS/IPS Deployment: From Install to Active Threat

• Network Traffic Analysis with Zeek: From Deployment to Threat Detection

• Sysmon and Windows Event Forwarding: Enterprise-Grade

• Network Traffic Analysis with Zeek: From Deployment to Threat Detection

• Sysmon and Windows Event Forwarding: Enterprise-Grade

• Deploy OpenCanary to Catch Attackers Inside Your Network

• FBI Warns of ATM Jackpotting Surge as Losses Top $20

• RedWing MaaS Packages Android Bank Fraud as a Telegram Rental Service

• River Bank Says Hackers Deleted Data Stolen in Ransomware Attack

• Scattered Lapsus$ ShinyHunters Alliance Hits 100+

• Exposed Fuel Tank Gauges Under Attack in the US

• Klue OAuth Breach Linked to 'Icarus' Salesforce Data Theft Attacks

• Fintech Giant Figure Technology Confirms Breach: Nearly 1

• Cash App Owner to Pay $45 Million Over Lax Security Allegations

• Suno, Paidwork Data Breaches Affect Tens of Millions of Accounts

• AI-Armed Amateur Hacker Compromises 600+ FortiGate

• Amazon Fined $2.25M by FTC for Blocking Identity Theft Victims' Evidence

• 9,300+ Leaked AWS Keys Still Active, Granting Full Corporate Account Control

• Europol-Coordinated Action Dismantles Tycoon2FA — 330

• FBI Dismantles Massive AI-Powered Chinese Phishing-as-a-Service Operation

• Crafty Phishing Campaigns Auto-Adapt to Victim's Device, OS

• Phobos Ransomware Admin Pleads Guilty — 1,000+ Victims

• Former DigitalMint Ransomware Negotiator Pleads Guilty to $75.3M Extortion Scheme

• Snowflake Hacker Pleads Guilty Over Breaches Affecting at Least 100 Million People

• Spanish-Ukrainian Police Bust Gambling Ring That Exploited

• Spain Dismantles Major $4.7M Manga Piracy Platform, Arrests

• Zara Data Breach Exposed Personal Information of 197,000

• GlassWorm Escalates: 72 Malicious Open VSX Extensions Use

• GlassWorm ForceMemo: Stolen GitHub Tokens Used to Poison

• Weekly Recap: Chrome 0-Days, Router Botnets, AWS Breach

• GlassWorm Escalates: 72 Malicious Open VSX Extensions Use

• Crypto Platform Drift Suspends Services After Hundreds of Millions Stolen

• Drift Crypto Platform Confirms $280 Million Stolen as

• Eclypsium Raises $25 Million to Expand Device Supply Chain

• GPUBreach: New Rowhammer Attack on GPU GDDR6 Memory Enables

• New TrojPix Attack Leaks Data From Air-Gapped Systems via Video Cable Emissions

• Trivy Security Scanner GitHub Actions Breached — 75 Tags

• Cisco Source Code Stolen in Trivy-Linked Dev Environment

• European Commission Confirms Data Breach Linked to Trivy

• Crunchyroll Probes Breach After Hacker Claims to Steal 6.8M

• Anti-Piracy Coalition Takes Down AnimePlay App with 5

• Italy Disrupts CINEMAGOAL Piracy App That Stole Streaming

• Citrix Urges Admins to Patch NetScaler Flaws as Soon as

• Citrix NetScaler CVE-2026-3055 (CVSS 9.3) Under Active

• Critical Citrix NetScaler Memory Flaw Actively Exploited in Attacks

• Citrix Urges Admins to Patch NetScaler Flaws as Soon as

• Citrix NetScaler CVE-2026-3055 (CVSS 9.3) Under Active

• Critical Citrix NetScaler Memory Flaw Actively Exploited in Attacks

• CISA Adds CVE-2025-53521 to KEV After Active F5 BIG-IP APM

• F5 BIG-IP Vulnerability Reclassified from DoS to RCE Under

• Over 14,000 F5 BIG-IP APM Instances Still Exposed to RCE

• Foster City Declares State of Emergency After Ransomware

• GM Agrees to $12.75M California Settlement Over Sale of Drivers' Data

• California AG Sues 23andMe Over 2023 Breach Exposing Genetic Health Data

• European Commission Confirms Data Breach After Europa.eu

• CERT-EU: European Commission Hack Exposes Data of 30 EU

• EU Cyber Agency Attributes Major Data Breach to TeamPCP

• Hackers Exploit TrueConf Zero-Day to Push Malicious

• PhantomCore Exploits TrueConf Vulnerabilities to Breach

• Head Mare Hacktivists Breach TrueConf to Trojanize Client Installers with PhantomCore Backdoors

• New Progress ShareFile Flaws Can Be Chained in Pre-Auth RCE

• CISA: Hackers Now Exploit SolarWinds Serv-U Flaw to Crash Servers

• CVE-2026-14958: IBM Aspera Faspex 5 Shell Injection Enables RCE

• The State of Trusted Open Source Report: Key Findings for 2025

• Build Application Firewalls Aim to Stop the Next Supply

• How Software Development's Speed Obsession Enabled TeamPCP's Chaos Crusade

• Microsoft Now Force-Upgrades Unmanaged Windows 11 24H2 PCs

• Windows Update Gets New Controls to Reduce Forced Restarts

• Microsoft Blames August 2026 Windows Gaming Crashes on RGB Lighting Devices

• $285 Million Drift Hack Traced to Six-Month DPRK Social

• Drift $280M Crypto Theft Linked to 6-Month In-Person DPRK

• Amazon Links Debug, Chalk NPM Supply Chain Attacks to North Korean Hackers

• 36 Malicious npm Packages Exploited Redis, PostgreSQL to Deploy Persistent Implants

• Autonomous AI Tool Finds 2-Year-Old RCE Flaw in Redis (CVE-2026-23479)

• Kimi K3 AI Agents Discovered Redis Zero-Days and Built RCE Exploits in Under 90 Minutes

• 36 Malicious npm Packages Exploited Redis, PostgreSQL to Deploy Persistent Implants

• Highly Critical Drupal Core Flaw Exposes PostgreSQL Sites

• Critical RCE in Veeam Backup & Replication — Backup Viewer

• Black Hat USA 2026: What to Expect from the Year''s Biggest

• Nmap Scanning Techniques for Security Professionals

• OSINT Reconnaissance Methodology for Security Professionals

• Germany Doxes "UNKN," Head of RU Ransomware Gangs REvil

• BKA Identifies REvil Leaders Behind 130 German Ransomware

• German Authorities Identify REvil and GandCrab Ransomware

• Trump Budget Proposal Would Cut Hundreds of Millions More

• Commerce Setting Up New AI Export Regime to Push Adoption

• OpenAI Previews GPT-5.6 Sol Under Government-Gated Rollout with Stronger Cyber Safeguards

• Disgruntled Researcher Leaks BlueHammer Windows Zero-Day

• Windows BitLocker Zero-Day Gives Access to Protected

• Windows Zero-Days Expose BitLocker Bypasses and CTFMON

• Microsoft Links Storm-1175 to Medusa Ransomware Zero-Day

• China-Linked Storm-1175 Chains Zero-Days for High-Velocity

• Storm-1175 Deploys Medusa Ransomware at 'High Velocity'

• China-Linked Storm-1175 Chains Zero-Days for High-Velocity

• Storm-1175 Deploys Medusa Ransomware at 'High Velocity'

• New StormEncryptor Ransomware Used by Former Medusa Affiliate

• Snowflake Customers Hit in Data Theft Attacks After SaaS

• Canadian Pleads Guilty to Snowflake Cloud Data-Theft Attacks

• Snowflake Hacker Pleads Guilty Over Breaches Affecting at Least 100 Million People

• Cybercriminals Target Accountants to Drain Russian Firms'

• SCMBANKER Malware Uses ClickFix Lures to Target Mexican Banking Users

• Banking Trojans Manic, Grandoreiro, and ToxicPanda 2.0 in the Spotlight

• Cybercriminals Target Accountants to Drain Russian Firms'

• ARToken PhaaS Exposes EvilTokens' Microsoft 365 Phishing Toolkit with AI-Powered BEC

• Hackers Hijack Hotel Wi-Fi DNS to Steal Microsoft 365 Accounts

• Your Next Breach Will Look Like Business as Usual

• How to Detect and Block ClickFix Attacks

• Runtime Security Monitoring with Falco: Detect Container

• Analysis of 216M Security Findings Shows a 4x Increase in Critical Risk (2026 Report)

• Software Is Now Written at the Speed of Thought. Security Isn't.

• What Changes When AI Writes Your Code: Supply Chain Security in the Age of LLMs

• The Backup Myth That Is Putting Businesses at Risk

• BridgePay Payment Gateway Knocked Offline by Ransomware

• What Rural Alberta Businesses Get Wrong About Ransomware

• Surge in Bomgar RMM Exploitation Demonstrates Supply Chain

• BeyondTrust Remote Support and PRA Critical RCE Under

• BeyondTrust Remote Support Pre-Authentication RCE Under

• Spain Dismantles Major $4.7M Manga Piracy Platform, Arrests

• Italy Disrupts CINEMAGOAL Piracy App That Stole Streaming

• Police Dismantles 9 Crime Groups in Illegal Streaming Crackdown

• New BlackFile Extortion Group Linked to Surge of Vishing

• ClickFix Campaign Targets European Hotels with Fake

• CVE-2026-14688: SQL Injection in itsourcecode Hotel Management Admin Login

• New BlackFile Extortion Group Linked to Surge of Vishing

• TeamPCP Hackers Advertise Mistral AI Source Code Repos for Sale

• ShinyHunters Claims Brinks Home Breach, Threatens to Leak Stolen Data

• Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain

• FFmpeg PixelSmash: CVE-2026-8461 Enables RCE via Crafted Video Files Across Thousands of Apps

• JFrog Confirms OpenAI Models Exploited Artifactory Zero-Day Before Hugging Face Breach

• Microsoft Now Lets Admins Uninstall Copilot on Enterprise

• SearchLeak: New Attack Turned Microsoft 365 Copilot into 1-Click Data Theft Tool

• Microsoft Announces Major Security Features for Copilot

• Firefox Vulnerability Allows Tor User Fingerprinting Across

• CryptoBandits Malware Doubles as a Backdoor, Abuses Tor for Stealthy C2

• Microsoft Details Windows Clipper Malware Campaign Using USB LNK Worm and Tor-Based C2

• FTC: Americans Lost Over $2.1 Billion to Social Media Scams

• Here's How the FTC Plans to Enforce the Take It Down Act

• FTC Warns of Record $3.5 Billion in Losses to Imposter Scams in 2025

• Medtronic Confirms Breach After Hackers Claim 9 Million

• Medtronic Hack Confirmed After ShinyHunters Threatens Data

• Medtronic Notifies Customers Impacted by ShinyHunters Data Breach

• Critical Unpatched Flaw Leaves Hugging Face LeRobot Open to Unauthenticated RCE

• As Global Powers Explore Humanoid Robots, Cyber-Risk Looms

• Two Unitree G1 EDU Humanoid Robot Flaws Enable Root RCE — One Starts Over Bluetooth

• Edu-Tech Firm Instructure Discloses Cyber Incident, Probes

• Canvas Breach Disrupts Schools & Colleges Nationwide

• Multiple Universities Forced to Reschedule Final Exams

• In Other News: Scattered Spider Member Arrested, SOC

• The U.S. Sanctions Nobitex Crypto Exchange Used by Ransomware

• US Treasury Sanctions 1VPNS: The VPN Service Favored by Ransomware Groups

• Google Detects First AI-Generated Zero-Day Exploit in the Wild

• Hackers Used AI to Develop First Known Zero-Day 2FA Bypass

• Malicious Chrome Extension 'CL Suite' Steals Meta Business

• Why Changing Passwords Doesn't End an Active Directory

• CVE-2026-11861: FreeIPA AD Trust Bypass Lets Attackers Impersonate Kerberos Clients

• CVE-2026-13097: FreeIPA Privilege Escalation via Kerberos Principal Uniqueness Bypass

• KongTuke Hackers Now Use Microsoft Teams for Corporate

• Kodak Admits Data Breach After ShinyHunters Hack Claims

• Accenture Confirms Data Breach After Hacker Claims Source Code Theft

• OpenAI Confirms Security Breach in TanStack Supply Chain

• TanStack Supply Chain Attack Hits Two OpenAI Employee

• TeamPCP Hackers Advertise Mistral AI Source Code Repos for Sale

• More Than $10 Million Stolen from Crypto Platform THORChain

• Why Chargebacks Are Just One Piece of the Fraud Puzzle

• SCMBANKER Malware Uses ClickFix Lures to Target Mexican Banking Users

• TeamPCP Ups the Game, Releases Shai-Hulud Worm's Source Code

• Four Malicious npm Packages Deliver Infostealers and Phantom Bot DDoS Malware

• GitHub Confirms Being Hacked by TeamPCP, Says Customer Data

• The Boring Stuff Is Dangerous Now

• New U.S. Cyber Force Would Cost Up to $11 Billion to Start, Commission Says

• Cyber Force Not Included in Senate Defense Policy Roadmap

• SecurityScorecard Acquires Driftnet to Boost Third-Party

• SailPoint to Acquire Entro in Reported $200 Million Deal

• Cisco Adds NHI to Security Stack With Astrix, WideField Acquisitions

• 5 Steps to Managing Shadow AI Tools Without Slowing Down

• Geordie Raises $30 Million for AI Security and Governance Platform

• Every AI Agent Is an Identity. Most Organizations Don't Treat Them That Way

• Drupal Patches Highly Critical Vulnerability Exposing

• Highly Critical Drupal Core Flaw Exposes PostgreSQL Sites

• Drupal Core SQL Injection Bug Actively Exploited, Added to CISA KEV

• Google Accidentally Exposed Details of Unfixed Chromium Flaw

• AI-Generated Browser Ransomware Abuses Chromium API on Windows, Linux, macOS, Android

• CVE-2026-11645: Google Chromium V8 Out-of-Bounds Read and Write Vulnerability

• Highly Critical Drupal Core Flaw Exposes PostgreSQL Sites

• CVE-2026-39397: PayloadCMS Puck Plugin Access Control Bypass

• Critical Authentication Bypass in WordPress Temporary Login

• Canadian Man Gets 33 Years for Using Social Media to Coerce US Children

• New Mexico Judge Orders Meta to Pay $567 Million in Kids Online Safety Case

• Senators Press TikTok Over Withholding Safety Features from Users

• California AG Sues 23andMe Over 2023 Breach Exposing Genetic Health Data

• 23andMe $47 Million Settlement Approved for 7 Million Breach Victims

• 23andMe to Pay $18 Million in New Genetics Data Breach Settlement

• Palo Alto GlobalProtect VPN Auth Bypass Flaw Now Exploited in Attacks

• PAN-OS GlobalProtect Authentication Bypass (CVE-2026-0257) Under Active Exploitation

• Critical Palo Alto VPN Bug Now Exploited by Qilin Ransomware Gang

• Palo Alto GlobalProtect VPN Auth Bypass Flaw Now Exploited in Attacks

• PAN-OS GlobalProtect Authentication Bypass (CVE-2026-0257) Under Active Exploitation

• CISA Warns Fortinet Users to Secure Devices After FortiBleed Credential Leak

• Dashlane Password Manager Users Locked Out by Brute Force Attacks

• Dashlane Brute-Force Attack Leads to Limited Encrypted Vault Downloads

• Dashlane Discloses Brute-Force Attack: Encrypted Vaults of Fewer Than 20 Users Downloaded

• Critical Vulnerability in HP VoIP Phones Enables Enterprise Network Breaches

• Hackers Exploit Sangoma Switchvox Flaw to Deploy Reverse Shells

• CVE-2026-45538: OpenSIPS Stack Buffer Overflow via Oversized SIP Header

• Pakistan-Linked SideCopy APT Targets Afghanistan Finance Ministry with Xeno RAT

• China and India Ran Separate Spying Campaigns Against the Same Pakistani Police Force

• China and India-Linked Hackers Both Targeted the Same Pakistani Police Force

• New U.S. Cyber Force Would Cost Up to $11 Billion to Start, Commission Says

• Cyber Force Not Included in Senate Defense Policy Roadmap

• Launch of UK's National Cyber Action Plan Delayed Amid Labour Leadership Crisis

• IronWorm and New Miasma Worm Variant Hit npm in Coordinated Supply Chain Attacks

• Rust-Written IronWorm Hits NPM Supply Chain

• Rust Supply Chain Attack Puts Build-Time Malware in Crates with 245 Million Downloads

• AI Agent Uncovers 21 Zero-Days in FFmpeg; Chrome Patches Record 429 Bugs

• FFmpeg Fixes PixelSmash Flaw in Widely Used Video Decoder

• FFmpeg PixelSmash: CVE-2026-8461 Enables RCE via Crafted Video Files Across Thousands of Apps

• CISA: Hackers Now Exploit SolarWinds Serv-U Flaw to Crash Servers

• CVE-2026-28302: SolarWinds Serv-U IDOR Leads to Root RCE

• CVE-2026-28318: SolarWinds Serv-U Uncontrolled Resource Consumption (DoS)

• Oracle Mitigates PeopleSoft Zero-Day Exploited in Data Theft Attacks

• ShinyHunters Uses Oracle Zero-Day to Rampage Higher Education

• Google Confirms ShinyHunters Exploited Oracle PeopleSoft Zero-Day CVE-2026-35273

• Cyberattack on Russian Tech Firm Astral Disrupts Business and Government Services for a Week

• CVE-2022-4995: Weaver E-cology 9.0 Unauthenticated File Upload Enables Webshell RCE

• CVE-2025-62319: Critical SQL Injection in HCL Unica (CVSS

• INC Ransomware Thrives by Mastering the Basics

• Inc Ransomware Exploits Chained SonicWall SMA Zero-Days for Root Access

• INC Ransomware Emerges as Dominant Threat Actor Exploiting SonicWall SMA 1000 Flaws

• Malicious JetBrains Plugins Steal AI API Keys as Chrome Extensions Capture Chatbot Chats

• Attackers Breached JetBrains Cadence via Unpatched TeamCity, Extracting AWS Credentials

• CVE-2026-59792: JetBrains IntelliJ IDEA Remote Code Execution via Path Traversal

• Microsoft Fixes AutoGen Studio Flaw That Enabled Code Execution

• CVE-2018-25320: ACL Analytics Arbitrary Code Execution via EXECUTE Function

• CVE-2026-32999: Comet Backup Server Code Execution via Signing Module

• Amadey and StealC Malware Networks Disrupted, 27 Million Stolen Credentials Recovered

• Microsoft and Europol Dismantle Three Cybercrime-as-a-Service Operations

• FakeGit Campaign Uses 7,600 GitHub Repos to Push SmartLoader Malware

• In Other News: Chinese Mythos-Like AI, Tata Electronics Breach, Snyk Layoffs

• Nebulock Raises $25 Million for AI-Native Contextual Security

• Guten Tag, Bonjour, Hola: Dark Reading Launches European Cyber Defenders Hub

• Nebulock Raises $25 Million for AI-Native Contextual Security

• SentinelOne Threat Hunting Recipes: Practical Deep

• Velociraptor DFIR: Endpoint Forensics and Incident Response

• Chinese LLMs Broaden the Gap Between Attackers & Defenders

• Atlassian Rovo Can Be Tricked Into Sending Jira and Confluence Data to Attackers

• Venture Firm Team8 Secures Additional $365 Million

• Lidl Discloses Online Shop Breach After Service Provider Hack

• Origin Energy Data Breach Affects 900,000 Australians

• Pokemon Center Data Breach Exposes Customer Info, Cancels Some Orders

• Cyera Acquiring Oasis Security in $1 Billion Deal

• Varonis Launches Agent IBAC to Keep AI Agents Within Their Intended Boundaries

• Metabase Zero-Day Exploited in Wild Allows Admin Access Without Authentication

• Microsoft Teams Vishing Attacks Lead to Chaos Ransomware Deployment

• CVE-2026-3564: ConnectWise ScreenConnect Auth Bypass via Server Cryptographic Material

• FortiGate SSL VPN Setup: Secure Remote Access Configuration

• Interpol Leverages Global System to Curtail Fraud Payments

• CVE-2020-37168: Systempay Weak Crypto Allows Payment

• CVE-2026-11964: WordPress User Registration Plugin PayPal Webhook Bypass

• Hackers Steal 31,000 Records Identifying People Behind Liechtenstein Companies and Foundations

• Valve Notifies Steam Hardware Customers of CEVA Logistics Data Breach

• CareCloud Data Breach Exposes 3.75 Million Patient Records

• CISA Flags Langflow RCE, Tomcat, and N-central Flaws as Actively Exploited

• CVE-2016-20026: ZKTeco ZKBioSecurity 3.0 Hardcoded Tomcat

• CVE-2026-34486: Apache Tomcat Missing Encryption of Sensitive Data Vulnerability

• N-able Issues N-central Hotfix 2 as Attackers Reach Managed Systems and Persist

• China-Linked Storm-1175 Turns N-able N-central Into MSP Ransomware Launchpad

• Enterprise Perimeter Defenses Improved — Interior Security Collapsed

• Hackers Exploit macOS Screen Sharing Flaw to Deploy Monero Miner

• CISA Warns of Hackers Exploiting Critical MLflow Vulnerability

• Critical Elementor Pro Bug Exposes WordPress Sites to RCE Attacks

• CISA Warns of Hackers Exploiting Critical MLflow Vulnerability

• Critical Elementor Pro Bug Exposes WordPress Sites to RCE Attacks

• Critical Keycloak Flaw Lets Attackers Reset Any Account Password Without Authentication

• NASA AIT-GUI Flaws Could Let Unauthenticated Attackers Issue Spacecraft Commands

• DoJ Corrects China Hacking Claim: Agencies Were Targets, Not Victims

• CVE-2024-46636: NASA EOSDIS MODAPS v8.1 SQL Injection

• Manchester Airports Group Confirms Data Breach — Up to 8.9M Travelers Affected

• 68-Year-Old Imprisoned After Making $1.3 Million by Pirating IPTV Services

• FulcrumSec Claims Manchester Airports Hack, Theft of 86GB of Data

• Five Critical WordPress Plugin and Theme Flaws Enable Site Takeover or RCE

• Critical GiveWP Flaw Lets Hackers Run Server Commands

• CVE-2026-32479: Unauthenticated SQL Injection in Visitor Traffic Real Time Statistics Pro

• Cyberattacks on Critical Infrastructure Double in Q1 2026

• CVE-2026-12183: Critical Auth Bypass in Gas Station Automation System

• CVE-2026-16462: PROCON-WEB SCADA Unauthenticated SQL Injection (CVSS 9.8)

• Coolify CVE-2026-34037: CVSS 9.9 IDOR Enables Cross-Team Resource Takeover

• Coolify CVE-2026-34047: Terminal WebSocket Authorization Bypass (CVSS 9.9)

• Coolify CVE-2026-34048: Low-Privilege Terminal Escalation via WebSocket (CVSS 9.9)

• CVE-2008-4128: Cisco IOS Cross-Site Request Forgery Vulnerability

• CVE-2026-2611: MLflow 3.9.0 Improper Origin Validation

• CVE-2026-3589: WooCommerce CSRF Flaw Allows Unauthenticated

• CVE-2011-10043: Perl Module::Load Arbitrary Module Injection Resurfaces

• CVE-2025-15618: Perl Payment Module Uses Insecure

• CVE-2026-8507: Crypt::OpenSSL::PKCS12 Heap OOB Write — CVSS

• CVE-2016-20049: JAD Java Decompiler Stack-Based Buffer

• CVE-2017-20225: TiEmu TI Calculator Emulator Stack Buffer

• CVE-2017-20230: Perl Storable Stack Overflow — CVSS 10.0

• CVE-2016-20052: Snews CMS 1.7 Unrestricted File Upload

• CVE-2021-47933: WordPress MStore API 2.0.6 Arbitrary File

• CVE-2021-47936: OpenCATS 0.9.4 Unauthenticated RCE via PHP

• CVE-2021-47932: WordPress TheCartPress 1.5.3.6 Privilege

• CVE-2026-12923: YouTube Showcase WordPress Plugin Arbitrary Function Call

• CVE-2026-13423: Streamit WordPress Theme Allows Unauthenticated Arbitrary PHP Function Execution

• CVE-2021-47932: WordPress TheCartPress 1.5.3.6 Privilege

• CVE-2026-25770: Wazuh Privilege Escalation to Root via Cluster Protocol File Write

• CVE-2026-32922: OpenClaw Privilege Escalation via Token

• WordPress ARForms Plugin Critical PHP Object Injection — CVE-2024-13784

• CVE-2026-0551: PHP Object Injection in PPWP – Password Protect Pages WordPress Plugin

• CVE-2026-25449: Critical Object Injection in Shinetheme

• CVE-2025-14771: ABB T-MAC Plus Critical File & Directory Exposure (CVSS 9.9)

• CVE-2026-14450: MaaS API Auth Bypass via Forged HTTP Headers

• CVE-2026-18948: Feast Feature Store RCE via Unsafe Deserialization

• CVE-2025-67403: Critical SQL Injection in CASAP Enrollment System update_class.php

• CVE-2025-67404: Critical SQL Injection in CASAP Enrollment System save_stud.php

• CVE-2026-11334: SQL Injection in College Management System

• CVE-2026-11841: AppEngine Fileaccess Unauthenticated Filesystem R/W (CVSS 9.4)

• CVE-2026-28766: Gardyn Smart Garden API Exposes All User

• CVE-2026-34162: FastGPT Unauthenticated HTTP Proxy Enables

• CVE-2026-11861: FreeIPA AD Trust Bypass Lets Attackers Impersonate Kerberos Clients

• CVE-2026-13097: FreeIPA Privilege Escalation via Kerberos Principal Uniqueness Bypass

• CVE-2026-18922: SASL Auth Flaw Lets Attackers Seize Directory Manager on 389 Directory Server

• CVE-2026-12485: GeoVision GV-I/O Box 4E UDP Stack Overflow (IP Address Field)

• CVE-2026-12486: GeoVision GV-I/O Box 4E OS Command Injection via libNetSetObj.so

• CVE-2026-12846: GeoVision GV-I/O Box 4E UDP Stack Overflow (Net Mask Field)

• CVE-2026-14453: Critical SSTI to RCE in Centreon Open Tickets (CVSS 9.6)

• GlassFish Gadget Handler Expression Language RCE

• CVE-2026-44377: CubeCart Authenticated SSTI via Smarty

• CVE-2026-15013: WordPress SAML SSO Plugin — Algorithm Confusion Auth Bypass

• CVE-2026-31946: Critical JWT Signature Verification Bypass

• CVE-2026-3564: ConnectWise ScreenConnect Auth Bypass via Server Cryptographic Material

• CVE-2026-2346: Critical Authorization Bypass in Menulux Mobile App

• Critical Session Hijacking via Auth Bypass in Akilli

• CVE-2026-25197: IDOR Flaw Lets Authenticated Users Access

• CVE-2026-40492: SAIL XWD Codec Heap Buffer Overflow (CVSS

• CVE-2026-40493: SAIL PSD Codec Buffer Overflow via channels

• CVE-2026-40494: SAIL TGA Codec RLE Decoder Asymmetric

• CVE-2026-47865: Critical Authentication Bypass in VMware Avi Load Balancer

• CVE-2026-47866: Authorization Bypass in VMware Avi Load Balancer

• CVE-2026-47867: Remote Code Execution via Code Injection in VMware Avi Load Balancer