government
healthcare
social media
service provider
fine
education
law enforcement
finance
security
web
dark web
retail
app
phama
insurance
telecoms
charity
travel
manufacturing
legal
operating system
law
tech
ransomware
publishing
story
hacked
malware
unauthorised access
vulnerability
accidental disclosure
phishing
unsecured database
poor security
insider threat
unsecured server
hacking
hacked email
lost device
financial
identity theft
website hacked
stolen documents
ddos
breached
Trojans
inside job
RDP
spear phishing
spyware
cyber attack
breach notification
privacy
security flaw
legislation
poor operations
user credentials
physical security
customer data
third party
Cryptocurrency
enforcement
email hacked
insecure storage
court action
encryption
fraud
VPN
passwords
zero day
state hacking
3rd parties
employee data
remote working
stolen data
Critical Nextjs ImageResponse Flaw Can Lead to Server Code Execution via Crafted SVG Input
Chinese Hackers Exploit ChromeWindows ZeroDay Chain to Deploy CLEANGULP Malware
F5 Patches Critical BIGIP APM ZeroDay Exploited for Unauthenticated RCE on OAuth Servers
Exploit Released for Unpatched Ubuntu Linux Flaw Enabling HostRoot Container Escape
Anthropic and OpenAI Models Still Attempt Restricted Actions in Safety Tests
545 Hackers Tested It First Now XRanges for AI Scores Your Security Agent
New cPanel Flaw Lets a Hosting Account Run Code as Root Take Full Server Control
Compromised MemTensor Packages Deliver sckit Credential Stealer via npm and PyPI
This Windows Malware is Built to Let Up to Four AI Models Vote on Its Next Move
MikroTrick Chain Let Attackers Take Over MikroTik Routers Without a Password or SSH Key
A Leaked GitLab Issue Email Address Lets Anyone Push Code and Run CI Jobs as You
Attackers Use Malicious Terraform Providers to Deliver Go Malware via HashiCorp Registry
The EU spent billions on a cyberattack shield nobody checked if it worked
Latvia arrests suspected hacker for electronics repair company breach
Ryuk Ransomware Operator Sentenced to 24 Months in Prison
Canva hacked via vendors Salesforce instance Other customers affected as well
FBI Hack Exposed FBIs Own Hacking Unit
Will a switch to light speed cut power use at data centres
Zyxel and Veeam Flaws Under Active Exploitation With Command and SYSTEM Access
WordPress Comment2Shell Flaw Can Turn Anonymous Comment XSS Into RCE via Admin Session
One Hidden Meta Muse Setting Could Let Attackers Turn the AI Assistant Into a Backdoor
SideCopy Broadens India Targeting to Academia With ReverseRAT SpearPhishing
Malicious npm Package indexedbtree Hid Its Loader in Runtime Code Before Removal
SharePoint Flaw Initially Listed as Spoofing by Microsoft Enables Authenticated RCE
New Linux Kernel Flaw Gives ARM64 KVM Guests ReadWrite Access to Host Memory
DORA Year Two Can Your SOC Actually See the Attack
New CVSS 100 VeloCloud Orchestrator Flaw Actively Exploited in CertificateBased Setups
AI Agents Are Rewriting the Rules of Lateral Movement
Researcher Drops BigDiskBuster ZeroDay PoC That Blocks Microsoft Defender Updates
Critical Bifrost AI Gateway Flaw Lets Attackers Run Commands Without Credentials
Microsoft Takes Down EvilTokens DeviceCode Phishing Service Tied to 12000 Inbox Compromises
Malicious npm Package Poses as Twilio BugBounty Probe Can Exfiltrate Credentials
WordPress Issues Patch for Critical Flaw That Can Enable Code Execution on Some Servers
Check Point Warns of Management Server ZeroDay Exploited in Targeted Attacks
Early Scattered Spider member pleads guilty to cybercrime spree
Spokane Public Schools takes some systems offline after network security incident
Israeli cyber manager accused of remotely accessing cameras stealing passwords and infiltrating 26 companies
ShinyHunters escalates dispute with FBI claims to have seized job applicants site and acquired data 1
Elsevier Evolve ClinicalPharmacology and GSDD APIs Hijacked LAPSUS Redirect Campaign
Jade Sleet Linked to Indian IT Provider Breach With FLATROOF and ROOFDECK Backdoors
