government
healthcare
social media
service provider
fine
education
law enforcement
finance
security
web
dark web
retail
app
phama
insurance
telecoms
charity
travel
manufacturing
legal
operating system
law
tech
ransomware
publishing
story
hacked
malware
unauthorised access
vulnerability
accidental disclosure
phishing
unsecured database
poor security
insider threat
unsecured server
hacking
hacked email
lost device
financial
website hacked
identity theft
ddos
stolen documents
breached
Trojans
inside job
RDP
spear phishing
spyware
cyber attack
breach notification
privacy
security flaw
legislation
poor operations
user credentials
physical security
customer data
third party
Cryptocurrency
enforcement
email hacked
insecure storage
court action
encryption
VPN
fraud
passwords
zero day
3rd parties
state hacking
employee data
remote working
stolen data
Malicious Sicoob NuGet Steals Banking Credentials as npm Packages Target Cloud Secrets
What 2000 Exposed VibeCoded Apps Reveal About the Limits of Most Security Stacks
New RussiaLinked GREYVIBE Targets Ukraine with AIPowered Cyberattacks
Attackers Use LLM Agent for PostExploitation After Marimo CVE202639987 Exploit
ChatGPhish Vulnerability Turns ChatGPT Web Summaries Into a Phishing Surface
California AG Bonta Sues Chrome Holding Co Formerly Known as 23andMe Over 2023 Data Breach
French Health Payments Breach Exposed ID Data Fuels Fraud Fears
Thousands of Oregon prison files accessed by prison worker
Google worker charged with using internal data to make 12m on bets
California Attorney General sues 23andMe successor for 2023 data breach
JINX0164 Targets Cryptocurrency Firms with Fake Recruiter Lures and macOS Malware
New AI Usage Report Enterprise AI Risk Is Heavily Concentrated Among a Small Group of AI Power users
ThreatsDay Bulletin Claude Security Plugin Azure PrivEsc Kali365 MFA Bypass FIFA Scams 15 More
Microsoft Slams Public ZeroDay Disclosures Amid GitHub Researcher Account Removal
Threat Actors Exploit Critical FortiClient EMS Flaw to Deploy Credential Stealer
Critical Gogs RCE Vulnerability Lets Any Authenticated User Execute Arbitrary Code
Romanian National Sentenced for Selling Access to Networks of Oregon State Government Office
AI Chatbot Recommendations Redirect Users to Cryptojacking Malware Sites
Gitea Vulnerability Exposes Private Container Images without Authentication
3 SOC Steps that Shut Down Incident Risks Early
GlassWorm Malware Takedown Disrupts Developer Supply Chain Attack Infrastructure
Malicious npm Package Stole Files From Claude AI User Directory via GitHub
Grandoreiro Malware and BTMOB RAT Campaigns Target Windows and Android Users
Lithuania investigates theft of 600000 state registry records
Malware seller known as Venom extradited to France
UK Visa Portal spilled thousands of applicants passports and selfies online and hasnt fixed the leak
Silent Ransom Group Impersonating IT Personnel through Social Engineering
NL Schiphol cargo worker arrested over alleged data leaks to drug networks
KnowledgeDeliver LMS Flaw Exploited to Deploy Godzilla and Cobalt Strike
Iranian Hackers Deploy MiniFast and MiniJunk V2 via Phishing and SEO Poisoning
CERTIn Recommends 12Hour Patching for InternetFacing Flaws Amid AIAssisted Attacks
MFA Prompt Bombing Why Your Second Factor Isnt Saving You
Microsoft Patches SharePoint RCE Flaw CVE202645659 Across Server Versions
THN Webinar New AI DDoS Attacks Are Smarter Learn How to Fight Back
MuddyWater Uses DLL SideLoading in Espionage Campaign Targeting 9 Countries
TrapDoor Supply Chain Attack Spreads CredentialStealing Malware via npm PyPI and CratesIO
Lazarus Deploys RemotePE MemoryOnly RAT Against Financial and Crypto Firms
The Alert Firehose Finally Meets Its Match
Ghost CMS CVE202626980 Exploited to Hijack 700 Sites for ClickFix Attacks
Weekly Recap Linux Flaws Defender 0Days Router Botnets and Supply Chain Chaos
