Cyber Security
Cybersecurity
Hackers Hijack Danfoss Fridge Controllers at French Supermarkets
Attackers took over Danfoss refrigeration controllers overnight, forcing fridges to heat up and spoiling stock at hundreds of French supermarkets nationwide.
Cybersecurity
Ahold Delhaize Pulls Systems Offline After Security Incident
Ahold Delhaize took systems offline after a network security issue disrupted Albert Heijn online services and staff tools at Stop & Shop and Food Lion.
Application Security
SAP Patch Day Fixes 20 Flaws, Including CVSS 10.0 Cloud SDK Bug
SAP's October patch day fixes 20 vulnerabilities, four critical, led by a CVSS 10.0 SSRF flaw in SAP Cloud SDK for Python that exposes OAuth2 ...
Application Security
IBM Patches Three Critical Flaws in IBM i, Db2 Mirror and Maximo
IBM issued three critical bulletins rated CVSS 9.8 to 9.9 for IBM i, Db2 Mirror for i and Maximo AI Service, with no workarounds and ...
Application Security
Progress Fixes 31 MarkLogic Server Flaws, Three Rated CVSS 9.9
Progress Software's October bulletin fixes 31 MarkLogic Server flaws, including three rated CVSS 9.9 that allow code execution and hidden admin accounts.
Application Security
CERT/CC Warns of 11 Unpatched Thelia E-Commerce Vulnerabilities
CERT/CC says 11 unpatched Thelia flaws, seven enabling remote code execution by back-office users, remain open because the vendor could not be reached.
Cybersecurity
Norway Fines Microsoft’s Xandr $9.6M Over Grindr Data Sharing
Norway's data protection authority fined Microsoft-owned Xandr NOK 92 million, its largest ever, over ad auctions that exposed Grindr users' sensitive data.
Cybersecurity
YMCO Leader Oleg Korniev Pleads Guilty to Running Mule Network
Oleg Korniev pleaded guilty in the US to running Your Mule Cashout, which recruited over 15,000 unwitting money mules to launder stolen funds for hackers.
Cybersecurity
Gentlemen Ransomware Gang Claims MoneyGram Breach, Unconfirmed
The Gentlemen ransomware gang listed MoneyGram on its leak site and set a deadline of a little over a week. MoneyGram has not confirmed any ...
Cybersecurity
Dutch Police and Shadowserver Dismantle 178,000-Device Proxy Network
Dutch police, prosecutors and the Shadowserver Foundation took down servers behind a proxy service of 178,000 infected devices; more takedowns are planned.
Cybersecurity
CyberXero Broker Used Claude Code Agents to Steal Ukrainian Data
A Russian-speaking initial access broker, CyberXero, ran 51 Claude Code agents to compromise WordPress sites and steal over 628,000 Ukrainian records.
Cybersecurity
Nippon Columbia Malware Incident Exposes 8.6M Karaoke Customers
Nippon Columbia disclosed malware on an employee computer that may have exposed records of about 8.7 million karaoke customers and employees across Japan.
Cybersecurity
P7 DarkSword iOS Exploit Kit Variant Adds Crypto-Wallet Theft
Researchers disclosed P7, a DarkSword iOS exploit kit variant that steals data from 25+ crypto-wallet apps and adds remote command execution to iPhones.
Application Security
Trojanized Terraform Provider Hides FLATROOF and ROOFDECK Backdoors
Zscaler and SentinelLabs say a fake AWS Terraform provider delivers FLATROOF and ROOFDECK backdoors, with low-confidence links to TraderTraitor.
Application Security
AnyPwn Heap Overflow in AnyDesk for Linux Gives Root RCE, PoC Public
A public proof of concept for AnyPwn, a heap overflow in AnyDesk for Linux 8.0.2, gives remote root code execution before the user approves a ...
Cybersecurity
Warden Stealer Rust Infostealer Targets AI Coding-Agent Tokens
Gen Threat Labs details Warden Stealer, a Rust malware-as-a-service infostealer that steals AI coding-agent tokens, browser data and crypto from Windows PCs.
Cybersecurity
UAT-11985 Uses AI-Written Lures to Steal Google Logins in Taiwan
Cisco Talos tracks UAT-11985, which uses AI-written event lures and an adversary-in-the-middle kit to steal Google logins from Taiwan researchers despite MFA.
Cybersecurity
Phishers Abuse Power BI Dashboards to Install ScreenConnect
Huntress reports a phishing campaign using public Power BI dashboards to push ScreenConnect remote-access installs, with persistence via scheduled tasks.
Application Security
GhostAction Campaign Hits 500+ GitHub Accounts to Steal API Keys
Socket reports GhostAction, a campaign compromising more than 500 GitHub accounts and injecting workflows that harvest cloud, AI and package-registry secrets.
Cybersecurity
Silent Ransom Group Allegedly Extorted $207M From 27 Law Firms
Leaked chats suggest Silent Ransom Group extorted about $207 million from 27 law firms through phone social engineering, without encrypting any files.
TOP CYBERSECURITY HEADLINES
Application Security
IBM Patches Three Critical Flaws in IBM i, Db2 Mirror and Maximo
Application Security
Progress Fixes 31 MarkLogic Server Flaws, Three Rated CVSS 9.9
Application Security
CERT/CC Warns of 11 Unpatched Thelia E-Commerce Vulnerabilities
This Week’s Security Spotlight
Application Security
GhostAction Campaign Hits 500+ GitHub Accounts to Steal API Keys
Application Security
Atlassian CVE-2026-21589 Exploited Within Two Hours of PoC Details
CVE Vulnerability Alerts
Dell Patches Root-Level Flaw CVE-2026-86360 in System Update Tool
CVE Vulnerability Alerts
Android October 2026 Update Patches 25 Flaws, Seven Rated Critical
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.
Featured Videos
Podcasts
Cyber Security News
- All
- Application Security
- Blog
- CVE Vulnerability Alerts
- Cybersecurity
- Cybersecurity Newsletter
- Data Security
- Endpoint Security
- Identity and Access Management
- Information Security
- Network Security
- News
- Phishing
- Podcasts
- Product Reviews
- Ransomware
- Ransomware Victims
- Resources
- Security Spotlight
- Sponsored
- Threat Actors
- Threat Actors
- Threat Detection Tools
IBM Patches Three Critical Flaws in IBM i, Db2 Mirror and Maximo
IBM issued three critical bulletins rated CVSS 9.8 to 9.9 for IBM i, Db2 Mirror for i and Maximo AI Service, with no workarounds and ...
Progress Fixes 31 MarkLogic Server Flaws, Three Rated CVSS 9.9
Progress Software's October bulletin fixes 31 MarkLogic Server flaws, including three rated CVSS 9.9 that allow code execution and hidden admin accounts.
CERT/CC Warns of 11 Unpatched Thelia E-Commerce Vulnerabilities
CERT/CC says 11 unpatched Thelia flaws, seven enabling remote code execution by back-office users, remain open because the vendor could not be reached.
Norway Fines Microsoft’s Xandr $9.6M Over Grindr Data Sharing
Norway's data protection authority fined Microsoft-owned Xandr NOK 92 million, its largest ever, over ad auctions that exposed Grindr users' sensitive data.
YMCO Leader Oleg Korniev Pleads Guilty to Running Mule Network
Oleg Korniev pleaded guilty in the US to running Your Mule Cashout, which recruited over 15,000 unwitting money mules to launder stolen funds for hackers.
Gentlemen Ransomware Gang Claims MoneyGram Breach, Unconfirmed
The Gentlemen ransomware gang listed MoneyGram on its leak site and set a deadline of a little over a week. MoneyGram has not confirmed any ...
Dutch Police and Shadowserver Dismantle 178,000-Device Proxy Network
Dutch police, prosecutors and the Shadowserver Foundation took down servers behind a proxy service of 178,000 infected devices; more takedowns are planned.
CyberXero Broker Used Claude Code Agents to Steal Ukrainian Data
A Russian-speaking initial access broker, CyberXero, ran 51 Claude Code agents to compromise WordPress sites and steal over 628,000 Ukrainian records.
Nippon Columbia Malware Incident Exposes 8.6M Karaoke Customers
Nippon Columbia disclosed malware on an employee computer that may have exposed records of about 8.7 million karaoke customers and employees across Japan.
P7 DarkSword iOS Exploit Kit Variant Adds Crypto-Wallet Theft
Researchers disclosed P7, a DarkSword iOS exploit kit variant that steals data from 25+ crypto-wallet apps and adds remote command execution to iPhones.
Trojanized Terraform Provider Hides FLATROOF and ROOFDECK Backdoors
Zscaler and SentinelLabs say a fake AWS Terraform provider delivers FLATROOF and ROOFDECK backdoors, with low-confidence links to TraderTraitor.
AnyPwn Heap Overflow in AnyDesk for Linux Gives Root RCE, PoC Public
A public proof of concept for AnyPwn, a heap overflow in AnyDesk for Linux 8.0.2, gives remote root code execution before the user approves a ...
Warden Stealer Rust Infostealer Targets AI Coding-Agent Tokens
Gen Threat Labs details Warden Stealer, a Rust malware-as-a-service infostealer that steals AI coding-agent tokens, browser data and crypto from Windows PCs.
UAT-11985 Uses AI-Written Lures to Steal Google Logins in Taiwan
Cisco Talos tracks UAT-11985, which uses AI-written event lures and an adversary-in-the-middle kit to steal Google logins from Taiwan researchers despite MFA.
Phishers Abuse Power BI Dashboards to Install ScreenConnect
Huntress reports a phishing campaign using public Power BI dashboards to push ScreenConnect remote-access installs, with persistence via scheduled tasks.
GhostAction Campaign Hits 500+ GitHub Accounts to Steal API Keys
Socket reports GhostAction, a campaign compromising more than 500 GitHub accounts and injecting workflows that harvest cloud, AI and package-registry secrets.
Silent Ransom Group Allegedly Extorted $207M From 27 Law Firms
Leaked chats suggest Silent Ransom Group extorted about $207 million from 27 law firms through phone social engineering, without encrypting any files.
Midnight Mimosa Malware Found Preinstalled on Budget Android Phones
Bitdefender found Midnight Mimosa malware embedded in firmware on budget MediaTek Android phones sold in more than 150 countries, and users cannot remove it.
Tampered Ledger Nano X Devices Tied to CryptoBilis and $93M Drain
Ledger confirmed a hidden implant in a Nano X bought from reseller CryptoBilis, as wallet drains estimated at $93.2 million hit 315 wallets from October ...
JetBrains Patches Critical Exposed SQL Injection and TeamCity Flaws
JetBrains fixed CVE-2026-108474, a CVSS 9.8 SQL injection in Exposed, and two TeamCity flaws, CVE-2026-106218 and CVE-2026-106219; no exploitation reported.