Cyber Security
Application Security
Progress Fixes 31 MarkLogic Server Flaws, Three Rated CVSS 9.9
Progress Software's October bulletin fixes 31 MarkLogic Server flaws, including three rated CVSS 9.9 that allow code execution and hidden admin accounts.
Application Security
CERT/CC Warns of 11 Unpatched Thelia E-Commerce Vulnerabilities
CERT/CC says 11 unpatched Thelia flaws, seven enabling remote code execution by back-office users, remain open because the vendor could not be reached.
Cybersecurity
Norway Fines Microsoft’s Xandr $9.6M Over Grindr Data Sharing
Norway's data protection authority fined Microsoft-owned Xandr NOK 92 million, its largest ever, over ad auctions that exposed Grindr users' sensitive data.
Cybersecurity
YMCO Leader Oleg Korniev Pleads Guilty to Running Mule Network
Oleg Korniev pleaded guilty in the US to running Your Mule Cashout, which recruited over 15,000 unwitting money mules to launder stolen funds for hackers.
Cybersecurity
Gentlemen Ransomware Gang Claims MoneyGram Breach, Unconfirmed
The Gentlemen ransomware gang listed MoneyGram on its leak site and set a deadline of a little over a week. MoneyGram has not confirmed any ...
Cybersecurity
Dutch Police and Shadowserver Dismantle 178,000-Device Proxy Network
Dutch police, prosecutors and the Shadowserver Foundation took down servers behind a proxy service of 178,000 infected devices; more takedowns are planned.
AI Security
CyberXero Broker Used Claude Code Agents to Steal Ukrainian Data
A Russian-speaking initial access broker, CyberXero, ran 51 Claude Code agents to compromise WordPress sites and steal over 628,000 Ukrainian records.
Cybersecurity
Nippon Columbia Malware Incident Exposes 8.6M Karaoke Customers
Nippon Columbia disclosed malware on an employee computer that may have exposed records of about 8.7 million karaoke customers and employees across Japan.
Cybersecurity
P7 DarkSword iOS Exploit Kit Variant Adds Crypto-Wallet Theft
Researchers disclosed P7, a DarkSword iOS exploit kit variant that steals data from 25+ crypto-wallet apps and adds remote command execution to iPhones.
Application Security
Trojanized Terraform Provider Hides FLATROOF and ROOFDECK Backdoors
Zscaler and SentinelLabs say a fake AWS Terraform provider delivers FLATROOF and ROOFDECK backdoors, with low-confidence links to TraderTraitor.
Application Security
AnyPwn Heap Overflow in AnyDesk for Linux Gives Root RCE, PoC Public
A public proof of concept for AnyPwn, a heap overflow in AnyDesk for Linux 8.0.2, gives remote root code execution before the user approves a ...
AI Security
Warden Stealer Rust Infostealer Targets AI Coding-Agent Tokens
Gen Threat Labs details Warden Stealer, a Rust malware-as-a-service infostealer that steals AI coding-agent tokens, browser data and crypto from Windows PCs.
AI Security
UAT-11985 Uses AI-Written Lures to Steal Google Logins in Taiwan
Cisco Talos tracks UAT-11985, which uses AI-written event lures and an adversary-in-the-middle kit to steal Google logins from Taiwan researchers despite MFA.
Cybersecurity
Phishers Abuse Power BI Dashboards to Install ScreenConnect
Huntress reports a phishing campaign using public Power BI dashboards to push ScreenConnect remote-access installs, with persistence via scheduled tasks.
Application Security
GhostAction Campaign Hits 500+ GitHub Accounts to Steal API Keys
Socket reports GhostAction, a campaign compromising more than 500 GitHub accounts and injecting workflows that harvest cloud, AI and package-registry secrets.
Cybersecurity
Silent Ransom Group Allegedly Extorted $207M From 27 Law Firms
Leaked chats suggest Silent Ransom Group extorted about $207 million from 27 law firms through phone social engineering, without encrypting any files.
Cybersecurity
Midnight Mimosa Malware Found Preinstalled on Budget Android Phones
Bitdefender found Midnight Mimosa malware embedded in firmware on budget MediaTek Android phones sold in more than 150 countries, and users cannot remove it.
Cybersecurity
Tampered Ledger Nano X Devices Tied to CryptoBilis and $93M Drain
Ledger confirmed a hidden implant in a Nano X bought from reseller CryptoBilis, as wallet drains estimated at $93.2 million hit 315 wallets from October ...
Application Security
JetBrains Patches Critical Exposed SQL Injection and TeamCity Flaws
JetBrains fixed CVE-2026-108474, a CVSS 9.8 SQL injection in Exposed, and two TeamCity flaws, CVE-2026-106218 and CVE-2026-106219; no exploitation reported.
Cybersecurity
FBI Arrests CYPFER Co-Founder Edward Dubrovsky in Extortion Case
Edward Dubrovsky, co-founder of ransomware negotiation firm CYPFER, was arrested in Pennsylvania on extortion charges; a link to ShinyHunters is unconfirmed.
CVE Vulnerability Alerts
PHP2Shell Attacks on Check Point Gateways Deploy TSGA, ESXi Wiper
TOP CYBERSECURITY HEADLINES
CVE Vulnerability Alerts
Citrix Patches 28 NetScaler Flaws and Critical Console Auth Bypass
This Week’s Security Spotlight
CVE Vulnerability Alerts
Barracuda Flaws CVE-2026-116606 and CVE-2026-111560 Exploited
CVE Vulnerability Alerts
Intel and AMD Patch Over 200 Vulnerabilities in November Updates
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.
Featured Videos
Podcasts
Cyber Security News
- All
- AI Security
- Application Security
- Blog
- CVE Vulnerability Alerts
- Cybersecurity
- Cybersecurity Newsletter
- Data Security
- Endpoint Security
- Identity and Access Management
- Information Security
- Network Security
- News
- Phishing
- Podcasts
- Product Reviews
- Ransomware
- Ransomware Victims
- Resources
- Security Spotlight
- Sponsored
- Threat Actors
- Threat Actors
- Threat Detection Tools
YMCO Leader Oleg Korniev Pleads Guilty to Running Mule Network
Oleg Korniev pleaded guilty in the US to running Your Mule Cashout, which recruited over 15,000 unwitting money mules to launder stolen funds for hackers.
Gentlemen Ransomware Gang Claims MoneyGram Breach, Unconfirmed
The Gentlemen ransomware gang listed MoneyGram on its leak site and set a deadline of a little over a week. MoneyGram has not confirmed any ...
Dutch Police and Shadowserver Dismantle 178,000-Device Proxy Network
Dutch police, prosecutors and the Shadowserver Foundation took down servers behind a proxy service of 178,000 infected devices; more takedowns are planned.
CyberXero Broker Used Claude Code Agents to Steal Ukrainian Data
A Russian-speaking initial access broker, CyberXero, ran 51 Claude Code agents to compromise WordPress sites and steal over 628,000 Ukrainian records.
Nippon Columbia Malware Incident Exposes 8.6M Karaoke Customers
Nippon Columbia disclosed malware on an employee computer that may have exposed records of about 8.7 million karaoke customers and employees across Japan.
P7 DarkSword iOS Exploit Kit Variant Adds Crypto-Wallet Theft
Researchers disclosed P7, a DarkSword iOS exploit kit variant that steals data from 25+ crypto-wallet apps and adds remote command execution to iPhones.
Trojanized Terraform Provider Hides FLATROOF and ROOFDECK Backdoors
Zscaler and SentinelLabs say a fake AWS Terraform provider delivers FLATROOF and ROOFDECK backdoors, with low-confidence links to TraderTraitor.
AnyPwn Heap Overflow in AnyDesk for Linux Gives Root RCE, PoC Public
A public proof of concept for AnyPwn, a heap overflow in AnyDesk for Linux 8.0.2, gives remote root code execution before the user approves a ...
Warden Stealer Rust Infostealer Targets AI Coding-Agent Tokens
Gen Threat Labs details Warden Stealer, a Rust malware-as-a-service infostealer that steals AI coding-agent tokens, browser data and crypto from Windows PCs.
UAT-11985 Uses AI-Written Lures to Steal Google Logins in Taiwan
Cisco Talos tracks UAT-11985, which uses AI-written event lures and an adversary-in-the-middle kit to steal Google logins from Taiwan researchers despite MFA.
Phishers Abuse Power BI Dashboards to Install ScreenConnect
Huntress reports a phishing campaign using public Power BI dashboards to push ScreenConnect remote-access installs, with persistence via scheduled tasks.
GhostAction Campaign Hits 500+ GitHub Accounts to Steal API Keys
Socket reports GhostAction, a campaign compromising more than 500 GitHub accounts and injecting workflows that harvest cloud, AI and package-registry secrets.
Silent Ransom Group Allegedly Extorted $207M From 27 Law Firms
Leaked chats suggest Silent Ransom Group extorted about $207 million from 27 law firms through phone social engineering, without encrypting any files.
Midnight Mimosa Malware Found Preinstalled on Budget Android Phones
Bitdefender found Midnight Mimosa malware embedded in firmware on budget MediaTek Android phones sold in more than 150 countries, and users cannot remove it.
Tampered Ledger Nano X Devices Tied to CryptoBilis and $93M Drain
Ledger confirmed a hidden implant in a Nano X bought from reseller CryptoBilis, as wallet drains estimated at $93.2 million hit 315 wallets from October ...
JetBrains Patches Critical Exposed SQL Injection and TeamCity Flaws
JetBrains fixed CVE-2026-108474, a CVSS 9.8 SQL injection in Exposed, and two TeamCity flaws, CVE-2026-106218 and CVE-2026-106219; no exploitation reported.
FBI Arrests CYPFER Co-Founder Edward Dubrovsky in Extortion Case
Edward Dubrovsky, co-founder of ransomware negotiation firm CYPFER, was arrested in Pennsylvania on extortion charges; a link to ShinyHunters is unconfirmed.
Attackers Hijack Three Country TLDs to Forge Google Certificates
Google says attackers compromised the .gh, .sl and .as registries, altered DNS records and obtained fraudulent HTTPS certificates for Google and other domains.
SonicWall Patches CVSS 10.0 Pre-Auth SSRF in SMA1000 Appliances
SonicWall fixed four SMA1000 flaws, led by CVE-2026-102255, a CVSS 10.0 unauthenticated SSRF in the WorkPlace portal. No exploitation has been reported.
Unpatched LMCache Flaw Allows Unauthenticated Remote Code Execution
JFrog disclosed CVE-2026-105192, a CVSS 9.8 pickle deserialization flaw in LMCache that lets one network message run code. No patched version exists yet.