Cyber Security
Kyushu Electric Loses Drive With Data on 10.9M Customers
Anthropic Disputes Jailbreak Claim Against Claude Fable 5
Six Proto6 Flaws in protobuf.js Enable Node.js RCE
npm v12 Disables Auto-Run Scripts to Cut Supply Chain Risk
Anthropic Releases Guardrail-Free Mythos 5 to Security Researchers
Novo Nordisk Discloses Breach of Clinical Trials Patient Data
Europol Dismantles AudiA6 Crypto Laundering Service
Three LangGraph Flaws Chain to Remote Code Execution
OnyxC2 Stealer Targets 200+ Apps for $250 Per Month
Maine AG Portal Abused to Post Fabricated Breach Notices
Fortinet FortiSandbox CVE-2026-25089 Allows Unauthenticated RCE
OpenSSL Patches 16 Flaws Including Heap Use-After-Free RCE Risk
Akira Claims Industrial Finisher, NJ Country Club, Architecture Firm
Chaos Ransomware Lists Airespring as Iranian False-Flag History Looms
Shai-Hulud Hades Wave Poisons 29 Bioinformatics PyPI Packages
Oracle PeopleSoft CVE-2026-35273: ShinyHunters Breaches 100+ Orgs
Nottingham University Breach Exposes Data on 454,600 Students
FBI Seizes 13 Chinese Spy Sites Targeting U.S. Clearance Holders
China-Linked JDY Botnet Hits 1,500 Devices Targeting U.S. Military
CISA BOD 26-04 Mandates 3-Day Patch Window for Federal Agencies
RoguePlanet Zero-Day Gives Attackers SYSTEM on Patched Windows
Ivanti Sentry CVE-2026-10520 Actively Exploited, Devices Backdoored
Langflow CVE-2026-5027: Path Traversal Becomes Unauthenticated RCE
WorldLeaks Claims Apple Supplier Tata Electronics and Two More Firms
What is Cloud Detection and Response (CDR) and How Does it Work
Google Patches 5th Chrome Zero-Day; V8 Flaw Chains for OS Access
LiteLLM CVE-2026-42271 Added to CISA KEV: AI API Keys at Risk
France’s Tchap Messaging App Breached, 643K Messages Exposed
SAP Patches CVSS 9.9 SAML Flaw and ABAP Memory Corruption
Exploit Published for Linux Kernel nf_tables CVE-2026-23111
Lema AI Secures $24 Million to Bolster Supply Chain Security
Cybersecurity
Lema AI Secures $24 Million to Bolster Supply Chain Security
Lema AI exits stealth mode, securing $24M in funding across Series A and seed rounds, aimed at advancing its supply chain security platform.
Warlock Ransomware Gang Breach at SmarterTools Email System Compromised
Cybersecurity
Warlock Ransomware Gang Breach at SmarterTools: Email System Compromised
The Warlock ransomware gang has infiltrated SmarterTools’ network by breaching the company's email system but has not disrupted critical business functions or accessed account data. ...
Ransomware Gangs Reconsider Strategies as Data Theft Returns Diminish
News
Ransomware Gangs Reconsider Strategies as Data Theft Returns Diminish
With diminishing returns from data theft alone, ransomware gangs are exploring the return to data encryption for extortion. Altered tactics reflect evolving criminal strategies to ...
Outtake's $40 Million Infusion to Battle AI-Powered Cyber Threats
Cybersecurity
Outtake’s $40 Million Infusion to Battle AI-Powered Cyber Threats
The cybersecurity startup Outtake secures $40 million in Series B funding, bringing its total funding to $60 million. This financing round aims to enhance Outtake's ...
Exploitation of SolarWinds Web Help Desk Instances Raises Serious Security Concerns
Cybersecurity
Exploitation of SolarWinds Web Help Desk Instances Raises Serious Security Concerns
Microsoft defender team recently uncovered a sophisticated multi-stage intrusion exploiting SolarWinds Web Help Desk instances, endangering network security by leveraging exposed web help interfaces for ...
7-Zip Targeted by Malicious Website Users Turned Into Unwitting Proxy Nodes
Application Security
7-Zip Targeted by Malicious Website: Users Turned Into Unwitting Proxy Nodes
Cybercriminals have crafted a counterfeit 7-Zip website, installing a trojanized version of the archiving tool that hijacks user computers as residential proxy nodes. This tactic ...
Data Exposure Risks with Zero-Click Prompt Injection in AI Chat Apps
Cybersecurity
Data Exposure Risks with Zero-Click Prompt Injection in AI Chat Apps
Zero-click prompt injection can expose sensitive data when AI agents interact with messaging apps. Attackers manipulate chat prompts to generate data-leaking URLs, leading to inadvertent ...
Vega Expands with $120 Million Series B Funding
Cybersecurity
Vega Expands with $120 Million Series B Funding
Security analytics platform Vega has raised $120 million in a Series B funding round, bringing its total fundraising to $185 million. This latest investment highlights ...
Reco's Strategic Move $30 Million Boost to Bolster AI SaaS Security
Cybersecurity
Reco’s Strategic Move: $30 Million Boost to Bolster AI SaaS Security
Reco, a cloud security innovator, has secured $30 million in new funding, less than 10 months after its previous round. This investment increases its total ...
Adobe Patch Release Targets Critical Vulnerabilities in Creative Software
Cybersecurity
Adobe Patch Release Targets Critical Vulnerabilities in Creative Software
Adobe has rolled out a new patch addressing 44 vulnerabilities across its suite of creative applications. These fixes aim to combat flaws in products like ...
European Commission Gives Nod to Google's Acquisition of Wiz
Cybersecurity
European Commission Gives Nod to Google’s Acquisition of Wiz
The European Commission has approved Google's $32 billion acquisition of cloud security firm Wiz. This decision followed extensive feedback from customers and rival vendors, signaling ...
Microsoft Investigates Admin Center Access Issues in Microsoft 365
Application Security
Microsoft Investigates Admin Center Access Issues in Microsoft 365
Microsoft is addressing access issues impacting administrators of Microsoft 365 business and enterprise subscriptions. Some admins report being unable to access the admin center, with ...
Dutch Police Arrest Suspect in JokerOTP Phishing Tool Operation
News
Dutch Police Arrest Suspect in JokerOTP Phishing Tool Operation
Authorities in the Netherlands have apprehended a suspect linked to the notorious JokerOTP, a phishing automation tool. This tool is notorious for hijacking accounts by ...
New Reynolds Ransomware Uses BYOVD Technique to Elude Detection
News
New Reynolds Ransomware Uses BYOVD Technique to Elude Detection
Cybersecurity experts have discovered Reynolds ransomware, a new threat employing the Bring Your Own Vulnerable Driver (BYOVD) technique. This approach allows the ransomware to disable ...
Nevada Introduces Comprehensive Data Classification Framework Post-Cyberattack
Cybersecurity
Nevada Introduces Comprehensive Data Classification Framework Post-Cyberattack
Nevada has developed a framework to classify data into "public," "sensitive," "confidential," and "restricted" categories, improving cybersecurity preparedness following a cyberattack.
Suspected Premature Alerts Among Telecommunications on Telnet Vulnerability
Cybersecurity
Suspected Premature Alerts Among Telecommunications on Telnet Vulnerability
Telecommunications companies may have had early alerts about the significant January Telnet vulnerability. An analysis reveals that unusual port filtering and traffic patterns might indicate ...
GitGuardian Secures $50 Million to Advance Secrets Detection and Identity Management
Cybersecurity
GitGuardian Secures $50 Million to Advance Secrets Detection and Identity Management
GitGuardian, a leader in secrets detection, has successfully raised $50 million in a funding round. Learn how this financial boost aims to enhance their offerings ...
Conduent Breach Expands in Scope, Affecting 25 Million Impact on Volvo Group
Cybersecurity
Conduent Breach Expands in Scope, Affecting 25 Million: Impact on Volvo Group
Recent revelations show the Conduent data breach affects around 25 million individuals, considerably more than the initially estimated 10 million. The breach involves sensitive data, ...
Zast.AI Secures $6 Million for Innovating AI-Powered Software Vulnerability Detection
News
Zast.AI Secures $6 Million for Innovating AI-Powered Software Vulnerability Detection
Leveraging artificial intelligence, Zast.AI aims to advance the field of code security by implementing AI agents to effectively identify and verify software vulnerabilities, ensuring accuracy ...
New Malicious Packages in npm and PyPI Tied to Lazarus Group
Cybersecurity
New Malicious Packages in npm and PyPI Tied to Lazarus Group
Cybersecurity experts have uncovered malicious packages in the npm and PyPI registries, part of a recruitment-themed phishing campaign linked to the North Korean Lazarus Group.
Application Security
Chrome 149 Patches 28 Flaws, Including 12 Use-After-Free Bugs
Cybersecurity
Kyushu Electric Loses Drive With Data on 10.9M Customers

TOP CYBERSECURITY HEADLINES

This Week’s Security Spotlight

Cybersecurity
Anthropic Releases Guardrail-Free Mythos 5 to Security Researchers
Application Security
SAP Patches CVSS 9.9 SAML Flaw and ABAP Memory Corruption
Application Security
Veeam CVE-2026-44963 Exposes Backup Servers to Low-Privilege RCE
Application Security
Claude Opus Finds 4-Year Zcash Flaw Enabling Silent Coin Forgery
Trending

Daily Briefing Newsletter

Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Featured Videos​

  • All
  • Application Security
  • Blog
  • CVE Vulnerability Alerts
  • Cybersecurity
  • Cybersecurity Newsletter
  • Data Security
  • Endpoint Security
  • Identity and Access Management
  • Information Security
  • Network Security
  • News
  • Phishing
  • Podcasts
  • Product Reviews
  • Ransomware
  • Ransomware Victims
  • Resources
  • Security Spotlight
  • Sponsored
  • Threat Actors
  • Threat Actors
  • Threat Detection Tools
Outtake’s $40 Million Infusion to Battle AI-Powered Cyber Threats
The cybersecurity startup Outtake secures $40 million in Series B funding, bringing its total funding to $60 million. This financing round aims to enhance Outtake's ...
Exploitation of SolarWinds Web Help Desk Instances Raises Serious Security Concerns
Microsoft defender team recently uncovered a sophisticated multi-stage intrusion exploiting SolarWinds Web Help Desk instances, endangering network security by leveraging exposed web help interfaces for ...
7-Zip Targeted by Malicious Website: Users Turned Into Unwitting Proxy Nodes
Cybercriminals have crafted a counterfeit 7-Zip website, installing a trojanized version of the archiving tool that hijacks user computers as residential proxy nodes. This tactic ...
Data Exposure Risks with Zero-Click Prompt Injection in AI Chat Apps
Zero-click prompt injection can expose sensitive data when AI agents interact with messaging apps. Attackers manipulate chat prompts to generate data-leaking URLs, leading to inadvertent ...
Vega Expands with $120 Million Series B Funding
Security analytics platform Vega has raised $120 million in a Series B funding round, bringing its total fundraising to $185 million. This latest investment highlights ...
Reco’s Strategic Move: $30 Million Boost to Bolster AI SaaS Security
Reco, a cloud security innovator, has secured $30 million in new funding, less than 10 months after its previous round. This investment increases its total ...
Adobe Patch Release Targets Critical Vulnerabilities in Creative Software
Adobe has rolled out a new patch addressing 44 vulnerabilities across its suite of creative applications. These fixes aim to combat flaws in products like ...
European Commission Gives Nod to Google’s Acquisition of Wiz
The European Commission has approved Google's $32 billion acquisition of cloud security firm Wiz. This decision followed extensive feedback from customers and rival vendors, signaling ...
Microsoft Investigates Admin Center Access Issues in Microsoft 365
Microsoft is addressing access issues impacting administrators of Microsoft 365 business and enterprise subscriptions. Some admins report being unable to access the admin center, with ...
Dutch Police Arrest Suspect in JokerOTP Phishing Tool Operation
Authorities in the Netherlands have apprehended a suspect linked to the notorious JokerOTP, a phishing automation tool. This tool is notorious for hijacking accounts by ...
New Reynolds Ransomware Uses BYOVD Technique to Elude Detection
Cybersecurity experts have discovered Reynolds ransomware, a new threat employing the Bring Your Own Vulnerable Driver (BYOVD) technique. This approach allows the ransomware to disable ...
Nevada Introduces Comprehensive Data Classification Framework Post-Cyberattack
Nevada has developed a framework to classify data into "public," "sensitive," "confidential," and "restricted" categories, improving cybersecurity preparedness following a cyberattack.
Suspected Premature Alerts Among Telecommunications on Telnet Vulnerability
Telecommunications companies may have had early alerts about the significant January Telnet vulnerability. An analysis reveals that unusual port filtering and traffic patterns might indicate ...
GitGuardian Secures $50 Million to Advance Secrets Detection and Identity Management
GitGuardian, a leader in secrets detection, has successfully raised $50 million in a funding round. Learn how this financial boost aims to enhance their offerings ...
Conduent Breach Expands in Scope, Affecting 25 Million: Impact on Volvo Group
Recent revelations show the Conduent data breach affects around 25 million individuals, considerably more than the initially estimated 10 million. The breach involves sensitive data, ...
Zast.AI Secures $6 Million for Innovating AI-Powered Software Vulnerability Detection
Leveraging artificial intelligence, Zast.AI aims to advance the field of code security by implementing AI agents to effectively identify and verify software vulnerabilities, ensuring accuracy ...
New Malicious Packages in npm and PyPI Tied to Lazarus Group
Cybersecurity experts have uncovered malicious packages in the npm and PyPI registries, part of a recruitment-themed phishing campaign linked to the North Korean Lazarus Group.
DavaIndia Security Breach Exposed Critical System Control
DavaIndia Pharmacy's systems were compromised, revealing critical security vulnerabilities. Customer data was exposed, and control was accessed by outsiders, reflective of pressing concerns within India's ...
Cloud-Based Password Managers Face New Security Vulnerabilities
A recent study uncovers vulnerabilities in popular cloud-based password managers like Bitwarden, Dashlane, and LastPass. Researchers warn these weaknesses could lead to integrity issues or ...
South Korean Fine Imposed on Dior, Louis Vuitton, and Tiffany Following Salesforce Breach
The South Korean government imposed a $25 million fine on Dior, Louis Vuitton, and Tiffany after data breaches affected their Salesforce systems. The incident compromised ...