Cyber Security
Cybersecurity
Russian Police Arrest Three Suspected VasyGrek Hackers
Russia's interior ministry arrested three suspected VasyGrek members and dismantled the group's infrastructure after years of financially motivated attacks.
Cybersecurity
Europol Raids Seize 100+ Servers in Investment Fraud Network
Europol-backed raids across 17 countries arrested seven people and seized more than 100 servers in a fraud network that targeted victims in over 50 countries.
Cybersecurity
German Officials Among Recipients of Apple Spyware Warnings
Apple sent mercenary-spyware warnings to German officials, lawmakers and journalists, and the BSI told recipients to assume their devices are infected.
AI Security
24,664 Lovable-Built Apps Leak Passports and Chat Messages
Crissy Field found 24,664 Lovable-built apps on Supabase returning database records with no authentication, exposing passports, payments and chat messages.
Cybersecurity
ILC Dover Pays $13M to Settle Cybersecurity Fraud Claims
ILC Dover and ILC Astrospace agreed to pay $13 million to settle False Claims Act allegations that they knowingly failed to meet contract cybersecurity rules.
Cybersecurity
Google Dismantles XCPE Botnet of 1.3 Million Android TV Boxes
Google and partners disrupted the XCPE botnet of 1.3 million Android TV boxes and banned maker Videostrong, which it says built the backdoor into firmware.
Cybersecurity
Refrigeration Attacks Hit Supermarkets in Six European Countries
A second wave of attacks on Danfoss refrigeration controls hit supermarkets in six European countries overnight, spoiling stock and raising set points to 55 C.
Application Security
Attackers Exploit CVSS 10.0 Node-RED Flaw CVE-2026-58115
VulnCheck caught attackers exploiting CVE-2026-58115, a CVSS 10.0 missing-authentication flaw in Node-RED, to drop Linux bots on exposed Siemens devices.
Application Security
BTCPay Server Hot Wallets Drained on Outdated Instances
Attackers drained Bitcoin and Litecoin hot wallets on BTCPay Server instances running version 2.4.1 or older, and the project urges updating to 2.4.7.
Cybersecurity
Trigger.dev Breach Exposes Customer Environment Variables
Trigger.dev disclosed that an attacker accessed environment variables belonging to a subset of its cloud customers, which can hold API keys and credentials.
Application Security
cPGuard Update Channel Hijacked to Push Linux Server Backdoor
An attacker used stolen credentials to push a malicious script through OPSSHIELD's cPGuard update channel, installing a backdoor and stealing root SSH keys.
Application Security
Russian and Ukrainian Emergency Alert Apps Hacked, Fake Warnings Sent
Ukraine's Air Alert app and Russia's Emergency Ministry app were hacked to send fake nuclear, chemical and missile warnings, though national alert systems held.
Application Security
Unpatched CVSS 10.0 CryptoPayment Gateway Plugin Flaw Under Attack
Attackers are targeting CVE-2026-81648, an unpatched CVSS 10.0 flaw in the CryptoPayment Gateway WordPress plugin that exposes wallet credentials in cleartext.
CVE Vulnerability Alerts
Android November Bulletin Fixes 216 Flaws, Three Zero-Click RCEs
Google's November Android bulletin patches 216 vulnerabilities, including CVE-2026-58868 and two more zero-click critical RCE bugs; no exploitation reported.
CVE Vulnerability Alerts
Arista Patches Two CVSS 9.8 RCE Flaws Including HTTP2Shell
Arista fixed two CVSS 9.8 remote code execution flaws, HTTP2Shell in VeloCloud Orchestrator and a Linux kernel bug affecting access points and NDR devices.
Application Security
Apache Fixes Eight Flaws in Syncope, Fineract and Arrow
Apache patched eight flaws in Syncope, Fineract and Arrow Rust, including CVE-2026-64618, a CVSS 9.8 SQL injection needing no login; no exploitation reported.
AI Security
Hugging Face Datasets Flaw Lets Malicious Pickle Files Run Code
The deprecated pandas builder can execute code from an untrusted pickle file. A proposed fix is still awaiting review
Cybersecurity
FBI Blames North Korea’s TraderTraitor for $6.3B Binance Theft
The FBI, Secret Service and IRS-CI attribute the roughly $6.3 billion Binance theft to North Korea's TraderTraitor and publish 628 addresses used to launder it.
CVE Vulnerability Alerts
Public Exploit Lets One SMS Crash Android Phones, Drop 911 Calls
A public proof-of-concept for CVE-2026-58882 shows one malformed WAP Push text can crash Android's phone process and loop devices; Android 12 and 13 lack a ...
CVE Vulnerability Alerts
Canonical Patches CVSS 10.0 LXD Flaw Letting Attackers Spoof Clients
Canonical fixed CVE-2026-112816, a CVSS 10.0 LXD and MicroCloud flaw that lets attackers authenticate as a trusted client using only its public certificate.
CVE Vulnerability Alerts
Microsoft Patches Outlook Zero-Day CVE-2026-124194 in 1,000+ Fixes
Application Security
SGLang RCE Flaw Exploited to Breach NEAR AI, 18 Agents Exposed
TOP CYBERSECURITY HEADLINES
CVE Vulnerability Alerts
Barracuda Flaws CVE-2026-116606 and CVE-2026-111560 Exploited
Application Security
Git 2.56.1 Fixes Code Execution Flaw CVE-2026-111760 in Clones
Application Security
SGLang RCE Flaw Exploited to Breach NEAR AI, 18 Agents Exposed
CVE Vulnerability Alerts
Public iOS Sandbox Escape ‘worse_query’ Threatens Wallet Keys
This Week’s Security Spotlight
CVE Vulnerability Alerts
Barracuda Flaws CVE-2026-116606 and CVE-2026-111560 Exploited
CVE Vulnerability Alerts
Intel and AMD Patch Over 200 Vulnerabilities in November Updates
CVE Vulnerability Alerts
Working Exploit Out for Windows Error Reporting Flaw CVE-2026-97798
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.
Featured Videos
Podcasts
Cyber Security News
- All
- AI Security
- Application Security
- Blog
- CVE Vulnerability Alerts
- Cybersecurity
- Cybersecurity Newsletter
- Data Security
- Endpoint Security
- Identity and Access Management
- Information Security
- Network Security
- News
- Phishing
- Podcasts
- Product Reviews
- Ransomware
- Ransomware Victims
- Resources
- Security Spotlight
- Sponsored
- Threat Actors
- Threat Actors
- Threat Detection Tools
24,664 Lovable-Built Apps Leak Passports and Chat Messages
Crissy Field found 24,664 Lovable-built apps on Supabase returning database records with no authentication, exposing passports, payments and chat messages.
ILC Dover Pays $13M to Settle Cybersecurity Fraud Claims
ILC Dover and ILC Astrospace agreed to pay $13 million to settle False Claims Act allegations that they knowingly failed to meet contract cybersecurity rules.
Google Dismantles XCPE Botnet of 1.3 Million Android TV Boxes
Google and partners disrupted the XCPE botnet of 1.3 million Android TV boxes and banned maker Videostrong, which it says built the backdoor into firmware.
Refrigeration Attacks Hit Supermarkets in Six European Countries
A second wave of attacks on Danfoss refrigeration controls hit supermarkets in six European countries overnight, spoiling stock and raising set points to 55 C.
Attackers Exploit CVSS 10.0 Node-RED Flaw CVE-2026-58115
VulnCheck caught attackers exploiting CVE-2026-58115, a CVSS 10.0 missing-authentication flaw in Node-RED, to drop Linux bots on exposed Siemens devices.
BTCPay Server Hot Wallets Drained on Outdated Instances
Attackers drained Bitcoin and Litecoin hot wallets on BTCPay Server instances running version 2.4.1 or older, and the project urges updating to 2.4.7.
Trigger.dev Breach Exposes Customer Environment Variables
Trigger.dev disclosed that an attacker accessed environment variables belonging to a subset of its cloud customers, which can hold API keys and credentials.
cPGuard Update Channel Hijacked to Push Linux Server Backdoor
An attacker used stolen credentials to push a malicious script through OPSSHIELD's cPGuard update channel, installing a backdoor and stealing root SSH keys.
Russian and Ukrainian Emergency Alert Apps Hacked, Fake Warnings Sent
Ukraine's Air Alert app and Russia's Emergency Ministry app were hacked to send fake nuclear, chemical and missile warnings, though national alert systems held.
Unpatched CVSS 10.0 CryptoPayment Gateway Plugin Flaw Under Attack
Attackers are targeting CVE-2026-81648, an unpatched CVSS 10.0 flaw in the CryptoPayment Gateway WordPress plugin that exposes wallet credentials in cleartext.
Android November Bulletin Fixes 216 Flaws, Three Zero-Click RCEs
Google's November Android bulletin patches 216 vulnerabilities, including CVE-2026-58868 and two more zero-click critical RCE bugs; no exploitation reported.
Arista Patches Two CVSS 9.8 RCE Flaws Including HTTP2Shell
Arista fixed two CVSS 9.8 remote code execution flaws, HTTP2Shell in VeloCloud Orchestrator and a Linux kernel bug affecting access points and NDR devices.
Apache Fixes Eight Flaws in Syncope, Fineract and Arrow
Apache patched eight flaws in Syncope, Fineract and Arrow Rust, including CVE-2026-64618, a CVSS 9.8 SQL injection needing no login; no exploitation reported.
Hugging Face Datasets Flaw Lets Malicious Pickle Files Run Code
The deprecated pandas builder can execute code from an untrusted pickle file. A proposed fix is still awaiting review
FBI Blames North Korea’s TraderTraitor for $6.3B Binance Theft
The FBI, Secret Service and IRS-CI attribute the roughly $6.3 billion Binance theft to North Korea's TraderTraitor and publish 628 addresses used to launder it.
Public Exploit Lets One SMS Crash Android Phones, Drop 911 Calls
A public proof-of-concept for CVE-2026-58882 shows one malformed WAP Push text can crash Android's phone process and loop devices; Android 12 and 13 lack a ...
Canonical Patches CVSS 10.0 LXD Flaw Letting Attackers Spoof Clients
Canonical fixed CVE-2026-112816, a CVSS 10.0 LXD and MicroCloud flaw that lets attackers authenticate as a trusted client using only its public certificate.
Rapid7 Releases Metasploit Module for BeyondTrust CVE-2026-102764
Rapid7 published a technical analysis and a working Metasploit module for CVE-2026-102764, a BeyondTrust Remote Support flaw already exploited in attacks.
Talos: VOLTA Infostealer Uses Claude and Gemini to Rank Victims
Cisco Talos details VOLTA-AUTODOXER, an infostealer that sends stolen victim data to Claude, Kimi or Gemini via OpenRouter to rank what each victim is worth.
Dell Fixes 44 PowerStore Flaws in DSA-2026-479, Seven Rated 9.8
Dell's DSA-2026-479 patches 44 PowerStore vulnerabilities, including seven rated CVSS 9.8 in the SDNAS file services layer. Upgrade to OS 5.1.0.0-2798105.